Server : Apache/2.4.62 (Unix) OpenSSL/1.0.2k-fips System : Linux server1.richineiserver.com 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64 User : fdshops ( 1003) PHP Version : 8.2.21 Disable Function : NONE Directory :  /usr/local/apache/domlogs/

Upload File : current_dir [ Writeable ] document_root [ Writeable ]

[Wed Feb 14 08:44:01.104083 2024] [authz_core:error] [pid 26358:tid 140423511090944] [client 207.154.240.169:58020] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Wed Feb 14 08:44:02.790956 2024] [:error] [pid 26297:tid 140423611803392] [client 207.154.240.169:59032] [client 207.154.240.169] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Zcx9UgCG9FWLbvKJ7M6FhQAAAIM"]
[Wed Feb 14 08:44:03.160877 2024] [:error] [pid 26297:tid 140423595017984] [client 207.154.240.169:59264] [client 207.154.240.169] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Zcx9UwCG9FWLbvKJ7M6FhgAAAIU"]
[Wed Feb 14 08:44:06.029806 2024] [authz_core:error] [pid 26358:tid 140423706179328] [client 46.101.103.192:59892] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Wed Feb 14 08:44:08.222213 2024] [:error] [pid 26271:tid 140423469127424] [client 46.101.103.192:33470] [client 46.101.103.192] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Zcx9WPnx_w6Bwgel_nOVqQAAAVQ"]
[Wed Feb 14 08:44:08.749548 2024] [:error] [pid 26297:tid 140423477520128] [client 46.101.103.192:33860] [client 46.101.103.192] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Zcx9WACG9FWLbvKJ7M6FjQAAAJM"]
[Fri Feb 16 05:12:28.681097 2024] [core:error] [pid 1443:tid 139663830357760] [client 3.236.171.5:48438] End of script output before headers: index.php
[Fri Feb 16 05:12:35.588717 2024] [:error] [pid 1443:tid 139663763216128] [client 3.236.171.5:35826] [client 3.236.171.5] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||edu.richinei.com|F|4"] [data "Microsoft URL"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "edu.richinei.com"] [uri "/edu.richinei.com/public/backEnd/vendors/js/popper.js"] [unique_id "Zc7uwzDXEeXoVRLCKoZM3QAAAJg"]
[Fri Feb 16 05:12:41.660794 2024] [:error] [pid 1443:tid 139663931070208] [client 3.236.171.5:48398] SoftException in Application.cpp:542: Could not execute script "/home/richine/edu.richinei.com/index.php"
[Fri Feb 16 05:12:41.661018 2024] [:error] [pid 1443:tid 139663931070208] [client 3.236.171.5:48398] Caused by SystemException in API_Linux.cpp:444: execve() for program "/usr/local/bin/php-cgi" failed: Argument list too long
[Fri Feb 16 05:12:41.661047 2024] [core:error] [pid 1443:tid 139663931070208] [client 3.236.171.5:48398] End of script output before headers: index.php
[Fri Feb 16 05:12:41.666914 2024] [core:error] [pid 1414:tid 139663872321280] [client 3.236.171.5:48446] End of script output before headers: index.php
[Fri Feb 16 05:13:09.145389 2024] [core:error] [pid 1414:tid 139663855535872] [client 3.236.171.5:48426] End of script output before headers: index.php
[Fri Feb 16 05:13:15.560871 2024] [core:error] [pid 1443:tid 139663805179648] [client 3.236.171.5:43066] End of script output before headers: index.php
[Fri Feb 16 05:13:34.876193 2024] [core:error] [pid 1414:tid 139663847143168] [client 3.236.171.5:48418] End of script output before headers: index.php
[Fri Feb 16 05:14:01.784818 2024] [core:error] [pid 1443:tid 139663821965056] [client 3.236.171.5:42962] End of script output before headers: index.php
[Fri Feb 16 05:14:05.799468 2024] [core:error] [pid 1414:tid 139663863928576] [client 3.236.171.5:48444] Script timed out before returning headers: index.php
[Fri Feb 16 05:14:07.232384 2024] [core:error] [pid 1414:tid 139663889106688] [client 3.236.171.5:42922] Script timed out before returning headers: index.php
[Fri Feb 16 05:14:07.232533 2024] [core:error] [pid 1414:tid 139664023959296] [client 3.236.171.5:42930] Script timed out before returning headers: index.php
[Fri Feb 16 05:14:07.284367 2024] [core:error] [pid 1414:tid 139663880713984] [client 3.236.171.5:42916] Script timed out before returning headers: index.php
[Fri Feb 16 05:14:07.284500 2024] [core:error] [pid 1415:tid 139663897499392] [client 3.236.171.5:42946] Script timed out before returning headers: index.php
[Fri Feb 16 05:14:07.366436 2024] [core:error] [pid 17848:tid 139663821965056] [client 3.236.171.5:42996] Script timed out before returning headers: index.php
[Fri Feb 16 05:14:07.366582 2024] [core:error] [pid 1415:tid 139663889106688] [client 3.236.171.5:43014] Script timed out before returning headers: index.php
[Fri Feb 16 05:14:07.366681 2024] [core:error] [pid 1414:tid 139664032352000] [client 3.236.171.5:43022] Script timed out before returning headers: index.php
[Fri Feb 16 05:14:07.377272 2024] [core:error] [pid 1414:tid 139663947855616] [client 3.236.171.5:42974] Script timed out before returning headers: index.php
[Fri Feb 16 05:14:07.377440 2024] [core:error] [pid 1414:tid 139663939462912] [client 3.236.171.5:43006] Script timed out before returning headers: index.php
[Fri Feb 16 05:14:07.418360 2024] [core:error] [pid 1443:tid 139663813572352] [client 3.236.171.5:42980] Script timed out before returning headers: index.php
[Fri Feb 16 05:14:07.447391 2024] [core:error] [pid 1415:tid 139663872321280] [client 3.236.171.5:43042] Script timed out before returning headers: index.php
[Fri Feb 16 05:14:07.502426 2024] [core:error] [pid 17848:tid 139663813572352] [client 3.236.171.5:43052] Script timed out before returning headers: index.php
[Fri Feb 16 05:14:07.548846 2024] [core:error] [pid 1415:tid 139663863928576] [client 3.236.171.5:43078] Script timed out before returning headers: index.php
[Fri Feb 16 05:14:35.602405 2024] [core:error] [pid 1443:tid 139663796786944] [client 3.236.171.5:35776] Script timed out before returning headers: index.php
[Fri Feb 16 05:14:35.603132 2024] [core:error] [pid 17848:tid 139663805179648] [client 3.236.171.5:35756] Script timed out before returning headers: index.php
[Fri Feb 16 05:14:35.638664 2024] [core:error] [pid 1415:tid 139663847143168] [client 3.236.171.5:35748] Script timed out before returning headers: index.php
[Fri Feb 16 05:14:35.639989 2024] [core:error] [pid 1414:tid 139663931070208] [client 3.236.171.5:35780] Script timed out before returning headers: index.php
[Fri Feb 16 05:14:35.640164 2024] [core:error] [pid 1443:tid 139663788394240] [client 3.236.171.5:35782] Script timed out before returning headers: index.php
[Fri Feb 16 05:14:35.647436 2024] [core:error] [pid 17848:tid 139663796786944] [client 3.236.171.5:35760] Script timed out before returning headers: index.php
[Fri Feb 16 05:14:35.647589 2024] [core:error] [pid 1443:tid 139663780001536] [client 3.236.171.5:35800] Script timed out before returning headers: index.php
[Fri Feb 16 05:14:35.647695 2024] [core:error] [pid 17848:tid 139663780001536] [client 3.236.171.5:35804] Script timed out before returning headers: index.php
[Fri Feb 16 05:14:35.647773 2024] [core:error] [pid 17848:tid 139663788394240] [client 3.236.171.5:35796] Script timed out before returning headers: index.php
[Fri Feb 16 05:14:35.688325 2024] [core:error] [pid 1443:tid 139663771608832] [client 3.236.171.5:35808] Script timed out before returning headers: index.php
[Fri Feb 16 05:14:35.688426 2024] [core:error] [pid 1414:tid 139663922677504] [client 3.236.171.5:35824] Script timed out before returning headers: index.php
[Fri Feb 16 05:14:35.719988 2024] [core:error] [pid 1415:tid 139663838750464] [client 3.236.171.5:35838] Script timed out before returning headers: index.php
[Fri Feb 16 05:14:35.817695 2024] [core:error] [pid 1415:tid 139663830357760] [client 3.236.171.5:35846] Script timed out before returning headers: index.php
[Fri Feb 16 05:14:35.817999 2024] [core:error] [pid 17848:tid 139663771608832] [client 3.236.171.5:35858] Script timed out before returning headers: index.php
[Fri Feb 16 05:14:36.015947 2024] [core:error] [pid 17848:tid 139663763216128] [client 3.236.171.5:35870] Script timed out before returning headers: index.php
[Fri Feb 16 05:14:37.752548 2024] [core:error] [pid 17848:tid 139664032352000] [client 3.236.171.5:54086] Script timed out before returning headers: index.php
[Fri Feb 16 05:14:37.755424 2024] [core:error] [pid 1443:tid 139664032352000] [client 3.236.171.5:54078] Script timed out before returning headers: index.php
[Fri Feb 16 05:14:41.568488 2024] [core:error] [pid 1443:tid 139663947855616] [client 3.236.171.5:48370] Script timed out before returning headers: index.php
[Fri Feb 16 05:14:41.639561 2024] [core:error] [pid 1443:tid 139663939462912] [client 3.236.171.5:48396] Script timed out before returning headers: index.php
[Fri Feb 16 05:14:41.641494 2024] [core:error] [pid 17848:tid 139664023959296] [client 3.236.171.5:48386] Script timed out before returning headers: index.php
[Fri Feb 16 05:14:41.657432 2024] [core:error] [pid 1414:tid 139663914284800] [client 3.236.171.5:48376] Script timed out before returning headers: index.php
[Fri Feb 16 05:14:41.726676 2024] [core:error] [pid 1414:tid 139663905892096] [client 3.236.171.5:48402] Script timed out before returning headers: index.php
[Fri Feb 16 05:14:41.733913 2024] [core:error] [pid 17848:tid 139663939462912] [client 3.236.171.5:48412] Script timed out before returning headers: index.php
[Fri Feb 16 05:14:41.734040 2024] [core:error] [pid 17848:tid 139663931070208] [client 3.236.171.5:48418] Script timed out before returning headers: index.php
[Fri Feb 16 05:14:41.742410 2024] [core:error] [pid 1414:tid 139663897499392] [client 3.236.171.5:48420] Script timed out before returning headers: index.php
[Fri Feb 16 05:14:41.742487 2024] [core:error] [pid 1414:tid 139663838750464] [client 3.236.171.5:48432] Script timed out before returning headers: index.php
[Fri Feb 16 05:14:41.795756 2024] [core:error] [pid 17848:tid 139663947855616] [client 3.236.171.5:48404] Script timed out before returning headers: index.php
[Fri Feb 16 05:14:41.803440 2024] [core:error] [pid 1414:tid 139663830357760] [client 3.236.171.5:48460] Script timed out before returning headers: index.php
[Fri Feb 16 05:14:41.803585 2024] [core:error] [pid 1414:tid 139663821965056] [client 3.236.171.5:48468] Script timed out before returning headers: index.php
[Fri Feb 16 05:14:41.814632 2024] [core:error] [pid 2397:tid 139664032352000] [client 3.236.171.5:48424] Script timed out before returning headers: index.php
[Fri Feb 16 05:14:41.839518 2024] [core:error] [pid 2397:tid 139664023959296] [client 3.236.171.5:48444] Script timed out before returning headers: index.php
[Fri Feb 16 05:14:41.928478 2024] [core:error] [pid 2397:tid 139663947855616] [client 3.236.171.5:48470] Script timed out before returning headers: index.php
[Fri Feb 16 05:14:42.141750 2024] [core:error] [pid 2397:tid 139663939462912] [client 3.236.171.5:48486] Script timed out before returning headers: index.php
[Fri Feb 16 05:15:09.200950 2024] [core:error] [pid 1443:tid 139663914284800] [client 3.236.171.5:40162] Script timed out before returning headers: index.php
[Fri Feb 16 05:15:09.208153 2024] [core:error] [pid 1414:tid 139663813572352] [client 3.236.171.5:40146] Script timed out before returning headers: index.php
[Fri Feb 16 05:15:09.267580 2024] [core:error] [pid 1414:tid 139663805179648] [client 3.236.171.5:40182] Script timed out before returning headers: index.php
[Fri Feb 16 05:15:09.289472 2024] [core:error] [pid 1415:tid 139663821965056] [client 3.236.171.5:40168] Script timed out before returning headers: index.php
[Fri Feb 16 05:15:09.354827 2024] [core:error] [pid 17848:tid 139663922677504] [client 3.236.171.5:40200] Script timed out before returning headers: index.php
[Fri Feb 16 05:15:09.354952 2024] [core:error] [pid 2397:tid 139663931070208] [client 3.236.171.5:40184] Script timed out before returning headers: index.php
[Fri Feb 16 05:15:09.355071 2024] [core:error] [pid 1443:tid 139663905892096] [client 3.236.171.5:40208] Script timed out before returning headers: index.php
[Fri Feb 16 05:15:09.410428 2024] [core:error] [pid 1443:tid 139663897499392] [client 3.236.171.5:40224] Script timed out before returning headers: index.php
[Fri Feb 16 05:15:09.410576 2024] [core:error] [pid 1414:tid 139663796786944] [client 3.236.171.5:40216] Script timed out before returning headers: index.php
[Fri Feb 16 05:15:09.448493 2024] [core:error] [pid 1414:tid 139663788394240] [client 3.236.171.5:40226] Script timed out before returning headers: index.php
[Fri Feb 16 05:15:09.480435 2024] [core:error] [pid 2397:tid 139663922677504] [client 3.236.171.5:40234] Script timed out before returning headers: index.php
[Fri Feb 16 05:15:09.501475 2024] [core:error] [pid 1414:tid 139663780001536] [client 3.236.171.5:40266] Script timed out before returning headers: index.php
[Fri Feb 16 05:15:09.527475 2024] [core:error] [pid 1443:tid 139663889106688] [client 3.236.171.5:40232] Script timed out before returning headers: index.php
[Fri Feb 16 05:15:09.527647 2024] [core:error] [pid 2397:tid 139663914284800] [client 3.236.171.5:40236] Script timed out before returning headers: index.php
[Fri Feb 16 05:15:09.567906 2024] [core:error] [pid 1415:tid 139663805179648] [client 3.236.171.5:40288] Script timed out before returning headers: index.php
[Fri Feb 16 05:15:09.567928 2024] [core:error] [pid 1415:tid 139663813572352] [client 3.236.171.5:40272] Script timed out before returning headers: index.php
[Fri Feb 16 05:15:09.568145 2024] [core:error] [pid 17848:tid 139663914284800] [client 3.236.171.5:40252] Script timed out before returning headers: index.php
[Fri Feb 16 05:15:10.414982 2024] [core:error] [pid 1414:tid 139663763216128] [client 3.236.171.5:40292] Script timed out before returning headers: index.php
[Fri Feb 16 05:15:15.265419 2024] [core:error] [pid 1415:tid 139663796786944] [client 3.236.171.5:41712] Script timed out before returning headers: index.php
[Fri Feb 16 05:15:15.398733 2024] [core:error] [pid 1443:tid 139663880713984] [client 3.236.171.5:41726] Script timed out before returning headers: index.php
[Fri Feb 16 05:15:15.487079 2024] [core:error] [pid 17848:tid 139663905892096] [client 3.236.171.5:41742] Script timed out before returning headers: index.php
[Fri Feb 16 05:15:15.507453 2024] [core:error] [pid 1415:tid 139663788394240] [client 3.236.171.5:41754] Script timed out before returning headers: index.php
[Fri Feb 16 05:15:15.575958 2024] [core:error] [pid 1414:tid 139663771608832] [client 3.236.171.5:41768] Script timed out before returning headers: index.php
[Fri Feb 16 05:15:15.575989 2024] [core:error] [pid 1443:tid 139663863928576] [client 3.236.171.5:41784] Script timed out before returning headers: index.php
[Fri Feb 16 05:15:15.757388 2024] [core:error] [pid 17848:tid 139663897499392] [client 3.236.171.5:41838] Script timed out before returning headers: index.php
[Fri Feb 16 05:15:15.757436 2024] [core:error] [pid 2397:tid 139663905892096] [client 3.236.171.5:41834] Script timed out before returning headers: index.php
[Fri Feb 16 05:15:15.757556 2024] [core:error] [pid 2397:tid 139663897499392] [client 3.236.171.5:41800] Script timed out before returning headers: index.php
[Fri Feb 16 05:15:15.765346 2024] [core:error] [pid 1443:tid 139663847143168] [client 3.236.171.5:41812] Script timed out before returning headers: index.php
[Fri Feb 16 05:15:15.816193 2024] [core:error] [pid 1415:tid 139663780001536] [client 3.236.171.5:41836] Script timed out before returning headers: index.php
[Fri Feb 16 05:15:15.816425 2024] [core:error] [pid 1414:tid 139663872321280] [client 3.236.171.5:41854] Script timed out before returning headers: index.php
[Fri Feb 16 05:15:15.816504 2024] [core:error] [pid 2447:tid 139664032352000] [client 3.236.171.5:41826] Script timed out before returning headers: index.php
[Fri Feb 16 05:15:15.818377 2024] [core:error] [pid 2447:tid 139664023959296] [client 3.236.171.5:41860] Script timed out before returning headers: index.php
[Fri Feb 16 05:15:15.901882 2024] [core:error] [pid 1443:tid 139663838750464] [client 3.236.171.5:41894] Script timed out before returning headers: index.php
[Fri Feb 16 05:15:15.918541 2024] [core:error] [pid 1415:tid 139663771608832] [client 3.236.171.5:41876] Script timed out before returning headers: index.php
[Fri Feb 16 05:15:15.918651 2024] [core:error] [pid 2447:tid 139663947855616] [client 3.236.171.5:41882] Script timed out before returning headers: index.php
[Fri Feb 16 05:15:17.079382 2024] [core:error] [pid 17848:tid 139663889106688] [client 3.236.171.5:38300] Script timed out before returning headers: index.php
[Fri Feb 16 05:15:43.098760 2024] [core:error] [pid 1414:tid 139663855535872] [client 3.236.171.5:40964] Script timed out before returning headers: index.php
[Fri Feb 16 05:15:43.135315 2024] [core:error] [pid 1414:tid 139663847143168] [client 3.236.171.5:40978] Script timed out before returning headers: index.php
[Fri Feb 16 05:15:43.135431 2024] [core:error] [pid 2397:tid 139663889106688] [client 3.236.171.5:41022] Script timed out before returning headers: index.php
[Fri Feb 16 05:15:43.135536 2024] [core:error] [pid 2536:tid 139663939462912] [client 3.236.171.5:40976] Script timed out before returning headers: index.php
[Fri Feb 16 05:15:43.202504 2024] [core:error] [pid 2447:tid 139663939462912] [client 3.236.171.5:41008] Script timed out before returning headers: index.php
[Fri Feb 16 05:15:43.202714 2024] [core:error] [pid 1415:tid 139663947855616] [client 3.236.171.5:41054] Script timed out before returning headers: index.php
[Fri Feb 16 05:15:43.202850 2024] [core:error] [pid 2536:tid 139663922677504] [client 3.236.171.5:41074] Script timed out before returning headers: index.php
[Fri Feb 16 05:15:43.202955 2024] [core:error] [pid 2536:tid 139664032352000] [client 3.236.171.5:40980] Script timed out before returning headers: index.php
[Fri Feb 16 05:15:43.204923 2024] [core:error] [pid 2536:tid 139663914284800] [client 3.236.171.5:41076] Script timed out before returning headers: index.php
[Fri Feb 16 05:15:43.207555 2024] [core:error] [pid 1415:tid 139663763216128] [client 3.236.171.5:40992] Script timed out before returning headers: index.php
[Fri Feb 16 05:15:43.207696 2024] [core:error] [pid 17848:tid 139663880713984] [client 3.236.171.5:40984] Script timed out before returning headers: index.php
[Fri Feb 16 05:15:43.207811 2024] [core:error] [pid 1415:tid 139664032352000] [client 3.236.171.5:41036] Script timed out before returning headers: index.php
[Fri Feb 16 05:15:43.249573 2024] [core:error] [pid 2397:tid 139663880713984] [client 3.236.171.5:41064] Script timed out before returning headers: index.php
[Fri Feb 16 05:15:43.249720 2024] [core:error] [pid 2536:tid 139663931070208] [client 3.236.171.5:41046] Script timed out before returning headers: index.php
[Fri Feb 16 05:15:43.333495 2024] [core:error] [pid 1415:tid 139664023959296] [client 3.236.171.5:41082] Script timed out before returning headers: index.php
[Fri Feb 16 05:15:43.409340 2024] [core:error] [pid 1443:tid 139663855535872] [client 3.236.171.5:41098] Script timed out before returning headers: index.php
[Fri Feb 16 05:15:45.147401 2024] [core:error] [pid 2536:tid 139663905892096] [client 3.236.171.5:41102] Script timed out before returning headers: index.php
[Fri Feb 16 05:15:47.490640 2024] [core:error] [pid 17848:tid 139663872321280] [client 3.236.171.5:60074] Script timed out before returning headers: index.php
[Fri Feb 16 05:15:49.331572 2024] [core:error] [pid 17848:tid 139663863928576] [client 3.236.171.5:49282] Script timed out before returning headers: index.php
[Fri Feb 16 05:15:49.331735 2024] [core:error] [pid 2447:tid 139663922677504] [client 3.236.171.5:49298] Script timed out before returning headers: index.php
[Fri Feb 16 05:15:49.362205 2024] [core:error] [pid 2447:tid 139663931070208] [client 3.236.171.5:49270] Script timed out before returning headers: index.php
[Fri Feb 16 05:15:49.362448 2024] [core:error] [pid 2536:tid 139663897499392] [client 3.236.171.5:49314] Script timed out before returning headers: index.php
[Fri Feb 16 05:15:49.447402 2024] [core:error] [pid 17848:tid 139663855535872] [client 3.236.171.5:49360] Script timed out before returning headers: index.php
[Fri Feb 16 05:15:49.448653 2024] [core:error] [pid 2447:tid 139663914284800] [client 3.236.171.5:49328] Script timed out before returning headers: index.php
[Fri Feb 16 05:15:49.448870 2024] [core:error] [pid 2613:tid 139664032352000] [client 3.236.171.5:49336] Script timed out before returning headers: index.php
[Fri Feb 16 05:15:49.449388 2024] [core:error] [pid 17848:tid 139663830357760] [client 3.236.171.5:49392] Script timed out before returning headers: index.php
[Fri Feb 16 05:15:49.468869 2024] [core:error] [pid 2613:tid 139664023959296] [client 3.236.171.5:49384] Script timed out before returning headers: index.php
[Fri Feb 16 05:15:49.469002 2024] [core:error] [pid 2447:tid 139663905892096] [client 3.236.171.5:49368] Script timed out before returning headers: index.php
[Fri Feb 16 05:15:49.469943 2024] [core:error] [pid 1443:tid 139663872321280] [client 3.236.171.5:49350] Script timed out before returning headers: index.php
[Fri Feb 16 05:15:49.474444 2024] [core:error] [pid 2447:tid 139663897499392] [client 3.236.171.5:49400] Script timed out before returning headers: index.php
[Fri Feb 16 05:15:49.474454 2024] [core:error] [pid 2613:tid 139663947855616] [client 3.236.171.5:49386] Script timed out before returning headers: index.php
[Fri Feb 16 05:15:49.512428 2024] [core:error] [pid 2613:tid 139663939462912] [client 3.236.171.5:49414] Script timed out before returning headers: index.php
[Fri Feb 16 05:15:49.562524 2024] [core:error] [pid 1443:tid 139663830357760] [client 3.236.171.5:49408] Script timed out before returning headers: index.php
[Fri Feb 16 05:15:49.562681 2024] [core:error] [pid 1415:tid 139663939462912] [client 3.236.171.5:49434] Script timed out before returning headers: index.php
[Fri Feb 16 05:15:49.583030 2024] [core:error] [pid 2447:tid 139663889106688] [client 3.236.171.5:49430] Script timed out before returning headers: index.php
[Fri Feb 16 05:15:49.637539 2024] [core:error] [pid 1415:tid 139663905892096] [client 3.236.171.5:49436] Script timed out before returning headers: index.php
[Sat Feb 17 12:42:17.182499 2024] [:error] [pid 32329:tid 140446202279680] [client 193.32.162.87:37762] [client 193.32.162.87] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.hg/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.hg/hgrc"] [unique_id "ZdCpqWxIby3ZtM2KdTi3QgAAAE0"]
[Sat Feb 17 16:06:05.405076 2024] [:error] [pid 32328:tid 140446261028608] [client 193.32.162.87:37506] [client 193.32.162.87] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZdDZbZCzBFoZlUUGmVrHIQAAAAY"]
[Sun Apr 07 02:21:29.266011 2024] [core:error] [pid 10370:tid 139893921507072] [client 109.205.213.18:55476] End of script output before headers: index.php
[Sun Apr 07 02:21:34.154309 2024] [core:error] [pid 10075:tid 139894073173760] [client 109.205.213.18:55550] End of script output before headers: index.php
[Sun Apr 07 02:21:37.963451 2024] [core:error] [pid 10046:tid 139893904721664] [client 109.205.213.18:55488] End of script output before headers: index.php
[Thu Apr 11 15:06:30.042942 2024] [core:error] [pid 13922:tid 139780172015360] [client 82.145.222.234:42584] End of script output before headers: index.php, referer: https://edu.richinei.com/public/backEnd/vendors/css/jquery-ui.css
[Thu Apr 11 15:06:34.641863 2024] [core:error] [pid 14281:tid 139780104873728] [client 82.145.222.234:42628] End of script output before headers: index.php, referer: https://edu.richinei.com/public/backEnd/vendors/css/owl.carousel.min.css
[Sat Apr 13 14:10:36.726987 2024] [authz_core:error] [pid 14002:tid 139693635086080] [client 206.189.225.181:59908] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Sat Apr 13 14:10:39.022227 2024] [:error] [pid 14042:tid 139693567944448] [client 206.189.225.181:59946] [client 206.189.225.181] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZhqSX51g_IhJNbwEw6Y3rAAAAJY"]
[Sat Apr 13 14:10:39.153609 2024] [:error] [pid 14042:tid 139693685442304] [client 206.189.225.181:59960] [client 206.189.225.181] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZhqSX51g_IhJNbwEw6Y3rgAAAIg"]
[Sat Apr 13 14:10:39.182598 2024] [authz_core:error] [pid 14042:tid 139693559551744] [client 159.203.96.42:51824] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Sat Apr 13 14:10:41.945777 2024] [:error] [pid 14012:tid 139693744191232] [client 159.203.96.42:51844] [client 159.203.96.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZhqSYW_49fkcWalyFjo7_wAAAEE"]
[Sat Apr 13 14:10:42.147233 2024] [:error] [pid 14012:tid 139693702227712] [client 159.203.96.42:51854] [client 159.203.96.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZhqSYm_49fkcWalyFjo8AAAAAEY"]
[Thu Apr 18 22:42:12.401553 2024] [authz_core:error] [pid 32439:tid 140134901012224] [client 128.199.182.55:35888] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Thu Apr 18 22:42:15.679378 2024] [:error] [pid 32439:tid 140134968153856] [client 128.199.182.55:35924] [client 128.199.182.55] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZiGhxyzMdEAot_dH-9LBfAAAAMo"]
[Thu Apr 18 22:42:16.216883 2024] [:error] [pid 32439:tid 140135035295488] [client 128.199.182.55:35932] [client 128.199.182.55] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZiGhyCzMdEAot_dH-9LBfQAAAMI"]
[Thu Apr 18 23:45:55.009116 2024] [authz_core:error] [pid 32439:tid 140134926190336] [client 165.22.34.189:38130] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Thu Apr 18 23:45:56.778371 2024] [:error] [pid 6607:tid 140134984939264] [client 165.22.34.189:38162] [client 165.22.34.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZiGwtDbHJgXdoZ_uLWGTSgAAAIg"]
[Thu Apr 18 23:45:56.924959 2024] [:error] [pid 32439:tid 140134917797632] [client 165.22.34.189:38164] [client 165.22.34.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZiGwtCzMdEAot_dH-9LBrAAAANA"]
[Sat Apr 20 22:19:03.202568 2024] [:error] [pid 9028:tid 140408554239744] [client 92.118.39.244:48924] [client 92.118.39.244] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZiQ_V7isBujFJ0tz9PqvYwAAAMY"]
[Mon Apr 22 21:42:26.122961 2024] [:error] [pid 16402:tid 139828096104192] [client 80.94.92.105:50160] [client 80.94.92.105] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZibZwqOthN4SK-LXzgibawAAAAs"]
[Sun Apr 28 20:33:18.392191 2024] [authz_core:error] [pid 14709:tid 140481166030592] [client 157.245.204.205:57264] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Sun Apr 28 20:33:21.051826 2024] [:error] [pid 14745:tid 140481182816000] [client 157.245.204.205:46172] [client 157.245.204.205] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Zi6ykd2CGvHULUwAhCcAcAAAAIM"]
[Sun Apr 28 20:33:21.435448 2024] [:error] [pid 15326:tid 140481048532736] [client 157.245.204.205:46182] [client 157.245.204.205] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Zi6ykV1IkVqGL9Ve6sob5QAAANM"]
[Mon Apr 29 01:02:54.672756 2024] [authz_core:error] [pid 14745:tid 140481149245184] [client 164.92.244.132:50832] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Mon Apr 29 01:02:57.830199 2024] [:error] [pid 15326:tid 140481082103552] [client 164.92.244.132:50860] [client 164.92.244.132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Zi7xwV1IkVqGL9Ve6soeCgAAAM8"]
[Mon Apr 29 01:02:58.295090 2024] [:error] [pid 15326:tid 140481182816000] [client 164.92.244.132:50868] [client 164.92.244.132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Zi7xwl1IkVqGL9Ve6soeCwAAAMM"]
[Sun May 12 23:58:44.379376 2024] [authz_core:error] [pid 28874:tid 140431849342720] [client 172.105.158.219:60970] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Sun May 12 23:58:46.108080 2024] [:error] [pid 2129:tid 140432008804096] [client 172.105.158.219:60994] [client 172.105.158.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZkFXtqES4Duw753lYkiU_QAAAIA"]
[Sun May 12 23:58:46.225355 2024] [:error] [pid 2129:tid 140431891306240] [client 172.105.158.219:32768] [client 172.105.158.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZkFXtqES4Duw753lYkiU_gAAAI4"]
[Mon May 13 00:19:52.943883 2024] [authz_core:error] [pid 2100:tid 140431891306240] [client 68.183.9.16:38084] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Mon May 13 00:19:57.270657 2024] [:error] [pid 2100:tid 140431941662464] [client 68.183.9.16:38132] [client 68.183.9.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZkFcrYRx0HKSIOO28K8muQAAAAg"]
[Mon May 13 00:19:57.827908 2024] [:error] [pid 2100:tid 140431950055168] [client 68.183.9.16:38144] [client 68.183.9.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZkFcrYRx0HKSIOO28K8mugAAAAc"]
[Sat May 18 09:53:49.362980 2024] [:error] [pid 18128:tid 139859066861312] [client 197.210.78.76:16491] PHP Fatal error:  Composer detected issues in your platform: Your Composer dependencies require a PHP version ">= 8.2.0". You are running 7.4.33. in /home/richine/edu.richinei.com/vendor/composer/platform_check.php on line 28
[Sat May 18 09:53:49.853559 2024] [:error] [pid 9072:tid 139859196102400] [client 197.210.78.76:15434] PHP Fatal error:  Composer detected issues in your platform: Your Composer dependencies require a PHP version ">= 8.2.0". You are running 7.4.33. in /home/richine/edu.richinei.com/vendor/composer/platform_check.php on line 28, referer: https://edu.richinei.com/
[Sat May 18 09:54:03.659549 2024] [:error] [pid 9100:tid 139858991326976] [client 105.113.10.241:30966] PHP Fatal error:  Composer detected issues in your platform: Your Composer dependencies require a PHP version ">= 8.2.0". You are running 7.4.33. in /home/richine/edu.richinei.com/vendor/composer/platform_check.php on line 28
[Sat May 18 09:54:05.096314 2024] [:error] [pid 18128:tid 139858982934272] [client 105.113.10.241:30967] PHP Fatal error:  Composer detected issues in your platform: Your Composer dependencies require a PHP version ">= 8.2.0". You are running 7.4.33. in /home/richine/edu.richinei.com/vendor/composer/platform_check.php on line 28, referer: https://edu.richinei.com/
[Sat May 18 10:20:39.379592 2024] [proxy_fcgi:error] [pid 3641:tid 139859204495104] [client 105.113.10.241:27918] AH01071: Got error 'PHP message: PHP Deprecated:  Optional parameter $class_id declared before required parameter $exam_term_id is implicitly treated as a required parameter in /home/richine/edu.richinei.com/app/SmAssignSubject.php on line 77', referer: https://edu.richinei.com/install/user
[Thu May 23 10:25:47.237667 2024] [authz_core:error] [pid 31930:tid 139989593601792] [client 139.162.141.82:59890] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Thu May 23 10:25:49.262371 2024] [:error] [pid 31986:tid 139989518067456] [client 139.162.141.82:59946] [client 139.162.141.82] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Zk8ZratirpF0GPaP--NhIgAAAFI"]
[Thu May 23 10:25:49.567064 2024] [:error] [pid 31986:tid 139989618779904] [client 139.162.141.82:59962] [client 139.162.141.82] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Zk8ZratirpF0GPaP--NhIwAAAEY"]
[Thu May 23 11:22:17.881488 2024] [authz_core:error] [pid 31986:tid 139989518067456] [client 159.89.12.166:49190] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Thu May 23 11:22:20.827361 2024] [:error] [pid 31986:tid 139989601994496] [client 159.89.12.166:35716] [client 159.89.12.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Zk8m7KtirpF0GPaP--NilgAAAEg"]
[Thu May 23 11:22:21.335738 2024] [:error] [pid 31986:tid 139989467711232] [client 159.89.12.166:35732] [client 159.89.12.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Zk8m7atirpF0GPaP--NilwAAAFg"]
[Fri May 24 12:10:54.396872 2024] [authz_core:error] [pid 1572:tid 140540624451328] [client 46.101.1.225:47556] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Fri May 24 12:10:57.135834 2024] [:error] [pid 1573:tid 140540523738880] [client 46.101.1.225:47594] [client 46.101.1.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZlCD0foeZ4jP-tVF3HWbmQAAAFg"]
[Fri May 24 12:10:57.611285 2024] [:error] [pid 1573:tid 140540616058624] [client 46.101.1.225:47610] [client 46.101.1.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZlCD0foeZ4jP-tVF3HWbmgAAAE0"]
[Sat May 25 10:58:46.459032 2024] [authz_core:error] [pid 21730:tid 139779769362176] [client 172.105.16.117:59146] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Sat May 25 10:58:47.826411 2024] [:error] [pid 21730:tid 139779609900800] [client 172.105.16.117:59182] [client 172.105.16.117] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZlHEZ2pH8FB6h0JohMgr3gAAANg"]
[Sat May 25 10:58:47.960410 2024] [:error] [pid 21730:tid 139779777754880] [client 172.105.16.117:59184] [client 172.105.16.117] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZlHEZ2pH8FB6h0JohMgr3wAAAMQ"]
[Sat May 25 18:05:17.776135 2024] [authz_core:error] [pid 21730:tid 139779744184064] [client 207.154.197.113:50624] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Sat May 25 18:05:20.607789 2024] [:error] [pid 27909:tid 139779869091584] [client 207.154.197.113:50658] [client 207.154.197.113] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZlIoYChbin4x-Hg1c1N68gAAAII"]
[Sat May 25 18:05:21.115517 2024] [:error] [pid 27909:tid 139779877484288] [client 207.154.197.113:50672] [client 207.154.197.113] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZlIoYShbin4x-Hg1c1N68wAAAIE"]
[Sun May 26 11:59:47.264945 2024] [authz_core:error] [pid 23715:tid 139821536188160] [client 207.154.197.113:59502] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Sun May 26 11:59:49.382625 2024] [:error] [pid 23715:tid 139821771081472] [client 207.154.197.113:59552] [client 207.154.197.113] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZlMkNcR2oTfKVBY4MxkKpwAAAII"]
[Sun May 26 11:59:49.704971 2024] [:error] [pid 23715:tid 139821578151680] [client 207.154.197.113:59556] [client 207.154.197.113] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZlMkNcR2oTfKVBY4MxkKqAAAAJA"]
[Sun May 26 21:48:56.301225 2024] [authz_core:error] [pid 23704:tid 139821779474176] [client 139.59.136.184:34626] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Sun May 26 21:48:59.260355 2024] [:error] [pid 23703:tid 139821552973568] [client 139.59.136.184:55006] [client 139.59.136.184] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZlOuS5bxF_TUJAb1oVoaKwAAABM"]
[Sun May 26 21:48:59.784417 2024] [:error] [pid 27673:tid 139821787866880] [client 139.59.136.184:55012] [client 139.59.136.184] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZlOuS3QQC2LeFqxzU2a6rgAAAMA"]
[Mon May 27 02:35:00.173352 2024] [authz_core:error] [pid 23704:tid 139821561366272] [client 64.226.65.160:56832] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Mon May 27 02:35:03.761401 2024] [:error] [pid 23715:tid 139821552973568] [client 64.226.65.160:56864] [client 64.226.65.160] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZlPxV8R2oTfKVBY4MxkV-AAAAJM"]
[Mon May 27 02:35:04.240444 2024] [:error] [pid 27673:tid 139821754296064] [client 64.226.65.160:56870] [client 64.226.65.160] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZlPxWHQQC2LeFqxzU2a7oAAAAMQ"]
[Mon May 27 04:28:19.570033 2024] [authz_core:error] [pid 16949:tid 140158627325696] [client 64.227.32.66:47238] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Mon May 27 04:28:21.745224 2024] [:error] [pid 16951:tid 140158618932992] [client 64.227.32.66:47264] [client 64.227.32.66] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZlQL5YBrB3eMJbHuKpmYzAAAAIM"]
[Mon May 27 04:28:22.057596 2024] [:error] [pid 16951:tid 140158540183296] [client 64.227.32.66:47266] [client 64.227.32.66] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZlQL5oBrB3eMJbHuKpmYzQAAAIQ"]
[Tue May 28 01:18:39.913231 2024] [authz_core:error] [pid 16951:tid 140158456256256] [client 134.122.28.88:43410] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Tue May 28 01:18:41.319438 2024] [:error] [pid 16951:tid 140158489827072] [client 134.122.28.88:43442] [client 134.122.28.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZlUw8YBrB3eMJbHuKpmt7AAAAIo"]
[Tue May 28 01:18:41.472178 2024] [:error] [pid 16951:tid 140158498219776] [client 134.122.28.88:43458] [client 134.122.28.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZlUw8YBrB3eMJbHuKpmt7QAAAIk"]
[Tue May 28 06:33:03.356776 2024] [authz_core:error] [pid 13219:tid 139918961506048] [client 139.162.155.225:37804] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Tue May 28 06:33:06.257056 2024] [:error] [pid 13201:tid 139918902757120] [client 139.162.155.225:37828] [client 139.162.155.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZlV6osh_67KZ5tiAefH6MwAAAFI"]
[Tue May 28 06:33:06.731102 2024] [:error] [pid 13201:tid 139918894364416] [client 139.162.155.225:37842] [client 139.162.155.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZlV6osh_67KZ5tiAefH6NAAAAFM"]
[Wed May 29 06:36:34.813253 2024] [authz_core:error] [pid 8401:tid 140279067670272] [client 139.59.136.184:48778] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Wed May 29 06:36:36.892969 2024] [:error] [pid 8401:tid 140279092848384] [client 139.59.136.184:48820] [client 139.59.136.184] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZlbM9A00Io53JoAhWKNihwAAAIY"]
[Wed May 29 06:36:37.189473 2024] [:error] [pid 8401:tid 140279210985216] [client 139.59.136.184:48836] [client 139.59.136.184] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZlbM9Q00Io53JoAhWKNiiAAAAIA"]
[Thu May 30 08:24:55.809584 2024] [authz_core:error] [pid 7832:tid 139703575623424] [client 64.23.159.209:60674] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Thu May 30 08:24:56.923030 2024] [:error] [pid 7832:tid 139703609194240] [client 64.23.159.209:60708] [client 64.23.159.209] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Zlg32NiIPp2Dc0k0xoHXFAAAAEU"]
[Thu May 30 08:24:56.975119 2024] [:error] [pid 7832:tid 139703702488832] [client 64.23.159.209:60720] [client 64.23.159.209] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Zlg32NiIPp2Dc0k0xoHXFQAAAEI"]
[Thu May 30 16:48:27.430186 2024] [authz_core:error] [pid 8159:tid 139703550445312] [client 209.38.248.17:38470] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Thu May 30 16:48:29.567180 2024] [:error] [pid 8159:tid 139703719274240] [client 209.38.248.17:38484] [client 209.38.248.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Zlit3fTBcPOglOu1LRMXYgAAAMA"]
[Thu May 30 16:48:29.935111 2024] [:error] [pid 7857:tid 139703609194240] [client 209.38.248.17:38500] [client 209.38.248.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Zlit3aw9nQgNqW-n6BcqXAAAAIU"]
[Sat Jun 01 11:06:07.435333 2024] [authz_core:error] [pid 11433:tid 140061660129024] [client 159.65.144.72:41200] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Sat Jun 01 11:06:11.175088 2024] [:error] [pid 18299:tid 140061517453056] [client 159.65.144.72:41236] [client 159.65.144.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZlsAowND2qqd_q_jRJsEFwAAAJc"]
[Sat Jun 01 11:06:11.908732 2024] [:error] [pid 18270:tid 140061668521728] [client 159.65.144.72:41246] [client 159.65.144.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZlsAo2XruBjHSDuUv6kzewAAAEU"]
[Sat Jun 01 16:10:19.914207 2024] [authz_core:error] [pid 11433:tid 140061559416576] [client 138.68.86.32:48586] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Sat Jun 01 16:10:22.067862 2024] [:error] [pid 18270:tid 140061592987392] [client 138.68.86.32:48630] [client 138.68.86.32] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZltH7mXruBjHSDuUv6k4pwAAAE4"]
[Sat Jun 01 16:10:22.405961 2024] [:error] [pid 11433:tid 140061780612864] [client 138.68.86.32:48646] [client 138.68.86.32] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZltH7hllaw9OGg3G6xMBiAAAAMA"]
[Sun Jun 02 20:08:01.185518 2024] [authz_core:error] [pid 12298:tid 140522094044928] [client 138.197.191.87:38468] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Sun Jun 02 20:08:03.967985 2024] [:error] [pid 12339:tid 140521984939776] [client 138.197.191.87:54006] [client 138.197.191.87] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZlzRI0Za74g4RPaSQQ68OwAAAJU"]
[Sun Jun 02 20:08:04.457430 2024] [:error] [pid 12339:tid 140522226882304] [client 138.197.191.87:54020] [client 138.197.191.87] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZlzRJEZa74g4RPaSQQ68PAAAAIE"]
[Sun Jun 02 22:06:57.656242 2024] [authz_core:error] [pid 6823:tid 140522119223040] [client 159.89.174.87:48530] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Sun Jun 02 22:07:00.304927 2024] [:error] [pid 6823:tid 140522043688704] [client 159.89.174.87:48578] [client 159.89.174.87] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZlztBCUX3rlPOFvJ_xtOeAAAAQ4"]
[Sun Jun 02 22:07:00.757443 2024] [:error] [pid 6823:tid 140522077259520] [client 159.89.174.87:48588] [client 159.89.174.87] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZlztBCUX3rlPOFvJ_xtOeQAAAQo"]
[Tue Jun 04 12:49:41.685229 2024] [authz_core:error] [pid 23533:tid 140697517954816] [client 139.162.96.81:34454] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Tue Jun 04 12:49:43.978609 2024] [:error] [pid 23533:tid 140697415968512] [client 139.162.96.81:50326] [client 139.162.96.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Zl8NZxodFJpx6yeL6IggUgAAAAY"]
[Tue Jun 04 12:49:44.356866 2024] [:error] [pid 23534:tid 140697264899840] [client 139.162.96.81:50336] [client 139.162.96.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Zl8NaJIifhDfjJIqr1ElOwAAAFg"]
[Tue Jun 04 15:23:32.090900 2024] [authz_core:error] [pid 23534:tid 140697348826880] [client 164.90.208.56:60032] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Tue Jun 04 15:23:34.184760 2024] [:error] [pid 23534:tid 140697424361216] [client 164.90.208.56:60066] [client 164.90.208.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Zl8xdpIifhDfjJIqr1EofgAAAEU"]
[Tue Jun 04 15:23:34.518845 2024] [:error] [pid 23534:tid 140697374004992] [client 164.90.208.56:60076] [client 164.90.208.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Zl8xdpIifhDfjJIqr1EofwAAAEs"]
[Wed Jun 05 19:38:00.944650 2024] [:error] [pid 16743:tid 140596517709568] [client 45.135.57.222:45427] [client 45.135.57.222] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/HEAD"] [unique_id "ZmC-mNBPqerKhM0J1bEtJQAAABc"]
[Thu Jun 06 03:20:19.064351 2024] [authz_core:error] [pid 29735:tid 140596551280384] [client 134.122.28.88:38640] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Thu Jun 06 03:20:20.479643 2024] [:error] [pid 29735:tid 140596771280640] [client 134.122.28.88:38668] [client 134.122.28.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZmEq9AfaZCnovc-0KBNGNAAAAUE"]
[Thu Jun 06 03:20:20.637186 2024] [:error] [pid 29735:tid 140596685563648] [client 134.122.28.88:38682] [client 134.122.28.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZmEq9AfaZCnovc-0KBNGNQAAAUM"]
[Thu Jun 06 08:39:22.938258 2024] [authz_core:error] [pid 15354:tid 140183562405632] [client 209.38.248.17:36250] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Thu Jun 06 08:39:25.921095 2024] [:error] [pid 15354:tid 140183404001024] [client 209.38.248.17:36272] [client 209.38.248.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZmF1vbzk78zNK3DHcmygNQAAAAs"]
[Thu Jun 06 08:39:26.462754 2024] [:error] [pid 15354:tid 140183328466688] [client 209.38.248.17:36284] [client 209.38.248.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZmF1vrzk78zNK3DHcmygNgAAABQ"]
[Sat Jun 08 04:48:47.900566 2024] [authz_core:error] [pid 3643:tid 140696216303360] [client 167.99.181.249:46414] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Sat Jun 08 04:48:49.267468 2024] [:error] [pid 3163:tid 140696241481472] [client 167.99.181.249:46464] [client 167.99.181.249] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZmPisZUS_XTNnyB9a_nQ0QAAAFU"]
[Sat Jun 08 04:48:49.402222 2024] [:error] [pid 3164:tid 140696350586624] [client 167.99.181.249:46472] [client 167.99.181.249] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZmPisaYvswXBS0EQTk8lnQAAAIg"]
[Sat Jun 08 12:09:16.148539 2024] [authz_core:error] [pid 3164:tid 140696249874176] [client 128.199.182.55:35740] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Sat Jun 08 12:09:19.355352 2024] [:error] [pid 3164:tid 140696392550144] [client 128.199.182.55:54834] [client 128.199.182.55] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZmRJ76YvswXBS0EQTk8s6QAAAIM"]
[Sat Jun 08 12:09:19.931836 2024] [:error] [pid 3163:tid 140696275052288] [client 128.199.182.55:54846] [client 128.199.182.55] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZmRJ75US_XTNnyB9a_nXrQAAAFE"]
[Mon Jun 10 10:02:22.017843 2024] [authz_core:error] [pid 32745:tid 139764871161600] [client 165.227.84.14:60446] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Mon Jun 10 10:02:23.744066 2024] [:error] [pid 32745:tid 139764938303232] [client 165.227.84.14:60468] [client 165.227.84.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZmbPL9xgZJ7cZudfbQsl8wAAAAc"]
[Mon Jun 10 10:02:23.985001 2024] [:error] [pid 32746:tid 139764812412672] [client 165.227.84.14:60472] [client 165.227.84.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZmbPLwbQYp78KQNJSStSVwAAAFY"]
[Wed Jun 12 05:09:17.283239 2024] [authz_core:error] [pid 32202:tid 140176651118336] [client 159.89.174.87:59438] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Wed Jun 12 05:09:20.027292 2024] [:error] [pid 32202:tid 140176634332928] [client 159.89.174.87:59484] [client 159.89.174.87] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZmktgLgPn4FQ93-TkhH4IwAAABc"]
[Wed Jun 12 05:09:20.516410 2024] [:error] [pid 32227:tid 140176718259968] [client 159.89.174.87:59494] [client 159.89.174.87] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZmktgFiWseMmkC8-L5ZHRQAAAI0"]
[Wed Jun 12 10:17:35.660273 2024] [authz_core:error] [pid 385:tid 140176885970688] [client 139.162.141.82:37544] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Wed Jun 12 10:17:39.391641 2024] [:error] [pid 32227:tid 140176760223488] [client 139.162.141.82:37574] [client 139.162.141.82] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Zml1w1iWseMmkC8-L5ZK4wAAAIg"]
[Wed Jun 12 10:17:40.112308 2024] [:error] [pid 32202:tid 140176793794304] [client 139.162.141.82:37584] [client 139.162.141.82] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Zml1xLgPn4FQ93-TkhH7kQAAAAQ"]
[Wed Jun 12 14:09:29.857256 2024] [authz_core:error] [pid 385:tid 140176659511040] [client 139.59.143.102:39776] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Wed Jun 12 14:09:32.192523 2024] [:error] [pid 385:tid 140176877577984] [client 139.59.143.102:39808] [client 139.59.143.102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZmmsHOM92FHkH051RUAylwAAAMM"]
[Wed Jun 12 14:09:32.519383 2024] [:error] [pid 385:tid 140176634332928] [client 139.59.143.102:39810] [client 139.59.143.102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZmmsHOM92FHkH051RUAymAAAANc"]
[Wed Jun 12 14:09:37.825320 2024] [authz_core:error] [pid 32227:tid 140176793794304] [client 159.89.17.243:60336] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Wed Jun 12 14:09:40.674223 2024] [:error] [pid 385:tid 140176785401600] [client 159.89.17.243:60370] [client 159.89.17.243] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZmmsJOM92FHkH051RUAyrQAAAMU"]
[Wed Jun 12 14:09:41.206284 2024] [:error] [pid 32227:tid 140176651118336] [client 159.89.17.243:60384] [client 159.89.17.243] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZmmsJViWseMmkC8-L5ZRzAAAAJU"]
[Wed Jun 12 14:10:15.206243 2024] [:error] [pid 32202:tid 140176751830784] [client 93.123.39.131:49710] [client 93.123.39.131] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZmmsR7gPn4FQ93-TkhEBggAAAAk"]
[Thu Jun 13 08:41:34.320462 2024] [:error] [pid 24869:tid 140155209852672] [client 194.55.186.107:56954] [client 194.55.186.107] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Zmqwvu-nRKgOTfbRCqGLQwAAAFI"]
[Thu Jun 13 21:41:52.429612 2024] [:error] [pid 24868:tid 140155293779712] [client 194.55.186.107:46316] [client 194.55.186.107] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZmtnoP_M9DJyIjpWVwsghAAAAAg"]
[Fri Jun 14 19:12:14.742004 2024] [:error] [pid 19806:tid 140327369234176] [client 83.147.52.49:58696] [client 83.147.52.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZmyWDjHQNFqUE4S7LOBCUwAAANM"]
[Sat Jun 15 20:49:13.500656 2024] [:error] [pid 18372:tid 140046636070656] [client 179.43.188.122:47204] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Zm3-SVBh6qo7-91lMd8a_AAAAFg"]
[Sun Jun 16 09:46:49.094754 2024] [:error] [pid 29742:tid 140392934594304] [client 128.199.182.55:57566] [client 128.199.182.55] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Zm60iabmpTCIsQHXfgFTxwAAAFQ"]
[Sun Jun 16 09:46:53.666497 2024] [authz_core:error] [pid 23197:tid 140393010128640] [client 128.199.182.55:57638] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Sun Jun 16 09:46:56.029009 2024] [:error] [pid 29742:tid 140392959772416] [client 128.199.182.55:57684] [client 128.199.182.55] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Zm60kKbmpTCIsQHXfgFTywAAAFE"]
[Sun Jun 16 09:46:56.406410 2024] [:error] [pid 23197:tid 140392993343232] [client 128.199.182.55:57700] [client 128.199.182.55] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Zm60kKDYuUiE0TGiMb9yEwAAAM0"]
[Sun Jun 16 14:39:07.953294 2024] [:error] [pid 29741:tid 140392942987008] [client 172.105.16.105:41220] [client 172.105.16.105] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Zm75Czscm91ZTiwxV08BeAAAABM"]
[Sun Jun 16 14:39:11.226222 2024] [authz_core:error] [pid 29770:tid 140392901023488] [client 172.105.16.105:41296] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Sun Jun 16 14:39:12.806745 2024] [:error] [pid 29770:tid 140393060484864] [client 172.105.16.105:41318] [client 172.105.16.105] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Zm75EN_ytN73CG_J2EhOfAAAAIU"]
[Sun Jun 16 14:39:13.000815 2024] [:error] [pid 29770:tid 140392951379712] [client 172.105.16.105:41334] [client 172.105.16.105] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Zm75Ed_ytN73CG_J2EhOfQAAAJI"]
[Mon Jun 17 11:23:30.988377 2024] [:error] [pid 24585:tid 140599084664576] [client 193.143.1.119:51060] [client 193.143.1.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/v1/.git/config"] [unique_id "ZnAcsmefbOS3RN_mF0WAawAAANA"]
[Mon Jun 17 11:23:30.997304 2024] [:error] [pid 24585:tid 140599101449984] [client 193.143.1.119:51048] [client 193.143.1.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/application/.git/config"] [unique_id "ZnAcsmefbOS3RN_mF0WAbAAAAM4"]
[Mon Jun 17 11:23:30.998055 2024] [:error] [pid 24585:tid 140599042701056] [client 193.143.1.119:51068] [client 193.143.1.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/v3/.git/config"] [unique_id "ZnAcsmefbOS3RN_mF0WAbQAAANU"]
[Mon Jun 17 11:23:30.998674 2024] [:error] [pid 31034:tid 140599151806208] [client 193.143.1.119:51096] [client 193.143.1.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/wiki/.git/config"] [unique_id "ZnAcsi260XcprEjD9firPgAAAEg"]
[Mon Jun 17 11:23:31.002429 2024] [:error] [pid 24585:tid 140599258715904] [client 193.143.1.119:51086] [client 193.143.1.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/__MACOSX/.git/config"] [unique_id "ZnAcs2efbOS3RN_mF0WAbgAAAMQ"]
[Mon Jun 17 11:23:31.009155 2024] [:error] [pid 31034:tid 140599042701056] [client 193.143.1.119:51156] [client 193.143.1.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/blog/.git/config"] [unique_id "ZnAcsy260XcprEjD9firPwAAAFU"]
[Mon Jun 17 11:23:31.009367 2024] [:error] [pid 24585:tid 140599067879168] [client 193.143.1.119:51114] [client 193.143.1.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/alpha/.git/config"] [unique_id "ZnAcs2efbOS3RN_mF0WAbwAAANI"]
[Mon Jun 17 11:23:31.011870 2024] [:error] [pid 24585:tid 140599109842688] [client 193.143.1.119:51098] [client 193.143.1.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/api/v1/.git/config"] [unique_id "ZnAcs2efbOS3RN_mF0WAcAAAAM0"]
[Mon Jun 17 11:23:31.013333 2024] [:error] [pid 24585:tid 140599143413504] [client 193.143.1.119:51172] [client 193.143.1.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/qa/.git/config"] [unique_id "ZnAcs2efbOS3RN_mF0WAcQAAAMk"]
[Mon Jun 17 11:23:31.014411 2024] [:error] [pid 24585:tid 140599076271872] [client 193.143.1.119:51142] [client 193.143.1.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/user/.git/config"] [unique_id "ZnAcs2efbOS3RN_mF0WAcgAAANE"]
[Mon Jun 17 11:23:31.014502 2024] [:error] [pid 24585:tid 140599059486464] [client 193.143.1.119:51138] [client 193.143.1.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/api/user/v1/.git/config"] [unique_id "ZnAcs2efbOS3RN_mF0WAcwAAANM"]
[Mon Jun 17 11:23:31.016648 2024] [:error] [pid 24585:tid 140599283894016] [client 193.143.1.119:51084] [client 193.143.1.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/wp-includes/js/.git/config"] [unique_id "ZnAcs2efbOS3RN_mF0WAdAAAAME"]
[Mon Jun 17 11:23:31.017065 2024] [:error] [pid 24585:tid 140599176984320] [client 193.143.1.119:51182] [client 193.143.1.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/vendor/.git/config"] [unique_id "ZnAcs2efbOS3RN_mF0WAdQAAAMU"]
[Mon Jun 17 11:23:31.017517 2024] [:error] [pid 24585:tid 140599093057280] [client 193.143.1.119:51128] [client 193.143.1.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/includes/.git/config"] [unique_id "ZnAcs2efbOS3RN_mF0WAdgAAAM8"]
[Mon Jun 17 11:23:31.018730 2024] [:error] [pid 24585:tid 140599168591616] [client 193.143.1.119:51198] [client 193.143.1.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/public/.git/config"] [unique_id "ZnAcs2efbOS3RN_mF0WAdwAAAMY"]
[Mon Jun 17 11:23:31.019456 2024] [:error] [pid 24585:tid 140599135020800] [client 193.143.1.119:51324] [client 193.143.1.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/live/.git/config"] [unique_id "ZnAcs2efbOS3RN_mF0WAeAAAAMo"]
[Mon Jun 17 11:23:31.019666 2024] [:error] [pid 24585:tid 140599025915648] [client 193.143.1.119:51176] [client 193.143.1.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/new/.git/config"] [unique_id "ZnAcs2efbOS3RN_mF0WAeQAAANc"]
[Mon Jun 17 11:23:31.020360 2024] [:error] [pid 31033:tid 140599109842688] [client 193.143.1.119:51164] [client 193.143.1.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/api/admin/v3/.git/config"] [unique_id "ZnAcs6lMvH_vptEptQg8GgAAAA0"]
[Mon Jun 17 11:23:31.021595 2024] [:error] [pid 24585:tid 140599126628096] [client 193.143.1.119:51266] [client 193.143.1.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/wp-content/plugins/.git/config"] [unique_id "ZnAcs2efbOS3RN_mF0WAegAAAMs"]
[Mon Jun 17 11:23:31.022283 2024] [:error] [pid 24585:tid 140599151806208] [client 193.143.1.119:51262] [client 193.143.1.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/blog/wp-content/themes/.git/config"] [unique_id "ZnAcs2efbOS3RN_mF0WAewAAAMg"]
[Mon Jun 17 11:23:31.023562 2024] [:error] [pid 31034:tid 140599283894016] [client 193.143.1.119:51214] [client 193.143.1.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/amphtml/.git/config"] [unique_id "ZnAcsy260XcprEjD9firQAAAAEE"]
[Mon Jun 17 11:23:31.024289 2024] [:error] [pid 31034:tid 140599017522944] [client 193.143.1.119:51230] [client 193.143.1.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/app/.git/config"] [unique_id "ZnAcsy260XcprEjD9firQQAAAFg"]
[Mon Jun 17 11:23:31.025138 2024] [:error] [pid 31034:tid 140599034308352] [client 193.143.1.119:51332] [client 193.143.1.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/backup/.git/config"] [unique_id "ZnAcsy260XcprEjD9firQgAAAFY"]
[Mon Jun 17 11:23:31.025835 2024] [:error] [pid 24585:tid 140599292286720] [client 193.143.1.119:51288] [client 193.143.1.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/api/user/v3/.git/config"] [unique_id "ZnAcs2efbOS3RN_mF0WAfAAAAMA"]
[Mon Jun 17 11:23:31.027879 2024] [:error] [pid 24585:tid 140599118235392] [client 193.143.1.119:51346] [client 193.143.1.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/repos/.git/config"] [unique_id "ZnAcs2efbOS3RN_mF0WAfQAAAMw"]
[Mon Jun 17 11:23:31.028521 2024] [:error] [pid 24585:tid 140599051093760] [client 193.143.1.119:51334] [client 193.143.1.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/store/.git/config"] [unique_id "ZnAcs2efbOS3RN_mF0WAfgAAANQ"]
[Mon Jun 17 11:23:31.028602 2024] [:error] [pid 24585:tid 140599034308352] [client 193.143.1.119:51292] [client 193.143.1.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/node_modules/.git/config"] [unique_id "ZnAcs2efbOS3RN_mF0WAfwAAANY"]
[Mon Jun 17 11:23:31.029429 2024] [:error] [pid 31034:tid 140599109842688] [client 193.143.1.119:51290] [client 193.143.1.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/database/.git/config"] [unique_id "ZnAcsy260XcprEjD9firQwAAAE0"]
[Mon Jun 17 11:23:31.030205 2024] [:error] [pid 24585:tid 140599267108608] [client 193.143.1.119:51250] [client 193.143.1.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/api/.git/config"] [unique_id "ZnAcs2efbOS3RN_mF0WAgAAAAMM"]
[Mon Jun 17 11:23:31.030792 2024] [:error] [pid 24585:tid 140599017522944] [client 193.143.1.119:51244] [client 193.143.1.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/flock/.git/config"] [unique_id "ZnAcs2efbOS3RN_mF0WAgQAAANg"]
[Mon Jun 17 11:23:31.031406 2024] [:error] [pid 31033:tid 140599283894016] [client 193.143.1.119:51386] [client 193.143.1.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/api/admin/v4/.git/config"] [unique_id "ZnAcs6lMvH_vptEptQg8GwAAAAE"]
[Mon Jun 17 11:23:31.032131 2024] [:error] [pid 31034:tid 140599051093760] [client 193.143.1.119:51226] [client 193.143.1.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/git/.git/config"] [unique_id "ZnAcsy260XcprEjD9firRAAAAFQ"]
[Mon Jun 17 11:23:31.032892 2024] [:error] [pid 31034:tid 140599258715904] [client 193.143.1.119:51362] [client 193.143.1.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/wp-content/.git/config"] [unique_id "ZnAcsy260XcprEjD9firRQAAAEQ"]
[Mon Jun 17 11:23:31.032953 2024] [:error] [pid 24585:tid 140599160198912] [client 193.143.1.119:51316] [client 193.143.1.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/developer/.git/config"] [unique_id "ZnAcs2efbOS3RN_mF0WAggAAAMc"]
[Mon Jun 17 11:23:31.033531 2024] [:error] [pid 31034:tid 140599168591616] [client 193.143.1.119:51376] [client 193.143.1.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/demo/.git/config"] [unique_id "ZnAcsy260XcprEjD9firRgAAAEY"]
[Mon Jun 17 11:23:31.034159 2024] [:error] [pid 24585:tid 140599275501312] [client 193.143.1.119:51302] [client 193.143.1.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/site/.git/config"] [unique_id "ZnAcs2efbOS3RN_mF0WAgwAAAMI"]
[Mon Jun 17 11:23:31.034861 2024] [:error] [pid 31063:tid 140599283894016] [client 193.143.1.119:51272] [client 193.143.1.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/aomanalyzer/.git/config"] [unique_id "ZnAcs47OEyHoz34qUXgGVAAAAIE"]
[Mon Jun 17 11:23:31.038702 2024] [:error] [pid 31034:tid 140599101449984] [client 193.143.1.119:51394] [client 193.143.1.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/m/.git/config"] [unique_id "ZnAcsy260XcprEjD9firRwAAAE4"]
[Mon Jun 17 11:23:31.055943 2024] [:error] [pid 31034:tid 140599084664576] [client 193.143.1.119:51396] [client 193.143.1.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/build/.git/config"] [unique_id "ZnAcsy260XcprEjD9firSAAAAFA"]
[Mon Jun 17 11:23:31.119323 2024] [:error] [pid 31033:tid 140599067879168] [client 193.143.1.119:51404] [client 193.143.1.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/gateway/.git/config"] [unique_id "ZnAcs6lMvH_vptEptQg8HAAAABI"]
[Mon Jun 17 11:23:31.119471 2024] [:error] [pid 31063:tid 140599076271872] [client 193.143.1.119:51470] [client 193.143.1.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/staging/.git/config"] [unique_id "ZnAcs47OEyHoz34qUXgGVQAAAJE"]
[Mon Jun 17 11:23:31.120586 2024] [:error] [pid 31034:tid 140599025915648] [client 193.143.1.119:51456] [client 193.143.1.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/wp-content/themes/.git/config"] [unique_id "ZnAcsy260XcprEjD9firSQAAAFc"]
[Mon Jun 17 11:23:31.122824 2024] [:error] [pid 31033:tid 140599017522944] [client 193.143.1.119:51492] [client 193.143.1.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/a/.git/config"] [unique_id "ZnAcs6lMvH_vptEptQg8HQAAABg"]
[Mon Jun 17 11:23:31.123660 2024] [:error] [pid 31033:tid 140599101449984] [client 193.143.1.119:51430] [client 193.143.1.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/api/v3/.git/config"] [unique_id "ZnAcs6lMvH_vptEptQg8HgAAAA4"]
[Mon Jun 17 11:23:31.123930 2024] [:error] [pid 31063:tid 140599151806208] [client 193.143.1.119:51502] [client 193.143.1.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/admin/.git/config"] [unique_id "ZnAcs47OEyHoz34qUXgGVgAAAIg"]
[Mon Jun 17 11:23:31.124551 2024] [:error] [pid 31034:tid 140599093057280] [client 193.143.1.119:51428] [client 193.143.1.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/test/.git/config"] [unique_id "ZnAcsy260XcprEjD9firSgAAAE8"]
[Mon Jun 17 11:23:31.126256 2024] [:error] [pid 31033:tid 140599267108608] [client 193.143.1.119:51424] [client 193.143.1.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/v2/.git/config"] [unique_id "ZnAcs6lMvH_vptEptQg8HwAAAAM"]
[Mon Jun 17 11:23:31.128659 2024] [:error] [pid 31034:tid 140599143413504] [client 193.143.1.119:51514] [client 193.143.1.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/repository/.git/config"] [unique_id "ZnAcsy260XcprEjD9firSwAAAEk"]
[Mon Jun 17 11:23:31.129361 2024] [:error] [pid 31063:tid 140599059486464] [client 193.143.1.119:51496] [client 193.143.1.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/api/admin/v2/.git/config"] [unique_id "ZnAcs47OEyHoz34qUXgGVwAAAJM"]
[Mon Jun 17 11:23:31.132286 2024] [:error] [pid 31033:tid 140599168591616] [client 193.143.1.119:51516] [client 193.143.1.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/old-cuburn/.git/config"] [unique_id "ZnAcs6lMvH_vptEptQg8IAAAAAY"]
[Mon Jun 17 11:23:31.132307 2024] [:error] [pid 31063:tid 140599118235392] [client 193.143.1.119:51486] [client 193.143.1.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/static/.git/config"] [unique_id "ZnAcs47OEyHoz34qUXgGWAAAAIw"]
[Mon Jun 17 11:23:31.132782 2024] [:error] [pid 31063:tid 140599292286720] [client 193.143.1.119:51414] [client 193.143.1.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/cms/.git/config"] [unique_id "ZnAcs47OEyHoz34qUXgGWQAAAIA"]
[Mon Jun 17 11:23:31.136207 2024] [:error] [pid 31063:tid 140599051093760] [client 193.143.1.119:51440] [client 193.143.1.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/api/v2/.git/config"] [unique_id "ZnAcs47OEyHoz34qUXgGWgAAAJQ"]
[Mon Jun 17 11:23:31.137600 2024] [:error] [pid 31063:tid 140599109842688] [client 193.143.1.119:51408] [client 193.143.1.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/samples/.git/config"] [unique_id "ZnAcs47OEyHoz34qUXgGWwAAAI0"]
[Mon Jun 17 11:23:31.137879 2024] [:error] [pid 31034:tid 140599067879168] [client 193.143.1.119:51522] [client 193.143.1.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/web/.git/config"] [unique_id "ZnAcsy260XcprEjD9firTAAAAFI"]
[Mon Jun 17 11:23:31.139007 2024] [:error] [pid 31063:tid 140599168591616] [client 193.143.1.119:51536] [client 193.143.1.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/s3/.git/config"] [unique_id "ZnAcs47OEyHoz34qUXgGXAAAAIY"]
[Mon Jun 17 11:23:31.139725 2024] [:error] [pid 31033:tid 140599084664576] [client 193.143.1.119:51462] [client 193.143.1.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/dev/.git/config"] [unique_id "ZnAcs6lMvH_vptEptQg8IQAAABA"]
[Mon Jun 17 11:23:31.157151 2024] [:error] [pid 31063:tid 140599101449984] [client 193.143.1.119:51552] [client 193.143.1.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/api/user/v2/.git/config"] [unique_id "ZnAcs47OEyHoz34qUXgGXQAAAI4"]
[Mon Jun 17 11:23:31.320573 2024] [:error] [pid 31033:tid 140599034308352] [client 193.143.1.119:51570] [client 193.143.1.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/src/.git/config"] [unique_id "ZnAcs6lMvH_vptEptQg8IgAAABY"]
[Mon Jun 17 11:23:31.323879 2024] [:error] [pid 31033:tid 140599118235392] [client 193.143.1.119:51636] [client 193.143.1.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/api/v4/.git/config"] [unique_id "ZnAcs6lMvH_vptEptQg8IwAAAAw"]
[Mon Jun 17 11:23:31.327731 2024] [:error] [pid 31063:tid 140599143413504] [client 193.143.1.119:51614] [client 193.143.1.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/beta/.git/config"] [unique_id "ZnAcs47OEyHoz34qUXgGXgAAAIk"]
[Mon Jun 17 11:23:31.327892 2024] [:error] [pid 31033:tid 140599051093760] [client 193.143.1.119:51568] [client 193.143.1.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/common/.git/config"] [unique_id "ZnAcs6lMvH_vptEptQg8JAAAABQ"]
[Mon Jun 17 11:23:31.328558 2024] [:error] [pid 31034:tid 140599160198912] [client 193.143.1.119:51624] [client 193.143.1.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZnAcsy260XcprEjD9firTQAAAEc"]
[Mon Jun 17 11:23:31.328711 2024] [:error] [pid 31063:tid 140599258715904] [client 193.143.1.119:51612] [client 193.143.1.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/shop/.git/config"] [unique_id "ZnAcs47OEyHoz34qUXgGXwAAAIQ"]
[Mon Jun 17 11:23:31.332562 2024] [:error] [pid 31063:tid 140599160198912] [client 193.143.1.119:51602] [client 193.143.1.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/data/.git/config"] [unique_id "ZnAcs47OEyHoz34qUXgGYAAAAIc"]
[Mon Jun 17 11:23:31.333702 2024] [:error] [pid 31034:tid 140599059486464] [client 193.143.1.119:51630] [client 193.143.1.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/api/user/v4/.git/config"] [unique_id "ZnAcsy260XcprEjD9firTgAAAFM"]
[Mon Jun 17 11:23:31.341726 2024] [:error] [pid 24585:tid 140599084664576] [client 193.143.1.119:51586] [client 193.143.1.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/api/admin/v1/.git/config"] [unique_id "ZnAcs2efbOS3RN_mF0WAhAAAANA"]
[Mon Jun 17 11:23:31.603925 2024] [:error] [pid 31034:tid 140599275501312] [client 193.143.1.119:51400] [client 193.143.1.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/config/.git/config"] [unique_id "ZnAcsy260XcprEjD9firTwAAAEI"]
[Tue Jun 18 07:33:29.223313 2024] [:error] [pid 29139:tid 140339297859328] [client 179.43.188.122:39918] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZnE4STCy4OcGmnYcDLeFewAAAE4"]
[Tue Jun 18 10:41:10.886019 2024] [:error] [pid 18529:tid 140339356608256] [client 172.105.197.17:34310] [client 172.105.197.17] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "ZnFkRki7dMXhxZZ4x0GowwAAAMc"]
[Tue Jun 18 10:41:14.400384 2024] [authz_core:error] [pid 29167:tid 140339323037440] [client 172.105.197.17:34352] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Tue Jun 18 10:41:17.207273 2024] [:error] [pid 29167:tid 140339314644736] [client 172.105.197.17:34388] [client 172.105.197.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZnFkTevtfOHLhFsw274-FgAAAIw"]
[Tue Jun 18 10:41:17.458352 2024] [:error] [pid 29167:tid 140339239110400] [client 172.105.197.17:34390] [client 172.105.197.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZnFkTevtfOHLhFsw274-FwAAAJU"]
[Tue Jun 18 10:58:07.047202 2024] [:error] [pid 29139:tid 140339289466624] [client 206.189.233.36:55980] [client 206.189.233.36] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "ZnFoPzCy4OcGmnYcDLeIUgAAAE8"]
[Tue Jun 18 10:58:10.639496 2024] [authz_core:error] [pid 18529:tid 140339264288512] [client 206.189.233.36:52208] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Tue Jun 18 10:58:12.396858 2024] [:error] [pid 29167:tid 140339222324992] [client 206.189.233.36:52240] [client 206.189.233.36] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZnFoROvtfOHLhFsw274-fAAAAJc"]
[Tue Jun 18 10:58:12.617320 2024] [:error] [pid 18529:tid 140339230717696] [client 206.189.233.36:52246] [client 206.189.233.36] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZnFoREi7dMXhxZZ4x0GpGAAAANY"]
[Thu Jun 20 21:29:17.718931 2024] [:error] [pid 1150:tid 140469406140160] [client 138.197.191.87:59310] [client 138.197.191.87] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "ZnSfLU9jUX7lNFrBTY3odgAAAEU"]
[Thu Jun 20 21:29:23.278482 2024] [authz_core:error] [pid 1179:tid 140469431318272] [client 138.197.191.87:33542] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Thu Jun 20 21:29:26.446864 2024] [:error] [pid 1149:tid 140469262583552] [client 138.197.191.87:33576] [client 138.197.191.87] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZnSfNjRyoftyVquVELvM2wAAAA4"]
[Thu Jun 20 21:29:27.018059 2024] [:error] [pid 1149:tid 140469448103680] [client 138.197.191.87:33580] [client 138.197.191.87] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZnSfNzRyoftyVquVELvM3AAAAAA"]
[Fri Jun 21 00:34:54.792013 2024] [:error] [pid 26887:tid 140469304547072] [client 206.81.24.74:52088] [client 206.81.24.74] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "ZnTKri4cTqd1NU5BqJJgrAAAAMk"]
[Fri Jun 21 00:34:59.182055 2024] [authz_core:error] [pid 26887:tid 140469431318272] [client 206.81.24.74:52164] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Fri Jun 21 00:35:02.450593 2024] [:error] [pid 11546:tid 140469321332480] [client 206.81.24.74:52206] [client 206.81.24.74] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZnTKtrFEOlkerScBC5R6_gAAAQc"]
[Fri Jun 21 00:35:02.932102 2024] [:error] [pid 1150:tid 140469245798144] [client 206.81.24.74:52210] [client 206.81.24.74] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZnTKtk9jUX7lNFrBTY3otgAAAFA"]
[Sat Jun 22 20:09:49.105191 2024] [:error] [pid 32322:tid 140530572502784] [client 139.162.141.82:54690] [client 139.162.141.82] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "ZncvjZzXnOCb3R-0hbI88gAAAIA"]
[Sat Jun 22 20:09:54.375597 2024] [authz_core:error] [pid 32294:tid 140530314831616] [client 139.162.141.82:50938] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Sat Jun 22 20:09:57.079684 2024] [:error] [pid 32663:tid 140530323224320] [client 139.162.141.82:50964] [client 139.162.141.82] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZncvlX7QFCISWpH6yOhR2AAAANU"]
[Sat Jun 22 20:09:57.527427 2024] [:error] [pid 32322:tid 140530398758656] [client 139.162.141.82:50972] [client 139.162.141.82] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZncvlZzXnOCb3R-0hbI89wAAAIw"]
[Sat Jun 22 23:33:49.214574 2024] [:error] [pid 32294:tid 140530340009728] [client 64.23.218.208:35726] [client 64.23.218.208] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "ZndfXT6HDwUhwZhXfx3W0QAAAFM"]
[Sat Jun 22 23:33:51.832035 2024] [authz_core:error] [pid 32322:tid 140530423936768] [client 64.23.218.208:35782] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Sat Jun 22 23:33:53.099215 2024] [:error] [pid 32663:tid 140530538931968] [client 64.23.218.208:35818] [client 64.23.218.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZndfYX7QFCISWpH6yOhTQwAAAMQ"]
[Sat Jun 22 23:33:53.172292 2024] [:error] [pid 32294:tid 140530398758656] [client 64.23.218.208:35820] [client 64.23.218.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZndfYT6HDwUhwZhXfx3W1AAAAEw"]
[Mon Jun 24 00:58:52.058268 2024] [:error] [pid 25583:tid 140707918456576] [client 138.68.144.227:59618] [client 138.68.144.227] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "ZnjEzC4I8C_isvm6Tuwm7AAAANE"]
[Mon Jun 24 00:58:55.957998 2024] [authz_core:error] [pid 27165:tid 140708019169024] [client 138.68.144.227:59670] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Mon Jun 24 00:58:57.984601 2024] [:error] [pid 27165:tid 140707960420096] [client 138.68.144.227:59686] [client 138.68.144.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZnjE0efo73XarWc5n11nzwAAAAw"]
[Mon Jun 24 00:58:58.295722 2024] [:error] [pid 27165:tid 140708010776320] [client 138.68.144.227:59694] [client 138.68.144.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZnjE0ufo73XarWc5n11n0AAAAAY"]
[Mon Jun 24 22:29:36.140331 2024] [:error] [pid 20429:tid 140300246759168] [client 139.162.96.14:47280] [client 139.162.96.14] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "ZnnzUDrdg-vqU4o-0pDLHQAAAEI"]
[Mon Jun 24 22:29:40.586591 2024] [authz_core:error] [pid 20428:tid 140300139886336] [client 139.162.96.14:47342] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Mon Jun 24 22:29:42.931198 2024] [:error] [pid 20457:tid 140299997210368] [client 139.162.96.14:48928] [client 139.162.96.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZnnzVhFMJeLbt8FUfWUg6QAAAJc"]
[Mon Jun 24 22:29:43.321050 2024] [:error] [pid 20428:tid 140300064352000] [client 139.162.96.14:48944] [client 139.162.96.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZnnzVwW3YCRFnPJvfnKH3wAAAA8"]
[Wed Jun 26 02:39:49.669798 2024] [:error] [pid 1578:tid 139780197127936] [client 138.197.191.87:42270] [client 138.197.191.87] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Znt_dUr3K0qZedRDUXFFVQAAARQ"]
[Wed Jun 26 02:39:53.595166 2024] [authz_core:error] [pid 1578:tid 139780413265664] [client 138.197.191.87:40422] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Wed Jun 26 02:39:55.638947 2024] [:error] [pid 12042:tid 139780264269568] [client 138.197.191.87:40462] [client 138.197.191.87] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Znt_e9Ko8h_Xi79KjjKUqAAAAAw"]
[Wed Jun 26 02:39:55.945613 2024] [:error] [pid 5262:tid 139780222306048] [client 138.197.191.87:40468] [client 138.197.191.87] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Znt_e27a8Y-JWFWl2BowpwAAANE"]
[Wed Jun 26 07:02:08.237703 2024] [:error] [pid 6540:tid 139652170200832] [client 164.92.244.132:52846] [client 164.92.244.132] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Znu88IsZ_68GvDgitKqSWAAAAI8"]
[Wed Jun 26 07:02:13.411362 2024] [authz_core:error] [pid 6539:tid 139652365371136] [client 164.92.244.132:60852] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Wed Jun 26 07:02:16.200598 2024] [:error] [pid 7252:tid 139652178593536] [client 164.92.244.132:60888] [client 164.92.244.132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Znu8-GTpR4nzzOo2fQXT0AAAAM4"]
[Wed Jun 26 07:02:16.681721 2024] [:error] [pid 7252:tid 139652170200832] [client 164.92.244.132:60902] [client 164.92.244.132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Znu8-GTpR4nzzOo2fQXT0QAAAM8"]
[Fri Jun 28 00:48:11.966850 2024] [:error] [pid 30474:tid 140705670293248] [client 146.190.63.248:38158] [client 146.190.63.248] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Zn4IS_w59zqA7sWHLHAA6gAAAJY"]
[Fri Jun 28 00:48:14.564432 2024] [authz_core:error] [pid 30446:tid 140705670293248] [client 146.190.63.248:38206] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Fri Jun 28 00:48:15.788825 2024] [:error] [pid 30446:tid 140705771005696] [client 146.190.63.248:38262] [client 146.190.63.248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Zn4IT3xYCmfFl3DYpFSQOAAAAEo"]
[Fri Jun 28 00:48:15.833713 2024] [:error] [pid 30446:tid 140705729042176] [client 146.190.63.248:38264] [client 146.190.63.248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Zn4IT3xYCmfFl3DYpFSQOQAAAE8"]
[Fri Jun 28 07:55:23.471990 2024] [:error] [pid 23696:tid 140246050076416] [client 172.105.158.219:38556] [client 172.105.158.219] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Zn5sazzKjW_Jz3JUflvRXwAAANA"]
[Fri Jun 28 07:55:26.466690 2024] [authz_core:error] [pid 23696:tid 140245982934784] [client 172.105.158.219:38606] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Fri Jun 28 07:55:27.884432 2024] [:error] [pid 28812:tid 140246092039936] [client 172.105.158.219:38646] [client 172.105.158.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Zn5sb7joNmnARgZOtrrSBwAAAAs"]
[Fri Jun 28 07:55:28.034470 2024] [:error] [pid 28812:tid 140246016505600] [client 172.105.158.219:38662] [client 172.105.158.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Zn5scLjoNmnARgZOtrrSCAAAABQ"]
[Sun Jun 30 06:09:53.113938 2024] [:error] [pid 20186:tid 140641681168128] [client 167.99.210.137:54794] [client 167.99.210.137] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "ZoD2sdeWcgBMHCbWfhwv-gAAAAQ"]
[Sun Jun 30 06:09:59.042611 2024] [authz_core:error] [pid 20215:tid 140641564608256] [client 167.99.210.137:54848] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Sun Jun 30 06:10:01.752079 2024] [:error] [pid 20186:tid 140641573000960] [client 167.99.210.137:48038] [client 167.99.210.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZoD2udeWcgBMHCbWfhwv_AAAAAg"]
[Sun Jun 30 06:10:02.227691 2024] [:error] [pid 20611:tid 140641681168128] [client 167.99.210.137:48044] [client 167.99.210.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZoD2uou-fLtlgT95EUXGOAAAAMQ"]
[Sun Jun 30 06:43:23.464785 2024] [:error] [pid 20186:tid 140641455503104] [client 139.162.155.225:48886] [client 139.162.155.225] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "ZoD-i9eWcgBMHCbWfhwwDAAAABY"]
[Sun Jun 30 06:43:27.834354 2024] [authz_core:error] [pid 20186:tid 140641672775424] [client 139.162.155.225:48956] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Sun Jun 30 06:43:30.054726 2024] [:error] [pid 20186:tid 140641547822848] [client 139.162.155.225:48988] [client 139.162.155.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZoD-kteWcgBMHCbWfhwwFAAAAAs"]
[Sun Jun 30 06:43:30.363693 2024] [:error] [pid 20611:tid 140641531037440] [client 139.162.155.225:49000] [client 139.162.155.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZoD-kou-fLtlgT95EUXGZwAAAM0"]
[Tue Jul 02 05:32:34.373757 2024] [:error] [pid 17414:tid 140102403536640] [client 64.227.70.2:46922] [client 64.227.70.2] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "ZoOQ8lX8Ueck6EJGotGfqQAAAJY"]
[Tue Jul 02 05:32:39.326384 2024] [authz_core:error] [pid 17414:tid 140102495856384] [client 64.227.70.2:46964] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Tue Jul 02 05:32:41.907799 2024] [:error] [pid 17414:tid 140102462285568] [client 64.227.70.2:37716] [client 64.227.70.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZoOQ-VX8Ueck6EJGotGfswAAAI8"]
[Tue Jul 02 05:32:42.350443 2024] [:error] [pid 17414:tid 140102453892864] [client 64.227.70.2:37720] [client 64.227.70.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZoOQ-lX8Ueck6EJGotGftAAAAJA"]
[Tue Jul 02 07:14:30.159002 2024] [:error] [pid 17386:tid 140102495856384] [client 138.68.82.23:51972] [client 138.68.82.23] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "ZoOo1qEVMy1AZdFx6SkdggAAAEs"]
[Tue Jul 02 07:14:34.113141 2024] [authz_core:error] [pid 17770:tid 140102411929344] [client 138.68.82.23:38242] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Tue Jul 02 07:14:36.228483 2024] [:error] [pid 17414:tid 140102512641792] [client 138.68.82.23:38280] [client 138.68.82.23] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZoOo3FX8Ueck6EJGotGgNAAAAIk"]
[Tue Jul 02 07:14:36.546328 2024] [:error] [pid 17770:tid 140102571390720] [client 138.68.82.23:38288] [client 138.68.82.23] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZoOo3JhFbgB6rw6d_CuYjwAAAMI"]
[Thu Jul 04 06:04:31.229315 2024] [:error] [pid 3945:tid 140590561871616] [client 206.189.2.13:36342] [client 206.189.2.13] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "ZoY7b0ZrwiIkgPtU6XQ7fQAAAIM"]
[Thu Jul 04 06:04:36.728201 2024] [authz_core:error] [pid 29974:tid 140590553478912] [client 206.189.2.13:59768] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Thu Jul 04 06:04:39.607184 2024] [:error] [pid 3917:tid 140590419195648] [client 206.189.2.13:59822] [client 206.189.2.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZoY7d6vQL0rIp5H5wZXfigAAAFQ"]
[Thu Jul 04 06:04:40.122001 2024] [:error] [pid 3916:tid 140590587049728] [client 206.189.2.13:59838] [client 206.189.2.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZoY7eIZXc-zw7nPEaBpDlAAAAAA"]
[Thu Jul 04 12:16:50.553054 2024] [:error] [pid 29974:tid 140590419195648] [client 138.197.191.87:52344] [client 138.197.191.87] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "ZoaSssqKCEl-VEii7mz15AAAANQ"]
[Thu Jul 04 12:16:54.494210 2024] [authz_core:error] [pid 29974:tid 140590494729984] [client 138.197.191.87:43374] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Thu Jul 04 12:16:56.546807 2024] [:error] [pid 3916:tid 140590545086208] [client 138.197.191.87:43408] [client 138.197.191.87] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZoaSuIZXc-zw7nPEaBpJQwAAAAU"]
[Thu Jul 04 12:16:56.863157 2024] [:error] [pid 3916:tid 140590461159168] [client 138.197.191.87:43418] [client 138.197.191.87] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZoaSuIZXc-zw7nPEaBpJRAAAAA8"]
[Sat Jul 06 07:20:08.834224 2024] [:error] [pid 4227:tid 140650406160128] [client 64.226.78.121:37220] [client 64.226.78.121] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "ZojwKIZbQR8GPcFd5-uaKwAAAE0"]
[Sat Jul 06 07:20:13.018945 2024] [authz_core:error] [pid 4746:tid 140650397767424] [client 64.226.78.121:37282] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Sat Jul 06 07:20:15.178334 2024] [:error] [pid 4746:tid 140650364196608] [client 64.226.78.121:37330] [client 64.226.78.121] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZojwL1CL_tYEvpA-eY6S1AAAANI"]
[Sat Jul 06 07:20:15.515097 2024] [:error] [pid 4746:tid 140650506872576] [client 64.226.78.121:37332] [client 64.226.78.121] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZojwL1CL_tYEvpA-eY6S1QAAAME"]
[Sat Jul 06 08:24:07.953042 2024] [:error] [pid 4746:tid 140650498479872] [client 96.126.110.54:60150] [client 96.126.110.54] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Zoj_J1CL_tYEvpA-eY6T3AAAAMI"]
[Sat Jul 06 08:24:11.135606 2024] [authz_core:error] [pid 4227:tid 140650347411200] [client 96.126.110.54:50814] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Sat Jul 06 08:24:12.756737 2024] [:error] [pid 4227:tid 140650339018496] [client 96.126.110.54:50862] [client 96.126.110.54] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Zoj_LIZbQR8GPcFd5-ubXwAAAFU"]
[Sat Jul 06 08:24:12.964870 2024] [:error] [pid 4227:tid 140650330625792] [client 96.126.110.54:50868] [client 96.126.110.54] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Zoj_LIZbQR8GPcFd5-ubYAAAAFY"]
[Mon Jul 08 07:55:02.848017 2024] [:error] [pid 30627:tid 140436395992832] [client 139.162.141.82:44110] [client 139.162.141.82] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "ZoubVhEulzQzq0b_1N4K4gAAANQ"]
[Mon Jul 08 07:55:07.040174 2024] [authz_core:error] [pid 30277:tid 140436496705280] [client 139.162.141.82:44176] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Mon Jul 08 07:55:09.246681 2024] [:error] [pid 30277:tid 140436421170944] [client 139.162.141.82:44200] [client 139.162.141.82] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZoubXZwwB_6kLFTFKzzMnAAAAFE"]
[Mon Jul 08 07:55:09.580061 2024] [:error] [pid 30277:tid 140436505097984] [client 139.162.141.82:37500] [client 139.162.141.82] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZoubXZwwB_6kLFTFKzzMnQAAAEc"]
[Mon Jul 08 11:00:55.707740 2024] [authz_core:error] [pid 30276:tid 140436412778240] [client 165.227.173.41:41730] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Mon Jul 08 11:00:58.473972 2024] [:error] [pid 30276:tid 140436446349056] [client 165.227.173.41:41768] [client 165.227.173.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZovG6vFnvHerKe6lJurujQAAAA4"]
[Mon Jul 08 11:00:58.975866 2024] [:error] [pid 30276:tid 140436505097984] [client 165.227.173.41:41780] [client 165.227.173.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZovG6vFnvHerKe6lJurujgAAAAc"]
[Wed Jul 10 13:45:46.368045 2024] [:error] [pid 10171:tid 140568281663232] [client 139.59.132.8:34108] [client 139.59.132.8] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Zo6Qim7xeJTpd6dfk7fWOAAAAJU"]
[Wed Jul 10 13:45:52.003115 2024] [authz_core:error] [pid 10171:tid 140568315234048] [client 139.59.132.8:45374] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Wed Jul 10 13:45:54.779249 2024] [:error] [pid 10171:tid 140568518055680] [client 139.59.132.8:45414] [client 139.59.132.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Zo6Qkm7xeJTpd6dfk7fWQwAAAIE"]
[Wed Jul 10 13:45:55.272005 2024] [:error] [pid 10150:tid 140568390768384] [client 139.59.132.8:45430] [client 139.59.132.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Zo6Qky4IFjjtSGRTykpkaAAAAEg"]
[Fri Jul 12 12:14:35.589789 2024] [:error] [pid 10512:tid 140696056973056] [client 157.245.36.108:37684] [client 157.245.36.108] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "ZpEeKzHMPDxJh1U5OT_JiwAAABI"]
[Fri Jul 12 12:14:39.946320 2024] [authz_core:error] [pid 3742:tid 140696132507392] [client 157.245.36.108:37772] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Fri Jul 12 12:14:42.080915 2024] [:error] [pid 10512:tid 140696082151168] [client 157.245.36.108:37804] [client 157.245.36.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZpEeMjHMPDxJh1U5OT_JkAAAAA8"]
[Fri Jul 12 12:14:42.420692 2024] [:error] [pid 3742:tid 140696261936896] [client 157.245.36.108:37816] [client 157.245.36.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZpEeMoamNMuwLmPyFhNPrQAAAMI"]
[Fri Jul 12 15:29:13.521116 2024] [:error] [pid 10512:tid 140696065365760] [client 157.245.105.107:47392] [client 157.245.105.107] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "ZpFLyTHMPDxJh1U5OT_OiwAAABE"]
[Fri Jul 12 15:29:20.436964 2024] [authz_core:error] [pid 10512:tid 140696048580352] [client 157.245.105.107:36476] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Fri Jul 12 15:29:24.188566 2024] [:error] [pid 3742:tid 140696149292800] [client 157.245.105.107:36516] [client 157.245.105.107] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZpFL1IamNMuwLmPyFhNWvAAAAMc"]
[Fri Jul 12 15:29:24.936494 2024] [:error] [pid 10544:tid 140696124114688] [client 157.245.105.107:42096] [client 157.245.105.107] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZpFL1IC3Tun1S4CE6Jj-UQAAAIo"]
[Sat Jul 13 20:19:57.893254 2024] [:error] [pid 10385:tid 140682987562752] [client 109.205.213.18:56506] [client 109.205.213.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZpLhbfV0lHk3UKYldRo4XgAAAEI"]
[Sat Jul 13 20:26:54.173107 2024] [:error] [pid 10413:tid 140682970777344] [client 109.205.213.18:56854] [client 109.205.213.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZpLjDg4_G3AKCi_4QttiPAAAAIQ"]
[Sun Jul 14 16:24:43.111409 2024] [:error] [pid 14724:tid 139762430064384] [client 146.190.63.248:58466] [client 146.190.63.248] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "ZpP7y9ltd5UP7UDZbw1FnAAAAEw"]
[Sun Jul 14 16:24:45.767295 2024] [authz_core:error] [pid 14757:tid 139762513991424] [client 146.190.63.248:58530] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Sun Jul 14 16:24:47.016471 2024] [:error] [pid 14724:tid 139762522384128] [client 146.190.63.248:58572] [client 146.190.63.248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZpP7z9ltd5UP7UDZbw1FpAAAAEE"]
[Sun Jul 14 16:24:47.080623 2024] [:error] [pid 14724:tid 139762354530048] [client 146.190.63.248:58582] [client 146.190.63.248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZpP7z9ltd5UP7UDZbw1FpQAAAFU"]
[Sun Jul 14 17:10:24.945794 2024] [:error] [pid 15173:tid 139762421671680] [client 92.118.39.244:49494] [client 92.118.39.244] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/_profiler/phpinfo.bak"] [unique_id "ZpQGgGGNYmAcxggUTeyiYAAAAM0"]
[Tue Jul 16 15:26:24.550731 2024] [:error] [pid 27498:tid 139843262674688] [client 64.226.65.160:59636] [client 64.226.65.160] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "ZpaRIFBfbnJCgWPLk-skEgAAAFU"]
[Tue Jul 16 15:26:29.993531 2024] [authz_core:error] [pid 27530:tid 139843271067392] [client 64.226.65.160:58388] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Tue Jul 16 15:26:32.777359 2024] [:error] [pid 27818:tid 139843487315712] [client 64.226.65.160:58444] [client 64.226.65.160] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZpaRKOwkMvqihVEvUcr9HwAAAMM"]
[Tue Jul 16 15:26:33.259809 2024] [:error] [pid 27818:tid 139843504101120] [client 64.226.65.160:58452] [client 64.226.65.160] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZpaRKewkMvqihVEvUcr9IAAAAME"]
[Thu Jul 18 00:30:31.894012 2024] [:error] [pid 14570:tid 140201137526528] [client 134.122.28.88:46214] [client 134.122.28.88] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "ZphiJ9uPUk7c-xQY55GUkgAAAMI"]
[Thu Jul 18 00:30:35.173382 2024] [authz_core:error] [pid 20830:tid 140200961279744] [client 134.122.28.88:46278] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Thu Jul 18 00:30:36.704621 2024] [:error] [pid 20830:tid 140200986457856] [client 134.122.28.88:36110] [client 134.122.28.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZphiLBXnmXzeyfSak64zhAAAABQ"]
[Thu Jul 18 00:30:36.864033 2024] [:error] [pid 20830:tid 140201053599488] [client 134.122.28.88:36126] [client 134.122.28.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZphiLBXnmXzeyfSak64zhQAAAAw"]
[Thu Jul 18 18:44:56.512260 2024] [:error] [pid 20641:tid 139719874619136] [client 206.81.24.74:34810] [client 206.81.24.74] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "ZpliqCzlmk7uTttgy0D3JQAAANc"]
[Thu Jul 18 18:45:01.725032 2024] [authz_core:error] [pid 20308:tid 139720000509696] [client 206.81.24.74:34884] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Thu Jul 18 18:45:05.029271 2024] [:error] [pid 20641:tid 139719941760768] [client 206.81.24.74:43266] [client 206.81.24.74] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZplisSzlmk7uTttgy0D3LgAAAM8"]
[Thu Jul 18 18:45:05.487846 2024] [:error] [pid 20641:tid 139719899797248] [client 206.81.24.74:43272] [client 206.81.24.74] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZplisSzlmk7uTttgy0D3LwAAANQ"]
[Sat Jul 20 03:18:15.938818 2024] [:error] [pid 19607:tid 139965795067648] [client 172.105.16.131:48496] [client 172.105.16.131] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Zpssd6gJBL79nDATwAKxjwAAAJM"]
[Sat Jul 20 03:18:18.708601 2024] [authz_core:error] [pid 19607:tid 139965778282240] [client 172.105.16.131:48570] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Sat Jul 20 03:18:20.076213 2024] [:error] [pid 19607:tid 139965937743616] [client 172.105.16.131:48600] [client 172.105.16.131] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZpssfKgJBL79nDATwAKxmgAAAII"]
[Sat Jul 20 03:18:20.207418 2024] [:error] [pid 13545:tid 139965795067648] [client 172.105.16.131:48610] [client 172.105.16.131] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZpssfMxFB1d4Rf2kBc7y7wAAANM"]
[Sat Jul 20 20:43:01.267044 2024] [:error] [pid 9873:tid 140382700541696] [client 92.118.39.244:53036] [client 92.118.39.244] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZpwhVThBFeV0NMe19aSrUwAAAMo"]
[Sat Jul 20 21:19:40.227415 2024] [:error] [pid 18392:tid 140382625007360] [client 159.223.132.86:38428] [client 159.223.132.86] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Zpwp7D_52bZFVzDGZ-QSRgAAAFM"]
[Sat Jul 20 21:19:44.252838 2024] [authz_core:error] [pid 18392:tid 140382650185472] [client 159.223.132.86:38494] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Sat Jul 20 21:19:46.185852 2024] [:error] [pid 18392:tid 140382742505216] [client 159.223.132.86:38524] [client 159.223.132.86] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Zpwp8j_52bZFVzDGZ-QSUQAAAEU"]
[Sat Jul 20 21:19:46.409225 2024] [:error] [pid 18393:tid 140382708934400] [client 159.223.132.86:38532] [client 159.223.132.86] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Zpwp8ubUPsCRhV5Kw8VbuAAAAIk"]
[Sat Jul 20 21:48:17.438920 2024] [:error] [pid 9873:tid 140382708934400] [client 92.118.39.244:33472] [client 92.118.39.244] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZpwwoThBFeV0NMe19aSr_QAAAMk"]
[Mon Jul 22 04:42:38.160241 2024] [:error] [pid 15668:tid 140152961754880] [client 209.38.208.202:50672] [client 209.38.208.202] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Zp3jPktWbcpfysKQ3G3brQAAAMI"]
[Mon Jul 22 04:42:43.513662 2024] [authz_core:error] [pid 15668:tid 140152936576768] [client 209.38.208.202:50720] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Mon Jul 22 04:42:46.314194 2024] [:error] [pid 15668:tid 140152911398656] [client 209.38.208.202:50762] [client 209.38.208.202] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Zp3jRktWbcpfysKQ3G3bsQAAAMg"]
[Mon Jul 22 04:42:46.807513 2024] [:error] [pid 15668:tid 140152903005952] [client 209.38.208.202:48688] [client 209.38.208.202] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Zp3jRktWbcpfysKQ3G3bsgAAAMk"]
[Mon Jul 22 17:58:24.515899 2024] [:error] [pid 15079:tid 140152877827840] [client 206.189.19.19:48132] [client 206.189.19.19] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Zp6dwGyH13-tec6f46k9zQAAAEw"]
[Mon Jul 22 17:58:28.638978 2024] [authz_core:error] [pid 15078:tid 140152852649728] [client 206.189.19.19:45136] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Mon Jul 22 17:58:30.815246 2024] [:error] [pid 15079:tid 140152852649728] [client 206.189.19.19:45178] [client 206.189.19.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Zp6dxmyH13-tec6f46k92AAAAE8"]
[Mon Jul 22 17:58:31.121744 2024] [:error] [pid 15078:tid 140152919791360] [client 206.189.19.19:45188] [client 206.189.19.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Zp6dx9uRFu55yH2iO98jDgAAAAc"]
[Wed Jul 24 04:39:37.406711 2024] [:error] [pid 1258:tid 140239188186880] [client 159.89.17.243:34220] [client 159.89.17.243] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "ZqCFiZvMoDfEULAZ22eyAQAAAFg"]
[Wed Jul 24 04:39:42.749864 2024] [authz_core:error] [pid 1891:tid 140239272113920] [client 159.89.17.243:55764] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Wed Jul 24 04:39:45.573559 2024] [:error] [pid 1891:tid 140239196579584] [client 159.89.17.243:55798] [client 159.89.17.243] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZqCFkTipBNOMeiyjxb2uVgAAANc"]
[Wed Jul 24 04:39:46.080135 2024] [:error] [pid 1891:tid 140239463790336] [client 159.89.17.243:55812] [client 159.89.17.243] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZqCFkjipBNOMeiyjxb2uVwAAAMA"]
[Wed Jul 24 16:24:50.289521 2024] [:error] [pid 1280:tid 140239455397632] [client 97.74.88.7:21536] [client 97.74.88.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZqEq0pvYgSl6omeaSDoA8QAAAIE"]
[Wed Jul 24 16:24:53.351175 2024] [:error] [pid 1280:tid 140239421826816] [client 97.74.88.7:21601] [client 97.74.88.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZqEq1ZvYgSl6omeaSDoA8gAAAIU"]
[Wed Jul 24 16:43:18.804555 2024] [:error] [pid 1257:tid 140239288899328] [client 164.90.208.56:59738] [client 164.90.208.56] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "ZqEvJnUuJjfNagCe84bs2QAAAAw"]
[Wed Jul 24 16:43:22.775342 2024] [authz_core:error] [pid 1257:tid 140239430219520] [client 164.90.208.56:59794] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Wed Jul 24 16:43:25.065775 2024] [:error] [pid 1257:tid 140239455397632] [client 164.90.208.56:59828] [client 164.90.208.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZqEvLXUuJjfNagCe84bs4wAAAAE"]
[Wed Jul 24 16:43:25.426153 2024] [:error] [pid 1891:tid 140239314077440] [client 164.90.208.56:59832] [client 164.90.208.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZqEvLTipBNOMeiyjxb21nwAAAMk"]
[Wed Jul 24 21:27:24.523015 2024] [:error] [pid 1280:tid 140239322470144] [client 97.74.88.7:45839] [client 97.74.88.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZqFxvJvYgSl6omeaSDoDqQAAAIg"]
[Fri Jul 26 04:49:31.852973 2024] [:error] [pid 6714:tid 140293277964032] [client 165.22.235.3:56612] [client 165.22.235.3] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "ZqMq2-lbucFdGK6MbzIjmwAAANE"]
[Fri Jul 26 04:49:35.282040 2024] [authz_core:error] [pid 32019:tid 140293236000512] [client 165.22.235.3:53034] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Fri Jul 26 04:49:36.881196 2024] [:error] [pid 32018:tid 140293227607808] [client 165.22.235.3:53074] [client 165.22.235.3] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZqMq4Lds7f7BoROzlIL7sAAAABc"]
[Fri Jul 26 04:49:37.082796 2024] [:error] [pid 32019:tid 140293219215104] [client 165.22.235.3:53080] [client 165.22.235.3] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZqMq4cso62NiO-iyAKsIugAAAFg"]
[Fri Jul 26 18:58:47.322690 2024] [:error] [pid 32047:tid 140293227607808] [client 206.81.24.74:35034] [client 206.81.24.74] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "ZqPx5w7lzkoWw3ju7ttHRgAAAJc"]
[Fri Jul 26 18:58:51.217936 2024] [authz_core:error] [pid 32047:tid 140293444749056] [client 206.81.24.74:35118] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Fri Jul 26 18:58:53.290622 2024] [:error] [pid 32047:tid 140293244393216] [client 206.81.24.74:35158] [client 206.81.24.74] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZqPx7Q7lzkoWw3ju7ttHUQAAAJU"]
[Fri Jul 26 18:58:53.602699 2024] [:error] [pid 32047:tid 140293236000512] [client 206.81.24.74:35160] [client 206.81.24.74] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZqPx7Q7lzkoWw3ju7ttHUgAAAJY"]
[Sun Jul 28 04:54:40.262008 2024] [authz_core:error] [pid 24944:tid 140373825419008] [client 207.154.197.113:34172] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Sun Jul 28 04:54:42.963773 2024] [:error] [pid 24973:tid 140373800240896] [client 207.154.197.113:37464] [client 207.154.197.113] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZqXPElyLshWf9T0ueaq-GQAAAIQ"]
[Sun Jul 28 04:54:43.489954 2024] [:error] [pid 25420:tid 140373716313856] [client 207.154.197.113:37474] [client 207.154.197.113] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZqXPE1Vr_TBE2x-dz-MK9QAAAM4"]
[Sun Jul 28 23:41:14.542630 2024] [:error] [pid 24944:tid 140373724706560] [client 207.154.197.113:48800] [client 207.154.197.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "ZqbXGvVjgwTvmU8luqakNQAAAA0"]
[Sun Jul 28 23:41:18.305898 2024] [authz_core:error] [pid 24944:tid 140373817026304] [client 207.154.197.113:48870] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Sun Jul 28 23:41:20.275800 2024] [:error] [pid 24945:tid 140373665957632] [client 207.154.197.113:48920] [client 207.154.197.113] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZqbXIIUnMjXd8n3w7_DIfgAAAFQ"]
[Sun Jul 28 23:41:20.576616 2024] [:error] [pid 24945:tid 140373800240896] [client 207.154.197.113:48930] [client 207.154.197.113] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZqbXIIUnMjXd8n3w7_DIfwAAAEQ"]
[Tue Jul 30 03:01:05.164233 2024] [:error] [pid 20390:tid 140397489669888] [client 64.226.78.121:45698] [client 64.226.78.121] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "ZqhXcSUk6cqwrUR94-b_owAAAAk"]
[Tue Jul 30 03:01:10.709225 2024] [authz_core:error] [pid 20390:tid 140397602137856] [client 64.226.78.121:51236] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Tue Jul 30 03:01:13.633540 2024] [:error] [pid 20391:tid 140397439313664] [client 64.226.78.121:51284] [client 64.226.78.121] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZqhXeZQ69ZLC2R6W05i-cwAAAE8"]
[Tue Jul 30 03:01:14.102705 2024] [:error] [pid 20419:tid 140397405742848] [client 64.226.78.121:51290] [client 64.226.78.121] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZqhXev0Q932XDzxZ8LPWqwAAAJM"]
[Thu Aug 01 02:29:03.866232 2024] [authz_core:error] [pid 28317:tid 139730301671168] [client 172.105.16.131:40870] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Thu Aug 01 02:29:05.534885 2024] [:error] [pid 28317:tid 139730385598208] [client 172.105.16.131:44740] [client 172.105.16.131] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Zqry8XcpHJ55lFh4nxfJWAAAAE4"]
[Thu Aug 01 02:29:05.733529 2024] [:error] [pid 28317:tid 139730352027392] [client 172.105.16.131:44752] [client 172.105.16.131] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Zqry8XcpHJ55lFh4nxfJWQAAAFI"]
[Thu Aug 01 03:10:17.269659 2024] [:error] [pid 28316:tid 139730402383616] [client 142.93.129.190:42692] [client 142.93.129.190] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Zqr8mU3xo7Hv00YIniWM3AAAAAw"]
[Thu Aug 01 03:10:21.541184 2024] [authz_core:error] [pid 28317:tid 139730410776320] [client 142.93.129.190:42760] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Thu Aug 01 03:10:23.720500 2024] [:error] [pid 28317:tid 139730553079552] [client 142.93.129.190:42798] [client 142.93.129.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Zqr8n3cpHJ55lFh4nxfJdAAAAEM"]
[Thu Aug 01 03:10:24.056820 2024] [:error] [pid 28369:tid 139730352027392] [client 142.93.129.190:42806] [client 142.93.129.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Zqr8oN-Ehk2pAAQuKfdcXgAAAJI"]
[Fri Aug 02 06:52:31.948226 2024] [:error] [pid 24380:tid 139790473176832] [client 159.89.12.166:59750] [client 159.89.12.166] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "ZqyCLwkx1SXLNVLwmVJdzAAAANE"]
[Fri Aug 02 06:52:36.144372 2024] [authz_core:error] [pid 24380:tid 139790670714624] [client 159.89.12.166:59794] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Fri Aug 02 06:52:38.321679 2024] [:error] [pid 24380:tid 139790540318464] [client 159.89.12.166:59838] [client 159.89.12.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZqyCNgkx1SXLNVLwmVJd1QAAAMk"]
[Fri Aug 02 06:52:38.683750 2024] [:error] [pid 23893:tid 139790582281984] [client 159.89.12.166:59848] [client 159.89.12.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZqyCNsggqgSnPDEJXN0yNwAAAIQ"]
[Fri Aug 02 09:08:49.985343 2024] [:error] [pid 23893:tid 139790515140352] [client 138.68.82.23:38168] [client 138.68.82.23] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "ZqyiIcggqgSnPDEJXN0zoAAAAIw"]
[Fri Aug 02 09:08:55.663520 2024] [authz_core:error] [pid 23865:tid 139790670714624] [client 138.68.82.23:41636] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Fri Aug 02 09:08:58.757050 2024] [:error] [pid 23865:tid 139790506747648] [client 138.68.82.23:41682] [client 138.68.82.23] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZqyiKhAhL9bzY9oYtXLWywAAAE0"]
[Fri Aug 02 09:08:59.234964 2024] [:error] [pid 23864:tid 139790481569536] [client 138.68.82.23:41686] [client 138.68.82.23] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZqyiKwj8mzGVbpoPJQ22UQAAABA"]
[Sun Aug 04 12:27:08.950499 2024] [:error] [pid 31997:tid 140357685655296] [client 46.101.1.225:48002] [client 46.101.1.225] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Zq9znJcpNYe43OgcHepKoAAAAFc"]
[Sun Aug 04 12:27:14.104669 2024] [authz_core:error] [pid 32025:tid 140357769582336] [client 46.101.1.225:52460] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Sun Aug 04 12:27:16.750957 2024] [:error] [pid 32025:tid 140357736011520] [client 46.101.1.225:52490] [client 46.101.1.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Zq9zpJy3JOgrImfjZ84iWQAAAJE"]
[Sun Aug 04 12:27:17.192255 2024] [:error] [pid 32025:tid 140357710833408] [client 46.101.1.225:52496] [client 46.101.1.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Zq9zpZy3JOgrImfjZ84iWgAAAJQ"]
[Sun Aug 04 16:20:22.344566 2024] [:error] [pid 25684:tid 140357786367744] [client 159.89.12.166:45294] [client 159.89.12.166] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Zq-qRiJfy3ZdSesD0U8oZQAAAMs"]
[Sun Aug 04 16:20:26.511553 2024] [authz_core:error] [pid 25684:tid 140357828331264] [client 159.89.12.166:45344] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Sun Aug 04 16:20:28.614401 2024] [:error] [pid 25684:tid 140357819938560] [client 159.89.12.166:45380] [client 159.89.12.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Zq-qTCJfy3ZdSesD0U8ocQAAAMc"]
[Sun Aug 04 16:20:28.919209 2024] [:error] [pid 25684:tid 140357786367744] [client 159.89.12.166:45382] [client 159.89.12.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Zq-qTCJfy3ZdSesD0U8ocgAAAMs"]
[Tue Aug 06 10:13:28.489553 2024] [authz_core:error] [pid 29910:tid 140102806255360] [client 167.99.210.137:43952] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Tue Aug 06 10:13:31.424844 2024] [:error] [pid 29882:tid 140102688757504] [client 167.99.210.137:39102] [client 167.99.210.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZrH3S5HQEN2Gtns4eLQJTQAAAFQ"]
[Tue Aug 06 10:13:32.030134 2024] [:error] [pid 29910:tid 140102764291840] [client 167.99.210.137:39114] [client 167.99.210.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZrH3TGTIc3iDVF_S206OCgAAAIs"]
[Tue Aug 06 16:26:23.371560 2024] [:error] [pid 30256:tid 140102705542912] [client 207.154.212.47:40954] [client 207.154.212.47] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "ZrJOr2MS_zMXgLxyzyxnhgAAANI"]
[Tue Aug 06 16:26:27.429984 2024] [authz_core:error] [pid 29881:tid 140102713935616] [client 207.154.212.47:47086] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Tue Aug 06 16:26:29.547763 2024] [:error] [pid 29882:tid 140102772684544] [client 207.154.212.47:47138] [client 207.154.212.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZrJOtZHQEN2Gtns4eLQPtQAAAEo"]
[Tue Aug 06 16:26:29.898834 2024] [:error] [pid 29881:tid 140102722328320] [client 207.154.212.47:47142] [client 207.154.212.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZrJOtSzYGl_eoszPsq74sAAAABA"]
[Thu Aug 08 10:42:38.077823 2024] [:error] [pid 23776:tid 140067641386752] [client 159.89.17.243:60358] [client 159.89.17.243] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "ZrShHnZ0H4zE_ZceXlfJYAAAAII"]
[Thu Aug 08 10:42:43.372390 2024] [authz_core:error] [pid 23748:tid 140067397887744] [client 159.89.17.243:40316] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Thu Aug 08 10:42:46.171748 2024] [:error] [pid 23748:tid 140067448243968] [client 159.89.17.243:40370] [client 159.89.17.243] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZrShJuGsbw5cncWkysb8LgAAAFE"]
[Thu Aug 08 10:42:46.657812 2024] [:error] [pid 24099:tid 140067616208640] [client 159.89.17.243:40376] [client 159.89.17.243] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZrShJtztjkfjvHsCX-WxxgAAAMU"]
[Thu Aug 08 18:01:29.126079 2024] [:error] [pid 23747:tid 140067506992896] [client 165.227.84.14:57264] [client 165.227.84.14] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "ZrUH-cARp2aG5sh5-Xl-eQAAAAo"]
[Thu Aug 08 18:01:32.436222 2024] [authz_core:error] [pid 23748:tid 140067490207488] [client 165.227.84.14:37366] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Thu Aug 08 18:01:33.995270 2024] [:error] [pid 24099:tid 140067641386752] [client 165.227.84.14:37420] [client 165.227.84.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZrUH_dztjkfjvHsCX-W-DgAAAMI"]
[Thu Aug 08 18:01:34.165859 2024] [:error] [pid 24099:tid 140067481814784] [client 165.227.84.14:37432] [client 165.227.84.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZrUH_tztjkfjvHsCX-W-DwAAAM0"]
[Sat Aug 10 22:29:40.429941 2024] [:error] [pid 10160:tid 140652369069824] [client 139.162.96.14:56888] [client 139.162.96.14] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Zrfp1GSOdrMpB0S2so6xuwAAAFg"]
[Sat Aug 10 22:29:46.323141 2024] [authz_core:error] [pid 10160:tid 140652478174976] [client 139.162.96.14:36800] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Sat Aug 10 22:29:49.255545 2024] [:error] [pid 10160:tid 140652411033344] [client 139.162.96.14:36830] [client 139.162.96.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Zrfp3WSOdrMpB0S2so6xxAAAAFM"]
[Sat Aug 10 22:29:49.624814 2024] [:error] [pid 10160:tid 140652511745792] [client 139.162.96.14:36846] [client 139.162.96.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Zrfp3WSOdrMpB0S2so6xxQAAAEc"]
[Sun Aug 11 14:09:23.282352 2024] [:error] [pid 19927:tid 140095927580416] [client 23.239.21.238:48700] [client 23.239.21.238] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "ZrjGE6pe-d9lGA1LSb10-wAAAMg"]
[Sun Aug 11 14:09:26.933459 2024] [authz_core:error] [pid 25413:tid 140095877224192] [client 23.239.21.238:59544] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Sun Aug 11 14:09:28.769503 2024] [:error] [pid 25385:tid 140095818475264] [client 23.239.21.238:59578] [client 23.239.21.238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZrjGGGOsWx8HQA_1w37-pAAAAFU"]
[Sun Aug 11 14:09:28.895429 2024] [:error] [pid 25413:tid 140095944365824] [client 23.239.21.238:59590] [client 23.239.21.238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZrjGGFZ4s8bi5266YSYqzAAAAIY"]
[Sun Aug 11 14:12:40.211422 2024] [:error] [pid 25413:tid 140095801689856] [client 185.196.9.227:47872] [client 185.196.9.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZrjG2FZ4s8bi5266YSYq8wAAAJc"]
[Mon Aug 12 12:17:54.583202 2024] [:error] [pid 23385:tid 140557510739712] [client 159.65.18.197:39464] [client 159.65.18.197] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Zrn9co3njOj1WHNtjo8_5gAAAIk"]
[Mon Aug 12 12:17:59.728073 2024] [authz_core:error] [pid 23385:tid 140557468776192] [client 159.65.18.197:57062] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Mon Aug 12 12:18:02.409578 2024] [:error] [pid 23385:tid 140557426812672] [client 159.65.18.197:57098] [client 159.65.18.197] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Zrn9eo3njOj1WHNtjo8_7QAAAJM"]
[Mon Aug 12 12:18:02.711245 2024] [:error] [pid 23356:tid 140557519132416] [client 159.65.18.197:57102] [client 159.65.18.197] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Zrn9ev8Py4NcjJGQYORIBAAAAAg"]
[Mon Aug 12 23:49:39.008164 2024] [:error] [pid 23385:tid 140557519132416] [client 164.92.107.174:33558] [client 164.92.107.174] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Zrqfk43njOj1WHNtjo9LBgAAAIg"]
[Mon Aug 12 23:49:42.202681 2024] [authz_core:error] [pid 23356:tid 140557384849152] [client 164.92.107.174:50302] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Mon Aug 12 23:49:43.710577 2024] [:error] [pid 23357:tid 140557426812672] [client 164.92.107.174:50336] [client 164.92.107.174] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Zrqfl_ThHnahYhfrK2-zDAAAAFM"]
[Mon Aug 12 23:49:43.768444 2024] [:error] [pid 23385:tid 140557418419968] [client 164.92.107.174:50344] [client 164.92.107.174] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Zrqfl43njOj1WHNtjo9LCAAAAJQ"]
[Wed Aug 14 19:03:33.144515 2024] [:error] [pid 12595:tid 139633438402304] [client 195.178.110.35:60274] [client 195.178.110.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Zrz_hb-vKLfSBsNPUOtBhgAAAFg"]
[Wed Aug 14 21:47:52.189268 2024] [:error] [pid 21601:tid 139633513936640] [client 143.110.213.72:59966] [client 143.110.213.72] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Zr0mCPYEglG5Habaqt3rMgAAAQ8"]
[Wed Aug 14 21:47:56.713994 2024] [authz_core:error] [pid 21601:tid 139633539114752] [client 143.110.213.72:60038] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Wed Aug 14 21:47:58.857269 2024] [:error] [pid 12595:tid 139633555900160] [client 143.110.213.72:45300] [client 143.110.213.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Zr0mDr-vKLfSBsNPUOtCZwAAAEo"]
[Wed Aug 14 21:47:59.050616 2024] [:error] [pid 21601:tid 139633522329344] [client 143.110.213.72:45316] [client 143.110.213.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Zr0mD_YEglG5Habaqt3rNwAAAQ4"]
[Fri Aug 16 14:19:57.118491 2024] [:error] [pid 28216:tid 140627882792704] [client 206.189.233.36:44358] [client 206.189.233.36] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Zr9gDd0EXTQSQEwZ1bIvbgAAAIg"]
[Fri Aug 16 14:20:01.536136 2024] [authz_core:error] [pid 21505:tid 140627798865664] [client 206.189.233.36:35478] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Fri Aug 16 14:20:04.519091 2024] [:error] [pid 28160:tid 140627798865664] [client 206.189.233.36:35512] [client 206.189.233.36] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Zr9gFKd8_VV2Y2eB0EHsYQAAABI"]
[Fri Aug 16 14:20:04.692244 2024] [:error] [pid 28188:tid 140627773687552] [client 206.189.233.36:35526] [client 206.189.233.36] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Zr9gFOSJtWmwXFEoMR8OswAAAFU"]
[Fri Aug 16 19:44:59.580716 2024] [:error] [pid 28188:tid 140627798865664] [client 139.59.143.102:45652] [client 139.59.143.102] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Zr-sO-SJtWmwXFEoMR8T3AAAAFI"]
[Fri Aug 16 19:45:07.495896 2024] [authz_core:error] [pid 28188:tid 140627866007296] [client 139.59.143.102:44224] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Fri Aug 16 19:45:11.131401 2024] [:error] [pid 28216:tid 140627899578112] [client 139.59.143.102:44266] [client 139.59.143.102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Zr-sR90EXTQSQEwZ1bI1LQAAAIY"]
[Fri Aug 16 19:45:11.617520 2024] [:error] [pid 28188:tid 140627782080256] [client 139.59.143.102:44276] [client 139.59.143.102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Zr-sR-SJtWmwXFEoMR8T5AAAAFQ"]
[Sat Aug 17 05:41:42.555750 2024] [:error] [pid 29005:tid 139728582051584] [client 195.178.110.35:42516] [client 195.178.110.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZsA4Fm_GHo8hFz9-iMZlTQAAAIw"]
[Sun Aug 18 19:06:55.323669 2024] [:error] [pid 32766:tid 140590075324160] [client 206.189.2.13:43846] [client 206.189.2.13] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "ZsJGT48jpcxb8b9Xn2l_QAAAAEc"]
[Sun Aug 18 19:07:00.366276 2024] [authz_core:error] [pid 32766:tid 140589957826304] [client 206.189.2.13:43898] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Sun Aug 18 19:07:03.249547 2024] [:error] [pid 32766:tid 140590092109568] [client 206.189.2.13:43934] [client 206.189.2.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZsJGV48jpcxb8b9Xn2l_SQAAAEU"]
[Sun Aug 18 19:07:03.560032 2024] [:error] [pid 32766:tid 140589966219008] [client 206.189.2.13:43938] [client 206.189.2.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZsJGV48jpcxb8b9Xn2l_SgAAAFQ"]
[Sun Aug 18 19:46:07.394206 2024] [:error] [pid 32766:tid 140589966219008] [client 147.182.200.94:54968] [client 147.182.200.94] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "ZsJPf48jpcxb8b9Xn2l_pgAAAFQ"]
[Sun Aug 18 19:46:11.427748 2024] [authz_core:error] [pid 32765:tid 140590117287680] [client 147.182.200.94:44426] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Sun Aug 18 19:46:13.339844 2024] [:error] [pid 331:tid 140589932648192] [client 147.182.200.94:44470] [client 147.182.200.94] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZsJPhfNvCGimbsnabmXSbQAAAJg"]
[Sun Aug 18 19:46:13.394241 2024] [:error] [pid 331:tid 140589966219008] [client 147.182.200.94:44478] [client 147.182.200.94] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZsJPhfNvCGimbsnabmXSbgAAAJQ"]
[Tue Aug 20 02:11:43.567136 2024] [:error] [pid 18213:tid 139880197695232] [client 45.148.10.206:55370] [client 45.148.10.206] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZsP7XycQhiLU62d0tPk9wwAAANY"]
[Tue Aug 20 19:38:59.883506 2024] [:error] [pid 15655:tid 140396743079680] [client 209.38.208.202:37744] [client 209.38.208.202] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "ZsTw05GunlyaBLsHxKre-gAAAMU"]
[Tue Aug 20 19:39:07.465144 2024] [authz_core:error] [pid 15232:tid 140396717901568] [client 209.38.208.202:52330] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Tue Aug 20 19:39:10.817246 2024] [:error] [pid 15260:tid 140396701116160] [client 209.38.208.202:52372] [client 209.38.208.202] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZsTw3hDKLeqzsygTE-sUJQAAAIo"]
[Tue Aug 20 19:39:11.311127 2024] [:error] [pid 15655:tid 140396701116160] [client 209.38.208.202:52376] [client 209.38.208.202] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZsTw35GunlyaBLsHxKre_gAAAMo"]
[Thu Aug 22 13:39:18.263625 2024] [:error] [pid 2402:tid 140076977735424] [client 146.190.63.48:33886] [client 146.190.63.48] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Zsc_hmhoUjiQv5q3b3cCRQAAAAY"]
[Thu Aug 22 13:39:21.541364 2024] [authz_core:error] [pid 2402:tid 140076952557312] [client 146.190.63.48:33964] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Thu Aug 22 13:39:23.091114 2024] [:error] [pid 2402:tid 140076986128128] [client 146.190.63.48:34012] [client 146.190.63.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Zsc_i2hoUjiQv5q3b3cCTgAAAAU"]
[Thu Aug 22 13:39:23.126751 2024] [:error] [pid 2403:tid 140076994520832] [client 146.190.63.48:34028] [client 146.190.63.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Zsc_i3Xso0hGJ4T60bwhlQAAAEQ"]
[Thu Aug 22 19:56:22.262344 2024] [:error] [pid 28261:tid 140076994520832] [client 165.227.173.41:47104] [client 165.227.173.41] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "ZseX5k9en1jPf4D1stQhVQAAAMQ"]
[Thu Aug 22 19:56:28.909336 2024] [authz_core:error] [pid 2402:tid 140077091473152] [client 165.227.173.41:53848] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Thu Aug 22 19:56:32.321949 2024] [:error] [pid 2402:tid 140076986128128] [client 165.227.173.41:53878] [client 165.227.173.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZseX8GhoUjiQv5q3b3cKBQAAAAU"]
[Thu Aug 22 19:56:32.852179 2024] [:error] [pid 2402:tid 140076835059456] [client 165.227.173.41:43976] [client 165.227.173.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZseX8GhoUjiQv5q3b3cKBgAAABc"]
[Fri Aug 23 11:19:52.112074 2024] [:error] [pid 8150:tid 140195293951744] [client 45.148.10.241:55722] [client 45.148.10.241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZshwWPpGpenb0BdQHmoYXgAAAAI"]
[Fri Aug 23 23:22:53.556597 2024] [:error] [pid 8735:tid 140195310737152] [client 45.148.10.172:40966] [client 45.148.10.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZskZzWNelLn6HatCJOA0ygAAAMA"]
[Sat Aug 24 10:54:16.420178 2024] [:error] [pid 5902:tid 140255546029824] [client 138.197.191.87:55762] [client 138.197.191.87] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Zsm72KWZQr3DxuWaBrZwvgAAAMs"]
[Sat Aug 24 10:54:21.376124 2024] [authz_core:error] [pid 5902:tid 140255529244416] [client 138.197.191.87:55810] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Sat Aug 24 10:54:24.003343 2024] [:error] [pid 12726:tid 140255520851712] [client 138.197.191.87:33496] [client 138.197.191.87] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Zsm74HhywZbYWLagv-twVwAAAI4"]
[Sat Aug 24 10:54:24.309851 2024] [:error] [pid 5902:tid 140255670142720] [client 138.197.191.87:33504] [client 138.197.191.87] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Zsm74KWZQr3DxuWaBrZwxwAAAMU"]
[Sat Aug 24 16:51:22.371078 2024] [:error] [pid 12726:tid 140255686928128] [client 138.68.86.32:46370] [client 138.68.86.32] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "ZsoPinhywZbYWLagv-t4oAAAAIM"]
[Sat Aug 24 16:51:28.929615 2024] [authz_core:error] [pid 12697:tid 140255520851712] [client 138.68.86.32:34688] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Sat Aug 24 16:51:32.369061 2024] [:error] [pid 12698:tid 140255529244416] [client 138.68.86.32:34724] [client 138.68.86.32] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZsoPlEmdG0qzGg7hAm0YPwAAAE0"]
[Sat Aug 24 16:51:32.871737 2024] [:error] [pid 12698:tid 140255445317376] [client 138.68.86.32:34732] [client 138.68.86.32] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZsoPlEmdG0qzGg7hAm0YQAAAAFc"]
[Mon Aug 26 13:49:56.636303 2024] [:error] [pid 9854:tid 140577299461888] [client 157.230.19.140:42346] [client 157.230.19.140] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "ZsyIBBNJnG6p3T1iXajUOwAAAIo"]
[Mon Aug 26 13:50:03.852085 2024] [authz_core:error] [pid 9825:tid 140577232320256] [client 157.230.19.140:42394] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Mon Aug 26 13:50:07.592205 2024] [:error] [pid 9854:tid 140577282676480] [client 157.230.19.140:35914] [client 157.230.19.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZsyIDxNJnG6p3T1iXajURwAAAIw"]
[Mon Aug 26 13:50:08.137838 2024] [:error] [pid 9826:tid 140577324640000] [client 157.230.19.140:35920] [client 157.230.19.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZsyIEE86dzKEta2HJcZwlAAAAEc"]
[Mon Aug 26 23:17:53.134940 2024] [:error] [pid 9854:tid 140577265891072] [client 45.148.10.206:34184] [client 45.148.10.206] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Zs0NIRNJnG6p3T1iXajcIwAAAI4"]
[Wed Aug 28 01:51:48.672809 2024] [:error] [pid 7397:tid 140168480589568] [client 64.227.70.2:38404] [client 64.227.70.2] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Zs6CtCosznfLix67Cy--AAAAABg"]
[Wed Aug 28 01:51:53.832621 2024] [authz_core:error] [pid 1742:tid 140168480589568] [client 64.227.70.2:40074] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Wed Aug 28 01:51:56.400601 2024] [:error] [pid 7398:tid 140168522553088] [client 64.227.70.2:40104] [client 64.227.70.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Zs6CvJMyZKnvSBuLmmFOUgAAAFM"]
[Wed Aug 28 01:51:56.693301 2024] [:error] [pid 7397:tid 140168547731200] [client 64.227.70.2:40106] [client 64.227.70.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Zs6CvCosznfLix67Cy--BQAAABA"]
[Wed Aug 28 10:27:50.248980 2024] [:error] [pid 4057:tid 140648510359296] [client 64.227.32.66:46770] [client 64.227.32.66] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Zs77pl7X8PvXJthadJzq_gAAAMw"]
[Wed Aug 28 10:27:57.039433 2024] [authz_core:error] [pid 3671:tid 140648493573888] [client 64.227.32.66:36966] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Wed Aug 28 10:28:00.875095 2024] [:error] [pid 3671:tid 140648451610368] [client 64.227.32.66:37008] [client 64.227.32.66] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Zs77sK6unSD1hYGIAWWkAwAAAFM"]
[Wed Aug 28 10:28:01.416899 2024] [:error] [pid 3670:tid 140648649443072] [client 64.227.32.66:37012] [client 64.227.32.66] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Zs77sRK_hYuA7JXjKLCKnAAAAAQ"]
[Fri Aug 30 02:43:09.953023 2024] [:error] [pid 6709:tid 139636793845504] [client 139.59.132.8:33674] [client 139.59.132.8] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "ZtExvQDTo-DtAoiNF69YawAAAFY"]
[Fri Aug 30 02:43:15.192305 2024] [authz_core:error] [pid 6708:tid 139636827416320] [client 139.59.132.8:33740] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Fri Aug 30 02:43:17.843785 2024] [:error] [pid 6708:tid 139636877772544] [client 139.59.132.8:35252] [client 139.59.132.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZtExxaxNfOgL56OFOxjq5AAAAAw"]
[Fri Aug 30 02:43:18.189429 2024] [:error] [pid 6708:tid 139636785452800] [client 139.59.132.8:35262] [client 139.59.132.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZtExxqxNfOgL56OFOxjq5QAAABc"]
[Fri Aug 30 11:05:39.911106 2024] [:error] [pid 1978:tid 140299686844160] [client 206.81.12.187:37044] [client 206.81.12.187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "ZtGng8fx2cm7U3jaf7bXNgAAAJQ"]
[Fri Aug 30 11:05:44.749147 2024] [authz_core:error] [pid 1950:tid 140299804342016] [client 206.81.12.187:37098] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Fri Aug 30 11:05:47.123825 2024] [:error] [pid 1950:tid 140299720414976] [client 206.81.12.187:37138] [client 206.81.12.187] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZtGni7S3MI9IrepVhXt58QAAAFA"]
[Fri Aug 30 11:05:47.390571 2024] [:error] [pid 1949:tid 140299762378496] [client 206.81.12.187:55984] [client 206.81.12.187] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZtGni9DsDr0KSvVOpNWfIQAAAAs"]
[Sun Sep 01 22:59:16.141287 2024] [:error] [pid 30431:tid 140613865432832] [client 206.189.2.13:50090] [client 206.189.2.13] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "ZtTxxAXXMrU1LeYZX7A3vAAAAAE"]
[Sun Sep 01 22:59:22.437807 2024] [authz_core:error] [pid 30436:tid 140613731149568] [client 206.189.2.13:50146] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Sun Sep 01 22:59:25.590587 2024] [:error] [pid 30436:tid 140613697578752] [client 206.189.2.13:42856] [client 206.189.2.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZtTxzUckvDr_aKZEGTeoGgAAAJU"]
[Sun Sep 01 22:59:26.033114 2024] [:error] [pid 30433:tid 140613823469312] [client 206.189.2.13:42872] [client 206.189.2.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZtTxztUxRdI-9fhkSBXAyAAAAEY"]
[Mon Sep 02 06:31:36.983658 2024] [:error] [pid 25648:tid 140056131991296] [client 146.190.63.48:43428] [client 146.190.63.48] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "ZtVbyLhwBNQECHIKVL7UcQAAAJM"]
[Mon Sep 02 06:31:40.495788 2024] [authz_core:error] [pid 25648:tid 140056266274560] [client 146.190.63.48:35626] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Mon Sep 02 06:31:42.085233 2024] [:error] [pid 25648:tid 140056207525632] [client 146.190.63.48:35664] [client 146.190.63.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZtVbzrhwBNQECHIKVL7UeQAAAIo"]
[Mon Sep 02 06:31:42.126357 2024] [:error] [pid 25648:tid 140056199132928] [client 146.190.63.48:35676] [client 146.190.63.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZtVbzrhwBNQECHIKVL7UegAAAIs"]
[Mon Sep 02 19:01:13.927849 2024] [:error] [pid 25620:tid 140056207525632] [client 157.230.19.140:36004] [client 157.230.19.140] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "ZtYLeUVI5KKfWF9dzt7guQAAAEo"]
[Mon Sep 02 19:01:20.502919 2024] [authz_core:error] [pid 20876:tid 140056232703744] [client 157.230.19.140:36068] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Mon Sep 02 19:01:23.955008 2024] [:error] [pid 25619:tid 140056182347520] [client 157.230.19.140:54598] [client 157.230.19.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZtYLg7x7VbrDV8wYQ9QLhAAAAA0"]
[Mon Sep 02 19:01:24.469300 2024] [:error] [pid 9786:tid 140056215918336] [client 157.230.19.140:54600] [client 157.230.19.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZtYLhDwfyyn5SJX9aPj-OQAAAQk"]
[Wed Sep 04 18:12:45.055045 2024] [:error] [pid 6689:tid 139744151275264] [client 188.166.108.93:39652] [client 188.166.108.93] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "ZtijHS7gfkJq-xwE-F9vlQAAANU"]
[Wed Sep 04 18:12:51.836323 2024] [authz_core:error] [pid 13376:tid 139744374523648] [client 188.166.108.93:39238] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Wed Sep 04 18:12:55.280078 2024] [:error] [pid 6689:tid 139744218416896] [client 188.166.108.93:39270] [client 188.166.108.93] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZtijJy7gfkJq-xwE-F9vngAAAM0"]
[Wed Sep 04 18:12:55.777670 2024] [:error] [pid 6689:tid 139744235202304] [client 188.166.108.93:39280] [client 188.166.108.93] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZtijJy7gfkJq-xwE-F9vnwAAAMs"]
[Fri Sep 06 04:29:47.280984 2024] [:error] [pid 7174:tid 140386182289152] [client 206.189.19.19:45778] [client 206.189.19.19] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "ZtqFO6jbm2rpUjJVIY2j2wAAAIA"]
[Fri Sep 06 04:29:52.433081 2024] [authz_core:error] [pid 7174:tid 140386047592192] [client 206.189.19.19:45830] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Fri Sep 06 04:29:54.963136 2024] [:error] [pid 7174:tid 140386014021376] [client 206.189.19.19:45874] [client 206.189.19.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZtqFQqjbm2rpUjJVIY2j4gAAAIw"]
[Fri Sep 06 04:29:55.267011 2024] [:error] [pid 7174:tid 140385997235968] [client 206.189.19.19:45876] [client 206.189.19.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZtqFQ6jbm2rpUjJVIY2j4wAAAI4"]
[Fri Sep 06 20:01:44.192942 2024] [:error] [pid 7513:tid 140386039199488] [client 164.90.208.56:42990] [client 164.90.208.56] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "ZttfqATEhK2D2Xb9DFOzqgAAAMk"]
[Fri Sep 06 20:01:50.677509 2024] [authz_core:error] [pid 7513:tid 140386005628672] [client 164.90.208.56:39122] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Fri Sep 06 20:01:54.003247 2024] [:error] [pid 7513:tid 140386039199488] [client 164.90.208.56:39160] [client 164.90.208.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZttfsgTEhK2D2Xb9DFOztQAAAMk"]
[Fri Sep 06 20:01:54.505539 2024] [:error] [pid 7513:tid 140385938487040] [client 164.90.208.56:39166] [client 164.90.208.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZttfsgTEhK2D2Xb9DFOztgAAANU"]
[Sun Sep 08 15:50:55.902512 2024] [:error] [pid 29711:tid 140196708341504] [client 128.199.182.152:33998] [client 128.199.182.152] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Zt3H32ojY53kIu3_VeDV9AAAAAc"]
[Sun Sep 08 15:51:04.417706 2024] [authz_core:error] [pid 29711:tid 140196599236352] [client 128.199.182.152:60422] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Sun Sep 08 15:51:08.304552 2024] [:error] [pid 29711:tid 140196708341504] [client 128.199.182.152:60466] [client 128.199.182.152] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Zt3H7GojY53kIu3_VeDWAAAAAAc"]
[Sun Sep 08 15:51:08.900621 2024] [:error] [pid 29711:tid 140196674770688] [client 128.199.182.152:60470] [client 128.199.182.152] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Zt3H7GojY53kIu3_VeDWAQAAAAs"]
[Tue Sep 10 14:21:43.941837 2024] [:error] [pid 28014:tid 140536391481088] [client 206.81.24.74:60122] [client 206.81.24.74] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "ZuBV99886EBoz_ybMfUHRQAAAMI"]
[Tue Sep 10 14:21:49.626314 2024] [authz_core:error] [pid 27562:tid 140536203659008] [client 206.81.24.74:60166] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Tue Sep 10 14:21:52.839482 2024] [:error] [pid 28014:tid 140536170088192] [client 206.81.24.74:60190] [client 206.81.24.74] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZuBWAN886EBoz_ybMfUHSQAAANQ"]
[Tue Sep 10 14:21:53.692752 2024] [:error] [pid 28014:tid 140536279193344] [client 206.81.24.74:60194] [client 206.81.24.74] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZuBWAd886EBoz_ybMfUHSgAAAMc"]
[Tue Sep 10 14:54:09.805706 2024] [:error] [pid 27555:tid 140536144910080] [client 209.38.208.202:54444] [client 209.38.208.202] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "ZuBdkTKCtE501_eHSCoQdAAAAFc"]
[Tue Sep 10 14:54:19.165437 2024] [authz_core:error] [pid 27554:tid 140536203659008] [client 209.38.208.202:45496] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Tue Sep 10 14:54:24.338311 2024] [:error] [pid 27554:tid 140536270800640] [client 209.38.208.202:45524] [client 209.38.208.202] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZuBdoHOKe05Ol-BF1Y3kywAAAAg"]
[Tue Sep 10 14:54:25.018167 2024] [:error] [pid 28014:tid 140536220444416] [client 209.38.208.202:45532] [client 209.38.208.202] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZuBdod886EBoz_ybMfUH7AAAAM4"]
[Thu Sep 12 12:43:15.222285 2024] [:error] [pid 22284:tid 140129272325888] [client 159.89.12.166:56152] [client 159.89.12.166] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "ZuLh4-JGTmyNAddWRHOtyAAAAIE"]
[Thu Sep 12 12:43:21.711868 2024] [authz_core:error] [pid 22284:tid 140129230362368] [client 159.89.12.166:60728] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Thu Sep 12 12:43:24.945575 2024] [:error] [pid 22676:tid 140129163220736] [client 159.89.12.166:60774] [client 159.89.12.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZuLh7O3V-GIg7DXZp_vaMAAAAM4"]
[Thu Sep 12 12:43:25.411118 2024] [:error] [pid 22255:tid 140129129649920] [client 159.89.12.166:60778] [client 159.89.12.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZuLh7YGGNqfgxTjJgQQmQgAAABI"]
[Thu Sep 12 13:21:09.751402 2024] [:error] [pid 22284:tid 140129247147776] [client 64.227.70.2:55736] [client 64.227.70.2] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "ZuLqxeJGTmyNAddWRHOvUAAAAIQ"]
[Thu Sep 12 13:21:14.552949 2024] [authz_core:error] [pid 22284:tid 140129171613440] [client 64.227.70.2:55806] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Thu Sep 12 13:21:17.439972 2024] [:error] [pid 22256:tid 140129280718592] [client 64.227.70.2:55848] [client 64.227.70.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZuLqze-2nC6srCsT6DvWSAAAAEA"]
[Thu Sep 12 13:21:17.745732 2024] [:error] [pid 22255:tid 140129138042624] [client 64.227.70.2:55854] [client 64.227.70.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZuLqzYGGNqfgxTjJgQQnwgAAABE"]
[Sat Sep 14 07:41:27.342489 2024] [:error] [pid 15672:tid 139631358093056] [client 159.89.12.166:35182] [client 159.89.12.166] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "ZuU-J1GfWY5ybQECwx250QAAAMg"]
[Sat Sep 14 07:41:32.350605 2024] [authz_core:error] [pid 22580:tid 139631299344128] [client 159.89.12.166:57662] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Sat Sep 14 07:41:35.221618 2024] [:error] [pid 22580:tid 139631400056576] [client 159.89.12.166:57692] [client 159.89.12.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZuU-L_XYX0sWDTchX5EILgAAAIM"]
[Sat Sep 14 07:41:35.525245 2024] [:error] [pid 22580:tid 139631482070784] [client 159.89.12.166:57702] [client 159.89.12.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZuU-L_XYX0sWDTchX5EILwAAAII"]
[Sat Sep 14 08:53:35.463632 2024] [:error] [pid 15672:tid 139631307736832] [client 157.230.19.140:55762] [client 157.230.19.140] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "ZuVPD1GfWY5ybQECwx271AAAAM4"]
[Sat Sep 14 08:53:41.453218 2024] [authz_core:error] [pid 15672:tid 139631232202496] [client 157.230.19.140:55816] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Sat Sep 14 08:53:44.901509 2024] [:error] [pid 15672:tid 139631290951424] [client 157.230.19.140:40282] [client 157.230.19.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZuVPGFGfWY5ybQECwx273wAAANA"]
[Sat Sep 14 08:53:45.368951 2024] [:error] [pid 15672:tid 139631307736832] [client 157.230.19.140:40290] [client 157.230.19.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZuVPGVGfWY5ybQECwx274AAAAM4"]
[Mon Sep 16 07:31:10.845250 2024] [:error] [pid 12115:tid 139671338981120] [client 64.227.70.2:39020] [client 64.227.70.2] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "ZufevqVlK7LXbDUSFZTCMAAAAIA"]
[Mon Sep 16 07:31:16.960690 2024] [authz_core:error] [pid 12113:tid 139671145223936] [client 64.227.70.2:39072] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Mon Sep 16 07:31:20.203368 2024] [:error] [pid 12113:tid 139671078082304] [client 64.227.70.2:53118] [client 64.227.70.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZufeyEvLPZGwzWxZVj_FBQAAABc"]
[Mon Sep 16 07:31:20.641631 2024] [:error] [pid 13663:tid 139671069689600] [client 64.227.70.2:53132] [client 64.227.70.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZufeyKTpGFyfxcyWPJYDhAAAANg"]
[Mon Sep 16 14:44:46.409959 2024] [:error] [pid 12115:tid 139671237543680] [client 143.110.217.244:45316] [client 143.110.217.244] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "ZuhEXqVlK7LXbDUSFZTI-wAAAIQ"]
[Mon Sep 16 14:44:50.193864 2024] [authz_core:error] [pid 12115:tid 139671220758272] [client 143.110.217.244:49478] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Mon Sep 16 14:44:52.102569 2024] [:error] [pid 12113:tid 139671094867712] [client 143.110.217.244:49518] [client 143.110.217.244] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZuhEZEvLPZGwzWxZVj_LQQAAABU"]
[Mon Sep 16 14:44:52.237739 2024] [:error] [pid 12113:tid 139671262721792] [client 143.110.217.244:49528] [client 143.110.217.244] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZuhEZEvLPZGwzWxZVj_LQgAAAAE"]
[Wed Sep 18 09:16:42.001198 2024] [:error] [pid 3111:tid 140659205846784] [client 167.99.210.137:40668] [client 167.99.210.137] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "ZuqaeSu9_opbc7E63ibf4QAAAEg"]
[Wed Sep 18 09:16:48.043927 2024] [authz_core:error] [pid 3110:tid 140659319498496] [client 167.99.210.137:40762] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Wed Sep 18 09:16:51.298150 2024] [:error] [pid 3110:tid 140659327891200] [client 167.99.210.137:58456] [client 167.99.210.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Zuqag942WBrtCXXo8IKB3AAAAAI"]
[Wed Sep 18 09:16:51.747315 2024] [:error] [pid 3110:tid 140659130312448] [client 167.99.210.137:58472] [client 167.99.210.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Zuqag942WBrtCXXo8IKB3QAAABE"]
[Wed Sep 18 15:43:18.189136 2024] [:error] [pid 3139:tid 140659327891200] [client 159.89.12.166:52462] [client 159.89.12.166] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Zur1Fogv4xlamwoHEne59AAAAII"]
[Wed Sep 18 15:43:24.506280 2024] [authz_core:error] [pid 3589:tid 140659096741632] [client 159.89.12.166:52538] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Wed Sep 18 15:43:28.397451 2024] [:error] [pid 3111:tid 140659105134336] [client 159.89.12.166:45804] [client 159.89.12.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Zur1ICu9_opbc7E63ibnygAAAFQ"]
[Wed Sep 18 15:43:28.711020 2024] [:error] [pid 3589:tid 140659231024896] [client 159.89.12.166:45810] [client 159.89.12.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Zur1IEudPGtE9lAF8S-ELgAAAMU"]
[Fri Sep 20 10:28:06.446766 2024] [:error] [pid 30283:tid 139704557045504] [client 64.226.78.121:48764] [client 64.226.78.121] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Zu1ONh3ObPCTLPEfokG63QAAAE8"]
[Fri Sep 20 10:28:13.700692 2024] [authz_core:error] [pid 30282:tid 139704649365248] [client 64.226.78.121:48806] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Fri Sep 20 10:28:17.098497 2024] [:error] [pid 28296:tid 139704682936064] [client 64.226.78.121:44684] [client 64.226.78.121] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Zu1OQdP5ICq26x07LrTGlQAAAMA"]
[Fri Sep 20 10:28:17.569617 2024] [:error] [pid 30311:tid 139704657757952] [client 64.226.78.121:44686] [client 64.226.78.121] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Zu1OQYE6iNRD4PipUiauPQAAAIM"]
[Fri Sep 20 13:35:12.438169 2024] [:error] [pid 30283:tid 139704640972544] [client 172.105.158.219:55306] [client 172.105.158.219] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Zu16EB3ObPCTLPEfokG_7AAAAEU"]
[Fri Sep 20 13:35:17.245689 2024] [authz_core:error] [pid 30311:tid 139704649365248] [client 172.105.158.219:55348] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Fri Sep 20 13:35:19.025128 2024] [:error] [pid 30283:tid 139704557045504] [client 172.105.158.219:55370] [client 172.105.158.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Zu16Fx3ObPCTLPEfokG_8AAAAE8"]
[Fri Sep 20 13:35:19.127577 2024] [:error] [pid 30283:tid 139704498296576] [client 172.105.158.219:55376] [client 172.105.158.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Zu16Fx3ObPCTLPEfokG_8QAAAFY"]
[Sun Sep 22 18:51:41.066883 2024] [:error] [pid 20479:tid 139673879934720] [client 64.227.70.2:50204] [client 64.227.70.2] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "ZvBnPcmvouMSN-SLOOeL6gAAAAw"]
[Sun Sep 22 18:51:47.089283 2024] [authz_core:error] [pid 20479:tid 139673787614976] [client 64.227.70.2:50250] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Sun Sep 22 18:51:50.601749 2024] [:error] [pid 20479:tid 139673913505536] [client 64.227.70.2:35526] [client 64.227.70.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZvBnRsmvouMSN-SLOOeL9QAAAAg"]
[Sun Sep 22 18:51:51.038142 2024] [:error] [pid 20479:tid 139673947076352] [client 64.227.70.2:35534] [client 64.227.70.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZvBnR8mvouMSN-SLOOeL9wAAAAQ"]
[Tue Sep 24 08:36:16.623798 2024] [:error] [pid 7728:tid 140112100816640] [client 146.190.63.248:53198] [client 146.190.63.248] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "ZvJ6AISWLNqmCwurxpWZNgAAAAo"]
[Tue Sep 24 08:36:20.057091 2024] [authz_core:error] [pid 8367:tid 140112084031232] [client 146.190.63.248:53248] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Tue Sep 24 08:36:21.808094 2024] [:error] [pid 7728:tid 140112260179712] [client 146.190.63.248:55110] [client 146.190.63.248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZvJ6BYSWLNqmCwurxpWZOQAAAAA"]
[Tue Sep 24 08:36:21.846498 2024] [:error] [pid 7757:tid 140112042067712] [client 146.190.63.248:55126] [client 146.190.63.248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZvJ6BYoiwYGyq5sGH9xG3wAAAJE"]
[Wed Sep 25 01:25:06.730544 2024] [:error] [pid 7757:tid 140112109209344] [client 64.227.32.66:58428] [client 64.227.32.66] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "ZvNmcooiwYGyq5sGH9xUkQAAAIk"]
[Wed Sep 25 01:25:12.833883 2024] [authz_core:error] [pid 7729:tid 140112025282304] [client 64.227.32.66:58486] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Wed Sep 25 01:25:16.230102 2024] [:error] [pid 8367:tid 140112100816640] [client 64.227.32.66:49370] [client 64.227.32.66] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZvNmfAP9OzZaSaN5TAdhMgAAAMo"]
[Wed Sep 25 01:25:16.689652 2024] [:error] [pid 7757:tid 140112084031232] [client 64.227.32.66:49380] [client 64.227.32.66] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZvNmfIoiwYGyq5sGH9xUkwAAAIw"]
[Thu Sep 26 10:13:03.809721 2024] [:error] [pid 32150:tid 140047491733248] [client 142.93.0.66:59790] [client 142.93.0.66] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "ZvUzrz4PEcgdVosDh_yejQAAAE8"]
[Thu Sep 26 10:13:08.135542 2024] [authz_core:error] [pid 32164:tid 140047516911360] [client 142.93.0.66:59858] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Thu Sep 26 10:13:10.277112 2024] [:error] [pid 32149:tid 140047432984320] [client 142.93.0.66:59900] [client 142.93.0.66] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZvUztiC4Q4Y_kL19VLMzKgAAABY"]
[Thu Sep 26 10:13:10.474418 2024] [:error] [pid 25554:tid 140047458162432] [client 142.93.0.66:59910] [client 142.93.0.66] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZvUzthgc2qM3BG2TZQxdJgAAANM"]
[Thu Sep 26 19:07:11.725730 2024] [:error] [pid 32149:tid 140047466555136] [client 157.230.19.140:36328] [client 157.230.19.140] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "ZvWw3yC4Q4Y_kL19VLM-bgAAABI"]
[Thu Sep 26 19:07:17.919570 2024] [authz_core:error] [pid 32149:tid 140047432984320] [client 157.230.19.140:53658] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Thu Sep 26 19:07:21.179206 2024] [:error] [pid 25554:tid 140047458162432] [client 157.230.19.140:53692] [client 157.230.19.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZvWw6Rgc2qM3BG2TZQxqgQAAANM"]
[Thu Sep 26 19:07:21.651190 2024] [:error] [pid 32150:tid 140047542089472] [client 157.230.19.140:53694] [client 157.230.19.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZvWw6T4PEcgdVosDh_ypkQAAAEk"]
[Sat Sep 28 13:37:43.379401 2024] [:error] [pid 2649:tid 139979351123712] [client 63.135.161.62:43185] [client 63.135.161.62] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZvgGp0Ry2Mg4MSKRWl3dyAAAAEE"]
[Sat Sep 28 13:37:46.455698 2024] [:error] [pid 28299:tid 139979351123712] [client 63.135.161.75:49845] [client 63.135.161.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZvgGqgwO0uyWZYJY_mElIAAAAME"]
[Sat Sep 28 13:37:47.830603 2024] [:error] [pid 28299:tid 139979166484224] [client 63.135.161.68:17965] [client 63.135.161.68] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.prod"] [unique_id "ZvgGqwwO0uyWZYJY_mElIQAAANc"]
[Sat Sep 28 13:37:49.309494 2024] [:error] [pid 28299:tid 139979158091520] [client 63.135.161.51:11843] [client 63.135.161.51] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.prod"] [unique_id "ZvgGrQwO0uyWZYJY_mElIgAAANg"]
[Sat Sep 28 13:37:52.545198 2024] [:error] [pid 2649:tid 139979283982080] [client 63.135.161.64:61173] [client 63.135.161.64] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.production"] [unique_id "ZvgGsERy2Mg4MSKRWl3dzgAAAEk"]
[Sat Sep 28 13:37:54.775188 2024] [:error] [pid 2692:tid 139979292374784] [client 104.234.53.216:26427] [client 104.234.53.216] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.production"] [unique_id "ZvgGsgMkufG35BPiyBo7OQAAAIg"]
[Sat Sep 28 13:37:56.048126 2024] [:error] [pid 2648:tid 139979351123712] [client 63.135.161.74:49863] [client 63.135.161.74] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/redmine/.env"] [unique_id "ZvgGtPxygEbzRvIF3qH4WwAAAAE"]
[Sat Sep 28 13:37:57.926735 2024] [:error] [pid 2648:tid 139979342731008] [client 63.135.161.48:55019] [client 63.135.161.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/redmine/.env"] [unique_id "ZvgGtfxygEbzRvIF3qH4XQAAAAI"]
[Sat Sep 28 13:37:59.476947 2024] [:error] [pid 2648:tid 139979166484224] [client 63.135.161.73:32681] [client 63.135.161.73] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/__tests__/test-become/.env"] [unique_id "ZvgGt_xygEbzRvIF3qH4XgAAABc"]
[Sat Sep 28 13:38:01.316516 2024] [:error] [pid 2648:tid 139979317552896] [client 63.135.161.51:20303] [client 63.135.161.51] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/__tests__/test-become/.env"] [unique_id "ZvgGufxygEbzRvIF3qH4XwAAAAU"]
[Sat Sep 28 13:38:38.044189 2024] [:error] [pid 2692:tid 139979342731008] [client 63.135.161.74:28953] [client 63.135.161.74] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/config/parameters.yml" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/app_dev.php/_profiler/open"] [unique_id "ZvgG3gMkufG35BPiyBo7TwAAAII"]
[Sat Sep 28 13:38:39.882871 2024] [:error] [pid 28299:tid 139979242018560] [client 63.135.161.69:2685] [client 63.135.161.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/config/parameters.yml" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/_profiler/open"] [unique_id "ZvgG3wwO0uyWZYJY_mElJwAAAM4"]
[Sat Sep 28 13:38:41.388424 2024] [:error] [pid 28299:tid 139979300767488] [client 104.234.53.222:34565] [client 104.234.53.222] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/config/parameters.yml" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/app/config/parameters.yml"] [unique_id "ZvgG4QwO0uyWZYJY_mElKQAAAMc"]
[Sat Sep 28 13:38:43.197904 2024] [:error] [pid 2692:tid 139979200055040] [client 63.135.161.49:3037] [client 63.135.161.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/config/parameters.yml" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/config/parameters.yml"] [unique_id "ZvgG4wMkufG35BPiyBo7UAAAAJM"]
[Sat Sep 28 14:15:46.531220 2024] [:error] [pid 2648:tid 139979200055040] [client 134.122.28.88:44494] [client 134.122.28.88] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "ZvgPkvxygEbzRvIF3qH5OQAAABM"]
[Sat Sep 28 14:15:50.621157 2024] [authz_core:error] [pid 2648:tid 139979317552896] [client 134.122.28.88:44554] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Sat Sep 28 14:15:52.916133 2024] [:error] [pid 2648:tid 139979325945600] [client 134.122.28.88:44586] [client 134.122.28.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZvgPmPxygEbzRvIF3qH5PgAAAAQ"]
[Sat Sep 28 14:15:53.072118 2024] [:error] [pid 2648:tid 139979258803968] [client 134.122.28.88:44588] [client 134.122.28.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZvgPmfxygEbzRvIF3qH5PwAAAAw"]
[Sat Sep 28 19:24:17.292516 2024] [:error] [pid 2692:tid 139979334338304] [client 64.227.32.66:57040] [client 64.227.32.66] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "ZvhX4QMkufG35BPiyBpCuAAAAIM"]
[Sat Sep 28 19:24:24.374372 2024] [authz_core:error] [pid 2648:tid 139979191662336] [client 64.227.32.66:57112] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Sat Sep 28 19:24:27.763761 2024] [:error] [pid 2692:tid 139979267196672] [client 64.227.32.66:43914] [client 64.227.32.66] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZvhX6wMkufG35BPiyBpCvwAAAIs"]
[Sat Sep 28 19:24:28.268050 2024] [:error] [pid 2692:tid 139979225233152] [client 64.227.32.66:43928] [client 64.227.32.66] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZvhX7AMkufG35BPiyBpCwAAAAJA"]
[Sun Sep 29 18:32:01.888087 2024] [:error] [pid 30063:tid 140304980084480] [client 97.74.88.7:15721] [client 97.74.88.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZvmdIejmfnfFP595IR0yoAAAAIs"]
[Mon Sep 30 10:58:03.279479 2024] [:error] [pid 23158:tid 140089568958208] [client 157.245.113.227:51252] [client 157.245.113.227] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "ZvqEO_32TYzhDBhn9QhxJQAAABY"]
[Mon Sep 30 10:58:07.702867 2024] [authz_core:error] [pid 23159:tid 140089636099840] [client 157.245.113.227:51306] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Mon Sep 30 10:58:09.758024 2024] [:error] [pid 23159:tid 140089644492544] [client 157.245.113.227:40298] [client 157.245.113.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZvqEQR1Ua77mr_bxev-XzgAAAE0"]
[Mon Sep 30 10:58:09.917836 2024] [:error] [pid 23159:tid 140089594136320] [client 157.245.113.227:40300] [client 157.245.113.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZvqEQR1Ua77mr_bxev-XzwAAAFM"]
[Mon Sep 30 19:08:06.174400 2024] [:error] [pid 23159:tid 140089711634176] [client 178.128.207.138:56684] [client 178.128.207.138] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Zvr3Fh1Ua77mr_bxev-kSAAAAEU"]
[Mon Sep 30 19:08:13.363586 2024] [authz_core:error] [pid 17156:tid 140089568958208] [client 178.128.207.138:33194] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Mon Sep 30 19:08:16.829675 2024] [:error] [pid 23187:tid 140089703241472] [client 178.128.207.138:33236] [client 178.128.207.138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Zvr3ID7u_IT6HggbY5OgMAAAAIY"]
[Mon Sep 30 19:08:17.294686 2024] [:error] [pid 23159:tid 140089728419584] [client 178.128.207.138:33240] [client 178.128.207.138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Zvr3IR1Ua77mr_bxev-kTgAAAEM"]
[Mon Sep 30 22:38:03.569362 2024] [:error] [pid 17156:tid 140089577350912] [client 97.74.88.7:12086] [client 97.74.88.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZvsoS_xTosv7nN3c6gzgoQAAANU"]
[Wed Oct 02 06:37:53.199046 2024] [:error] [pid 16388:tid 140555832985344] [client 146.70.99.235:18471] [client 146.70.99.235] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".com.sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/richinei.com.sql"] [unique_id "ZvzqQdDkc6Ri-lfw6LfcYQAAAJI"], referer: http://edu.richinei.com
[Wed Oct 02 07:55:08.980286 2024] [:error] [pid 17075:tid 140556057573120] [client 146.70.99.235:26833] [client 146.70.99.235] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".richinei.com.sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/edu.richinei.com.sql"] [unique_id "Zvz8XJRBGOtwarmbyUu37QAAAMA"], referer: http://edu.richinei.com
[Wed Oct 02 09:12:43.161700 2024] [:error] [pid 17075:tid 140555942090496] [client 146.70.99.235:12771] [client 146.70.99.235] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/edurichineicom.sql"] [unique_id "Zv0Oi5RBGOtwarmbyUu5cQAAAMU"], referer: http://edu.richinei.com
[Wed Oct 02 10:30:43.314071 2024] [:error] [pid 16380:tid 140555908519680] [client 146.70.99.235:50159] [client 146.70.99.235] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/edu-richinei-com.sql"] [unique_id "Zv0g0xWx8PAA8iwLbRv9OQAAAAk"], referer: http://edu.richinei.com
[Wed Oct 02 11:48:29.207757 2024] [:error] [pid 16381:tid 140555933697792] [client 146.70.99.235:14601] [client 146.70.99.235] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/edu.sql"] [unique_id "Zv0zDfC2I8GxKjeZ9TVfsQAAAEY"], referer: http://edu.richinei.com
[Wed Oct 02 14:25:32.094672 2024] [:error] [pid 17075:tid 140555849770752] [client 209.38.248.17:49498] [client 209.38.248.17] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Zv1X3JRBGOtwarmbyUvCUwAAANA"]
[Wed Oct 02 14:25:38.502756 2024] [authz_core:error] [pid 17075:tid 140555816199936] [client 209.38.248.17:53284] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Wed Oct 02 14:25:41.758526 2024] [:error] [pid 17075:tid 140555942090496] [client 209.38.248.17:53316] [client 209.38.248.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Zv1X5ZRBGOtwarmbyUvCWAAAAMU"]
[Wed Oct 02 14:25:42.217768 2024] [:error] [pid 17075:tid 140555841378048] [client 209.38.248.17:53318] [client 209.38.248.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Zv1X5pRBGOtwarmbyUvCWQAAANE"]
[Wed Oct 02 18:50:32.483674 2024] [:error] [pid 17075:tid 140555925305088] [client 64.226.78.121:47976] [client 64.226.78.121] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Zv2V-JRBGOtwarmbyUvJ-AAAAMc"]
[Wed Oct 02 18:50:37.546961 2024] [authz_core:error] [pid 16388:tid 140556040787712] [client 64.226.78.121:45598] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Wed Oct 02 18:50:40.131671 2024] [:error] [pid 16380:tid 140556040787712] [client 64.226.78.121:45642] [client 64.226.78.121] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Zv2WABWx8PAA8iwLbRsJ3wAAAAI"]
[Wed Oct 02 18:50:40.441722 2024] [:error] [pid 16380:tid 140555866556160] [client 64.226.78.121:45654] [client 64.226.78.121] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Zv2WABWx8PAA8iwLbRsJ4AAAAA4"]
[Thu Oct 03 11:19:35.433832 2024] [:error] [pid 9217:tid 140313326761728] [client 146.70.99.235:42925] [client 146.70.99.235] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/localhost.sql"] [unique_id "Zv59xxjfleHd8kjG3U5cmwAAAMk"], referer: http://edu.richinei.com
[Thu Oct 03 11:56:37.736604 2024] [:error] [pid 15609:tid 140313293190912] [client 146.70.99.235:38963] [client 146.70.99.235] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/db.sql"] [unique_id "Zv6GdSqO1DexVspXG_UsJwAAAA0"], referer: http://edu.richinei.com
[Thu Oct 03 12:35:54.710748 2024] [:error] [pid 9217:tid 140313293190912] [client 146.70.99.235:22637] [client 146.70.99.235] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/database.sql"] [unique_id "Zv6PqhjfleHd8kjG3U5gjAAAAM0"], referer: http://edu.richinei.com
[Thu Oct 03 13:13:14.557874 2024] [:error] [pid 15609:tid 140313251227392] [client 146.70.99.235:23521] [client 146.70.99.235] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/mysql.sql"] [unique_id "Zv6YaiqO1DexVspXG_UvjgAAABI"], referer: http://edu.richinei.com
[Thu Oct 03 13:51:38.338499 2024] [:error] [pid 9217:tid 140313251227392] [client 146.70.99.235:34235] [client 146.70.99.235] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/dump.sql"] [unique_id "Zv6hahjfleHd8kjG3U5joQAAANI"], referer: http://edu.richinei.com
[Thu Oct 03 14:29:20.615186 2024] [:error] [pid 9217:tid 140313268012800] [client 146.70.99.235:30447] [client 146.70.99.235] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/backup.sql"] [unique_id "Zv6qQBjfleHd8kjG3U5mHAAAANA"], referer: http://edu.richinei.com
[Thu Oct 03 15:08:17.339591 2024] [:error] [pid 15619:tid 140313457633024] [client 146.70.99.235:21649] [client 146.70.99.235] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/site.sql"] [unique_id "Zv6zYalIQHTmocG_aJobygAAAEI"], referer: http://edu.richinei.com
[Thu Oct 03 17:18:21.316479 2024] [:error] [pid 9217:tid 140313351939840] [client 146.70.99.235:48801] [client 146.70.99.235] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/web.sql"] [unique_id "Zv7R3RjfleHd8kjG3U5sBgAAAMY"], referer: http://edu.richinei.com
[Thu Oct 03 19:01:02.732284 2024] [:error] [pid 9217:tid 140313449240320] [client 146.70.99.235:13377] [client 146.70.99.235] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/source.sql"] [unique_id "Zv7p7hjfleHd8kjG3U5u4AAAAMM"], referer: http://edu.richinei.com
[Thu Oct 03 19:40:37.302485 2024] [:error] [pid 15609:tid 140313449240320] [client 146.70.99.235:43895] [client 146.70.99.235] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/sql.sql"] [unique_id "Zv7zNSqO1DexVspXG_U5CQAAAAM"], referer: http://edu.richinei.com
[Fri Oct 04 05:21:53.320334 2024] [:error] [pid 13744:tid 139822071056128] [client 138.68.144.227:46054] [client 138.68.144.227] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Zv97cZ-VVft1peaz_oHNUQAAAAM"]
[Fri Oct 04 05:21:58.347346 2024] [authz_core:error] [pid 13745:tid 139821913696000] [client 138.68.144.227:46134] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Fri Oct 04 05:22:00.892710 2024] [:error] [pid 13745:tid 139821863339776] [client 138.68.144.227:42700] [client 138.68.144.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Zv97eD9BNiNQV3Hdi-NIlgAAAFM"]
[Fri Oct 04 05:22:01.190005 2024] [:error] [pid 13745:tid 139821846554368] [client 138.68.144.227:42702] [client 138.68.144.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Zv97eT9BNiNQV3Hdi-NIlwAAAFU"]
[Fri Oct 04 19:01:53.830434 2024] [:error] [pid 14267:tid 139821821376256] [client 206.189.19.19:38416] [client 206.189.19.19] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "ZwA7oTWc0G7pBYrlqXXe6gAAANg"]
[Fri Oct 04 19:01:59.944169 2024] [authz_core:error] [pid 14267:tid 139821905303296] [client 206.189.19.19:34238] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Fri Oct 04 19:02:03.372736 2024] [:error] [pid 13744:tid 139821863339776] [client 206.189.19.19:34260] [client 206.189.19.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZwA7q5-VVft1peaz_oHcGgAAABM"]
[Fri Oct 04 19:02:03.828477 2024] [:error] [pid 13800:tid 139821972444928] [client 206.189.19.19:34272] [client 206.189.19.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZwA7qxTaKVD1VysnyVxBPgAAAIY"]
[Sun Oct 06 01:55:58.311119 2024] [:error] [pid 10197:tid 140495065925376] [client 209.38.208.202:60498] [client 209.38.208.202] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "ZwHuLooB2pSJovgPwj-p9AAAAI8"]
[Sun Oct 06 01:56:04.653952 2024] [authz_core:error] [pid 10197:tid 140495082710784] [client 209.38.208.202:60548] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Sun Oct 06 01:56:07.990915 2024] [:error] [pid 10173:tid 140495141459712] [client 209.38.208.202:47376] [client 209.38.208.202] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZwHuN5eA8qOohtktuI0D6QAAAEY"]
[Sun Oct 06 01:56:08.451060 2024] [:error] [pid 10197:tid 140495032354560] [client 209.38.208.202:47380] [client 209.38.208.202] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZwHuOIoB2pSJovgPwj-p9gAAAJM"]
[Sun Oct 06 04:08:51.356307 2024] [:error] [pid 1182:tid 140259471881984] [client 209.38.208.202:33608] [client 209.38.208.202] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "ZwINU-SPlkqKGHnRI_r4KgAAAM4"]
[Sun Oct 06 04:08:56.317651 2024] [authz_core:error] [pid 1182:tid 140259657430784] [client 209.38.208.202:33676] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Sun Oct 06 04:08:58.995421 2024] [:error] [pid 1182:tid 140259615467264] [client 209.38.208.202:48146] [client 209.38.208.202] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZwINWuSPlkqKGHnRI_r4MwAAAMU"]
[Sun Oct 06 04:08:59.301302 2024] [:error] [pid 1182:tid 140259530630912] [client 209.38.208.202:48156] [client 209.38.208.202] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZwINW-SPlkqKGHnRI_r4NAAAAMc"]
[Sun Oct 06 19:37:23.379763 2024] [:error] [pid 7778:tid 140259438311168] [client 97.74.88.7:36265] [client 97.74.88.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/HEAD"] [unique_id "ZwLm87bP06JKUbrNt-7p2QAAABI"]
[Tue Oct 08 00:27:32.423845 2024] [:error] [pid 2714:tid 139764342716160] [client 167.71.175.236:55320] [client 167.71.175.236] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "ZwR8dImJqZFzRuRmm83RNQAAAMM"]
[Tue Oct 08 00:27:36.498972 2024] [authz_core:error] [pid 2714:tid 139764250396416] [client 167.71.175.236:55358] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Tue Oct 08 00:27:38.479708 2024] [:error] [pid 2136:tid 139764200040192] [client 167.71.175.236:55400] [client 167.71.175.236] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZwR8ekI4ebO2Scs_n5YnggAAAJQ"]
[Tue Oct 08 00:27:38.627496 2024] [:error] [pid 2136:tid 139764275574528] [client 167.71.175.236:55412] [client 167.71.175.236] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZwR8ekI4ebO2Scs_n5YngwAAAIs"]
[Tue Oct 08 05:24:47.681588 2024] [:error] [pid 1695:tid 140116748539648] [client 64.226.78.121:52478] [client 64.226.78.121] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "ZwTCH16ZeJ_Il1b4w5irsgAAAAI"]
[Tue Oct 08 05:24:59.701577 2024] [authz_core:error] [pid 1695:tid 140116571932416] [client 64.226.78.121:54476] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Tue Oct 08 05:25:10.707040 2024] [:error] [pid 1695:tid 140116529968896] [client 64.226.78.121:51842] [client 64.226.78.121] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZwTCNl6ZeJ_Il1b4w5iruQAAABQ"]
[Wed Oct 09 13:26:05.069193 2024] [:error] [pid 29970:tid 140632947332864] [client 97.74.88.7:63675] [client 97.74.88.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/HEAD"] [unique_id "ZwaEbfyODjGB68_XeTyvZQAAAMM"]
[Thu Oct 10 04:01:00.243438 2024] [:error] [pid 25942:tid 140431639688960] [client 164.90.208.56:35622] [client 164.90.208.56] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "ZwdRfKl9gB-Hqd3j_ANvkAAAAEQ"]
[Thu Oct 10 04:01:07.153351 2024] [authz_core:error] [pid 26308:tid 140431555761920] [client 164.90.208.56:52660] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Thu Oct 10 04:01:10.495272 2024] [:error] [pid 26308:tid 140431522191104] [client 164.90.208.56:52692] [client 164.90.208.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZwdRhizYBYhL4DS7w5e-NAAAANI"]
[Thu Oct 10 04:01:10.955849 2024] [:error] [pid 25941:tid 140431538976512] [client 164.90.208.56:52698] [client 164.90.208.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZwdRhoXUVCboAFGrsHfkOwAAABA"]
[Thu Oct 10 06:41:21.709066 2024] [:error] [pid 25942:tid 140431639688960] [client 178.128.207.138:40902] [client 178.128.207.138] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Zwd3Eal9gB-Hqd3j_ANvowAAAEQ"]
[Thu Oct 10 06:41:27.901771 2024] [authz_core:error] [pid 26308:tid 140431497012992] [client 178.128.207.138:40960] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Thu Oct 10 06:41:30.730997 2024] [:error] [pid 26308:tid 140431471834880] [client 178.128.207.138:40994] [client 178.128.207.138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Zwd3GizYBYhL4DS7w5e-VgAAANg"]
[Thu Oct 10 06:41:31.060225 2024] [:error] [pid 26308:tid 140431673259776] [client 178.128.207.138:41006] [client 178.128.207.138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Zwd3GyzYBYhL4DS7w5e-VwAAAMA"]
[Thu Oct 10 14:09:22.998086 2024] [:error] [pid 26308:tid 140431580940032] [client 188.166.108.93:58736] [client 188.166.108.93] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "ZwfgEizYBYhL4DS7w5fJdgAAAMs"]
[Thu Oct 10 14:09:29.036345 2024] [authz_core:error] [pid 25941:tid 140431497012992] [client 188.166.108.93:58796] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Thu Oct 10 14:09:32.448818 2024] [:error] [pid 25970:tid 140431513798400] [client 188.166.108.93:46748] [client 188.166.108.93] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZwfgHA3m69pGJXHDJ3YnQwAAAJM"]
[Thu Oct 10 14:09:32.906468 2024] [:error] [pid 25970:tid 140431648081664] [client 188.166.108.93:46758] [client 188.166.108.93] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZwfgHA3m69pGJXHDJ3YnRAAAAIM"]
[Thu Oct 10 18:12:51.750159 2024] [:error] [pid 25942:tid 140431589332736] [client 195.178.110.32:41316] [client 195.178.110.32] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZwgZI6l9gB-Hqd3j_AN-sQAAAEo"]
[Thu Oct 10 22:32:37.235863 2024] [:error] [pid 26308:tid 140431522191104] [client 18.219.53.7:50510] [client 18.219.53.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZwhWBSzYBYhL4DS7w5fTMgAAANI"]
[Fri Oct 11 20:49:15.684750 2024] [:error] [pid 3120:tid 140145051301632] [client 45.148.10.206:36538] [client 45.148.10.206] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZwmPSxQXV-KSuaL-nnYPbQAAAMc"]
[Sat Oct 12 05:58:31.274971 2024] [:error] [pid 28348:tid 139713658705664] [client 178.128.207.138:42928] [client 178.128.207.138] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "ZwoQBwUCUQ9rIf212zTZhwAAAEs"]
[Sat Oct 12 05:58:36.263025 2024] [authz_core:error] [pid 28376:tid 139713725847296] [client 178.128.207.138:43008] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Sat Oct 12 05:58:38.855720 2024] [:error] [pid 28469:tid 139713683883776] [client 178.128.207.138:43052] [client 178.128.207.138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZwoQDsdIrvdwVRmcOIF3pQAAAMg"]
[Sat Oct 12 05:58:39.205668 2024] [:error] [pid 28347:tid 139713725847296] [client 178.128.207.138:43056] [client 178.128.207.138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZwoQDyfwlydLYQTC9Aq3KgAAAAM"]
[Sat Oct 12 09:55:59.192362 2024] [:error] [pid 28376:tid 139713675491072] [client 35.88.3.99:47360] [client 35.88.3.99] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||edu.richinei.com|F|4"] [data "Microsoft URL"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "edu.richinei.com"] [uri "/edu.richinei.com/public/vendor/optionbuilder/js/jquery.min.js"] [unique_id "ZwpHr5ymxM7Ol_AR2iOarAAAAIk"]
[Sat Oct 12 15:29:03.801470 2024] [:error] [pid 28469:tid 139713667098368] [client 159.223.132.86:59610] [client 159.223.132.86] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "ZwqVv8dIrvdwVRmcOIGGTQAAAMo"]
[Sat Oct 12 15:29:08.210566 2024] [authz_core:error] [pid 28469:tid 139713608349440] [client 159.223.132.86:59652] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Sat Oct 12 15:29:10.462558 2024] [:error] [pid 28347:tid 139713819547392] [client 159.223.132.86:41620] [client 159.223.132.86] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZwqVxifwlydLYQTC9ArCtwAAAAA"]
[Sat Oct 12 15:29:10.702198 2024] [:error] [pid 28348:tid 139713583171328] [client 159.223.132.86:41632] [client 159.223.132.86] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZwqVxgUCUQ9rIf212zTl1AAAAFQ"]
[Sun Oct 13 22:39:00.230356 2024] [:error] [pid 1516:tid 139932349740800] [client 45.148.10.172:37038] [client 45.148.10.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZwxMBEDXW4gQ3lIK6xCiwgAAAEs"]
[Mon Oct 14 08:28:15.692946 2024] [:error] [pid 13249:tid 140115909236480] [client 64.226.78.121:44912] [client 64.226.78.121] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "ZwzWHzS9kR0BZa9wr4LEnQAAAAw"]
[Mon Oct 14 08:28:21.452089 2024] [authz_core:error] [pid 8211:tid 140116070000384] [client 64.226.78.121:46220] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Mon Oct 14 08:28:23.954466 2024] [:error] [pid 13249:tid 140115867272960] [client 64.226.78.121:46246] [client 64.226.78.121] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZwzWJzS9kR0BZa9wr4LEoQAAABE"]
[Mon Oct 14 08:28:24.267306 2024] [:error] [pid 13249:tid 140115951200000] [client 64.226.78.121:46258] [client 64.226.78.121] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZwzWKDS9kR0BZa9wr4LEogAAAAc"]
[Mon Oct 14 15:13:22.674533 2024] [:error] [pid 13249:tid 140115976378112] [client 207.154.197.113:54260] [client 207.154.197.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Zw01EjS9kR0BZa9wr4LMZAAAAAQ"]
[Mon Oct 14 15:13:28.646339 2024] [authz_core:error] [pid 13280:tid 140115926021888] [client 207.154.197.113:49814] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Mon Oct 14 15:13:31.821896 2024] [:error] [pid 13280:tid 140116070000384] [client 207.154.197.113:49840] [client 207.154.197.113] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Zw01G8jdIcFn3nnsIUhj4AAAAIE"]
[Mon Oct 14 15:13:32.298905 2024] [:error] [pid 13280:tid 140115825309440] [client 207.154.197.113:49852] [client 207.154.197.113] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Zw01HMjdIcFn3nnsIUhj4QAAAJY"]
[Mon Oct 14 18:07:17.289332 2024] [:error] [pid 13280:tid 140115909236480] [client 45.148.10.172:53690] [client 45.148.10.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Zw1d1cjdIcFn3nnsIUhoggAAAIw"]
[Mon Oct 14 19:49:13.081672 2024] [:error] [pid 13280:tid 140115867272960] [client 45.148.10.172:45450] [client 45.148.10.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Zw11ucjdIcFn3nnsIUhpXQAAAJE"]
[Tue Oct 15 12:55:09.083294 2024] [:error] [pid 22932:tid 140352342124288] [client 45.148.10.206:34476] [client 45.148.10.206] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Zw5mLRsyRu_hIn-VVUACIgAAABU"]
[Wed Oct 16 12:21:11.391154 2024] [:error] [pid 20301:tid 140364480501504] [client 207.154.197.113:59140] [client 207.154.197.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Zw-vt_QLNQP92ELDs-XwDgAAAAc"]
[Wed Oct 16 12:21:16.480724 2024] [authz_core:error] [pid 20670:tid 140364606277376] [client 207.154.197.113:59212] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Wed Oct 16 12:21:18.982558 2024] [:error] [pid 20309:tid 140364421752576] [client 207.154.197.113:36926] [client 207.154.197.113] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Zw-vvufKRA60f6wMnjEYrgAAAI4"]
[Wed Oct 16 12:21:19.349851 2024] [:error] [pid 20670:tid 140364480501504] [client 207.154.197.113:36938] [client 207.154.197.113] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Zw-vv7iEMEy7p6WFFXKwGwAAAMc"]
[Wed Oct 16 19:10:37.792728 2024] [:error] [pid 20670:tid 140364354610944] [client 207.154.197.113:36908] [client 207.154.197.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "ZxAPrbiEMEy7p6WFFXK8VQAAANY"]
[Wed Oct 16 19:10:44.145468 2024] [authz_core:error] [pid 20301:tid 140364463716096] [client 207.154.197.113:36970] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Wed Oct 16 19:10:47.266782 2024] [:error] [pid 20302:tid 140364388181760] [client 207.154.197.113:34862] [client 207.154.197.113] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZxAPtz4UE0EHM7mMY33WMgAAAFI"]
[Wed Oct 16 19:10:47.727324 2024] [:error] [pid 20309:tid 140364597884672] [client 207.154.197.113:34872] [client 207.154.197.113] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZxAPt-fKRA60f6wMnjEiKQAAAII"]
[Wed Oct 16 20:15:35.827590 2024] [:error] [pid 20309:tid 140364396574464] [client 44.243.91.115:33930] [client 44.243.91.115] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||edu.richinei.com|F|4"] [data "EmailWolf"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "edu.richinei.com"] [uri "/edu.richinei.com/public/theme/edulia/js/jquery.dataTables.min.js"] [unique_id "ZxAe5-fKRA60f6wMnjEi0AAAAJE"]
[Wed Oct 16 20:16:14.576984 2024] [:error] [pid 20670:tid 140364430145280] [client 44.243.91.115:57222] [client 44.243.91.115] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||edu.richinei.com|F|4"] [data "EmailWolf"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "edu.richinei.com"] [uri "/edu.richinei.com/public/whatsapp-support/scripts.js"] [unique_id "ZxAfDriEMEy7p6WFFXK9cgAAAM0"]
[Thu Oct 17 12:47:24.115457 2024] [:error] [pid 27190:tid 140106832721664] [client 192.166.246.131:9568] [client 192.166.246.131] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZxEHXLQEIgVvEa9puUJ0ugAAABc"]
[Thu Oct 17 12:47:24.749933 2024] [:error] [pid 27191:tid 140106925041408] [client 5.253.115.71:58080] [client 5.253.115.71] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZxEHXBL_vc03WCnopweK0wAAAEw"]
[Fri Oct 18 14:34:02.533368 2024] [:error] [pid 31705:tid 140403789477632] [client 46.101.111.185:52402] [client 46.101.111.185] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "ZxJx2oPGCF5VhWzsVB_04QAAAEw"]
[Fri Oct 18 14:34:07.530673 2024] [authz_core:error] [pid 31704:tid 140403772692224] [client 46.101.111.185:52462] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Fri Oct 18 14:34:10.552695 2024] [:error] [pid 31705:tid 140403747514112] [client 46.101.111.185:52492] [client 46.101.111.185] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZxJx4oPGCF5VhWzsVB_05QAAAFE"]
[Fri Oct 18 14:34:11.111962 2024] [:error] [pid 31709:tid 140403881797376] [client 46.101.111.185:52508] [client 46.101.111.185] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZxJx45oYXkjK24JIVanbMQAAAIE"]
[Fri Oct 18 15:31:38.466149 2024] [:error] [pid 32285:tid 140403848226560] [client 45.148.10.206:45580] [client 45.148.10.206] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZxJ_WkUlcqB2cbkClH4xXAAAAMU"]
[Fri Oct 18 17:46:05.878491 2024] [:error] [pid 32285:tid 140403705550592] [client 64.176.68.91:41926] [client 64.176.68.91] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZxKe3UUlcqB2cbkClH402wAAANY"]
[Fri Oct 18 22:11:18.912514 2024] [:error] [pid 32285:tid 140403764299520] [client 206.189.19.19:55120] [client 206.189.19.19] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "ZxLdBkUlcqB2cbkClH43GQAAAM8"]
[Fri Oct 18 22:11:22.940907 2024] [authz_core:error] [pid 32285:tid 140403848226560] [client 206.189.19.19:55170] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Fri Oct 18 22:11:24.949394 2024] [:error] [pid 31704:tid 140403722336000] [client 206.189.19.19:55204] [client 206.189.19.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZxLdDCH4qqcjA0Am7tEd9QAAABQ"]
[Fri Oct 18 22:11:25.288192 2024] [:error] [pid 31705:tid 140403781084928] [client 206.189.19.19:55210] [client 206.189.19.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZxLdDYPGCF5VhWzsVB_63wAAAE0"]
[Sat Oct 19 03:01:11.021429 2024] [:error] [pid 31705:tid 140403722336000] [client 103.102.230.7:59942] [client 103.102.230.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZxMg94PGCF5VhWzsVB_7EwAAAFQ"]
[Sun Oct 20 13:40:33.704680 2024] [:error] [pid 11006:tid 139738849642240] [client 45.148.10.172:38034] [client 45.148.10.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZxUIUYigmOyigd8zDmHXnAAAAJc"]
[Sun Oct 20 17:16:10.097395 2024] [:error] [pid 11488:tid 139738916783872] [client 167.172.232.142:47690] [client 167.172.232.142] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "ZxU62g8yO6QSi2hYJuOZ9AAAAM8"]
[Sun Oct 20 17:16:15.551709 2024] [authz_core:error] [pid 10978:tid 139738958747392] [client 167.172.232.142:48296] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Sun Oct 20 17:16:19.623164 2024] [:error] [pid 10978:tid 139739042674432] [client 167.172.232.142:48334] [client 167.172.232.142] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZxU640Gi57dwz7E7jtMX5QAAAEA"]
[Sun Oct 20 17:16:19.947075 2024] [:error] [pid 10977:tid 139738925176576] [client 167.172.232.142:48340] [client 167.172.232.142] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZxU64_4NATi0RBVre-UdOQAAAA4"]
[Sun Oct 20 18:21:18.431325 2024] [:error] [pid 11488:tid 139738841249536] [client 64.23.218.208:58282] [client 64.23.218.208] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "ZxVKHg8yO6QSi2hYJuObPQAAANg"]
[Sun Oct 20 18:21:20.887054 2024] [authz_core:error] [pid 10978:tid 139738950354688] [client 64.23.218.208:40052] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Sun Oct 20 18:21:22.073029 2024] [:error] [pid 11006:tid 139738983925504] [client 64.23.218.208:40096] [client 64.23.218.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZxVKIoigmOyigd8zDmHb3AAAAIc"]
[Sun Oct 20 18:21:22.127210 2024] [:error] [pid 11006:tid 139738899998464] [client 64.23.218.208:40098] [client 64.23.218.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZxVKIoigmOyigd8zDmHb3QAAAJE"]
[Sun Oct 20 21:58:06.738377 2024] [:error] [pid 11488:tid 139738992318208] [client 195.178.110.32:40174] [client 195.178.110.32] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZxV87g8yO6QSi2hYJuOduAAAAMY"]
[Mon Oct 21 15:38:59.702809 2024] [:error] [pid 32098:tid 140517648074496] [client 45.148.10.172:46758] [client 45.148.10.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZxZ1k1oW5S8BREVP9B4cRQAAAQw"]
[Tue Oct 22 18:43:07.847284 2024] [:error] [pid 11428:tid 140365387831040] [client 46.101.111.185:39016] [client 46.101.111.185] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "ZxfyO4lmTCs17zQWxsQLrwAAAMQ"]
[Tue Oct 22 18:43:12.795732 2024] [authz_core:error] [pid 11078:tid 140365176702720] [client 46.101.111.185:45606] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Tue Oct 22 18:43:15.534076 2024] [:error] [pid 11428:tid 140365235451648] [client 46.101.111.185:45632] [client 46.101.111.185] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZxfyQ4lmTCs17zQWxsQLtwAAAM4"]
[Tue Oct 22 18:43:15.994968 2024] [:error] [pid 11086:tid 140365168310016] [client 46.101.111.185:45636] [client 46.101.111.185] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZxfyQ5Ss2YZ59eOoH-uuDwAAAJY"]
[Tue Oct 22 19:45:14.264789 2024] [:error] [pid 11428:tid 140365243844352] [client 179.43.189.138:41620] [client 179.43.189.138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZxgAyolmTCs17zQWxsQMlAAAAM0"]
[Tue Oct 22 21:10:19.306706 2024] [:error] [pid 11086:tid 140365413009152] [client 159.89.17.243:49178] [client 159.89.17.243] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "ZxgUu5Ss2YZ59eOoH-uuzQAAAIE"]
[Tue Oct 22 21:10:23.173374 2024] [authz_core:error] [pid 11428:tid 140365218666240] [client 159.89.17.243:50244] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Tue Oct 22 21:10:25.184696 2024] [:error] [pid 11428:tid 140365176702720] [client 159.89.17.243:50282] [client 159.89.17.243] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZxgUwYlmTCs17zQWxsQM4wAAANU"]
[Tue Oct 22 21:10:25.499774 2024] [:error] [pid 11428:tid 140365151524608] [client 159.89.17.243:50286] [client 159.89.17.243] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZxgUwYlmTCs17zQWxsQM5AAAANg"]
[Thu Oct 24 12:24:21.646476 2024] [:error] [pid 12121:tid 140560681641728] [client 134.122.28.88:49924] [client 134.122.28.88] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Zxo8dbHV0dz5Dnrqvpzw5wAAAEo"]
[Thu Oct 24 12:24:25.145645 2024] [authz_core:error] [pid 12477:tid 140560698427136] [client 134.122.28.88:49984] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Thu Oct 24 12:24:26.920099 2024] [:error] [pid 12114:tid 140560664856320] [client 134.122.28.88:37024] [client 134.122.28.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Zxo8emm73ieDWCUXGjIWgwAAAAw"]
[Thu Oct 24 12:24:27.146420 2024] [:error] [pid 12150:tid 140560580929280] [client 134.122.28.88:37026] [client 134.122.28.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Zxo8e9ryiiyoW5ZuhSVm9AAAAJY"]
[Mon Oct 28 04:53:54.706629 2024] [:error] [pid 24853:tid 140352006645504] [client 142.93.143.8:34124] [client 142.93.143.8] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Zx8Y4kUeAG6tRwECmDwGKQAAAIY"]
[Mon Oct 28 04:53:58.704559 2024] [authz_core:error] [pid 24853:tid 140351956289280] [client 142.93.143.8:49866] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Mon Oct 28 04:54:00.704878 2024] [:error] [pid 24850:tid 140352115697408] [client 142.93.143.8:49914] [client 142.93.143.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Zx8Y6NYl_rwNMoHe65-VjgAAAAI"]
[Mon Oct 28 04:54:01.014598 2024] [:error] [pid 24853:tid 140351939503872] [client 142.93.143.8:49920] [client 142.93.143.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Zx8Y6UUeAG6tRwECmDwGLgAAAI4"]
[Wed Oct 30 18:00:40.132726 2024] [:error] [pid 31565:tid 140610048620288] [client 139.59.136.184:35584] [client 139.59.136.184] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "ZyJ0SDxsArECqM5LkDkHLQAAAII"]
[Wed Oct 30 18:00:45.440954 2024] [authz_core:error] [pid 31565:tid 140609914337024] [client 139.59.136.184:35632] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Wed Oct 30 18:00:48.230737 2024] [:error] [pid 31983:tid 140609905944320] [client 139.59.136.184:35652] [client 139.59.136.184] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZyJ0UMuYGh5e2iCEvt0AXQAAANM"]
[Wed Oct 30 18:00:48.788906 2024] [:error] [pid 31536:tid 140610015049472] [client 139.59.136.184:36420] [client 139.59.136.184] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZyJ0UAJLeevX_TZQ_YPTMgAAAAY"]
[Fri Nov 01 17:43:57.164896 2024] [:error] [pid 32191:tid 140717707867904] [client 142.93.129.190:56226] [client 142.93.129.190] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "ZyUTXcuE0oIcbWR7f2h8mgAAAMU"]
[Fri Nov 01 17:44:03.126092 2024] [authz_core:error] [pid 6577:tid 140717615736576] [client 142.93.129.190:56282] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Fri Nov 01 17:44:05.828565 2024] [:error] [pid 6548:tid 140717615736576] [client 142.93.129.190:45472] [client 142.93.129.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZyUTZdq3u0ZsD2j0lrX-jwAAAAc"]
[Fri Nov 01 17:44:06.279072 2024] [:error] [pid 32191:tid 140717615736576] [client 142.93.129.190:45474] [client 142.93.129.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZyUTZsuE0oIcbWR7f2h8nwAAAMc"]
[Sat Nov 02 08:49:47.176381 2024] [:error] [pid 10668:tid 140367424866048] [client 178.128.207.138:59820] [client 178.128.207.138] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "ZyXnq_Nv7BztPUVBDZk8lwAAAE0"]
[Sat Nov 02 08:49:51.295602 2024] [authz_core:error] [pid 10668:tid 140367408080640] [client 178.128.207.138:39266] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Sat Nov 02 08:49:53.475165 2024] [:error] [pid 19502:tid 140367349331712] [client 178.128.207.138:39294] [client 178.128.207.138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZyXnseg1v1Q7L-K7B3HVmwAAANY"]
[Sat Nov 02 08:49:53.785713 2024] [:error] [pid 10667:tid 140367508793088] [client 178.128.207.138:39296] [client 178.128.207.138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZyXnsVghzpNerEFjbIB56wAAAAM"]
[Sun Nov 03 00:55:45.757570 2024] [:error] [pid 10667:tid 140367593096960] [client 157.245.113.227:43356] [client 157.245.113.227] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "ZybKEVghzpNerEFjbICMNQAAAAE"]
[Sun Nov 03 00:55:50.289308 2024] [authz_core:error] [pid 19502:tid 140367349331712] [client 157.245.113.227:39242] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Sun Nov 03 00:55:52.049704 2024] [:error] [pid 19502:tid 140367601489664] [client 157.245.113.227:39296] [client 157.245.113.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZybKGOg1v1Q7L-K7B3HxlQAAAMA"]
[Sun Nov 03 00:55:52.293515 2024] [:error] [pid 19502:tid 140367340939008] [client 157.245.113.227:39308] [client 157.245.113.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZybKGOg1v1Q7L-K7B3HxlgAAANc"]
[Mon Nov 04 09:20:21.976097 2024] [:error] [pid 16708:tid 139896219928320] [client 64.226.65.160:39470] [client 64.226.65.160] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "ZyiR1WTVQdVuVVncOGkQrAAAAJc"]
[Mon Nov 04 09:20:26.156713 2024] [authz_core:error] [pid 16653:tid 139896387782400] [client 64.226.65.160:39548] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Mon Nov 04 09:20:28.313481 2024] [:error] [pid 16653:tid 139896219928320] [client 64.226.65.160:47654] [client 64.226.65.160] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZyiR3HfLsD3Y9Bz4nMJJvgAAAFc"]
[Mon Nov 04 09:20:28.620365 2024] [:error] [pid 16708:tid 139896362604288] [client 64.226.65.160:47658] [client 64.226.65.160] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZyiR3GTVQdVuVVncOGkQrwAAAIY"]
[Mon Nov 04 19:53:10.370153 2024] [authz_core:error] [pid 26697:tid 139896320640768] [client 209.97.180.8:53228] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Mon Nov 04 19:53:12.995397 2024] [:error] [pid 26697:tid 139896404567808] [client 209.97.180.8:53256] [client 209.97.180.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZykmKPN2JpUeS1dLMNO4BgAAAQE"]
[Mon Nov 04 19:53:13.447143 2024] [:error] [pid 16652:tid 139896404567808] [client 209.97.180.8:42538] [client 209.97.180.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZykmKWTivshWxEdPw4Q6KQAAAAE"]
[Wed Nov 06 04:45:37.499796 2024] [:error] [pid 26274:tid 140169210492672] [client 167.99.210.137:37636] [client 167.99.210.137] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Zyr0cWvfSg9H47fYS_PhRgAAAIM"]
[Wed Nov 06 04:45:42.659884 2024] [authz_core:error] [pid 26221:tid 140169109780224] [client 167.99.210.137:50786] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Wed Nov 06 04:45:45.312563 2024] [:error] [pid 26221:tid 140169067816704] [client 167.99.210.137:50822] [client 167.99.210.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Zyr0eTly0AyFLmIKnt_9dwAAABQ"]
[Wed Nov 06 04:45:45.762717 2024] [:error] [pid 26752:tid 140169042638592] [client 167.99.210.137:50832] [client 167.99.210.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Zyr0eQ8MQAjn1vR2Bb-awAAAANc"]
[Wed Nov 06 12:04:34.756410 2024] [:error] [pid 26274:tid 140169101387520] [client 139.59.143.102:60944] [client 139.59.143.102] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "ZytbUmvfSg9H47fYS_PnUgAAAJA"]
[Wed Nov 06 12:04:38.627039 2024] [authz_core:error] [pid 26222:tid 140169118172928] [client 139.59.143.102:32770] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Wed Nov 06 12:04:40.688191 2024] [:error] [pid 26274:tid 140169143351040] [client 139.59.143.102:32804] [client 139.59.143.102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZytbWGvfSg9H47fYS_PnUwAAAIs"]
[Wed Nov 06 12:04:40.994513 2024] [:error] [pid 26752:tid 140169160136448] [client 139.59.143.102:38990] [client 139.59.143.102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZytbWA8MQAjn1vR2Bb-iCAAAAMk"]
[Fri Nov 08 14:27:34.215644 2024] [:error] [pid 8602:tid 140347426424576] [client 206.189.19.19:52388] [client 206.189.19.19] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Zy4f1sRFihZyvB7aO5TTSAAAAMs"]
[Fri Nov 08 14:27:38.527465 2024] [authz_core:error] [pid 8499:tid 140347367675648] [client 206.189.19.19:51980] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Fri Nov 08 14:27:40.708943 2024] [:error] [pid 8499:tid 140347501958912] [client 206.189.19.19:52010] [client 206.189.19.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Zy4f3KQqeCd7dSRmghOCvAAAAII"]
[Fri Nov 08 14:27:41.019130 2024] [:error] [pid 8499:tid 140347376068352] [client 206.189.19.19:52016] [client 206.189.19.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Zy4f3aQqeCd7dSRmghOCvQAAAJE"]
[Sun Nov 10 12:43:37.643570 2024] [:error] [pid 29467:tid 140014281488128] [client 138.68.86.32:44028] [client 138.68.86.32] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "ZzCqeZsuwS4CXT2QStOIwAAAAAQ"]
[Sun Nov 10 12:43:41.738131 2024] [authz_core:error] [pid 29496:tid 140014071518976] [client 138.68.86.32:44114] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Sun Nov 10 12:43:43.830873 2024] [:error] [pid 22688:tid 140014054733568] [client 138.68.86.32:44144] [client 138.68.86.32] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZzCqf4clf5a98MFiQvJYAAAAANc"]
[Sun Nov 10 12:43:44.133891 2024] [:error] [pid 22688:tid 140014315058944] [client 138.68.86.32:44148] [client 138.68.86.32] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZzCqgIclf5a98MFiQvJYAQAAAMA"]
[Tue Nov 12 04:46:33.876100 2024] [:error] [pid 30240:tid 140513655113472] [client 165.22.34.189:40376] [client 165.22.34.189] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "ZzLdqU1CIzCyarMYuEgRKQAAAMY"]
[Tue Nov 12 04:46:37.687312 2024] [authz_core:error] [pid 28860:tid 140513504044800] [client 165.22.34.189:35924] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Tue Nov 12 04:46:39.416643 2024] [:error] [pid 28860:tid 140513680291584] [client 165.22.34.189:35966] [client 165.22.34.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZzLdr6sm3X8W8n2Vw961EwAAAEM"]
[Tue Nov 12 04:46:39.668241 2024] [:error] [pid 28859:tid 140513587971840] [client 165.22.34.189:35972] [client 165.22.34.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZzLdr0I7BZlUX0jfYXO7OwAAAA4"]
[Tue Nov 12 22:30:29.113984 2024] [:error] [pid 30240:tid 140513512437504] [client 164.90.228.79:40424] [client 164.90.228.79] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "ZzPXBU1CIzCyarMYuEgf_QAAANc"]
[Tue Nov 12 22:30:33.479537 2024] [authz_core:error] [pid 30240:tid 140513777624832] [client 164.90.228.79:40496] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Tue Nov 12 22:30:35.723917 2024] [:error] [pid 30240:tid 140513562793728] [client 164.90.228.79:40530] [client 164.90.228.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZzPXC01CIzCyarMYuEggBgAAANE"]
[Tue Nov 12 22:30:36.042290 2024] [:error] [pid 30240:tid 140513629935360] [client 164.90.228.79:40534] [client 164.90.228.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZzPXDE1CIzCyarMYuEggBwAAAMk"]
[Thu Nov 14 02:42:54.979335 2024] [:error] [pid 24778:tid 140455589095168] [client 146.190.63.248:36022] [client 146.190.63.248] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "ZzVjrmLYix_8LWOWFJMVTAAAAJY"]
[Thu Nov 14 02:42:57.639602 2024] [authz_core:error] [pid 24749:tid 140455639451392] [client 146.190.63.248:36096] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Thu Nov 14 02:42:58.841493 2024] [:error] [pid 25150:tid 140455639451392] [client 146.190.63.248:36118] [client 146.190.63.248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZzVjsqdPGrQR2YIdZ1K47AAAANA"]
[Thu Nov 14 02:42:58.894997 2024] [:error] [pid 24749:tid 140455689807616] [client 146.190.63.248:36128] [client 146.190.63.248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZzVjsr0hD-N-idYXGz0nSQAAAAo"]
[Sat Nov 16 18:18:57.971813 2024] [:error] [pid 1493:tid 140161149036288] [client 167.71.175.236:56546] [client 167.71.175.236] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "ZzjiEVaqERKoYm59AKjIEQAAAAY"]
[Sat Nov 16 18:19:01.657799 2024] [authz_core:error] [pid 1865:tid 140161014753024] [client 167.71.175.236:56614] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Sat Nov 16 18:19:03.508222 2024] [:error] [pid 1507:tid 140161265960704] [client 167.71.175.236:44716] [client 167.71.175.236] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZzjiF2QRpI0yfZihBM065gAAAIE"]
[Sat Nov 16 18:19:03.755639 2024] [:error] [pid 1507:tid 140161107072768] [client 167.71.175.236:44720] [client 167.71.175.236] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZzjiF2QRpI0yfZihBM065wAAAIs"]
[Sat Nov 16 20:36:43.147759 2024] [:error] [pid 1507:tid 140161132250880] [client 206.189.233.36:53706] [client 206.189.233.36] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "ZzkCW2QRpI0yfZihBM09JgAAAIg"]
[Sat Nov 16 20:36:46.255707 2024] [authz_core:error] [pid 1507:tid 140161048323840] [client 206.189.233.36:53754] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Sat Nov 16 20:36:47.823309 2024] [:error] [pid 1507:tid 140160997967616] [client 206.189.233.36:53800] [client 206.189.233.36] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZzkCX2QRpI0yfZihBM09LwAAAJg"]
[Sat Nov 16 20:36:47.973716 2024] [:error] [pid 1507:tid 140161107072768] [client 206.189.233.36:53802] [client 206.189.233.36] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZzkCX2QRpI0yfZihBM09MAAAAIs"]
[Mon Nov 18 19:42:27.381203 2024] [:error] [pid 9311:tid 140250846471936] [client 206.189.2.13:55938] [client 206.189.2.13] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "ZzuYozEavzhdL9ISNFvflQAAAAE"]
[Mon Nov 18 19:42:32.594016 2024] [authz_core:error] [pid 9311:tid 140250655442688] [client 206.189.2.13:58550] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Mon Nov 18 19:42:35.247914 2024] [:error] [pid 10346:tid 140250596693760] [client 206.189.2.13:58586] [client 206.189.2.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "ZzuYqw1vC4scQlCV0G0XcAAAANY"]
[Mon Nov 18 19:42:35.706945 2024] [:error] [pid 10346:tid 140250680620800] [client 206.189.2.13:58592] [client 206.189.2.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "ZzuYqw1vC4scQlCV0G0XcQAAAMw"]
[Wed Nov 20 15:26:37.551197 2024] [:error] [pid 17610:tid 139721426515712] [client 64.227.70.2:59874] [client 64.227.70.2] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Zz3_rXmTXJuan8NXm-JLxQAAAJQ"]
[Wed Nov 20 15:26:42.126560 2024] [authz_core:error] [pid 17580:tid 139721527228160] [client 64.227.70.2:32792] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Wed Nov 20 15:26:44.938241 2024] [:error] [pid 17610:tid 139721443301120] [client 64.227.70.2:32832] [client 64.227.70.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Zz3_tHmTXJuan8NXm-JLzAAAAJI"]
[Wed Nov 20 15:26:45.239282 2024] [:error] [pid 17610:tid 139721577584384] [client 64.227.70.2:32838] [client 64.227.70.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Zz3_tXmTXJuan8NXm-JLzQAAAII"]
[Wed Nov 20 23:31:11.638796 2024] [:error] [pid 17610:tid 139721418123008] [client 46.101.1.225:44132] [client 46.101.1.225] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Zz5xP3mTXJuan8NXm-JTzQAAAJU"]
[Wed Nov 20 23:31:16.616011 2024] [authz_core:error] [pid 17926:tid 139721426515712] [client 46.101.1.225:44210] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Wed Nov 20 23:31:19.387775 2024] [:error] [pid 17580:tid 139721493657344] [client 46.101.1.225:44256] [client 46.101.1.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Zz5xR1Cm_Eo3WhQAClPLjQAAAAw"]
[Wed Nov 20 23:31:19.861354 2024] [:error] [pid 17580:tid 139721418123008] [client 46.101.1.225:40230] [client 46.101.1.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Zz5xR1Cm_Eo3WhQAClPLjgAAABU"]
[Fri Nov 22 07:20:27.475278 2024] [:error] [pid 24061:tid 139841182365440] [client 45.86.203.205:5297] [client 45.86.203.205] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z0Awu-ep0Y6YEHf45uIBNAAAAIY"]
[Fri Nov 22 07:20:28.453224 2024] [:error] [pid 24030:tid 139841165580032] [client 45.86.203.207:37543] [client 45.86.203.207] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z0AwvCf2JPTNI-qKchtHjgAAAEg"]
[Fri Nov 22 07:20:29.320713 2024] [:error] [pid 24579:tid 139841098438400] [client 45.86.203.217:42181] [client 45.86.203.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.prod"] [unique_id "Z0AwvZCqfqFsQodvbVGHsQAAANA"]
[Fri Nov 22 07:20:30.280339 2024] [:error] [pid 24579:tid 139841157187328] [client 45.86.203.213:51761] [client 45.86.203.213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.prod"] [unique_id "Z0AwvpCqfqFsQodvbVGHsgAAAMk"]
[Fri Nov 22 07:20:31.175088 2024] [:error] [pid 24579:tid 139841064867584] [client 45.86.203.203:5255] [client 45.86.203.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.production"] [unique_id "Z0Awv5CqfqFsQodvbVGHswAAANQ"]
[Fri Nov 22 07:20:32.157644 2024] [:error] [pid 24061:tid 139841280558848] [client 45.86.203.32:2641] [client 45.86.203.32] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.production"] [unique_id "Z0AwwOep0Y6YEHf45uIBNQAAAIM"]
[Fri Nov 22 07:20:33.044121 2024] [:error] [pid 24029:tid 139841031296768] [client 45.86.203.199:25615] [client 45.86.203.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/redmine/.env"] [unique_id "Z0AwwWrdBEsd0sRbwTazagAAABg"]
[Fri Nov 22 07:20:33.991318 2024] [:error] [pid 24029:tid 139841263773440] [client 45.86.203.213:16189] [client 45.86.203.213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/redmine/.env"] [unique_id "Z0AwwWrdBEsd0sRbwTazawAAAAU"]
[Fri Nov 22 07:20:35.113374 2024] [:error] [pid 24029:tid 139841064867584] [client 45.86.203.214:15267] [client 45.86.203.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/__tests__/test-become/.env"] [unique_id "Z0Aww2rdBEsd0sRbwTazcgAAABQ"]
[Fri Nov 22 07:20:36.050340 2024] [:error] [pid 24029:tid 139841157187328] [client 45.86.203.225:24011] [client 45.86.203.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/__tests__/test-become/.env"] [unique_id "Z0AwxGrdBEsd0sRbwTazdAAAAAk"]
[Fri Nov 22 07:20:50.431971 2024] [:error] [pid 24061:tid 139841173972736] [client 45.86.203.31:28931] [client 45.86.203.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/config/parameters.yml" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/app_dev.php/_profiler/open"] [unique_id "Z0Aw0uep0Y6YEHf45uIBQgAAAIc"]
[Fri Nov 22 07:20:51.199019 2024] [:error] [pid 24061:tid 139841048082176] [client 45.86.203.221:12917] [client 45.86.203.221] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/config/parameters.yml" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/_profiler/open"] [unique_id "Z0Aw0-ep0Y6YEHf45uIBQwAAAJY"]
[Fri Nov 22 07:20:51.903801 2024] [:error] [pid 24579:tid 139841288951552] [client 45.86.203.199:5323] [client 45.86.203.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/config/parameters.yml" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/app/config/parameters.yml"] [unique_id "Z0Aw05CqfqFsQodvbVGHuQAAAMI"]
[Fri Nov 22 07:20:52.572678 2024] [:error] [pid 24579:tid 139841081652992] [client 45.86.203.221:19327] [client 45.86.203.221] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/config/parameters.yml" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/config/parameters.yml"] [unique_id "Z0Aw1JCqfqFsQodvbVGHugAAANI"]
[Fri Nov 22 23:42:43.646838 2024] [:error] [pid 24029:tid 139841148794624] [client 139.59.132.8:39594] [client 139.59.132.8] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Z0EW82rdBEsd0sRbwTbD5gAAAAo"]
[Fri Nov 22 23:42:48.884404 2024] [authz_core:error] [pid 24061:tid 139841048082176] [client 139.59.132.8:56204] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Fri Nov 22 23:42:51.820379 2024] [:error] [pid 24579:tid 139841297344256] [client 139.59.132.8:56242] [client 139.59.132.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z0EW-5CqfqFsQodvbVGgBQAAAME"]
[Fri Nov 22 23:42:52.273776 2024] [:error] [pid 24030:tid 139841263773440] [client 139.59.132.8:56256] [client 139.59.132.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z0EW_Cf2JPTNI-qKchtZNgAAAEU"]
[Sun Nov 24 11:14:54.133265 2024] [:error] [pid 2271:tid 140565152724736] [client 159.89.127.165:60592] [client 159.89.127.165] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Z0MKrjsfcporN90nW1wyxgAAAFI"]
[Sun Nov 24 11:14:57.193345 2024] [authz_core:error] [pid 2270:tid 140565219866368] [client 159.89.127.165:60646] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Sun Nov 24 11:14:58.567251 2024] [:error] [pid 8719:tid 140565161117440] [client 159.89.127.165:60682] [client 159.89.127.165] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z0MKssz8uKpgofgQWhZCWAAAANE"]
[Sun Nov 24 11:14:59.696318 2024] [:error] [pid 2299:tid 140565177902848] [client 159.89.127.165:60684] [client 159.89.127.165] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z0MKs6Rq6Z2kve9cwC7aDgAAAI8"]
[Sun Nov 24 15:20:25.879655 2024] [:error] [pid 2299:tid 140565228259072] [client 45.86.203.254:1491] [client 45.86.203.254] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z0NEOaRq6Z2kve9cwC7hIgAAAIk"]
[Sun Nov 24 15:20:27.120109 2024] [:error] [pid 2299:tid 140565278615296] [client 45.86.203.231:64251] [client 45.86.203.231] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z0NEO6Rq6Z2kve9cwC7hIwAAAIM"]
[Sun Nov 24 15:20:28.093277 2024] [:error] [pid 2270:tid 140565253437184] [client 45.86.203.229:36099] [client 45.86.203.229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.prod"] [unique_id "Z0NEPI3XwdsaYhA4CS3GVQAAAAY"]
[Sun Nov 24 15:20:29.050398 2024] [:error] [pid 2299:tid 140565203080960] [client 45.86.203.241:47957] [client 45.86.203.241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.prod"] [unique_id "Z0NEPaRq6Z2kve9cwC7hJQAAAIw"]
[Sun Nov 24 15:20:29.899250 2024] [:error] [pid 2299:tid 140565127546624] [client 45.86.203.237:57853] [client 45.86.203.237] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.production"] [unique_id "Z0NEPaRq6Z2kve9cwC7hJwAAAJU"]
[Sun Nov 24 15:20:30.837517 2024] [:error] [pid 2299:tid 140565102368512] [client 45.86.203.227:5385] [client 45.86.203.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.production"] [unique_id "Z0NEPqRq6Z2kve9cwC7hKAAAAJg"]
[Sun Nov 24 15:20:31.907590 2024] [:error] [pid 2270:tid 140565152724736] [client 45.86.203.236:37083] [client 45.86.203.236] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/redmine/.env"] [unique_id "Z0NEP43XwdsaYhA4CS3GVgAAABI"]
[Sun Nov 24 15:20:32.970092 2024] [:error] [pid 2299:tid 140565270222592] [client 45.86.203.24:21447] [client 45.86.203.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/redmine/.env"] [unique_id "Z0NEQKRq6Z2kve9cwC7hKwAAAIQ"]
[Sun Nov 24 15:20:34.147568 2024] [:error] [pid 8719:tid 140565219866368] [client 45.86.203.23:7707] [client 45.86.203.23] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/__tests__/test-become/.env"] [unique_id "Z0NEQsz8uKpgofgQWhZJNgAAAMo"]
[Sun Nov 24 15:20:35.212927 2024] [:error] [pid 2270:tid 140565169510144] [client 45.86.203.249:8427] [client 45.86.203.249] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/__tests__/test-become/.env"] [unique_id "Z0NEQ43XwdsaYhA4CS3GVwAAABA"]
[Sun Nov 24 15:20:58.815509 2024] [:error] [pid 2299:tid 140565228259072] [client 45.86.203.235:49649] [client 45.86.203.235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/config/parameters.yml" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/app_dev.php/_profiler/open"] [unique_id "Z0NEWqRq6Z2kve9cwC7hRQAAAIk"]
[Sun Nov 24 15:21:00.198221 2024] [:error] [pid 2299:tid 140565152724736] [client 45.86.203.233:37689] [client 45.86.203.233] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/config/parameters.yml" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/_profiler/open"] [unique_id "Z0NEXKRq6Z2kve9cwC7hRgAAAJI"]
[Sun Nov 24 15:21:01.380516 2024] [:error] [pid 2299:tid 140565219866368] [client 45.86.203.229:55657] [client 45.86.203.229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/config/parameters.yml" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/app/config/parameters.yml"] [unique_id "Z0NEXaRq6Z2kve9cwC7hRwAAAIo"]
[Sun Nov 24 15:21:02.449143 2024] [:error] [pid 2299:tid 140565253437184] [client 45.86.203.24:38707] [client 45.86.203.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/config/parameters.yml" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/config/parameters.yml"] [unique_id "Z0NEXqRq6Z2kve9cwC7hSAAAAIY"]
[Sun Nov 24 23:21:12.642590 2024] [:error] [pid 2270:tid 140565211473664] [client 64.227.32.66:56676] [client 64.227.32.66] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Z0O06I3XwdsaYhA4CS3LKgAAAAs"]
[Sun Nov 24 23:21:17.991439 2024] [authz_core:error] [pid 2299:tid 140565236651776] [client 64.227.32.66:40580] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Sun Nov 24 23:21:20.651525 2024] [:error] [pid 8719:tid 140565135939328] [client 64.227.32.66:40632] [client 64.227.32.66] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z0O08Mz8uKpgofgQWhZP3QAAANQ"]
[Sun Nov 24 23:21:21.135504 2024] [:error] [pid 8719:tid 140565211473664] [client 64.227.32.66:40648] [client 64.227.32.66] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z0O08cz8uKpgofgQWhZP3gAAAMs"]
[Tue Nov 26 11:42:12.483584 2024] [:error] [pid 2445:tid 139958731884288] [client 68.183.9.16:36628] [client 68.183.9.16] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Z0W0FMwwdnxwuGhpw40ixwAAAM8"]
[Tue Nov 26 11:42:16.478032 2024] [authz_core:error] [pid 7737:tid 139958723491584] [client 68.183.9.16:36678] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Tue Nov 26 11:42:18.588292 2024] [:error] [pid 7755:tid 139958919378688] [client 68.183.9.16:36710] [client 68.183.9.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z0W0GiGhMpMPC-eyU4lCpAAAAIE"]
[Tue Nov 26 11:42:18.894437 2024] [:error] [pid 7738:tid 139958740276992] [client 68.183.9.16:36712] [client 68.183.9.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z0W0Giwa7wHO5OxmK1k-1wAAAE4"]
[Wed Nov 27 02:09:58.685172 2024] [:error] [pid 7738:tid 139958799025920] [client 159.203.96.42:49616] [client 159.203.96.42] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Z0Z_diwa7wHO5OxmK1lOpAAAAEc"]
[Wed Nov 27 02:10:02.887039 2024] [authz_core:error] [pid 2445:tid 139958740276992] [client 159.203.96.42:49672] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Wed Nov 27 02:10:05.167950 2024] [:error] [pid 7738:tid 139958824204032] [client 159.203.96.42:50248] [client 159.203.96.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z0Z_fSwa7wHO5OxmK1lOrAAAAEQ"]
[Wed Nov 27 02:10:05.463351 2024] [:error] [pid 7755:tid 139958757062400] [client 159.203.96.42:50264] [client 159.203.96.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z0Z_fSGhMpMPC-eyU4lT4gAAAIw"]
[Fri Nov 29 01:09:37.034503 2024] [authz_core:error] [pid 32351:tid 139661876643584] [client 139.59.143.102:43904] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Fri Nov 29 01:09:40.038645 2024] [:error] [pid 32224:tid 139661741623040] [client 139.59.143.102:43942] [client 139.59.143.102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z0kUVAeGRujDTi6JoB9LjwAAAA4"]
[Fri Nov 29 01:09:40.508225 2024] [:error] [pid 32225:tid 139661893428992] [client 139.59.143.102:43946] [client 139.59.143.102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z0kUVDunO86i7uBQMwnfxgAAAEQ"]
[Sat Nov 30 08:14:46.013879 2024] [:error] [pid 25736:tid 139912176273152] [client 64.226.65.160:49870] [client 64.226.65.160] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Z0rJdmtlViXF8z1RwmBLagAAAMA"]
[Sat Nov 30 08:14:51.133589 2024] [authz_core:error] [pid 25736:tid 139911982184192] [client 64.226.65.160:44186] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Sat Nov 30 08:14:53.747468 2024] [:error] [pid 25736:tid 139911940220672] [client 64.226.65.160:44226] [client 64.226.65.160] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z0rJfWtlViXF8z1RwmBLdQAAANQ"]
[Sat Nov 30 08:14:54.204995 2024] [:error] [pid 25408:tid 139912024147712] [client 64.226.65.160:44228] [client 64.226.65.160] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z0rJfnYeEYtQ5BHpoMBpXwAAAIo"]
[Sat Nov 30 08:17:01.971440 2024] [:error] [pid 25408:tid 139911990576896] [client 138.68.82.23:60186] [client 138.68.82.23] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Z0rJ_XYeEYtQ5BHpoMBpbwAAAI4"]
[Sat Nov 30 08:17:06.115943 2024] [authz_core:error] [pid 25408:tid 139912167880448] [client 138.68.82.23:50456] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Sat Nov 30 08:17:08.181645 2024] [:error] [pid 25408:tid 139912024147712] [client 138.68.82.23:50482] [client 138.68.82.23] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z0rKBHYeEYtQ5BHpoMBpeAAAAIo"]
[Sat Nov 30 08:17:08.486099 2024] [:error] [pid 25736:tid 139912151095040] [client 138.68.82.23:50484] [client 138.68.82.23] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z0rKBGtlViXF8z1RwmBLeAAAAMM"]
[Sun Dec 01 23:16:51.274939 2024] [:error] [pid 27022:tid 140394260051712] [client 18.185.124.68:60440] [client 18.185.124.68] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/api/.env"] [unique_id "Z0zuY-LXZLTV6M1FMFOttAAAAMo"]
[Mon Dec 02 18:53:13.282988 2024] [:error] [pid 19818:tid 139652346349312] [client 167.71.81.114:60490] [client 167.71.81.114] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Z04CGdYA_dysGkHY8sJ0hwAAANQ"]
[Mon Dec 02 18:53:17.159951 2024] [authz_core:error] [pid 19818:tid 139652413490944] [client 167.71.81.114:60548] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Mon Dec 02 18:53:18.962707 2024] [:error] [pid 19818:tid 139652551038720] [client 167.71.81.114:41150] [client 167.71.81.114] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z04CHtYA_dysGkHY8sJ0kwAAAMQ"]
[Mon Dec 02 18:53:19.218006 2024] [:error] [pid 19818:tid 139652584609536] [client 167.71.81.114:41162] [client 167.71.81.114] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z04CH9YA_dysGkHY8sJ0lQAAAMA"]
[Mon Dec 02 22:57:19.293924 2024] [:error] [pid 25687:tid 139652346349312] [client 35.180.0.174:56906] [client 35.180.0.174] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/"] [unique_id "Z047T3_smQ1UcZeBz4MUeAAAABQ"]
[Mon Dec 02 22:57:20.100546 2024] [:error] [pid 25687:tid 139652396705536] [client 35.180.0.174:56624] [client 35.180.0.174] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/HEAD"] [unique_id "Z047UH_smQ1UcZeBz4MUeQAAAA4"]
[Wed Dec 04 16:59:41.938936 2024] [:error] [pid 25328:tid 139678963422976] [client 209.97.180.8:43446] [client 209.97.180.8] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Z1CKfTIzk2O91MtdMrD42wAAAAo"]
[Wed Dec 04 16:59:48.179817 2024] [authz_core:error] [pid 25328:tid 139679047350016] [client 209.97.180.8:43188] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Wed Dec 04 16:59:51.026295 2024] [:error] [pid 25328:tid 139678921459456] [client 209.97.180.8:43228] [client 209.97.180.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z1CKhzIzk2O91MtdMrD44gAAAA8"]
[Wed Dec 04 16:59:51.478836 2024] [:error] [pid 25328:tid 139678955030272] [client 209.97.180.8:43234] [client 209.97.180.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z1CKhzIzk2O91MtdMrD44wAAAAs"]
[Fri Dec 06 11:37:50.835334 2024] [:error] [pid 2346:tid 140371115820800] [client 134.209.25.199:41250] [client 134.209.25.199] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Z1LiDve-MMYCMPluzETEfQAAANc"]
[Fri Dec 06 11:37:54.690523 2024] [authz_core:error] [pid 1880:tid 140371216533248] [client 134.209.25.199:59570] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Fri Dec 06 11:37:56.705559 2024] [:error] [pid 2346:tid 140371174569728] [client 134.209.25.199:59610] [client 134.209.25.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z1LiFPe-MMYCMPluzETEgAAAANA"]
[Fri Dec 06 11:37:57.016119 2024] [:error] [pid 2346:tid 140371357533952] [client 134.209.25.199:59614] [client 134.209.25.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z1LiFfe-MMYCMPluzETEgQAAAMM"]
[Fri Dec 06 21:05:14.528027 2024] [:error] [pid 2346:tid 140371132606208] [client 164.92.107.174:38440] [client 164.92.107.174] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Z1NnCve-MMYCMPluzETWcgAAANU"]
[Fri Dec 06 21:05:17.014335 2024] [authz_core:error] [pid 1852:tid 140371275282176] [client 164.92.107.174:38500] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Fri Dec 06 21:05:18.227103 2024] [:error] [pid 1852:tid 140371216533248] [client 164.92.107.174:38540] [client 164.92.107.174] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z1NnDkPj_c92Y3kByr1PtwAAAEs"]
[Fri Dec 06 21:05:18.279120 2024] [:error] [pid 1852:tid 140371132606208] [client 164.92.107.174:38546] [client 164.92.107.174] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z1NnDkPj_c92Y3kByr1PuAAAAFU"]
[Sun Dec 08 09:05:37.632685 2024] [:error] [pid 14929:tid 140073722939136] [client 139.162.210.205:53176] [client 139.162.210.205] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Z1VhYYa-LMIZpS3LrsPTTAAAAEk"]
[Sun Dec 08 09:05:41.467547 2024] [authz_core:error] [pid 14928:tid 140073731331840] [client 139.162.210.205:33284] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Sun Dec 08 09:05:43.377428 2024] [:error] [pid 14928:tid 140073639012096] [client 139.162.210.205:33320] [client 139.162.210.205] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z1VhZx0ec0fGVwRoxqxKFAAAABM"]
[Sun Dec 08 09:05:43.653657 2024] [:error] [pid 14928:tid 140073622226688] [client 139.162.210.205:33336] [client 139.162.210.205] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z1VhZx0ec0fGVwRoxqxKFQAAABU"]
[Sun Dec 08 19:39:17.405924 2024] [:error] [pid 8674:tid 140073597048576] [client 159.223.132.86:33848] [client 159.223.132.86] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Z1X15eT0N3nclA2_rFlQkwAAANg"]
[Sun Dec 08 19:39:21.064086 2024] [authz_core:error] [pid 8674:tid 140073722939136] [client 159.223.132.86:36742] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Sun Dec 08 19:39:22.833323 2024] [:error] [pid 8674:tid 140073622226688] [client 159.223.132.86:36772] [client 159.223.132.86] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z1X16uT0N3nclA2_rFlQmgAAANU"]
[Sun Dec 08 19:39:23.112276 2024] [:error] [pid 8674:tid 140073689368320] [client 159.223.132.86:36780] [client 159.223.132.86] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z1X16-T0N3nclA2_rFlQmwAAAM0"]
[Mon Dec 09 14:10:42.902865 2024] [:error] [pid 13247:tid 139882932406016] [client 165.22.235.3:53840] [client 165.22.235.3] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Z1b6Yv7CZr1Gv0VYhsQyuwAAAJE"]
[Mon Dec 09 14:10:43.313131 2024] [:error] [pid 13247:tid 139882965976832] [client 165.227.39.235:50944] [client 165.227.39.235] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Z1b6Y_7CZr1Gv0VYhsQyvQAAAI0"]
[Mon Dec 09 14:10:48.027245 2024] [authz_core:error] [pid 13609:tid 139883007940352] [client 165.22.235.3:46512] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Mon Dec 09 14:10:48.097122 2024] [authz_core:error] [pid 13219:tid 139883058296576] [client 165.227.39.235:56270] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Mon Dec 09 14:10:49.727622 2024] [:error] [pid 13218:tid 139882898835200] [client 165.22.235.3:46558] [client 165.22.235.3] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z1b6aXl4axaOp_9GLhxUewAAABU"]
[Mon Dec 09 14:10:49.882364 2024] [:error] [pid 13247:tid 139882907227904] [client 165.22.235.3:46568] [client 165.22.235.3] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z1b6af7CZr1Gv0VYhsQywgAAAJQ"]
[Mon Dec 09 14:10:50.367436 2024] [:error] [pid 13247:tid 139882991154944] [client 165.227.39.235:56310] [client 165.227.39.235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z1b6av7CZr1Gv0VYhsQyxAAAAIo"]
[Mon Dec 09 14:10:50.563001 2024] [:error] [pid 13219:tid 139882873657088] [client 165.227.39.235:56312] [client 165.227.39.235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z1b6aikTB7LH_rNlhlLA-gAAAFg"]
[Mon Dec 09 14:11:04.937294 2024] [:error] [pid 13219:tid 139882915620608] [client 185.208.156.160:33122] [client 185.208.156.160] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z1b6eCkTB7LH_rNlhlLBAQAAAFM"]
[Mon Dec 09 22:47:55.968667 2024] [:error] [pid 13609:tid 139883033118464] [client 45.148.10.172:40292] [client 45.148.10.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z1dzm6Dnt5wTxj5FlGMsTQAAAMU"]
[Tue Dec 10 02:52:27.802308 2024] [:error] [pid 13609:tid 139882965976832] [client 54.187.137.66:57592] [client 54.187.137.66] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z1es66Dnt5wTxj5FlGMsoAAAAM0"]
[Tue Dec 10 13:10:45.971219 2024] [:error] [pid 24941:tid 139872119486208] [client 18.156.35.7:39386] [client 18.156.35.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z1g91cDRYfsalALDPfYN0wAAAJA"]
[Tue Dec 10 18:13:48.445552 2024] [:error] [pid 9542:tid 139872220198656] [client 52.187.131.8:39916] [client 52.187.131.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z1iE3BR5wHCz3ciVqdmNsgAAAIQ"]
[Wed Dec 11 01:02:14.917560 2024] [:error] [pid 9568:tid 139872253769472] [client 206.81.24.74:40710] [client 206.81.24.74] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Z1jklhAZG3Lkajz98Z2QUAAAAMA"]
[Wed Dec 11 01:02:20.486353 2024] [authz_core:error] [pid 9834:tid 139872127878912] [client 206.81.24.74:40774] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Wed Dec 11 01:02:23.303279 2024] [:error] [pid 9834:tid 139872186627840] [client 206.81.24.74:40802] [client 206.81.24.74] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z1jkn4e2Y69TDYOUHIDSeAAAAAg"]
[Wed Dec 11 01:02:23.769775 2024] [:error] [pid 9568:tid 139872211805952] [client 206.81.24.74:40814] [client 206.81.24.74] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z1jknxAZG3Lkajz98Z2QVAAAAMU"]
[Wed Dec 11 02:08:43.646435 2024] [:error] [pid 9787:tid 139872228591360] [client 142.93.129.190:50304] [client 142.93.129.190] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Z1j0K3rTMEL85ofJUOmFGQAAAQM"]
[Wed Dec 11 02:08:47.671677 2024] [authz_core:error] [pid 9542:tid 139872245376768] [client 142.93.129.190:60118] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Wed Dec 11 02:08:49.984691 2024] [:error] [pid 9542:tid 139872111093504] [client 142.93.129.190:60158] [client 142.93.129.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z1j0MRR5wHCz3ciVqdmP3QAAAJE"]
[Wed Dec 11 02:08:50.290514 2024] [:error] [pid 9542:tid 139872220198656] [client 142.93.129.190:60172] [client 142.93.129.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z1j0MhR5wHCz3ciVqdmP3gAAAIQ"]
[Wed Dec 11 06:46:58.141741 2024] [:error] [pid 6507:tid 139684869003008] [client 103.102.230.8:51226] [client 103.102.230.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z1k1Yk_P9UmZa6u1pms0eAAAAM8"]
[Wed Dec 11 18:16:10.090671 2024] [:error] [pid 4888:tid 139684801861376] [client 87.121.86.59:58628] [client 87.121.86.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z1nW6tF1IjSH2_6rVm8I9AAAABc"]
[Thu Dec 12 23:59:28.102605 2024] [:error] [pid 9529:tid 140047693092608] [client 128.199.182.55:44020] [client 128.199.182.55] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Z1t44EGCsCLirQhCqkmYuwAAAEg"]
[Thu Dec 12 23:59:33.903968 2024] [authz_core:error] [pid 9529:tid 140047676307200] [client 128.199.182.55:35074] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Thu Dec 12 23:59:37.133022 2024] [:error] [pid 10230:tid 140047726663424] [client 128.199.182.55:35124] [client 128.199.182.55] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z1t46Y-S58g7BAj1p2Kb2QAAAMQ"]
[Thu Dec 12 23:59:37.712913 2024] [:error] [pid 10230:tid 140047617558272] [client 128.199.182.55:35138] [client 128.199.182.55] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z1t46Y-S58g7BAj1p2Kb2gAAANE"]
[Fri Dec 13 01:22:46.957385 2024] [:error] [pid 9529:tid 140047634343680] [client 157.230.19.140:56452] [client 157.230.19.140] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Z1uMZkGCsCLirQhCqkmYzQAAAE8"]
[Fri Dec 13 01:22:51.002897 2024] [authz_core:error] [pid 9557:tid 140047659521792] [client 157.230.19.140:56506] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Fri Dec 13 01:22:53.156871 2024] [:error] [pid 9528:tid 140047609165568] [client 157.230.19.140:56536] [client 157.230.19.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z1uMbeBzRGr-HloIsBFXAgAAABI"]
[Fri Dec 13 01:22:53.465721 2024] [:error] [pid 9557:tid 140047743448832] [client 157.230.19.140:56552] [client 157.230.19.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z1uMbXK9PT8mcQELt3_ReAAAAII"]
[Sat Dec 14 11:51:58.977624 2024] [:error] [pid 15498:tid 140105415108352] [client 206.81.24.74:47300] [client 206.81.24.74] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Z11xXow2Hd5ucWCGZxChtQAAAIg"]
[Sat Dec 14 11:52:02.971235 2024] [authz_core:error] [pid 15942:tid 140105549252352] [client 206.81.24.74:47360] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Sat Dec 14 11:52:05.309171 2024] [:error] [pid 15469:tid 140105415108352] [client 206.81.24.74:43046] [client 206.81.24.74] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z11xZSPO2f7RO7jC8H87WgAAAAg"]
[Sat Dec 14 11:52:05.615150 2024] [:error] [pid 15469:tid 140105381537536] [client 206.81.24.74:43060] [client 206.81.24.74] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z11xZSPO2f7RO7jC8H87WwAAAAw"]
[Sat Dec 14 15:16:14.162384 2024] [:error] [pid 15470:tid 140105356359424] [client 139.59.132.8:53494] [client 139.59.132.8] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Z12hPswABUGOv9T0BIXjrwAAAE8"]
[Sat Dec 14 15:16:19.037095 2024] [authz_core:error] [pid 15498:tid 140105423501056] [client 139.59.132.8:51440] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Sat Dec 14 15:16:21.806649 2024] [:error] [pid 15942:tid 140105297610496] [client 139.59.132.8:51476] [client 139.59.132.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z12hRZTOh1Jk6CcFw3t83AAAANY"]
[Sat Dec 14 15:16:22.264950 2024] [:error] [pid 15469:tid 140105398322944] [client 139.59.132.8:51488] [client 139.59.132.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z12hRiPO2f7RO7jC8H9ADgAAAAo"]
[Sun Dec 15 08:22:40.422369 2024] [:error] [pid 19388:tid 140598170351360] [client 3.133.93.105:45150] [client 3.133.93.105] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z16R0DCJKqcl3nw-lkW2ogAAAMc"]
[Mon Dec 16 06:33:17.932814 2024] [:error] [pid 29400:tid 140341520844544] [client 83.147.52.35:61323] [client 83.147.52.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z1_JrajjgQGqByxv_XgBvAAAAM8"]
[Mon Dec 16 06:33:18.435624 2024] [:error] [pid 28942:tid 140341546022656] [client 83.147.52.35:61491] [client 83.147.52.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z1_Jrows7xp4CbiaTsmNSQAAAIw"]
[Mon Dec 16 06:33:19.102189 2024] [:error] [pid 29400:tid 140341504059136] [client 83.147.52.35:61718] [client 83.147.52.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.prod"] [unique_id "Z1_Jr6jjgQGqByxv_XgBvQAAANE"]
[Mon Dec 16 06:33:19.623180 2024] [:error] [pid 28942:tid 140341529237248] [client 83.147.52.35:61865] [client 83.147.52.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.prod"] [unique_id "Z1_Jr4ws7xp4CbiaTsmNSgAAAI4"]
[Mon Dec 16 06:33:20.263390 2024] [:error] [pid 28926:tid 140341478881024] [client 83.147.52.35:62051] [client 83.147.52.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.production"] [unique_id "Z1_JsFKX_nm9jB3rn1FqmwAAAFQ"]
[Mon Dec 16 06:33:20.719663 2024] [:error] [pid 29400:tid 140341487273728] [client 83.147.52.35:62211] [client 83.147.52.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.production"] [unique_id "Z1_JsKjjgQGqByxv_XgBvgAAANM"]
[Mon Dec 16 06:33:21.301539 2024] [:error] [pid 28913:tid 140341512451840] [client 83.147.52.35:62391] [client 83.147.52.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/redmine/.env"] [unique_id "Z1_JsWe5NJ7ocbSAasB9HAAAABA"]
[Mon Dec 16 06:33:21.877876 2024] [:error] [pid 28926:tid 140341462095616] [client 83.147.52.35:62520] [client 83.147.52.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/redmine/.env"] [unique_id "Z1_JsVKX_nm9jB3rn1FqnAAAAFY"]
[Mon Dec 16 06:33:22.384180 2024] [:error] [pid 28926:tid 140341445310208] [client 83.147.52.35:62712] [client 83.147.52.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/__tests__/test-become/.env"] [unique_id "Z1_JslKX_nm9jB3rn1FqnQAAAFg"]
[Mon Dec 16 06:33:22.807811 2024] [:error] [pid 28926:tid 140341702272768] [client 83.147.52.35:62869] [client 83.147.52.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/__tests__/test-become/.env"] [unique_id "Z1_JslKX_nm9jB3rn1FqngAAAEI"]
[Mon Dec 16 06:37:07.734675 2024] [:error] [pid 29400:tid 140341562808064] [client 83.147.52.35:49296] [client 83.147.52.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/config/parameters.yml" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/app_dev.php/_profiler/open"] [unique_id "Z1_Kk6jjgQGqByxv_XgBxgAAAMo"]
[Mon Dec 16 06:37:08.460486 2024] [:error] [pid 29400:tid 140341546022656] [client 83.147.52.35:49444] [client 83.147.52.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/config/parameters.yml" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/_profiler/open"] [unique_id "Z1_KlKjjgQGqByxv_XgBxwAAAMw"]
[Mon Dec 16 06:37:09.072777 2024] [:error] [pid 29400:tid 140341529237248] [client 83.147.52.35:49614] [client 83.147.52.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/config/parameters.yml" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/app/config/parameters.yml"] [unique_id "Z1_KlajjgQGqByxv_XgByAAAAM4"]
[Mon Dec 16 06:37:09.698236 2024] [:error] [pid 28942:tid 140341495666432] [client 83.147.52.35:49770] [client 83.147.52.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/config/parameters.yml" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/config/parameters.yml"] [unique_id "Z1_KlYws7xp4CbiaTsmNTAAAAJI"]
[Mon Dec 16 08:12:40.517098 2024] [:error] [pid 29400:tid 140341462095616] [client 45.148.10.86:48758] [client 45.148.10.86] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z1_g-KjjgQGqByxv_XgC4QAAANY"]
[Mon Dec 16 10:11:52.871443 2024] [:error] [pid 29400:tid 140341546022656] [client 164.90.228.79:50634] [client 164.90.228.79] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Z1_86KjjgQGqByxv_XgE9wAAAMw"]
[Mon Dec 16 10:11:56.898988 2024] [authz_core:error] [pid 29400:tid 140341537629952] [client 164.90.228.79:50710] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Mon Dec 16 10:11:58.999444 2024] [:error] [pid 28926:tid 140341495666432] [client 164.90.228.79:35950] [client 164.90.228.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z1_87lKX_nm9jB3rn1Fs4wAAAFI"]
[Mon Dec 16 10:11:59.316566 2024] [:error] [pid 28926:tid 140341487273728] [client 164.90.228.79:35966] [client 164.90.228.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z1_871KX_nm9jB3rn1Fs5AAAAFM"]
[Mon Dec 16 15:34:18.033224 2024] [:error] [pid 28942:tid 140341445310208] [client 159.89.127.165:60904] [client 159.89.127.165] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Z2BIeows7xp4CbiaTsmZCwAAAJg"]
[Mon Dec 16 15:34:21.288025 2024] [authz_core:error] [pid 28926:tid 140341613164288] [client 159.89.127.165:60948] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Mon Dec 16 15:34:23.043993 2024] [:error] [pid 30270:tid 140341693880064] [client 159.89.127.165:32770] [client 159.89.127.165] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z2BIf9oDUmOnUt1U_KZdBAAAAQM"]
[Mon Dec 16 15:34:23.238416 2024] [:error] [pid 28913:tid 140341596378880] [client 159.89.127.165:32776] [client 159.89.127.165] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z2BIf2e5NJ7ocbSAasCG8wAAAAY"]
[Tue Dec 17 09:17:02.323216 2024] [:error] [pid 1542:tid 140052075063040] [client 45.148.10.80:49210] [client 45.148.10.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z2FBjvnkx6gO6wBreUNU2gAAAME"]
[Wed Dec 18 11:25:18.762800 2024] [:error] [pid 11428:tid 140446630078208] [client 67.217.228.149:34632] [client 67.217.228.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z2KxHnvjYbOCrWPTMVPFDAAAAFI"]
[Wed Dec 18 20:02:10.110508 2024] [:error] [pid 11427:tid 140446705612544] [client 209.38.208.202:36840] [client 209.38.208.202] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Z2MqQtvxUir8jtKiDChuHwAAAAk"]
[Wed Dec 18 20:02:15.196837 2024] [authz_core:error] [pid 11427:tid 140446655256320] [client 209.38.208.202:36920] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Wed Dec 18 20:02:17.942104 2024] [:error] [pid 11427:tid 140446621685504] [client 209.38.208.202:33322] [client 209.38.208.202] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z2MqSdvxUir8jtKiDChuKgAAABM"]
[Wed Dec 18 20:02:18.415883 2024] [:error] [pid 11427:tid 140446714005248] [client 209.38.208.202:33336] [client 209.38.208.202] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z2MqStvxUir8jtKiDChuKwAAAAg"]
[Wed Dec 18 22:12:13.092204 2024] [:error] [pid 11427:tid 140446722397952] [client 167.172.232.142:55538] [client 167.172.232.142] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Z2NIvdvxUir8jtKiDChu7gAAAAc"]
[Wed Dec 18 22:12:16.044991 2024] [authz_core:error] [pid 19798:tid 140446705612544] [client 167.172.232.142:55606] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Wed Dec 18 22:12:17.552513 2024] [:error] [pid 11456:tid 140446655256320] [client 167.172.232.142:55658] [client 167.172.232.142] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z2NIwblmr-TfNm1TWQasxwAAAI8"]
[Wed Dec 18 22:12:17.712110 2024] [:error] [pid 11428:tid 140446621685504] [client 167.172.232.142:55668] [client 167.172.232.142] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z2NIwXvjYbOCrWPTMVPQqAAAAFM"]
[Fri Dec 20 14:49:08.545433 2024] [:error] [pid 21880:tid 140029741422336] [client 164.90.228.79:47536] [client 164.90.228.79] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Z2WD5LI-ZnBpXXis3lnVZAAAANY"]
[Fri Dec 20 14:49:12.421500 2024] [authz_core:error] [pid 27261:tid 140029988017920] [client 164.90.228.79:47592] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Fri Dec 20 14:49:14.444288 2024] [:error] [pid 27290:tid 140029808563968] [client 164.90.228.79:47614] [client 164.90.228.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z2WD6sTyP3GGiXsrM1oOVAAAAI4"]
[Fri Dec 20 14:49:14.750144 2024] [:error] [pid 21880:tid 140029979625216] [client 164.90.228.79:47630] [client 164.90.228.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z2WD6rI-ZnBpXXis3lnVaAAAAMI"]
[Fri Dec 20 18:55:11.254737 2024] [:error] [pid 27262:tid 140029733029632] [client 139.59.136.184:56628] [client 139.59.136.184] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Z2W9j-LbRU2l_gg_brvyJwAAAFc"]
[Fri Dec 20 18:55:16.340902 2024] [authz_core:error] [pid 27290:tid 140029816956672] [client 139.59.136.184:56704] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Fri Dec 20 18:55:19.007059 2024] [:error] [pid 27290:tid 140029979625216] [client 139.59.136.184:54426] [client 139.59.136.184] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z2W9l8TyP3GGiXsrM1oVegAAAII"]
[Fri Dec 20 18:55:19.476460 2024] [:error] [pid 27290:tid 140029758207744] [client 139.59.136.184:54428] [client 139.59.136.184] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z2W9l8TyP3GGiXsrM1oVewAAAJQ"]
[Sat Dec 21 23:49:05.769463 2024] [:error] [pid 23148:tid 140372801935104] [client 87.121.86.59:59780] [client 87.121.86.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z2dT8S1qN6kgPHNzMEpPpwAAANI"]
[Sun Dec 22 04:52:48.283443 2024] [:error] [pid 32383:tid 140287926007552] [client 179.43.188.122:57734] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z2ebIGnxMdsjVsNhNfSycQAAABE"]
[Sun Dec 22 04:52:48.707381 2024] [:error] [pid 32383:tid 140287917614848] [client 179.43.188.122:57750] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/HEAD"] [unique_id "Z2ebIGnxMdsjVsNhNfSycgAAABI"]
[Sun Dec 22 04:52:48.754095 2024] [:error] [pid 26151:tid 140287884044032] [client 179.43.188.122:57762] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z2ebIKRu9FiK1ZIM6_-mSQAAANY"]
[Sun Dec 22 11:28:17.206707 2024] [:error] [pid 32384:tid 140287909222144] [client 87.120.112.37:39070] [client 87.120.112.37] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z2f30UvsykKOykeyjWrZLQAAAFM"]
[Sun Dec 22 17:30:39.572007 2024] [:error] [pid 32383:tid 140287917614848] [client 87.120.112.37:52824] [client 87.120.112.37] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z2hMv2nxMdsjVsNhNfS61QAAABI"]
[Mon Dec 23 08:53:18.069609 2024] [:error] [pid 29601:tid 140014348379904] [client 217.15.164.190:39162] [client 217.15.164.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z2kk_nY59_qBagf4b0dQNgAAAAk"]
[Mon Dec 23 08:53:38.135626 2024] [:error] [pid 29630:tid 140014314809088] [client 217.15.164.190:33292] [client 217.15.164.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z2klEsvu5tJVr1vdAivJyQAAAI0"]
[Mon Dec 23 08:53:46.914316 2024] [:error] [pid 29630:tid 140014381950720] [client 217.15.164.190:36562] [client 217.15.164.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/edu.richinei.com/.env"] [unique_id "Z2klGsvu5tJVr1vdAivJzAAAAIU"]
[Mon Dec 23 08:54:09.834893 2024] [:error] [pid 29601:tid 140014323201792] [client 217.15.164.190:52902] [client 217.15.164.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.www"] [unique_id "Z2klMXY59_qBagf4b0dQNwAAAAw"]
[Mon Dec 23 08:54:23.221020 2024] [:error] [pid 23332:tid 140014323201792] [client 217.15.164.190:55304] [client 217.15.164.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.www"] [unique_id "Z2klPxtcND_vhasVJnabEwAAAMw"]
[Mon Dec 23 08:54:27.808459 2024] [:error] [pid 23332:tid 140014373558016] [client 217.15.164.190:59790] [client 217.15.164.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/edu.richinei.com/.env"] [unique_id "Z2klQxtcND_vhasVJnabFQAAAMY"]
[Mon Dec 23 08:54:35.037917 2024] [:error] [pid 23332:tid 140014493525760] [client 217.15.164.190:48380] [client 217.15.164.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/edu.richinei.com/.env"] [unique_id "Z2klSxtcND_vhasVJnabFgAAAMA"]
[Mon Dec 23 08:54:46.504325 2024] [:error] [pid 29601:tid 140014256060160] [client 217.15.164.190:57222] [client 217.15.164.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env_1"] [unique_id "Z2klVnY59_qBagf4b0dQOwAAABQ"]
[Mon Dec 23 08:55:00.070085 2024] [:error] [pid 29601:tid 140014314809088] [client 217.15.164.190:55416] [client 217.15.164.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env_1"] [unique_id "Z2klZHY59_qBagf4b0dQQAAAAA0"]
[Mon Dec 23 08:55:08.546063 2024] [:error] [pid 29602:tid 140014230882048] [client 217.15.164.190:35118] [client 217.15.164.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/edu.richinei.com/.env"] [unique_id "Z2klbFWBqf6-L0yWoKafKAAAAFc"]
[Mon Dec 23 08:55:16.955813 2024] [:error] [pid 29630:tid 140014356772608] [client 217.15.164.190:56476] [client 217.15.164.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/edu.richinei.com/.env"] [unique_id "Z2kldMvu5tJVr1vdAivJzgAAAIg"]
[Mon Dec 23 08:55:24.561953 2024] [:error] [pid 29602:tid 140014390343424] [client 217.15.164.190:41676] [client 217.15.164.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env_sample"] [unique_id "Z2klfFWBqf6-L0yWoKafKwAAAEQ"]
[Mon Dec 23 08:55:41.370172 2024] [:error] [pid 29630:tid 140014485133056] [client 217.15.164.190:53228] [client 217.15.164.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/edu.richinei.com/.env"] [unique_id "Z2kljcvu5tJVr1vdAivJ0QAAAIE"]
[Tue Dec 24 12:24:41.375411 2024] [:error] [pid 25393:tid 139969494447872] [client 193.41.206.24:26318] [client 193.41.206.24] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/config/php.ini"] [unique_id "Z2qoCX-hQSPBk6CA_F5xfQAAANE"]
[Tue Dec 24 12:24:44.203721 2024] [:error] [pid 25393:tid 139969494447872] [client 193.41.206.24:26318] [client 193.41.206.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z2qoDH-hQSPBk6CA_F5xhwAAANE"]
[Tue Dec 24 12:45:30.472962 2024] [:error] [pid 32296:tid 139969528018688] [client 138.197.191.87:44978] [client 138.197.191.87] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Z2qs6hkf1qsZ9wt51uPfJQAAAE0"]
[Tue Dec 24 12:45:35.833449 2024] [authz_core:error] [pid 32296:tid 139969709389568] [client 138.197.191.87:46332] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Tue Dec 24 12:45:38.533193 2024] [:error] [pid 32295:tid 139969709389568] [client 138.197.191.87:46384] [client 138.197.191.87] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z2qs8mnzHZTi7O9Nm6ut0QAAAAA"]
[Tue Dec 24 12:45:39.008429 2024] [:error] [pid 32295:tid 139969444091648] [client 138.197.191.87:46388] [client 138.197.191.87] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z2qs82nzHZTi7O9Nm6ut0gAAABc"]
[Tue Dec 24 13:11:37.608667 2024] [:error] [pid 32296:tid 139969578374912] [client 193.41.206.24:22258] [client 193.41.206.24] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/config/php.ini"] [unique_id "Z2qzCRkf1qsZ9wt51uPgGAAAAEc"]
[Tue Dec 24 13:11:46.477272 2024] [:error] [pid 32296:tid 139969578374912] [client 193.41.206.24:22258] [client 193.41.206.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z2qzEhkf1qsZ9wt51uPgIgAAAEc"]
[Tue Dec 24 15:11:42.553764 2024] [:error] [pid 32295:tid 139969486055168] [client 217.15.164.190:37238] [client 217.15.164.190] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/config/php.ini"] [unique_id "Z2rPLmnzHZTi7O9Nm6uyuwAAABI"]
[Tue Dec 24 21:22:25.723251 2024] [:error] [pid 25393:tid 139969620338432] [client 143.110.213.72:47252] [client 143.110.213.72] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Z2smEX-hQSPBk6CA_F6MYAAAAMI"]
[Tue Dec 24 21:22:28.957066 2024] [authz_core:error] [pid 32296:tid 139969502840576] [client 143.110.213.72:47316] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Tue Dec 24 21:22:30.412342 2024] [:error] [pid 32296:tid 139969603553024] [client 143.110.213.72:47370] [client 143.110.213.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z2smFhkf1qsZ9wt51uPuyQAAAEQ"]
[Tue Dec 24 21:22:30.562393 2024] [:error] [pid 32296:tid 139969709389568] [client 143.110.213.72:47376] [client 143.110.213.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z2smFhkf1qsZ9wt51uPuygAAAEA"]
[Thu Dec 26 03:10:09.421939 2024] [:error] [pid 8813:tid 140544600626944] [client 91.134.4.55:49384] [client 91.134.4.55] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/config/php.ini"] [unique_id "Z2zJEabGODK7TMV2QAwTUQAAAFQ"]
[Thu Dec 26 03:10:59.456259 2024] [:error] [pid 8813:tid 140544650983168] [client 91.134.4.55:35248] [client 91.134.4.55] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/config.ini"] [unique_id "Z2zJQ6bGODK7TMV2QAwTWAAAAE4"]
[Thu Dec 26 03:11:07.626811 2024] [:error] [pid 8813:tid 140544575448832] [client 91.134.4.55:41036] [client 91.134.4.55] ModSecurity: Access denied with code 403 (phase 2). String match "/.profile" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/30_Apps_OtherApps.conf"] [line "6621"] [id "243320"] [rev "1"] [msg "COMODO WAF: Information disclosure vulnerability in Cloud Foundry PHP Buildpack (aka php-buildpack) before 4.3.18 and PHP Buildpack Cf-release before 242, as used in Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.6.38 and 1.7.x before 1.7.19 and other products (CVE-2016-6639)||edu.richinei.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "edu.richinei.com"] [uri "/.profile"] [unique_id "Z2zJS6bGODK7TMV2QAwTWwAAAFc"]
[Thu Dec 26 03:11:40.249200 2024] [:error] [pid 8812:tid 140544684553984] [client 91.134.4.55:54954] [client 91.134.4.55] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/config/config.ini"] [unique_id "Z2zJbK2RMJm1U_zYJ7CCjQAAAAo"]
[Thu Dec 26 03:11:43.232971 2024] [:error] [pid 8841:tid 140544743302912] [client 91.134.4.55:50724] [client 91.134.4.55] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/resources/application.conf"] [unique_id "Z2zJb07JEaPQGekXOuGW7wAAAIM"]
[Thu Dec 26 17:23:39.916779 2024] [:error] [pid 8678:tid 139639612450560] [client 139.59.143.102:55768] [client 139.59.143.102] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Z22RG70UZQv4Xx8UxfsuAgAAAI4"]
[Thu Dec 26 17:23:44.982425 2024] [authz_core:error] [pid 8678:tid 139639662806784] [client 139.59.143.102:50940] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Thu Dec 26 17:23:47.674737 2024] [:error] [pid 8678:tid 139639536916224] [client 139.59.143.102:50970] [client 139.59.143.102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z22RI70UZQv4Xx8UxfsuDQAAAJc"]
[Thu Dec 26 17:23:48.136983 2024] [:error] [pid 8678:tid 139639562094336] [client 139.59.143.102:50984] [client 139.59.143.102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z22RJL0UZQv4Xx8UxfsuDgAAAJQ"]
[Thu Dec 26 20:55:22.127554 2024] [:error] [pid 8678:tid 139639713163008] [client 64.226.78.121:37440] [client 64.226.78.121] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Z23Cur0UZQv4Xx8UxfsxiwAAAII"]
[Thu Dec 26 20:55:26.121586 2024] [authz_core:error] [pid 8622:tid 139639528523520] [client 64.226.78.121:33276] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Thu Dec 26 20:55:28.230390 2024] [:error] [pid 8622:tid 139639587272448] [client 64.226.78.121:33320] [client 64.226.78.121] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z23CwODMEmbQA8fu0ig3yAAAABE"]
[Thu Dec 26 20:55:28.541783 2024] [:error] [pid 8622:tid 139639662806784] [client 64.226.78.121:33332] [client 64.226.78.121] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z23CwODMEmbQA8fu0ig3yQAAAAg"]
[Sat Dec 28 10:43:04.551492 2024] [:error] [pid 11170:tid 140627354248960] [client 206.189.2.13:39860] [client 206.189.2.13] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Z2_WOJjnl8iMq9sa1laDwwAAABM"]
[Sat Dec 28 10:43:08.471937 2024] [authz_core:error] [pid 11170:tid 140627471746816] [client 206.189.2.13:39922] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Sat Dec 28 10:43:10.502598 2024] [:error] [pid 11170:tid 140627337463552] [client 206.189.2.13:39030] [client 206.189.2.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z2_WPpjnl8iMq9sa1laDzwAAABU"]
[Sat Dec 28 10:43:10.810928 2024] [:error] [pid 11170:tid 140627421390592] [client 206.189.2.13:39046] [client 206.189.2.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z2_WPpjnl8iMq9sa1laD0AAAAAs"]
[Sat Dec 28 20:02:30.282006 2024] [:error] [pid 4194:tid 140627396212480] [client 164.92.87.232:63219] [client 164.92.87.232] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z3BZVuQ-E9oum5uXElPR7wAAAM4"]
[Sat Dec 28 20:02:30.356492 2024] [:error] [pid 4194:tid 140627584878336] [client 164.92.87.232:64488] [client 164.92.87.232] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/laravel/.env"] [unique_id "Z3BZVuQ-E9oum5uXElPR8AAAAMA"]
[Sat Dec 28 20:02:30.439004 2024] [:error] [pid 4194:tid 140627480139520] [client 164.92.87.232:64494] [client 164.92.87.232] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/sftp-config.json"] [unique_id "Z3BZVuQ-E9oum5uXElPR8QAAAMQ"]
[Sun Dec 29 06:53:16.369815 2024] [:error] [pid 9731:tid 139872002021120] [client 193.189.100.200:58139] [client 193.189.100.200] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z3Dx3IR_UO05nXEPksBEPgAAAJg"]
[Sun Dec 29 06:53:17.701351 2024] [:error] [pid 9731:tid 139872269383424] [client 185.220.101.1:38126] [client 185.220.101.1] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z3Dx3YR_UO05nXEPksBEQAAAAIE"]
[Mon Dec 30 08:51:18.397364 2024] [:error] [pid 6610:tid 139891471984384] [client 167.99.210.137:56274] [client 167.99.210.137] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Z3JfBrFJjY8ggOvKASyyMQAAAFc"]
[Mon Dec 30 08:51:23.614359 2024] [authz_core:error] [pid 6638:tid 139891732776704] [client 167.99.210.137:55322] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Mon Dec 30 08:51:26.263631 2024] [:error] [pid 6638:tid 139891488769792] [client 167.99.210.137:55368] [client 167.99.210.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z3JfDmCZ2aaTzwXLpm6J8AAAAJU"]
[Mon Dec 30 08:51:26.724209 2024] [:error] [pid 6638:tid 139891581089536] [client 167.99.210.137:55380] [client 167.99.210.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z3JfDmCZ2aaTzwXLpm6J8QAAAIo"]
[Mon Dec 30 09:31:20.229517 2024] [:error] [pid 6638:tid 139891597874944] [client 128.199.182.152:34712] [client 128.199.182.152] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Z3JoaGCZ2aaTzwXLpm6KcQAAAIg"]
[Mon Dec 30 09:31:24.809955 2024] [authz_core:error] [pid 6638:tid 139891497162496] [client 128.199.182.152:54984] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Mon Dec 30 09:31:27.182057 2024] [:error] [pid 6638:tid 139891522340608] [client 128.199.182.152:55012] [client 128.199.182.152] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z3Job2CZ2aaTzwXLpm6KfAAAAJE"]
[Mon Dec 30 09:31:27.580838 2024] [:error] [pid 6638:tid 139891623053056] [client 128.199.182.152:55020] [client 128.199.182.152] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z3Job2CZ2aaTzwXLpm6KfQAAAIU"]
[Tue Dec 31 10:41:10.035937 2024] [:error] [pid 883:tid 139899080464128] [client 3.218.145.18:33800] [client 3.218.145.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z3PKRm5O4p1zRioCxTbAPQAAAFM"]
[Wed Jan 01 09:33:20.739345 2025] [:error] [pid 7433:tid 140677459457792] [client 159.89.12.166:53078] [client 159.89.12.166] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Z3UL4AugugBiv3q9ToAWRgAAAAk"]
[Wed Jan 01 09:33:24.646885 2025] [authz_core:error] [pid 7433:tid 140677442672384] [client 159.89.12.166:53144] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Wed Jan 01 09:33:26.732598 2025] [:error] [pid 7433:tid 140677600593664] [client 159.89.12.166:57706] [client 159.89.12.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z3UL5gugugBiv3q9ToAWTgAAAAE"]
[Wed Jan 01 09:33:27.044233 2025] [:error] [pid 7433:tid 140677358745344] [client 159.89.12.166:57714] [client 159.89.12.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z3UL5wugugBiv3q9ToAWTwAAABU"]
[Wed Jan 01 10:50:50.121228 2025] [:error] [pid 7433:tid 140677476243200] [client 159.89.174.87:47504] [client 159.89.174.87] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Z3UeCgugugBiv3q9ToAW1gAAAAc"]
[Wed Jan 01 10:50:57.328900 2025] [authz_core:error] [pid 7433:tid 140677375530752] [client 159.89.174.87:47572] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Wed Jan 01 10:51:01.298229 2025] [:error] [pid 7433:tid 140677350352640] [client 159.89.174.87:39528] [client 159.89.174.87] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z3UeFQugugBiv3q9ToAW4QAAABY"]
[Wed Jan 01 10:51:02.096487 2025] [:error] [pid 7464:tid 140677608986368] [client 159.89.174.87:39534] [client 159.89.174.87] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z3UeFkC5zVA2DIVrDWHF9QAAAIA"]
[Thu Jan 02 02:51:31.509595 2025] [:error] [pid 7464:tid 140677592200960] [client 179.43.188.122:56208] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/config/.env"] [unique_id "Z3X_M0C5zVA2DIVrDWHOiwAAAII"]
[Thu Jan 02 02:51:31.509650 2025] [:error] [pid 7433:tid 140677392316160] [client 179.43.188.122:56194] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/core/.env"] [unique_id "Z3X_MwugugBiv3q9ToAfhwAAABE"]
[Thu Jan 02 02:51:31.510735 2025] [:error] [pid 7464:tid 140677417494272] [client 179.43.188.122:56146] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/api/.env"] [unique_id "Z3X_M0C5zVA2DIVrDWHOjQAAAI4"]
[Thu Jan 02 02:51:31.509689 2025] [:error] [pid 7464:tid 140677608986368] [client 179.43.188.122:56160] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/api/v1/.env"] [unique_id "Z3X_M0C5zVA2DIVrDWHOjAAAAIA"]
[Thu Jan 02 02:51:31.512134 2025] [:error] [pid 7436:tid 140677451065088] [client 179.43.188.122:56164] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/app/env/.env"] [unique_id "Z3X_M8MgnnmEfIXj7F-wRwAAAEo"]
[Thu Jan 02 02:51:31.510609 2025] [:error] [pid 7433:tid 140677467850496] [client 179.43.188.122:56180] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/environment/.env"] [unique_id "Z3X_MwugugBiv3q9ToAfiAAAAAg"]
[Thu Jan 02 02:51:31.516493 2025] [:error] [pid 8643:tid 140677476243200] [client 179.43.188.122:56222] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/private/.env"] [unique_id "Z3X_M_aNFXH_B2ZMQdtepwAAAQc"]
[Thu Jan 02 02:51:31.526188 2025] [:error] [pid 7436:tid 140677400708864] [client 179.43.188.122:56232] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/admin/.env"] [unique_id "Z3X_M8MgnnmEfIXj7F-wSAAAAFA"]
[Thu Jan 02 02:51:31.539098 2025] [:error] [pid 7436:tid 140677358745344] [client 179.43.188.122:56234] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/app/.env"] [unique_id "Z3X_M8MgnnmEfIXj7F-wSQAAAFU"]
[Thu Jan 02 02:51:31.541221 2025] [:error] [pid 8643:tid 140677459457792] [client 179.43.188.122:56264] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/laravel/.env"] [unique_id "Z3X_M_aNFXH_B2ZMQdteqAAAAQk"]
[Thu Jan 02 02:51:31.543655 2025] [:error] [pid 8643:tid 140677417494272] [client 179.43.188.122:56236] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/html/.env"] [unique_id "Z3X_M_aNFXH_B2ZMQdteqQAAAQ4"]
[Thu Jan 02 02:51:31.546404 2025] [:error] [pid 8643:tid 140677409101568] [client 179.43.188.122:56252] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/src/.env"] [unique_id "Z3X_M_aNFXH_B2ZMQdteqgAAAQ8"]
[Thu Jan 02 02:51:31.574411 2025] [:error] [pid 7433:tid 140677493028608] [client 179.43.188.122:56296] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/staging/.env"] [unique_id "Z3X_MwugugBiv3q9ToAfiQAAAAU"]
[Thu Jan 02 02:51:31.575582 2025] [:error] [pid 7436:tid 140677350352640] [client 179.43.188.122:56280] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/dev/.env"] [unique_id "Z3X_M8MgnnmEfIXj7F-wSgAAAFY"]
[Thu Jan 02 02:51:31.585050 2025] [:error] [pid 7973:tid 140677383923456] [client 179.43.188.122:56320] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/server/.env"] [unique_id "Z3X_M3XkmWDQqIxjx9u1ZwAAANI"]
[Thu Jan 02 02:51:31.585244 2025] [:error] [pid 8643:tid 140677350352640] [client 179.43.188.122:56306] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/production/.env"] [unique_id "Z3X_M_aNFXH_B2ZMQdteqwAAARY"]
[Thu Jan 02 02:51:31.589000 2025] [:error] [pid 8643:tid 140677367138048] [client 179.43.188.122:56328] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/wordpress/.env"] [unique_id "Z3X_M_aNFXH_B2ZMQdterAAAARQ"]
[Thu Jan 02 02:51:31.613058 2025] [:error] [pid 7433:tid 140677434279680] [client 179.43.188.122:56346] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/public/.env"] [unique_id "Z3X_MwugugBiv3q9ToAfigAAAAw"]
[Thu Jan 02 02:51:31.614149 2025] [:error] [pid 7973:tid 140677367138048] [client 179.43.188.122:56336] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/v1/.env"] [unique_id "Z3X_M3XkmWDQqIxjx9u1aAAAANQ"]
[Thu Jan 02 02:51:31.642894 2025] [:error] [pid 7464:tid 140677476243200] [client 179.43.188.122:56352] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/app/config/.env"] [unique_id "Z3X_M0C5zVA2DIVrDWHOjgAAAIc"]
[Thu Jan 02 02:51:31.645409 2025] [:error] [pid 7464:tid 140677459457792] [client 179.43.188.122:56350] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/services/.env"] [unique_id "Z3X_M0C5zVA2DIVrDWHOjwAAAIk"]
[Thu Jan 02 02:51:31.647658 2025] [:error] [pid 7464:tid 140677409101568] [client 179.43.188.122:56358] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/backend/.env"] [unique_id "Z3X_M0C5zVA2DIVrDWHOkAAAAI8"]
[Thu Jan 02 02:51:31.739584 2025] [:error] [pid 8643:tid 140677592200960] [client 179.43.188.122:56372] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/var/www/.env"] [unique_id "Z3X_M_aNFXH_B2ZMQdterQAAAQI"]
[Thu Jan 02 02:51:31.742419 2025] [:error] [pid 8643:tid 140677583808256] [client 179.43.188.122:56380] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/system/.env"] [unique_id "Z3X_M_aNFXH_B2ZMQdtergAAAQM"]
[Thu Jan 02 02:51:31.754483 2025] [:error] [pid 8643:tid 140677383923456] [client 179.43.188.122:56392] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/drupal/.env"] [unique_id "Z3X_M_aNFXH_B2ZMQdterwAAARI"]
[Thu Jan 02 02:51:31.755252 2025] [:error] [pid 7973:tid 140677425886976] [client 179.43.188.122:56406] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/v2/.env"] [unique_id "Z3X_M3XkmWDQqIxjx9u1aQAAAM0"]
[Thu Jan 02 02:51:31.755960 2025] [:error] [pid 7436:tid 140677484635904] [client 179.43.188.122:56396] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/api/v2/.env"] [unique_id "Z3X_M8MgnnmEfIXj7F-wSwAAAEY"]
[Thu Jan 02 02:51:31.883013 2025] [:error] [pid 7436:tid 140677341959936] [client 179.43.188.122:56410] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/web/.env"] [unique_id "Z3X_M8MgnnmEfIXj7F-wTAAAAFc"]
[Thu Jan 02 21:05:26.005324 2025] [:error] [pid 2547:tid 140250395432704] [client 64.226.78.121:41894] [client 64.226.78.121] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Z3b_lh8Z6QSN-EVXh8LoigAAAMU"]
[Thu Jan 02 21:05:31.231312 2025] [authz_core:error] [pid 2048:tid 140250252756736] [client 64.226.78.121:41940] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Thu Jan 02 21:05:33.965997 2025] [:error] [pid 29976:tid 140250403825408] [client 64.226.78.121:41966] [client 64.226.78.121] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z3b_nXCyxhOsnvSn-k-RowAAAQQ"]
[Thu Jan 02 21:05:34.425263 2025] [:error] [pid 2547:tid 140250412218112] [client 64.226.78.121:41982] [client 64.226.78.121] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z3b_nh8Z6QSN-EVXh8LokAAAAMM"]
[Fri Jan 03 00:07:31.463124 2025] [:error] [pid 2019:tid 140250494883584] [client 82.197.70.112:52656] [client 82.197.70.112] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z3cqQ4DJSc0QMDYQpuI7QQAAAAI"]
[Fri Jan 03 00:07:35.780273 2025] [:error] [pid 2019:tid 140250294720256] [client 82.197.70.112:52658] [client 82.197.70.112] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/config/php.ini"] [unique_id "Z3cqR4DJSc0QMDYQpuI7QgAAABE"]
[Fri Jan 03 13:48:14.940244 2025] [:error] [pid 849:tid 140116137346816] [client 194.88.99.87:52136] [client 194.88.99.87] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z3fqnsZnx7yg3PEyHTVtdAAAAMQ"]
[Sat Jan 04 13:37:34.304895 2025] [:error] [pid 24777:tid 140400727615232] [client 139.59.143.102:45908] [client 139.59.143.102] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Z3k5nj_j6TjQk6m0dPFG_wAAANU"]
[Sat Jan 04 13:37:38.156797 2025] [authz_core:error] [pid 24777:tid 140400752793344] [client 139.59.143.102:45982] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Sat Jan 04 13:37:40.201625 2025] [:error] [pid 31675:tid 140400845113088] [client 139.59.143.102:46026] [client 139.59.143.102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z3k5pH5hJL7YvALxIxeNbwAAAIc"]
[Sat Jan 04 13:37:40.514544 2025] [:error] [pid 31675:tid 140400761186048] [client 139.59.143.102:46028] [client 139.59.143.102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z3k5pH5hJL7YvALxIxeNcAAAAJE"]
[Sun Jan 05 00:45:20.398228 2025] [:error] [pid 31675:tid 140400819934976] [client 139.59.132.8:44970] [client 139.59.132.8] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Z3nWIH5hJL7YvALxIxea_AAAAIo"]
[Sun Jan 05 00:45:25.489792 2025] [authz_core:error] [pid 31675:tid 140400794756864] [client 139.59.132.8:45032] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Sun Jan 05 00:45:28.247312 2025] [:error] [pid 31646:tid 140400719222528] [client 139.59.132.8:38410] [client 139.59.132.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z3nWKHEql6FN5f-aWP_c0wAAAFY"]
[Sun Jan 05 00:45:28.726367 2025] [:error] [pid 31646:tid 140400761186048] [client 139.59.132.8:38414] [client 139.59.132.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z3nWKHEql6FN5f-aWP_c1AAAAFE"]
[Mon Jan 06 20:42:04.821997 2025] [:error] [pid 27432:tid 140138896836352] [client 206.189.2.13:49878] [client 206.189.2.13] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Z3xAHGE0SEzornRHOjWHlgAAAMM"]
[Mon Jan 06 20:42:15.329524 2025] [authz_core:error] [pid 26558:tid 140138675894016] [client 206.189.2.13:56136] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Mon Jan 06 20:42:20.776737 2025] [:error] [pid 26558:tid 140138659108608] [client 206.189.2.13:46898] [client 206.189.2.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z3xALHZyypBd8wYEz-bXJQAAABc"]
[Mon Jan 06 20:42:22.045116 2025] [:error] [pid 26558:tid 140138922014464] [client 206.189.2.13:46914] [client 206.189.2.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z3xALnZyypBd8wYEz-bXJgAAAAA"]
[Wed Jan 08 11:40:48.563333 2025] [:error] [pid 20542:tid 140578440279808] [client 64.226.78.121:51614] [client 64.226.78.121] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Z35kQIAHs__fEBNYDwt8mQAAAJQ"]
[Wed Jan 08 11:40:52.564358 2025] [authz_core:error] [pid 20542:tid 140578415101696] [client 64.226.78.121:51664] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Wed Jan 08 11:40:54.629601 2025] [:error] [pid 20542:tid 140578423494400] [client 64.226.78.121:51708] [client 64.226.78.121] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z35kRoAHs__fEBNYDwt8pAAAAJY"]
[Wed Jan 08 11:40:54.939878 2025] [:error] [pid 20542:tid 140578574563072] [client 64.226.78.121:51710] [client 64.226.78.121] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z35kRoAHs__fEBNYDwt8pQAAAIQ"]
[Wed Jan 08 15:35:42.212742 2025] [:error] [pid 20513:tid 140578431887104] [client 209.38.248.17:40662] [client 209.38.248.17] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Z36bTsmwim-UiHLVPlOMLwAAABU"]
[Wed Jan 08 15:35:47.512150 2025] [authz_core:error] [pid 20514:tid 140578566170368] [client 209.38.248.17:38982] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Wed Jan 08 15:35:50.389527 2025] [:error] [pid 20514:tid 140578499028736] [client 209.38.248.17:39012] [client 209.38.248.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z36bVvc5gaurBTvYkFYIuAAAAE0"]
[Wed Jan 08 15:35:50.857109 2025] [:error] [pid 20514:tid 140578574563072] [client 209.38.248.17:39024] [client 209.38.248.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z36bVvc5gaurBTvYkFYIuQAAAEQ"]
[Fri Jan 10 10:28:43.688100 2025] [:error] [pid 17939:tid 140364639864576] [client 157.230.19.140:45866] [client 157.230.19.140] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Z4D2W889LgOiHKw5Uf8NWQAAAA0"]
[Fri Jan 10 10:28:47.743816 2025] [authz_core:error] [pid 17939:tid 140364606293760] [client 157.230.19.140:45932] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Fri Jan 10 10:28:49.857507 2025] [:error] [pid 17939:tid 140364555937536] [client 157.230.19.140:45956] [client 157.230.19.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z4D2Yc89LgOiHKw5Uf8NXAAAABc"]
[Fri Jan 10 10:28:50.159721 2025] [:error] [pid 17940:tid 140364555937536] [client 157.230.19.140:45972] [client 157.230.19.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z4D2YsCtmkSFW0mpuNcqNwAAAFc"]
[Fri Jan 10 16:52:04.121309 2025] [:error] [pid 17968:tid 140364656649984] [client 46.101.111.185:49276] [client 46.101.111.185] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Z4FQNJPDm9GAxAJ9F9o-MwAAAIs"]
[Fri Jan 10 16:52:09.188133 2025] [authz_core:error] [pid 17940:tid 140364673435392] [client 46.101.111.185:49328] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Fri Jan 10 16:52:11.826906 2025] [:error] [pid 17939:tid 140364656649984] [client 46.101.111.185:51532] [client 46.101.111.185] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z4FQO889LgOiHKw5Uf8XowAAAAs"]
[Fri Jan 10 16:52:12.284734 2025] [:error] [pid 17968:tid 140364597901056] [client 46.101.111.185:51536] [client 46.101.111.185] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z4FQPJPDm9GAxAJ9F9o-NQAAAJI"]
[Fri Jan 10 19:25:27.082423 2025] [:error] [pid 17939:tid 140364824258304] [client 193.41.206.36:54418] [client 193.41.206.36] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z4F0J889LgOiHKw5Uf8anQAAAAA"]
[Sun Jan 12 11:09:43.991653 2025] [:error] [pid 23758:tid 140393999943424] [client 54.234.113.251:38382] [client 54.234.113.251] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z4Oi9_14t7Lj90XKnK7AJAAAANc"]
[Sun Jan 12 19:03:45.128980 2025] [:error] [pid 23652:tid 140394100655872] [client 167.172.232.142:53606] [client 167.172.232.142] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Z4QSEToqGVXqpxjqHkWLtAAAAAs"]
[Sun Jan 12 19:03:48.846247 2025] [authz_core:error] [pid 23681:tid 140394025121536] [client 167.172.232.142:53654] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Sun Jan 12 19:03:50.590082 2025] [:error] [pid 23652:tid 140394092263168] [client 167.172.232.142:53678] [client 167.172.232.142] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z4QSFjoqGVXqpxjqHkWLuwAAAAw"]
[Sun Jan 12 19:03:50.821743 2025] [:error] [pid 23652:tid 140394109048576] [client 167.172.232.142:53684] [client 167.172.232.142] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z4QSFjoqGVXqpxjqHkWLvAAAAAo"]
[Sun Jan 12 21:11:05.007267 2025] [:error] [pid 23653:tid 140394159404800] [client 45.148.10.69:35456] [client 45.148.10.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z4Qv6Sm5OQXmU054L2on3QAAAEQ"]
[Sun Jan 12 21:11:05.847338 2025] [:error] [pid 23653:tid 140394050299648] [client 45.148.10.69:35462] [client 45.148.10.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/api/.env"] [unique_id "Z4Qv6Sm5OQXmU054L2on3gAAAFE"]
[Sun Jan 12 21:11:09.284240 2025] [:error] [pid 23652:tid 140394134226688] [client 45.148.10.69:35486] [client 45.148.10.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.save"] [unique_id "Z4Qv7ToqGVXqpxjqHkWM4AAAAAc"]
[Sun Jan 12 21:11:10.272589 2025] [:error] [pid 23653:tid 140394245977856] [client 45.148.10.69:35498] [client 45.148.10.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.prod"] [unique_id "Z4Qv7im5OQXmU054L2on3wAAAEI"]
[Sun Jan 12 21:11:16.135379 2025] [:error] [pid 23652:tid 140394151012096] [client 45.148.10.69:51446] [client 45.148.10.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/login/.env"] [unique_id "Z4Qv9DoqGVXqpxjqHkWM4QAAAAU"]
[Sun Jan 12 21:11:16.935945 2025] [:error] [pid 23758:tid 140394041906944] [client 45.148.10.69:51460] [client 45.148.10.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/local/.env"] [unique_id "Z4Qv9P14t7Lj90XKnK7LxgAAANI"]
[Sun Jan 12 21:11:17.574914 2025] [:error] [pid 23758:tid 140393999943424] [client 45.148.10.69:51468] [client 45.148.10.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/admin/.env"] [unique_id "Z4Qv9f14t7Lj90XKnK7LxwAAANc"]
[Sun Jan 12 21:11:33.437366 2025] [:error] [pid 23758:tid 140394075477760] [client 45.148.10.69:58124] [client 45.148.10.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/dev/.env"] [unique_id "Z4QwBf14t7Lj90XKnK7LywAAAM4"]
[Sun Jan 12 21:11:34.278656 2025] [:error] [pid 23681:tid 140394237585152] [client 45.148.10.69:49348] [client 45.148.10.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/application/.env"] [unique_id "Z4QwBls5CSohM6PN7gBIswAAAIM"]
[Mon Jan 13 15:42:39.219778 2025] [:error] [pid 15279:tid 140637101819648] [client 82.197.70.112:55274] [client 82.197.70.112] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z4U0b5J-88bafEPs5I2hdQAAAFE"]
[Mon Jan 13 15:42:40.736537 2025] [:error] [pid 15279:tid 140637043070720] [client 82.197.70.112:55284] [client 82.197.70.112] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/config/.env"] [unique_id "Z4U0cJJ-88bafEPs5I2hdgAAAFg"]
[Mon Jan 13 15:42:42.707026 2025] [:error] [pid 15279:tid 140637076641536] [client 82.197.70.112:55298] [client 82.197.70.112] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.production"] [unique_id "Z4U0cpJ-88bafEPs5I2hdwAAAFQ"]
[Mon Jan 13 15:43:01.792620 2025] [:error] [pid 15278:tid 140637085034240] [client 82.197.70.112:55376] [client 82.197.70.112] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/api/.env"] [unique_id "Z4U0hReUk_tS0g4vopCnywAAABM"]
[Tue Jan 14 11:06:46.662184 2025] [:error] [pid 7393:tid 140295895209728] [client 64.227.32.66:33382] [client 64.227.32.66] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Z4ZFRlby-zyd2vFklxTchgAAABE"]
[Tue Jan 14 11:06:50.493289 2025] [authz_core:error] [pid 7394:tid 140296057247488] [client 64.227.32.66:33442] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Tue Jan 14 11:06:52.538616 2025] [:error] [pid 7394:tid 140295911995136] [client 64.227.32.66:33476] [client 64.227.32.66] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z4ZFTORdljzqSUT8KFBCDgAAAE8"]
[Tue Jan 14 11:06:52.843728 2025] [:error] [pid 26677:tid 140295870031616] [client 64.227.32.66:33478] [client 64.227.32.66] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z4ZFTN721qoiU2fLgL3VNgAAANQ"]
[Tue Jan 14 20:43:11.464444 2025] [:error] [pid 7393:tid 140296099211008] [client 167.99.182.39:38142] [client 167.99.182.39] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Z4bMX1by-zyd2vFklxTxxgAAAAE"]
[Tue Jan 14 20:43:14.581842 2025] [authz_core:error] [pid 7393:tid 140295870031616] [client 167.99.182.39:38214] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Tue Jan 14 20:43:16.189080 2025] [:error] [pid 7393:tid 140295861638912] [client 167.99.182.39:38236] [client 167.99.182.39] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z4bMZFby-zyd2vFklxTx0QAAABU"]
[Tue Jan 14 20:43:16.388579 2025] [:error] [pid 7393:tid 140295953958656] [client 167.99.182.39:38244] [client 167.99.182.39] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z4bMZFby-zyd2vFklxTx0gAAAAo"]
[Wed Jan 15 17:26:34.414744 2025] [:error] [pid 32364:tid 140263607420672] [client 64.181.221.136:59027] [client 64.181.221.136] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z4fvypJrhOCuC2KbVFBrEAAAABU"]
[Thu Jan 16 03:46:30.688993 2025] [authz_core:error] [pid 26515:tid 139945696012032] [client 128.199.182.152:36848] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Thu Jan 16 03:46:33.808943 2025] [:error] [pid 26515:tid 139945637263104] [client 128.199.182.152:37958] [client 128.199.182.152] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z4iBGdAgvdYWachHztFXtQAAAEw"]
[Thu Jan 16 03:46:34.384230 2025] [:error] [pid 26515:tid 139945628870400] [client 128.199.182.152:37970] [client 128.199.182.152] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z4iBGtAgvdYWachHztFXtgAAAE0"]
[Thu Jan 16 19:39:09.874339 2025] [:error] [pid 26515:tid 139945696012032] [client 209.38.208.202:40030] [client 209.38.208.202] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Z4lgXdAgvdYWachHztFo2QAAAEU"]
[Thu Jan 16 19:39:13.797114 2025] [authz_core:error] [pid 26515:tid 139945536550656] [client 209.38.208.202:40078] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Thu Jan 16 19:39:16.066725 2025] [:error] [pid 26515:tid 139945679226624] [client 209.38.208.202:40114] [client 209.38.208.202] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z4lgZNAgvdYWachHztFo5AAAAEc"]
[Thu Jan 16 19:39:16.372244 2025] [:error] [pid 26515:tid 139945662441216] [client 209.38.208.202:40124] [client 209.38.208.202] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z4lgZNAgvdYWachHztFo5QAAAEk"]
[Fri Jan 17 11:32:50.647335 2025] [:error] [pid 19971:tid 140320498984704] [client 193.41.206.98:44792] [client 193.41.206.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z4o_4tOEdPMHMEPGxNOBBgAAABA"]
[Fri Jan 17 11:37:25.047398 2025] [:error] [pid 19971:tid 140320608089856] [client 193.41.206.98:49978] [client 193.41.206.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/beta/.env"] [unique_id "Z4pA9dOEdPMHMEPGxNOBJwAAAAM"]
[Fri Jan 17 11:37:40.370202 2025] [:error] [pid 19971:tid 140320465413888] [client 193.41.206.98:44758] [client 193.41.206.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/kyc/.env"] [unique_id "Z4pBBNOEdPMHMEPGxNOBLgAAABQ"]
[Fri Jan 17 11:37:55.461257 2025] [:error] [pid 19989:tid 140320599697152] [client 193.41.206.98:54242] [client 193.41.206.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/admin/.env"] [unique_id "Z4pBEzfpAAL3790_C8XyegAAAIQ"]
[Sat Jan 18 01:31:55.063693 2025] [:error] [pid 19989:tid 140320457021184] [client 82.197.70.112:60032] [client 82.197.70.112] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z4sEizfpAAL3790_C8UBhwAAAJU"]
[Sat Jan 18 01:31:55.993037 2025] [:error] [pid 19989:tid 140320473806592] [client 82.197.70.112:60060] [client 82.197.70.112] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/config/.env"] [unique_id "Z4sEizfpAAL3790_C8UBiQAAAJM"]
[Sat Jan 18 01:31:56.851381 2025] [:error] [pid 19971:tid 140320591304448] [client 82.197.70.112:60070] [client 82.197.70.112] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.production"] [unique_id "Z4sEjNOEdPMHMEPGxNOOjQAAAAU"]
[Sat Jan 18 01:31:58.104092 2025] [:error] [pid 19989:tid 140320440235776] [client 82.197.70.112:60080] [client 82.197.70.112] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.local"] [unique_id "Z4sEjjfpAAL3790_C8UBigAAAJc"]
[Sat Jan 18 01:32:01.099045 2025] [:error] [pid 19989:tid 140320507377408] [client 82.197.70.112:60118] [client 82.197.70.112] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/api/.env"] [unique_id "Z4sEkTfpAAL3790_C8UBjgAAAI8"]
[Sat Jan 18 05:02:56.318331 2025] [:error] [pid 20086:tid 140611189470976] [client 164.92.107.174:46680] [client 164.92.107.174] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Z4s2AK8vV-2lYgJj6iosuwAAAAA"]
[Sat Jan 18 05:02:59.119807 2025] [authz_core:error] [pid 20088:tid 140611004831488] [client 164.92.107.174:46736] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Sat Jan 18 05:03:00.300754 2025] [:error] [pid 20087:tid 140611013224192] [client 164.92.107.174:53428] [client 164.92.107.174] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z4s2BHq7zGpaUNjzxCchBQAAAFU"]
[Sat Jan 18 05:03:00.361390 2025] [:error] [pid 20086:tid 140610988046080] [client 164.92.107.174:53440] [client 164.92.107.174] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z4s2BK8vV-2lYgJj6iosvgAAABg"]
[Sat Jan 18 19:17:27.311721 2025] [:error] [pid 20087:tid 140611139114752] [client 165.227.39.235:43566] [client 165.227.39.235] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Z4v-R3q7zGpaUNjzxCcwQQAAAEY"]
[Sat Jan 18 19:17:30.275457 2025] [authz_core:error] [pid 20087:tid 140611113936640] [client 165.227.39.235:55412] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Sat Jan 18 19:17:31.896128 2025] [:error] [pid 20087:tid 140611038402304] [client 165.227.39.235:55430] [client 165.227.39.235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z4v-S3q7zGpaUNjzxCcwSwAAAFI"]
[Sat Jan 18 19:17:32.029962 2025] [:error] [pid 20088:tid 140611030009600] [client 165.227.39.235:55440] [client 165.227.39.235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z4v-TJAneFhUwr6yI-be8QAAAJM"]
[Sat Jan 18 23:29:49.055910 2025] [:error] [pid 20087:tid 140611021616896] [client 82.197.70.112:57502] [client 82.197.70.112] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z4w5bXq7zGpaUNjzxCcygQAAAFQ"]
[Sat Jan 18 23:29:50.531705 2025] [:error] [pid 20086:tid 140610988046080] [client 82.197.70.112:57516] [client 82.197.70.112] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/config/.env"] [unique_id "Z4w5bq8vV-2lYgJj6io8swAAABg"]
[Sat Jan 18 23:29:51.514096 2025] [:error] [pid 20649:tid 140611172685568] [client 82.197.70.112:57528] [client 82.197.70.112] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.production"] [unique_id "Z4w5b3rjAELeRyUYs2vf8QAAAMI"]
[Sat Jan 18 23:29:52.515608 2025] [:error] [pid 20086:tid 140611181078272] [client 82.197.70.112:57530] [client 82.197.70.112] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.local"] [unique_id "Z4w5cK8vV-2lYgJj6io8tAAAAAE"]
[Sat Jan 18 23:29:54.500058 2025] [:error] [pid 20649:tid 140611189470976] [client 82.197.70.112:51888] [client 82.197.70.112] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/api/.env"] [unique_id "Z4w5cnrjAELeRyUYs2vf8gAAAMA"]
[Tue Jan 21 09:15:23.291604 2025] [:error] [pid 21439:tid 140512942061312] [client 45.148.10.86:58584] [client 45.148.10.86] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z49lq1m01B1i0XcOnl_1awAAAEw"]
[Tue Jan 21 19:47:44.626978 2025] [:error] [pid 21439:tid 140513088415488] [client 45.148.10.172:47706] [client 45.148.10.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z4_54Fm01B1i0XcOnl8FjAAAAEM"]
[Thu Jan 23 17:09:00.814122 2025] [:error] [pid 23625:tid 140217923135232] [client 45.148.10.86:44182] [client 45.148.10.86] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z5J3rBnRgeKb1-wF3yiqCAAAAIc"]
[Thu Jan 23 19:08:03.273122 2025] [:error] [pid 23625:tid 140217814030080] [client 87.120.126.158:59028] [client 87.120.126.158] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z5KTkxnRgeKb1-wF3yitOwAAAJQ"]
[Thu Jan 23 19:08:06.521781 2025] [:error] [pid 23623:tid 140217814030080] [client 87.120.126.158:59038] [client 87.120.126.158] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z5KTlodQXHzcY41_Siam4AAAABQ"]
[Sun Jan 26 19:28:28.899711 2025] [:error] [pid 19191:tid 140620660881152] [client 167.99.182.39:44888] [client 167.99.182.39] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Z5aM3GNsIuyZt76FgE0NuAAAAIE"]
[Sun Jan 26 19:28:31.757697 2025] [authz_core:error] [pid 19191:tid 140620492392192] [client 167.99.182.39:44926] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Sun Jan 26 19:28:33.161247 2025] [:error] [pid 19191:tid 140620534355712] [client 167.99.182.39:44960] [client 167.99.182.39] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z5aM4WNsIuyZt76FgE0NwQAAAIg"]
[Sun Jan 26 19:28:33.317204 2025] [:error] [pid 19162:tid 140620433643264] [client 167.99.182.39:44972] [client 167.99.182.39] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z5aM4Uhlt-2NVV07BndzRgAAABQ"]
[Sun Jan 26 23:03:15.640007 2025] [:error] [pid 19740:tid 140620525963008] [client 167.99.210.137:59776] [client 167.99.210.137] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Z5a_M2FbPDvt07MO3LRczgAAAMk"]
[Sun Jan 26 23:03:20.515628 2025] [authz_core:error] [pid 19163:tid 140620559533824] [client 167.99.210.137:40898] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Sun Jan 26 23:03:23.163038 2025] [:error] [pid 19163:tid 140620442035968] [client 167.99.210.137:40936] [client 167.99.210.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z5a_O0v149MUAhPEojGlGAAAAFM"]
[Sun Jan 26 23:03:23.622172 2025] [:error] [pid 19163:tid 140620467214080] [client 167.99.210.137:40940] [client 167.99.210.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z5a_O0v149MUAhPEojGlGQAAAFA"]
[Mon Jan 27 14:49:02.087404 2025] [:error] [pid 14624:tid 140353869833984] [client 185.161.210.245:43766] [client 185.161.210.245] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z5ec3pdb93aOTqx2ZuCJowAAAII"]
[Tue Jan 28 07:52:51.261348 2025] [:error] [pid 11731:tid 140010422527744] [client 3.96.54.77:45564] [client 3.96.54.77] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z5iM04Pef5y27CTzBDuZdgAAAME"]
[Tue Jan 28 16:03:04.285137 2025] [:error] [pid 11321:tid 140010414135040] [client 206.189.225.181:48986] [client 206.189.225.181] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Z5j_uCngVvJRJNBmitXXyAAAAII"]
[Tue Jan 28 16:03:07.845037 2025] [authz_core:error] [pid 11731:tid 140010372171520] [client 206.189.225.181:36176] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Tue Jan 28 16:03:09.852934 2025] [:error] [pid 11292:tid 140010414135040] [client 206.189.225.181:36210] [client 206.189.225.181] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z5j_vUwDDlgElzE1Z0c8SQAAAAI"]
[Tue Jan 28 16:03:10.099150 2025] [:error] [pid 11292:tid 140010305029888] [client 206.189.225.181:36218] [client 206.189.225.181] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z5j_vkwDDlgElzE1Z0c8SgAAAA8"]
[Wed Jan 29 02:22:24.368460 2025] [:error] [pid 11731:tid 140010296637184] [client 64.225.75.246:36236] [client 64.225.75.246] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Z5mQ4IPef5y27CTzBDuyQAAAANA"]
[Wed Jan 29 02:22:28.246031 2025] [authz_core:error] [pid 11731:tid 140010263066368] [client 64.225.75.246:52728] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Wed Jan 29 02:22:30.282318 2025] [:error] [pid 11292:tid 140010330208000] [client 64.225.75.246:52758] [client 64.225.75.246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z5mQ5kwDDlgElzE1Z0dBTgAAAAw"]
[Wed Jan 29 02:22:30.582517 2025] [:error] [pid 11292:tid 140010372171520] [client 64.225.75.246:52770] [client 64.225.75.246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z5mQ5kwDDlgElzE1Z0dBTwAAAAc"]
[Thu Jan 30 01:59:41.434163 2025] [:error] [pid 9095:tid 139816855353088] [client 45.148.10.86:36424] [client 45.148.10.86] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z5rdDX0teicEpGTD3C4-1gAAAA4"]
[Thu Jan 30 14:41:54.981006 2025] [:error] [pid 32613:tid 140689396410112] [client 64.226.65.160:59828] [client 64.226.65.160] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Z5uPstaGqTod25-tpi4mVgAAANQ"]
[Thu Jan 30 14:41:59.957477 2025] [authz_core:error] [pid 7001:tid 140689404802816] [client 64.226.65.160:35246] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Thu Jan 30 14:42:02.745719 2025] [:error] [pid 32613:tid 140689617565440] [client 64.226.65.160:35288] [client 64.226.65.160] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z5uPutaGqTod25-tpi4mVwAAAMI"]
[Thu Jan 30 14:42:03.210246 2025] [:error] [pid 32613:tid 140689362839296] [client 64.226.65.160:35290] [client 64.226.65.160] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z5uPu9aGqTod25-tpi4mWAAAANg"]
[Fri Jan 31 00:11:40.249391 2025] [:error] [pid 7000:tid 140689480337152] [client 209.38.248.17:41754] [client 209.38.248.17] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Z5wVPHKQ9soLQ0_Lm9kJLgAAAAo"]
[Fri Jan 31 00:11:44.070682 2025] [authz_core:error] [pid 32613:tid 140689505515264] [client 209.38.248.17:41820] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Fri Jan 31 00:11:46.112553 2025] [:error] [pid 32613:tid 140689421588224] [client 209.38.248.17:41864] [client 209.38.248.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z5wVQtaGqTod25-tpi4xkwAAANE"]
[Fri Jan 31 00:11:46.422478 2025] [:error] [pid 32613:tid 140689388017408] [client 209.38.248.17:41880] [client 209.38.248.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z5wVQtaGqTod25-tpi4xlAAAANU"]
[Fri Jan 31 04:26:31.598565 2025] [:error] [pid 8526:tid 139867195393792] [client 103.102.230.8:50512] [client 103.102.230.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z5xQ97Z6CuUvXmiL4m82wAAAABA"]
[Fri Jan 31 20:13:10.626957 2025] [:error] [pid 8527:tid 139867136644864] [client 158.220.108.107:57730] [client 158.220.108.107] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z50u1iMl7_ZTpbcHYQUfbwAAAFc"]
[Fri Jan 31 20:13:10.799753 2025] [:error] [pid 8527:tid 139867382183680] [client 158.220.108.107:37608] [client 158.220.108.107] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z50u1iMl7_ZTpbcHYQUfcAAAAEI"]
[Sat Feb 01 13:14:30.669600 2025] [authz_core:error] [pid 6328:tid 139818793117440] [client 64.23.218.208:33022] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Sat Feb 01 13:14:31.876805 2025] [:error] [pid 6328:tid 139818759546624] [client 64.23.218.208:33072] [client 64.23.218.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z54eN11GkE8JIfdpOgbgwAAAANQ"]
[Sat Feb 01 13:14:31.937297 2025] [:error] [pid 6006:tid 139818767939328] [client 64.23.218.208:33078] [client 64.23.218.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z54eN6VTiYNKLpDZ0Q69bAAAAFM"]
[Sun Feb 02 17:08:56.099395 2025] [:error] [pid 5006:tid 140164881954560] [client 188.166.108.93:59994] [client 188.166.108.93] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Z5-mqMgu8SFoVAW8LoNXLgAAAEk"]
[Sun Feb 02 17:09:01.151438 2025] [authz_core:error] [pid 30549:tid 140164915525376] [client 188.166.108.93:60056] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Sun Feb 02 17:09:04.709662 2025] [:error] [pid 30549:tid 140164772849408] [client 188.166.108.93:47526] [client 188.166.108.93] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z5-msLCUdXnsb2A60u5UzwAAANY"]
[Sun Feb 02 17:09:05.173473 2025] [:error] [pid 5034:tid 140164839991040] [client 188.166.108.93:47530] [client 188.166.108.93] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z5-msemLyoMOu3t1dTlU5gAAAI4"]
[Sun Feb 02 17:54:53.154920 2025] [:error] [pid 30549:tid 140164764456704] [client 167.71.81.114:56972] [client 167.71.81.114] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Z5-xbbCUdXnsb2A60u5VMgAAANc"]
[Sun Feb 02 17:54:56.069547 2025] [authz_core:error] [pid 5005:tid 140165015107328] [client 167.71.81.114:57042] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Sun Feb 02 17:54:57.518051 2025] [:error] [pid 5034:tid 140164806420224] [client 167.71.81.114:57086] [client 167.71.81.114] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z5-xcemLyoMOu3t1dTlVcgAAAJI"]
[Sun Feb 02 17:54:57.725725 2025] [:error] [pid 5005:tid 140164898739968] [client 167.71.81.114:57088] [client 167.71.81.114] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z5-xcRQDu62aiZypqvX8dwAAAAc"]
[Mon Feb 03 01:55:06.515543 2025] [:error] [pid 5034:tid 140165015107328] [client 45.148.10.86:58684] [client 45.148.10.86] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z6Ah-umLyoMOu3t1dTlYEgAAAII"]
[Mon Feb 03 13:52:43.001100 2025] [:error] [pid 1622:tid 140713605957376] [client 95.111.244.79:36928] [client 95.111.244.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z6DKK5Zx3pQWrkIHg_ep6AAAAEg"]
[Tue Feb 04 02:09:19.947707 2025] [:error] [pid 1647:tid 140713572386560] [client 207.154.212.47:39478] [client 207.154.212.47] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Z6F2z-ekA6_wHcmYxkEnBgAAAIw"]
[Tue Feb 04 02:09:23.936140 2025] [authz_core:error] [pid 1647:tid 140713664706304] [client 207.154.212.47:39554] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Tue Feb 04 02:09:25.968794 2025] [:error] [pid 1647:tid 140713647920896] [client 207.154.212.47:43556] [client 207.154.212.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z6F21eekA6_wHcmYxkEnEQAAAIM"]
[Tue Feb 04 02:09:26.279360 2025] [:error] [pid 1647:tid 140713471674112] [client 207.154.212.47:43572] [client 207.154.212.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z6F21uekA6_wHcmYxkEnEgAAAJg"]
[Tue Feb 04 13:03:43.427611 2025] [:error] [pid 10662:tid 140615257933568] [client 165.22.235.3:60986] [client 165.22.235.3] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Z6IQL-AD1Ssrsq4NpYr2HAAAAMo"]
[Tue Feb 04 13:03:46.655627 2025] [authz_core:error] [pid 10662:tid 140615360235264] [client 165.22.235.3:37156] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Tue Feb 04 13:03:48.238155 2025] [:error] [pid 29882:tid 140615157221120] [client 165.22.235.3:37184] [client 165.22.235.3] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z6IQNNXqoXsjiDJUI9gJZgAAABY"]
[Tue Feb 04 13:03:48.432494 2025] [:error] [pid 10662:tid 140615165613824] [client 165.22.235.3:37196] [client 165.22.235.3] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z6IQNOAD1Ssrsq4NpYr2JwAAANU"]
[Thu Feb 06 04:28:50.264695 2025] [:error] [pid 17407:tid 140186423867136] [client 206.81.24.227:44506] [client 206.81.24.227] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Z6Q6gsiSEzz6D8hs5gv1hwAAAMw"]
[Thu Feb 06 04:28:54.332981 2025] [authz_core:error] [pid 17407:tid 140186398689024] [client 206.81.24.227:44582] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Thu Feb 06 04:28:56.430823 2025] [:error] [pid 17407:tid 140186356725504] [client 206.81.24.227:35060] [client 206.81.24.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z6Q6iMiSEzz6D8hs5gv1iwAAANQ"]
[Thu Feb 06 04:28:56.741933 2025] [:error] [pid 17007:tid 140186381903616] [client 206.81.24.227:35066] [client 206.81.24.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z6Q6iKr8n7PQDe6uZ8HhAAAAABE"]
[Thu Feb 06 08:21:38.729397 2025] [:error] [pid 17043:tid 140186356725504] [client 128.199.182.77:34208] [client 128.199.182.77] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Z6RxEtDnD6GKfXEa5o6zsgAAAJQ"]
[Thu Feb 06 08:21:44.441770 2025] [authz_core:error] [pid 17407:tid 140186331547392] [client 128.199.182.77:40358] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Thu Feb 06 08:21:47.554549 2025] [:error] [pid 17407:tid 140186323154688] [client 128.199.182.77:40390] [client 128.199.182.77] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z6RxG8iSEzz6D8hs5gv26gAAANg"]
[Thu Feb 06 08:21:48.125487 2025] [:error] [pid 17407:tid 140186356725504] [client 128.199.182.77:40406] [client 128.199.182.77] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z6RxHMiSEzz6D8hs5gv26wAAANQ"]
[Fri Feb 07 06:17:12.967607 2025] [:error] [pid 16020:tid 139963093960448] [client 194.233.82.52:53226] [client 194.233.82.52] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z6WlaG5VJ4lHKLEBYTrz5QAAAMw"]
[Fri Feb 07 06:17:17.368824 2025] [:error] [pid 16020:tid 139963085567744] [client 194.233.82.52:48494] [client 194.233.82.52] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/config/.env"] [unique_id "Z6WlbW5VJ4lHKLEBYTrz5gAAAM0"]
[Fri Feb 07 14:10:48.763476 2025] [:error] [pid 11052:tid 139963161102080] [client 159.89.12.166:44426] [client 159.89.12.166] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Z6YUaHPmGcb7h2Eomr4aWwAAAIQ"]
[Fri Feb 07 14:10:53.751987 2025] [authz_core:error] [pid 11916:tid 139963043604224] [client 159.89.12.166:44492] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Fri Feb 07 14:10:56.664422 2025] [:error] [pid 11916:tid 139963135923968] [client 159.89.12.166:58566] [client 159.89.12.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z6YUcBW1XOfhzReW-xuEkQAAAUc"]
[Fri Feb 07 14:10:57.132227 2025] [:error] [pid 11051:tid 139963077175040] [client 159.89.12.166:58574] [client 159.89.12.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z6YUcYegNoDLCNy2-smbmQAAAA4"]
[Sat Feb 08 16:25:27.835586 2025] [:error] [pid 18155:tid 139822232487680] [client 165.22.34.189:52200] [client 165.22.34.189] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Z6eFd8WIMJqTI2FtJ3jEgAAAAIQ"]
[Sat Feb 08 16:25:31.930516 2025] [authz_core:error] [pid 18126:tid 139822173738752] [client 165.22.34.189:52262] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Sat Feb 08 16:25:35.073131 2025] [:error] [pid 18155:tid 139822340028160] [client 165.22.34.189:41370] [client 165.22.34.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z6eFf8WIMJqTI2FtJ3jEggAAAIA"]
[Sat Feb 08 16:25:35.389481 2025] [:error] [pid 18127:tid 139822114989824] [client 165.22.34.189:41384] [client 165.22.34.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z6eFf9itaEp5MgUuqktZlwAAAFI"]
[Sat Feb 08 22:45:22.312768 2025] [:error] [pid 18126:tid 139822224094976] [client 45.148.10.172:44164] [client 45.148.10.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z6feggKpSn-Me3oqcUN2nAAAAAU"]
[Sat Feb 08 23:57:31.464819 2025] [:error] [pid 18630:tid 139822089811712] [client 194.233.73.109:36828] [client 194.233.73.109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z6fvaw6ysoOGAUstSirNywAAANU"]
[Sun Feb 09 03:41:26.680319 2025] [:error] [pid 18669:tid 139702913988352] [client 45.148.10.86:58020] [client 45.148.10.86] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z6gj5nPvxJhbdvJ1Kjnx0QAAAAA"]
[Sun Feb 09 06:55:14.367631 2025] [:error] [pid 19180:tid 139702888810240] [client 172.96.14.186:56963] [client 172.96.14.186] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z6hRUq6HMYmFVkvKailYHgAAAMM"]
[Sun Feb 09 07:17:17.860114 2025] [:error] [pid 18670:tid 139702770317056] [client 92.119.36.142:26641] [client 92.119.36.142] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z6hWfeFLKC57vUv42jGOvAAAAEk"]
[Sun Feb 09 11:28:40.116156 2025] [:error] [pid 18670:tid 139702761924352] [client 87.120.126.158:59788] [client 87.120.126.158] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z6iRaOFLKC57vUv42jGQxgAAAEo"]
[Sun Feb 09 11:28:42.344490 2025] [:error] [pid 18669:tid 139702669604608] [client 87.120.126.158:59820] [client 87.120.126.158] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z6iRanPvxJhbdvJ1Kjn0FwAAABU"]
[Sun Feb 09 20:08:38.524623 2025] [:error] [pid 18670:tid 139702669604608] [client 45.148.10.172:35320] [client 45.148.10.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z6kLRuFLKC57vUv42jGXqQAAAFU"]
[Mon Feb 10 02:31:09.347434 2025] [:error] [pid 18686:tid 139702661211904] [client 176.65.134.181:53246] [client 176.65.134.181] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z6lk7TUojxZjAn364UzR6AAAAJY"]
[Mon Feb 10 03:56:07.450491 2025] [autoindex:error] [pid 19180:tid 139702703175424] [client 192.207.62.223:64469] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 10 03:56:09.247184 2025] [autoindex:error] [pid 19180:tid 139702677997312] [client 192.207.62.223:64469] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 10 04:42:17.319257 2025] [autoindex:error] [pid 12722:tid 139815362205440] [client 192.207.62.223:52259] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 10 04:42:19.074225 2025] [autoindex:error] [pid 12722:tid 139815286671104] [client 192.207.62.223:52259] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 10 10:56:25.285835 2025] [:error] [pid 13220:tid 139815311849216] [client 193.41.206.176:54896] [client 193.41.206.176] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/httpd.conf"] [unique_id "Z6nbWUx7UPaeUeUALHqcAgAAANI"]
[Mon Feb 10 10:57:07.292578 2025] [:error] [pid 12693:tid 139815269885696] [client 193.41.206.176:39502] [client 193.41.206.176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/blog/.env"] [unique_id "Z6nbgy5BLlsnXkKQrESsWwAAABc"]
[Mon Feb 10 10:57:26.234801 2025] [:error] [pid 12694:tid 139815337027328] [client 193.41.206.176:38414] [client 193.41.206.176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/protected/.env"] [unique_id "Z6nblsyUzEQFw4BjUJ_OZgAAAE8"]
[Mon Feb 10 22:48:53.715702 2025] [:error] [pid 12694:tid 139815261492992] [client 194.233.82.52:43358] [client 194.233.82.52] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z6qCVcyUzEQFw4BjUJ_a0AAAAFg"]
[Mon Feb 10 22:48:57.251835 2025] [:error] [pid 12694:tid 139815269885696] [client 194.233.82.52:58984] [client 194.233.82.52] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/config/.env"] [unique_id "Z6qCWcyUzEQFw4BjUJ_a0QAAAFc"]
[Mon Feb 10 22:49:00.645687 2025] [:error] [pid 12694:tid 139815362205440] [client 194.233.82.52:58990] [client 194.233.82.52] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.production"] [unique_id "Z6qCXMyUzEQFw4BjUJ_a0gAAAEw"]
[Tue Feb 11 01:50:38.351796 2025] [:error] [pid 12694:tid 139815286671104] [client 172.245.168.179:53086] [client 172.245.168.179] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".0.0.1.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/127.0.0.1.bak"] [unique_id "Z6qs7syUzEQFw4BjUJ_bnwAAAFU"]
[Tue Feb 11 01:50:38.353619 2025] [:error] [pid 12722:tid 139815345420032] [client 172.245.168.179:53016] [client 172.245.168.179] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/1.bak"] [unique_id "Z6qs7qTR_0oJS4SYdrd6cgAAAI4"]
[Tue Feb 11 01:50:38.398429 2025] [:error] [pid 12694:tid 139815387383552] [client 172.245.168.179:53042] [client 172.245.168.179] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/1.sql"] [unique_id "Z6qs7syUzEQFw4BjUJ_bowAAAEk"]
[Tue Feb 11 01:50:38.402961 2025] [:error] [pid 12722:tid 139815303456512] [client 172.245.168.179:53114] [client 172.245.168.179] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".0.0.1.sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/127.0.0.1.sql"] [unique_id "Z6qs7qTR_0oJS4SYdrd6ewAAAJM"]
[Tue Feb 11 01:50:38.700421 2025] [:error] [pid 13220:tid 139815520024320] [client 172.245.168.179:53184] [client 172.245.168.179] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/2010.bak"] [unique_id "Z6qs7kx7UPaeUeUALHqtrQAAAMI"]
[Tue Feb 11 01:50:38.701636 2025] [:error] [pid 13220:tid 139815511631616] [client 172.245.168.179:53226] [client 172.245.168.179] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/2010.sql"] [unique_id "Z6qs7kx7UPaeUeUALHqtrwAAAMM"]
[Tue Feb 11 01:50:39.239678 2025] [:error] [pid 12694:tid 139815362205440] [client 172.245.168.179:53320] [client 172.245.168.179] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/2011.sql"] [unique_id "Z6qs78yUzEQFw4BjUJ_bqAAAAEw"]
[Tue Feb 11 01:50:39.265795 2025] [:error] [pid 3493:tid 139815536809728] [client 172.245.168.179:53288] [client 172.245.168.179] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/2011.bak"] [unique_id "Z6qs77WBnjuYtVtaD_0_nQAAAQA"]
[Tue Feb 11 01:50:39.282215 2025] [:error] [pid 12722:tid 139815404168960] [client 172.245.168.179:53372] [client 172.245.168.179] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/2012.bak"] [unique_id "Z6qs76TR_0oJS4SYdrd6fgAAAIc"]
[Tue Feb 11 01:50:39.282403 2025] [:error] [pid 13220:tid 139815412561664] [client 172.245.168.179:53404] [client 172.245.168.179] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/2012.sql"] [unique_id "Z6qs70x7UPaeUeUALHqtuAAAAMY"]
[Tue Feb 11 01:50:39.425501 2025] [:error] [pid 13220:tid 139815378990848] [client 172.245.168.179:53486] [client 172.245.168.179] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/2013.bak"] [unique_id "Z6qs70x7UPaeUeUALHqtvAAAAMo"]
[Tue Feb 11 01:50:39.562671 2025] [:error] [pid 3493:tid 139815503238912] [client 172.245.168.179:53518] [client 172.245.168.179] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/2013.sql"] [unique_id "Z6qs77WBnjuYtVtaD_0_ngAAAQQ"]
[Tue Feb 11 01:50:40.107372 2025] [:error] [pid 12722:tid 139815494846208] [client 172.245.168.179:53678] [client 172.245.168.179] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/new.bak"] [unique_id "Z6qs8KTR_0oJS4SYdrd6hgAAAIU"]
[Tue Feb 11 01:50:40.136312 2025] [:error] [pid 12722:tid 139815345420032] [client 172.245.168.179:53770] [client 172.245.168.179] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/old.bak"] [unique_id "Z6qs8KTR_0oJS4SYdrd6iQAAAI4"]
[Tue Feb 11 01:50:40.140137 2025] [:error] [pid 3521:tid 139815494846208] [client 172.245.168.179:53794] [client 172.245.168.179] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/old.sql"] [unique_id "Z6qs8BVf7BGXXASqDSlrzAAAAUU"]
[Tue Feb 11 01:50:40.146116 2025] [:error] [pid 3521:tid 139815503238912] [client 172.245.168.179:53706] [client 172.245.168.179] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/new.sql"] [unique_id "Z6qs8BVf7BGXXASqDSlrzQAAAUQ"]
[Tue Feb 11 07:21:03.328719 2025] [:error] [pid 11749:tid 139637473392384] [client 172.245.168.179:56770] [client 172.245.168.179] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/1.bak"] [unique_id "Z6r6X3KKHnMJI6xnR1HMKQAAAEQ"]
[Tue Feb 11 07:21:03.385978 2025] [:error] [pid 11748:tid 139637456606976] [client 172.245.168.179:56800] [client 172.245.168.179] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/1.sql"] [unique_id "Z6r6X1YUOX5qQN4lqaePogAAAAY"]
[Tue Feb 11 07:21:03.895534 2025] [:error] [pid 11894:tid 139637498570496] [client 172.245.168.179:56844] [client 172.245.168.179] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".0.0.1.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/127.0.0.1.bak"] [unique_id "Z6r6X0UWF3b65_COXBNwjAAAAME"]
[Tue Feb 11 07:21:04.207503 2025] [:error] [pid 11777:tid 139637330716416] [client 172.245.168.179:56870] [client 172.245.168.179] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".0.0.1.sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/127.0.0.1.sql"] [unique_id "Z6r6YMLL8XeDOTela0eBGwAAAJU"]
[Tue Feb 11 07:21:04.572239 2025] [:error] [pid 11749:tid 139637406250752] [client 172.245.168.179:56912] [client 172.245.168.179] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/2010.bak"] [unique_id "Z6r6YHKKHnMJI6xnR1HMMAAAAEw"]
[Tue Feb 11 07:21:04.735817 2025] [:error] [pid 11748:tid 139637389465344] [client 172.245.168.179:56942] [client 172.245.168.179] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/2010.sql"] [unique_id "Z6r6YFYUOX5qQN4lqaePpgAAAA4"]
[Tue Feb 11 07:21:05.149028 2025] [:error] [pid 11749:tid 139637364287232] [client 172.245.168.179:57020] [client 172.245.168.179] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/2011.bak"] [unique_id "Z6r6YXKKHnMJI6xnR1HMMgAAAFE"]
[Tue Feb 11 07:21:05.257549 2025] [:error] [pid 11777:tid 139637473392384] [client 172.245.168.179:57060] [client 172.245.168.179] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/2011.sql"] [unique_id "Z6r6YcLL8XeDOTela0eBIQAAAIQ"]
[Tue Feb 11 07:21:05.510584 2025] [:error] [pid 11894:tid 139637431428864] [client 172.245.168.179:57140] [client 172.245.168.179] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/2012.bak"] [unique_id "Z6r6YUUWF3b65_COXBNwlAAAAMk"]
[Tue Feb 11 07:21:05.599105 2025] [:error] [pid 11894:tid 139637423036160] [client 172.245.168.179:57162] [client 172.245.168.179] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/2012.sql"] [unique_id "Z6r6YUUWF3b65_COXBNwlgAAAMo"]
[Tue Feb 11 07:21:05.919795 2025] [:error] [pid 11894:tid 139637389465344] [client 172.245.168.179:57220] [client 172.245.168.179] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/2013.bak"] [unique_id "Z6r6YUUWF3b65_COXBNwmQAAAM4"]
[Tue Feb 11 07:21:05.985829 2025] [:error] [pid 11894:tid 139637364287232] [client 172.245.168.179:57246] [client 172.245.168.179] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/2013.sql"] [unique_id "Z6r6YUUWF3b65_COXBNwmgAAANE"]
[Tue Feb 11 07:21:06.573954 2025] [:error] [pid 10715:tid 139637473392384] [client 172.245.168.179:40686] [client 172.245.168.179] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/2014.bak"] [unique_id "Z6r6YiNN6cvKhuiMDMGcNAAAAQQ"]
[Tue Feb 11 07:21:06.755620 2025] [:error] [pid 11748:tid 139637397858048] [client 172.245.168.179:40718] [client 172.245.168.179] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/2014.sql"] [unique_id "Z6r6YlYUOX5qQN4lqaePqAAAAA0"]
[Tue Feb 11 07:21:07.141073 2025] [:error] [pid 11749:tid 139637347501824] [client 172.245.168.179:40790] [client 172.245.168.179] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/2015.bak"] [unique_id "Z6r6Y3KKHnMJI6xnR1HMPwAAAFM"]
[Tue Feb 11 07:21:07.315453 2025] [:error] [pid 11777:tid 139637339109120] [client 172.245.168.179:40812] [client 172.245.168.179] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/2015.sql"] [unique_id "Z6r6Y8LL8XeDOTela0eBKgAAAJQ"]
[Tue Feb 11 07:21:07.735980 2025] [:error] [pid 11894:tid 139637397858048] [client 172.245.168.179:40890] [client 172.245.168.179] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/2016.bak"] [unique_id "Z6r6Y0UWF3b65_COXBNwpgAAAM0"]
[Tue Feb 11 07:21:07.838176 2025] [:error] [pid 11748:tid 139637481785088] [client 172.245.168.179:40906] [client 172.245.168.179] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/2016.sql"] [unique_id "Z6r6Y1YUOX5qQN4lqaePrgAAAAM"]
[Tue Feb 11 07:21:08.433972 2025] [:error] [pid 11748:tid 139637397858048] [client 172.245.168.179:41440] [client 172.245.168.179] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/clients.sql"] [unique_id "Z6r6ZFYUOX5qQN4lqaePsQAAAA0"]
[Tue Feb 11 07:21:08.435905 2025] [:error] [pid 11748:tid 139637322323712] [client 172.245.168.179:41514] [client 172.245.168.179] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/code.bak"] [unique_id "Z6r6ZFYUOX5qQN4lqaePsgAAABY"]
[Tue Feb 11 07:21:08.442332 2025] [:error] [pid 11894:tid 139637313931008] [client 172.245.168.179:41196] [client 172.245.168.179] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/backups.sql"] [unique_id "Z6r6ZEUWF3b65_COXBNwpwAAANc"]
[Tue Feb 11 07:21:08.443528 2025] [:error] [pid 11777:tid 139637339109120] [client 172.245.168.179:41174] [client 172.245.168.179] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/backups.bak"] [unique_id "Z6r6ZMLL8XeDOTela0eBMgAAAJQ"]
[Tue Feb 11 07:21:08.445213 2025] [:error] [pid 11894:tid 139637431428864] [client 172.245.168.179:40976] [client 172.245.168.179] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/back.sql"] [unique_id "Z6r6ZEUWF3b65_COXBNwqQAAAMk"]
[Tue Feb 11 07:21:08.446892 2025] [:error] [pid 11749:tid 139637448214272] [client 172.245.168.179:41062] [client 172.245.168.179] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/backup.bak"] [unique_id "Z6r6ZHKKHnMJI6xnR1HMQwAAAEc"]
[Tue Feb 11 07:21:08.449813 2025] [:error] [pid 11748:tid 139637481785088] [client 172.245.168.179:41096] [client 172.245.168.179] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/backup.sql"] [unique_id "Z6r6ZFYUOX5qQN4lqaePvgAAAAM"]
[Tue Feb 11 07:21:08.454059 2025] [:error] [pid 11749:tid 139637372679936] [client 172.245.168.179:41546] [client 172.245.168.179] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/code.sql"] [unique_id "Z6r6ZHKKHnMJI6xnR1HMRwAAAFA"]
[Tue Feb 11 07:21:08.477435 2025] [:error] [pid 10715:tid 139637355894528] [client 172.245.168.179:41686] [client 172.245.168.179] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/customers.bak"] [unique_id "Z6r6ZCNN6cvKhuiMDMGcNwAAARI"]
[Tue Feb 11 07:21:08.485957 2025] [:error] [pid 10743:tid 139637372679936] [client 172.245.168.179:41964] [client 172.245.168.179] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/data.sql"] [unique_id "Z6r6ZNPkiE8CPlL1TiW3nQAAAVA"]
[Tue Feb 11 07:21:08.486075 2025] [:error] [pid 10743:tid 139637423036160] [client 172.245.168.179:41294] [client 172.245.168.179] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/bin.bak"] [unique_id "Z6r6ZNPkiE8CPlL1TiW3ogAAAUo"]
[Tue Feb 11 07:21:08.486215 2025] [:error] [pid 10743:tid 139637439821568] [client 172.245.168.179:41334] [client 172.245.168.179] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/bin.sql"] [unique_id "Z6r6ZNPkiE8CPlL1TiW3ngAAAUg"]
[Tue Feb 11 07:21:08.487737 2025] [:error] [pid 10743:tid 139637355894528] [client 172.245.168.179:42090] [client 172.245.168.179] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/database.sql"] [unique_id "Z6r6ZNPkiE8CPlL1TiW3owAAAVI"]
[Tue Feb 11 07:21:08.512150 2025] [:error] [pid 10743:tid 139637305538304] [client 172.245.168.179:41414] [client 172.245.168.179] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/clients.bak"] [unique_id "Z6r6ZNPkiE8CPlL1TiW3qQAAAVg"]
[Tue Feb 11 07:21:08.657255 2025] [:error] [pid 10743:tid 139637355894528] [client 172.245.168.179:41632] [client 172.245.168.179] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/com.sql"] [unique_id "Z6r6ZNPkiE8CPlL1TiW3qgAAAVI"]
[Tue Feb 11 07:21:08.659170 2025] [:error] [pid 10743:tid 139637372679936] [client 172.245.168.179:41602] [client 172.245.168.179] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/com.bak"] [unique_id "Z6r6ZNPkiE8CPlL1TiW3qwAAAVA"]
[Tue Feb 11 07:21:08.706330 2025] [:error] [pid 10743:tid 139637423036160] [client 172.245.168.179:42190] [client 172.245.168.179] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/db.sql"] [unique_id "Z6r6ZNPkiE8CPlL1TiW3rQAAAUo"]
[Tue Feb 11 07:21:08.716312 2025] [:error] [pid 10715:tid 139637355894528] [client 172.245.168.179:41712] [client 172.245.168.179] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/customers.sql"] [unique_id "Z6r6ZCNN6cvKhuiMDMGcSgAAARI"]
[Tue Feb 11 07:21:09.049656 2025] [:error] [pid 10772:tid 139637456606976] [client 172.245.168.179:42406] [client 172.245.168.179] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".richinei.com.sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/edu.richinei.com.sql"] [unique_id "Z6r6Zd2nFlVWmOoJWRTZKQAAAYY"]
[Tue Feb 11 07:21:09.067372 2025] [:error] [pid 10772:tid 139637448214272] [client 172.245.168.179:41800] [client 172.245.168.179] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/dat.bak"] [unique_id "Z6r6Zd2nFlVWmOoJWRTZLwAAAYc"]
[Tue Feb 11 07:21:09.076284 2025] [:error] [pid 10772:tid 139637423036160] [client 172.245.168.179:42482] [client 172.245.168.179] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/engine.bak"] [unique_id "Z6r6Zd2nFlVWmOoJWRTZMgAAAYo"]
[Tue Feb 11 07:21:09.098767 2025] [:error] [pid 10772:tid 139637414643456] [client 172.245.168.179:41840] [client 172.245.168.179] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/dat.sql"] [unique_id "Z6r6Zd2nFlVWmOoJWRTZNwAAAYs"]
[Tue Feb 11 07:21:09.258784 2025] [:error] [pid 10772:tid 139637414643456] [client 172.245.168.179:42170] [client 172.245.168.179] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/db.bak"] [unique_id "Z6r6Zd2nFlVWmOoJWRTZQQAAAYs"]
[Tue Feb 11 07:21:10.222419 2025] [:error] [pid 10801:tid 139637481785088] [client 172.245.168.179:42380] [client 172.245.168.179] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".richinei.com.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/edu.richinei.com.bak"] [unique_id "Z6r6ZkO6iakXX0iADrqCGgAAAgM"]
[Tue Feb 11 07:21:10.243341 2025] [:error] [pid 10800:tid 139637448214272] [client 172.245.168.179:42684] [client 172.245.168.179] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/files.bak"] [unique_id "Z6r6Zub1As_4oQh4qSNHaQAAAcc"]
[Tue Feb 11 07:21:10.244188 2025] [:error] [pid 10800:tid 139637490177792] [client 172.245.168.179:42630] [client 172.245.168.179] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/error_log.sql"] [unique_id "Z6r6Zub1As_4oQh4qSNHdwAAAcI"]
[Tue Feb 11 07:21:10.244632 2025] [:error] [pid 10800:tid 139637431428864] [client 172.245.168.179:42878] [client 172.245.168.179] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/2017.bak"] [unique_id "Z6r6Zub1As_4oQh4qSNHaAAAAck"]
[Tue Feb 11 07:21:10.245847 2025] [:error] [pid 10801:tid 139637506963200] [client 172.245.168.179:42294] [client 172.245.168.179] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/dump.sql"] [unique_id "Z6r6ZkO6iakXX0iADrqCHAAAAgA"]
[Tue Feb 11 07:21:10.252152 2025] [:error] [pid 10800:tid 139637330716416] [client 172.245.168.179:42942] [client 172.245.168.179] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/home.sql"] [unique_id "Z6r6Zub1As_4oQh4qSNHbgAAAdU"]
[Tue Feb 11 07:21:10.256758 2025] [:error] [pid 10800:tid 139637372679936] [client 172.245.168.179:42256] [client 172.245.168.179] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/dump.bak"] [unique_id "Z6r6Zub1As_4oQh4qSNHfAAAAdA"]
[Tue Feb 11 07:21:10.295064 2025] [:error] [pid 10801:tid 139637381072640] [client 172.245.168.179:42596] [client 172.245.168.179] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/error_log.bak"] [unique_id "Z6r6ZkO6iakXX0iADrqCLAAAAg8"]
[Tue Feb 11 07:21:10.297121 2025] [:error] [pid 10801:tid 139637397858048] [client 172.245.168.179:41926] [client 172.245.168.179] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/data.bak"] [unique_id "Z6r6ZkO6iakXX0iADrqCLgAAAg0"]
[Tue Feb 11 07:21:10.434326 2025] [:error] [pid 10801:tid 139637506963200] [client 172.245.168.179:42068] [client 172.245.168.179] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/database.bak"] [unique_id "Z6r6ZkO6iakXX0iADrqCMgAAAgA"]
[Tue Feb 11 07:21:10.459901 2025] [:error] [pid 10801:tid 139637397858048] [client 172.245.168.179:42728] [client 172.245.168.179] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/files.sql"] [unique_id "Z6r6ZkO6iakXX0iADrqCNAAAAg0"]
[Tue Feb 11 07:21:10.557767 2025] [:error] [pid 10800:tid 139637372679936] [client 172.245.168.179:42780] [client 172.245.168.179] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/forum.bak"] [unique_id "Z6r6Zub1As_4oQh4qSNHhQAAAdA"]
[Tue Feb 11 07:21:10.628216 2025] [:error] [pid 10801:tid 139637506963200] [client 172.245.168.179:42908] [client 172.245.168.179] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/home.bak"] [unique_id "Z6r6ZkO6iakXX0iADrqCNgAAAgA"]
[Tue Feb 11 07:21:11.111989 2025] [:error] [pid 10856:tid 139637473392384] [client 172.245.168.179:42802] [client 172.245.168.179] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/forum.sql"] [unique_id "Z6r6ZzDJnj8zxS7-rkkElwAAAkQ"]
[Tue Feb 11 07:21:11.111998 2025] [:error] [pid 10856:tid 139637481785088] [client 172.245.168.179:42508] [client 172.245.168.179] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/engine.sql"] [unique_id "Z6r6ZzDJnj8zxS7-rkkEmgAAAkM"]
[Tue Feb 11 07:21:11.115864 2025] [:error] [pid 10857:tid 139637347501824] [client 172.245.168.179:43256] [client 172.245.168.179] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/html.bak"] [unique_id "Z6r6Z9dcIjVmeIPg1rOTnAAAApM"]
[Tue Feb 11 07:21:11.132568 2025] [:error] [pid 10886:tid 139637389465344] [client 172.245.168.179:43556] [client 172.245.168.179] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/html.sql"] [unique_id "Z6r6Z8zJzQTIpNwf7M6wVgAAAw4"]
[Tue Feb 11 07:21:11.347589 2025] [:error] [pid 10856:tid 139637439821568] [client 172.245.168.179:42980] [client 172.245.168.179] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/2017.sql"] [unique_id "Z6r6ZzDJnj8zxS7-rkkEogAAAkg"]
[Tue Feb 11 07:21:11.352419 2025] [:error] [pid 10886:tid 139637490177792] [client 172.245.168.179:43342] [client 172.245.168.179] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/2020.sql"] [unique_id "Z6r6Z8zJzQTIpNwf7M6wXAAAAwI"]
[Tue Feb 11 07:21:11.352972 2025] [:error] [pid 10856:tid 139637423036160] [client 172.245.168.179:43108] [client 172.245.168.179] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/2018.sql"] [unique_id "Z6r6ZzDJnj8zxS7-rkkEpwAAAko"]
[Tue Feb 11 07:21:11.355222 2025] [:error] [pid 10886:tid 139637456606976] [client 172.245.168.179:43434] [client 172.245.168.179] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/2021.bak"] [unique_id "Z6r6Z8zJzQTIpNwf7M6wXQAAAwY"]
[Tue Feb 11 07:21:11.355777 2025] [:error] [pid 10857:tid 139637456606976] [client 172.245.168.179:43090] [client 172.245.168.179] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/2018.bak"] [unique_id "Z6r6Z9dcIjVmeIPg1rOTngAAAoY"]
[Tue Feb 11 07:21:11.367966 2025] [:error] [pid 10883:tid 139637397858048] [client 172.245.168.179:43658] [client 172.245.168.179] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/2023.sql"] [unique_id "Z6r6Z-OvMZqda4zdeEBfrAAAAs0"]
[Tue Feb 11 07:21:11.374705 2025] [:error] [pid 10856:tid 139637322323712] [client 172.245.168.179:43198] [client 172.245.168.179] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/2019.bak"] [unique_id "Z6r6ZzDJnj8zxS7-rkkEqQAAAlY"]
[Tue Feb 11 07:21:11.398680 2025] [:error] [pid 10883:tid 139637481785088] [client 172.245.168.179:43460] [client 172.245.168.179] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/2021.sql"] [unique_id "Z6r6Z-OvMZqda4zdeEBfuAAAAsM"]
[Tue Feb 11 07:21:11.402263 2025] [:error] [pid 10857:tid 139637330716416] [client 172.245.168.179:43238] [client 172.245.168.179] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/2019.sql"] [unique_id "Z6r6Z9dcIjVmeIPg1rOTrQAAApU"]
[Tue Feb 11 07:21:11.402998 2025] [:error] [pid 10883:tid 139637414643456] [client 172.245.168.179:43642] [client 172.245.168.179] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/2023.bak"] [unique_id "Z6r6Z-OvMZqda4zdeEBftAAAAss"]
[Tue Feb 11 07:21:11.407767 2025] [:error] [pid 10857:tid 139637372679936] [client 172.245.168.179:43316] [client 172.245.168.179] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/2020.bak"] [unique_id "Z6r6Z9dcIjVmeIPg1rOTsgAAApA"]
[Tue Feb 11 07:21:11.418702 2025] [:error] [pid 10883:tid 139637322323712] [client 172.245.168.179:43750] [client 172.245.168.179] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/2024.bak"] [unique_id "Z6r6Z-OvMZqda4zdeEBfvQAAAtY"]
[Tue Feb 11 07:21:11.424227 2025] [:error] [pid 10886:tid 139637381072640] [client 172.245.168.179:43560] [client 172.245.168.179] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/2022.sql"] [unique_id "Z6r6Z8zJzQTIpNwf7M6wZQAAAw8"]
[Tue Feb 11 07:21:11.425720 2025] [:error] [pid 10886:tid 139637414643456] [client 172.245.168.179:43524] [client 172.245.168.179] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/2022.bak"] [unique_id "Z6r6Z8zJzQTIpNwf7M6waQAAAws"]
[Tue Feb 11 07:21:11.590823 2025] [:error] [pid 10856:tid 139637423036160] [client 172.245.168.179:43836] [client 172.245.168.179] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/admin.bak"] [unique_id "Z6r6ZzDJnj8zxS7-rkkErgAAAko"]
[Tue Feb 11 07:21:11.606645 2025] [:error] [pid 10886:tid 139637389465344] [client 172.245.168.179:43792] [client 172.245.168.179] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/2024.sql"] [unique_id "Z6r6Z8zJzQTIpNwf7M6wbAAAAw4"]
[Tue Feb 11 07:21:13.708768 2025] [:error] [pid 11748:tid 139637406250752] [client 172.245.168.179:44100] [client 172.245.168.179] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/index.bak"] [unique_id "Z6r6aVYUOX5qQN4lqaePxAAAAAw"]
[Tue Feb 11 17:09:05.175344 2025] [:error] [pid 10856:tid 139637372679936] [client 95.111.244.79:48424] [client 95.111.244.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z6uEMTDJnj8zxS7-rkkRmwAAAlA"]
[Wed Feb 12 00:22:47.564296 2025] [:error] [pid 10743:tid 139637423036160] [client 209.38.248.17:52744] [client 209.38.248.17] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Z6vp19PkiE8CPlL1TiW_jgAAAUo"]
[Wed Feb 12 00:22:53.557566 2025] [authz_core:error] [pid 10883:tid 139637406250752] [client 209.38.248.17:52824] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Wed Feb 12 00:22:56.225167 2025] [:error] [pid 10994:tid 139637431428864] [client 209.38.248.17:52864] [client 209.38.248.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z6vp4MoWuarl7U0xpTBweQAAA8k"]
[Wed Feb 12 00:22:56.687295 2025] [:error] [pid 10856:tid 139637364287232] [client 209.38.248.17:52868] [client 209.38.248.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z6vp4DDJnj8zxS7-rkkU9wAAAlE"]
[Wed Feb 12 09:10:42.863801 2025] [:error] [pid 5351:tid 140275863230208] [client 54.84.249.63:44950] [client 54.84.249.63] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z6xlklq43AlDQFsOh1JffgAAAA0"]
[Thu Feb 13 00:56:18.871288 2025] [:error] [pid 5351:tid 140275854837504] [client 194.233.82.52:54292] [client 194.233.82.52] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z61DMlq43AlDQFsOh1JqMgAAAA4"]
[Thu Feb 13 00:56:20.494998 2025] [:error] [pid 5456:tid 140275821266688] [client 194.233.82.52:54306] [client 194.233.82.52] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/config/.env"] [unique_id "Z61DNJ9KMCJf_kIZxffYNgAAANI"]
[Thu Feb 13 00:56:30.960717 2025] [:error] [pid 5456:tid 140275779303168] [client 194.233.82.52:56038] [client 194.233.82.52] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.production"] [unique_id "Z61DPp9KMCJf_kIZxffYNwAAANc"]
[Thu Feb 13 00:56:38.719767 2025] [:error] [pid 5456:tid 140276006860544] [client 194.233.82.52:43532] [client 194.233.82.52] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.local"] [unique_id "Z61DRp9KMCJf_kIZxffYOAAAAMQ"]
[Thu Feb 13 00:56:42.829815 2025] [:error] [pid 5386:tid 140275880015616] [client 194.233.82.52:43546] [client 194.233.82.52] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/api/.env"] [unique_id "Z61DSvvHo5mXwsLiifBtFQAAAIs"]
[Fri Feb 14 03:51:00.638686 2025] [authz_core:error] [pid 9793:tid 140594672232192] [client 167.172.158.128:44690] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Fri Feb 14 03:51:02.493428 2025] [:error] [pid 9792:tid 140594689017600] [client 167.172.158.128:60148] [client 167.172.158.128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z669pkYgucHLEL2khF3UZgAAABE"]
[Fri Feb 14 03:51:02.731615 2025] [:error] [pid 10310:tid 140594714195712] [client 167.172.158.128:60154] [client 167.172.158.128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z669piUVO8zywY1_CQxqFgAAAM4"]
[Fri Feb 14 06:01:07.796999 2025] [:error] [pid 9792:tid 140594672232192] [client 128.199.182.55:32920] [client 128.199.182.55] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Z67cI0YgucHLEL2khF3UfQAAABM"]
[Fri Feb 14 06:01:12.445155 2025] [authz_core:error] [pid 9793:tid 140594647054080] [client 128.199.182.55:32992] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Fri Feb 14 06:01:14.887207 2025] [:error] [pid 9793:tid 140594814908160] [client 128.199.182.55:33918] [client 128.199.182.55] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z67cKscxOLNG3gYjku9ecwAAAEI"]
[Fri Feb 14 06:01:15.349907 2025] [:error] [pid 10310:tid 140594630268672] [client 128.199.182.55:33932] [client 128.199.182.55] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z67cKyUVO8zywY1_CQxqKwAAANg"]
[Fri Feb 14 17:22:37.924447 2025] [:error] [pid 9792:tid 140594798122752] [client 95.111.244.79:34290] [client 95.111.244.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z6973UYgucHLEL2khF3pqwAAAAQ"]
[Fri Feb 14 19:38:41.318577 2025] [:error] [pid 9792:tid 140594756159232] [client 45.148.10.172:58488] [client 45.148.10.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z6-bwUYgucHLEL2khF3tIgAAAAk"]
[Sat Feb 15 03:16:10.849970 2025] [:error] [pid 9821:tid 140594894284544] [client 13.58.228.70:44752] [client 13.58.228.70] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z7AG-g99-IlUdO4DXHL_gwAAAIE"]
[Sat Feb 15 03:19:26.287552 2025] [:error] [pid 9793:tid 140594705803008] [client 13.58.228.70:39720] [client 13.58.228.70] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z7AHvscxOLNG3gYjku95SQAAAE8"]
[Sat Feb 15 03:19:28.131237 2025] [:error] [pid 10310:tid 140594722588416] [client 13.58.228.70:39640] [client 13.58.228.70] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z7AHwCUVO8zywY1_CQyLkQAAAM0"]
[Sun Feb 16 04:39:50.381516 2025] [:error] [pid 12680:tid 139970794661632] [client 206.81.24.227:38872] [client 206.81.24.227] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Z7FsFrIT5JMvicOMfc411QAAAJc"]
[Sun Feb 16 04:39:56.393805 2025] [authz_core:error] [pid 12680:tid 139970903766784] [client 206.81.24.227:55138] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Sun Feb 16 04:39:59.146786 2025] [:error] [pid 12680:tid 139970853410560] [client 206.81.24.227:55190] [client 206.81.24.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z7FsH7IT5JMvicOMfc413gAAAJA"]
[Sun Feb 16 04:39:59.625938 2025] [:error] [pid 12680:tid 139970836625152] [client 206.81.24.227:55198] [client 206.81.24.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z7FsH7IT5JMvicOMfc413wAAAJI"]
[Sun Feb 16 11:59:31.476401 2025] [:error] [pid 12651:tid 139970928944896] [client 206.81.12.187:58778] [client 206.81.12.187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Z7HTIzpR7JqiiOXQqFtJQAAAAAc"]
[Sun Feb 16 11:59:34.285009 2025] [authz_core:error] [pid 5681:tid 139970878588672] [client 206.81.12.187:58850] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Sun Feb 16 11:59:35.708033 2025] [:error] [pid 5681:tid 139970811447040] [client 206.81.12.187:58884] [client 206.81.12.187] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z7HTJ8d2MoiMJ8fqDlVJigAAANU"]
[Sun Feb 16 11:59:35.866445 2025] [:error] [pid 5681:tid 139970945730304] [client 206.81.12.187:58900] [client 206.81.12.187] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z7HTJ8d2MoiMJ8fqDlVJiwAAAMU"]
[Mon Feb 17 07:55:41.780017 2025] [:error] [pid 8234:tid 140358038050560] [client 193.41.206.202:55968] [client 193.41.206.202] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/httpd.conf"] [unique_id "Z7LrfX4AHkN0i3EavEsA_wAAAEc"]
[Mon Feb 17 07:55:41.942382 2025] [:error] [pid 8234:tid 140357903767296] [client 193.41.206.202:55968] [client 193.41.206.202] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/apps/.env"] [unique_id "Z7LrfX4AHkN0i3EavEsBAAAAAFc"]
[Mon Feb 17 07:55:43.183683 2025] [:error] [pid 8234:tid 140357970908928] [client 193.41.206.202:55982] [client 193.41.206.202] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/api/.env"] [unique_id "Z7Lrf34AHkN0i3EavEsBAQAAAE8"]
[Mon Feb 17 07:55:43.838045 2025] [:error] [pid 8234:tid 140357912160000] [client 193.41.206.202:39270] [client 193.41.206.202] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.production"] [unique_id "Z7Lrf34AHkN0i3EavEsBAgAAAFY"]
[Mon Feb 17 07:55:44.457982 2025] [:error] [pid 8703:tid 140358046443264] [client 193.41.206.202:39284] [client 193.41.206.202] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/config/.env"] [unique_id "Z7LrgNnYKk99MrpDbj--RAAAAMY"]
[Mon Feb 17 07:55:45.099493 2025] [:error] [pid 8234:tid 140358148265728] [client 193.41.206.202:39300] [client 193.41.206.202] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.development"] [unique_id "Z7LrgX4AHkN0i3EavEsBAwAAAEI"]
[Mon Feb 17 07:55:46.865244 2025] [:error] [pid 8234:tid 140358012872448] [client 193.41.206.202:39306] [client 193.41.206.202] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/database/.env"] [unique_id "Z7Lrgn4AHkN0i3EavEsBBAAAAEo"]
[Mon Feb 17 07:55:47.531628 2025] [:error] [pid 8703:tid 140357962516224] [client 193.41.206.202:39308] [client 193.41.206.202] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.bak"] [unique_id "Z7Lrg9nYKk99MrpDbj--RQAAANA"]
[Mon Feb 17 07:55:49.219737 2025] [:error] [pid 8233:tid 140357945730816] [client 193.41.206.202:39320] [client 193.41.206.202] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/conf/.env"] [unique_id "Z7LrhWPOp9i3SaCo2FAsqgAAABI"]
[Mon Feb 17 07:55:51.053226 2025] [:error] [pid 8234:tid 140357937338112] [client 193.41.206.202:39334] [client 193.41.206.202] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/wp-config.php.save"] [unique_id "Z7Lrh34AHkN0i3EavEsBBwAAAFM"]
[Mon Feb 17 07:55:52.952733 2025] [:error] [pid 8703:tid 140357920552704] [client 193.41.206.202:39348] [client 193.41.206.202] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/backend/.env"] [unique_id "Z7LriNnYKk99MrpDbj--RgAAANU"]
[Mon Feb 17 07:55:54.288561 2025] [:error] [pid 8703:tid 140357996087040] [client 193.41.206.202:54388] [client 193.41.206.202] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.save"] [unique_id "Z7LritnYKk99MrpDbj--SQAAAMw"]
[Mon Feb 17 07:55:58.365337 2025] [:error] [pid 8703:tid 140358156658432] [client 193.41.206.202:54390] [client 193.41.206.202] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/crm/.env"] [unique_id "Z7LrjtnYKk99MrpDbj--TAAAAME"]
[Mon Feb 17 07:56:03.580249 2025] [:error] [pid 8262:tid 140358156658432] [client 193.41.206.202:54402] [client 193.41.206.202] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/system/.env"] [unique_id "Z7Lrk33ewhozlYttXNIX6gAAAIE"]
[Mon Feb 17 07:56:04.916655 2025] [:error] [pid 8262:tid 140357970908928] [client 193.41.206.202:36956] [client 193.41.206.202] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/api/config/.env"] [unique_id "Z7LrlH3ewhozlYttXNIX6wAAAI8"]
[Mon Feb 17 07:56:07.439694 2025] [:error] [pid 8262:tid 140357945730816] [client 193.41.206.202:36966] [client 193.41.206.202] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/admin/.env"] [unique_id "Z7Lrl33ewhozlYttXNIX7AAAAJI"]
[Mon Feb 17 07:56:12.125071 2025] [:error] [pid 8234:tid 140358165051136] [client 193.41.206.202:36972] [client 193.41.206.202] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/server/.env"] [unique_id "Z7LrnH4AHkN0i3EavEsBDAAAAEA"]
[Mon Feb 17 07:56:16.366713 2025] [:error] [pid 8262:tid 140357937338112] [client 193.41.206.202:58316] [client 193.41.206.202] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.json"] [unique_id "Z7LroH3ewhozlYttXNIX7wAAAJM"]
[Mon Feb 17 07:56:18.235119 2025] [:error] [pid 8262:tid 140357928945408] [client 193.41.206.202:58328] [client 193.41.206.202] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/resources/.env"] [unique_id "Z7Lron3ewhozlYttXNIX8QAAAJQ"]
[Mon Feb 17 07:56:20.662197 2025] [:error] [pid 8262:tid 140358012872448] [client 193.41.206.202:58332] [client 193.41.206.202] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/wp-config.php"] [unique_id "Z7LrpH3ewhozlYttXNIX8wAAAIo"]
[Mon Feb 17 07:56:22.463155 2025] [:error] [pid 8234:tid 140357996087040] [client 193.41.206.202:58340] [client 193.41.206.202] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/wp-content/.env"] [unique_id "Z7Lrpn4AHkN0i3EavEsBDgAAAEw"]
[Mon Feb 17 07:56:23.962372 2025] [:error] [pid 8234:tid 140357912160000] [client 193.41.206.202:58354] [client 193.41.206.202] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.backup"] [unique_id "Z7Lrp34AHkN0i3EavEsBEAAAAFY"]
[Mon Feb 17 07:56:26.488815 2025] [:error] [pid 8234:tid 140358046443264] [client 193.41.206.202:60260] [client 193.41.206.202] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/php.ini"] [unique_id "Z7Lrqn4AHkN0i3EavEsBEgAAAEY"]
[Mon Feb 17 07:56:27.352571 2025] [:error] [pid 8234:tid 140358131480320] [client 193.41.206.202:60260] [client 193.41.206.202] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z7Lrq34AHkN0i3EavEsBFQAAAEQ"]
[Mon Feb 17 07:56:27.786495 2025] [:error] [pid 8234:tid 140358004479744] [client 193.41.206.202:60262] [client 193.41.206.202] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/library/.env"] [unique_id "Z7Lrq34AHkN0i3EavEsBFgAAAEs"]
[Mon Feb 17 07:56:32.100994 2025] [:error] [pid 8234:tid 140357945730816] [client 193.41.206.202:60264] [client 193.41.206.202] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/v1/.env"] [unique_id "Z7LrsH4AHkN0i3EavEsBHAAAAFI"]
[Mon Feb 17 07:56:33.433393 2025] [:error] [pid 8262:tid 140357912160000] [client 193.41.206.202:60274] [client 193.41.206.202] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.testing"] [unique_id "Z7LrsX3ewhozlYttXNIX9AAAAJY"]
[Mon Feb 17 07:56:35.070801 2025] [:error] [pid 8233:tid 140358046443264] [client 193.41.206.202:59024] [client 193.41.206.202] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.old"] [unique_id "Z7Lrs2POp9i3SaCo2FAsrwAAAAY"]
[Mon Feb 17 07:56:39.727333 2025] [:error] [pid 8703:tid 140357945730816] [client 193.41.206.202:59054] [client 193.41.206.202] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.local"] [unique_id "Z7Lrt9nYKk99MrpDbj--UwAAANI"]
[Mon Feb 17 07:56:41.510152 2025] [:error] [pid 8703:tid 140358021265152] [client 193.41.206.202:59076] [client 193.41.206.202] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/core/.env"] [unique_id "Z7LrudnYKk99MrpDbj--VAAAAMk"]
[Mon Feb 17 07:56:47.898891 2025] [:error] [pid 8234:tid 140357954123520] [client 193.41.206.202:34008] [client 193.41.206.202] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/settings/.env"] [unique_id "Z7Lrv34AHkN0i3EavEsBJAAAAFE"]
[Mon Feb 17 07:56:49.556925 2025] [:error] [pid 8234:tid 140358004479744] [client 193.41.206.202:34012] [client 193.41.206.202] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/db.php.bak"] [unique_id "Z7LrwX4AHkN0i3EavEsBJQAAAEs"]
[Mon Feb 17 07:56:50.547245 2025] [:error] [pid 8234:tid 140357987694336] [client 193.41.206.202:34012] [client 193.41.206.202] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/src/.env"] [unique_id "Z7Lrwn4AHkN0i3EavEsBJwAAAE0"]
[Mon Feb 17 07:56:51.517944 2025] [:error] [pid 8234:tid 140358148265728] [client 193.41.206.202:34018] [client 193.41.206.202] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/new/.env"] [unique_id "Z7Lrw34AHkN0i3EavEsBKAAAAEI"]
[Mon Feb 17 13:38:10.356219 2025] [:error] [pid 8234:tid 140358165051136] [client 13.37.240.154:56915] [client 13.37.240.154] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/sftp-config.json"] [unique_id "Z7M7wn4AHkN0i3EavEsIMwAAAEA"]
[Tue Feb 18 05:17:05.842456 2025] [:error] [pid 4858:tid 140268296681216] [client 167.71.175.236:55872] [client 167.71.175.236] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Z7QX0fir3Rxdl4vpQ31V4AAAAA0"]
[Tue Feb 18 05:17:09.222458 2025] [authz_core:error] [pid 5249:tid 140268313466624] [client 167.71.175.236:55950] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Tue Feb 18 05:17:10.969410 2025] [:error] [pid 4874:tid 140268212754176] [client 167.71.175.236:55974] [client 167.71.175.236] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z7QX1tKRux_x1D7kleu_7QAAAFc"]
[Tue Feb 18 05:17:11.204549 2025] [:error] [pid 4858:tid 140268246324992] [client 167.71.175.236:55980] [client 167.71.175.236] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z7QX1_ir3Rxdl4vpQ31V5AAAABM"]
[Tue Feb 18 06:42:21.854388 2025] [:error] [pid 4874:tid 140268389000960] [client 68.183.180.73:34786] [client 68.183.180.73] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Z7QrzdKRux_x1D7klevAUgAAAEI"]
[Tue Feb 18 06:42:26.250886 2025] [authz_core:error] [pid 5249:tid 140268372215552] [client 68.183.180.73:34862] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Tue Feb 18 06:42:28.654490 2025] [:error] [pid 5249:tid 140268355430144] [client 68.183.180.73:56696] [client 68.183.180.73] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z7Qr1LPOprFzrtKw-rhcaQAAAMY"]
[Tue Feb 18 06:42:29.033817 2025] [:error] [pid 4874:tid 140268296681216] [client 68.183.180.73:56706] [client 68.183.180.73] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z7Qr1dKRux_x1D7klevAVwAAAE0"]
[Tue Feb 18 08:26:46.553023 2025] [:error] [pid 4887:tid 140268229539584] [client 45.148.10.86:54336] [client 45.148.10.86] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z7RERgjkIgeDGXhV1o1_mgAAAJU"]
[Wed Feb 19 16:48:31.593079 2025] [:error] [pid 31444:tid 140440145663744] [client 57.180.240.215:51478] [client 57.180.240.215] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z7YLX-CvvcqHLR7IMffbWwAAABY"]
[Thu Feb 20 08:06:35.130108 2025] [:error] [pid 27122:tid 140002973411072] [client 147.182.149.75:59556] [client 147.182.149.75] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Z7bii9m2nSltiXMFXyJl2QAAAEs"]
[Thu Feb 20 08:06:38.605035 2025] [authz_core:error] [pid 27148:tid 140003032160000] [client 147.182.149.75:39458] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Thu Feb 20 08:06:40.351137 2025] [:error] [pid 20536:tid 140002914662144] [client 147.182.149.75:39504] [client 147.182.149.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z7bikJhlUD2ey-B701XWrAAAANI"]
[Thu Feb 20 08:06:40.589141 2025] [:error] [pid 27121:tid 140002881091328] [client 147.182.149.75:39518] [client 147.182.149.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z7bikLXhkAxPVT4hNf5vrgAAABY"]
[Thu Feb 20 10:29:31.663657 2025] [:error] [pid 27122:tid 140002881091328] [client 194.233.82.52:47948] [client 194.233.82.52] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z7cEC9m2nSltiXMFXyJnuAAAAFY"]
[Thu Feb 20 10:29:39.063204 2025] [:error] [pid 27148:tid 140003040552704] [client 194.233.82.52:47962] [client 194.233.82.52] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/config/.env"] [unique_id "Z7cEExPAncqTNhOjqPUjDwAAAIM"]
[Thu Feb 20 12:23:31.256421 2025] [:error] [pid 27121:tid 140002956625664] [client 134.122.28.88:34378] [client 134.122.28.88] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Z7cew7XhkAxPVT4hNf5z6gAAAA0"]
[Thu Feb 20 12:23:34.136390 2025] [authz_core:error] [pid 27121:tid 140002990196480] [client 134.122.28.88:34422] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Thu Feb 20 12:23:35.645369 2025] [:error] [pid 27122:tid 140003134314240] [client 134.122.28.88:34458] [client 134.122.28.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z7cex9m2nSltiXMFXyJq5QAAAEA"]
[Thu Feb 20 12:23:35.825791 2025] [:error] [pid 27121:tid 140003040552704] [client 134.122.28.88:34462] [client 134.122.28.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z7cex7XhkAxPVT4hNf5z7AAAAAM"]
[Fri Feb 21 16:43:47.397848 2025] [:error] [pid 19237:tid 140439130670848] [client 92.118.39.228:44100] [client 92.118.39.228] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z7itQ3xuP7lbSoH-Yi0PlQAAAJA"], referer: https://www.google.com/
[Fri Feb 21 16:43:48.099913 2025] [:error] [pid 12277:tid 140439222990592] [client 92.118.39.228:44104] [client 92.118.39.228] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/api/.env"] [unique_id "Z7itROEZ0gfr9DSj8f-oywAAAMU"], referer: https://www.google.com/
[Fri Feb 21 16:43:51.005424 2025] [:error] [pid 12277:tid 140439248168704] [client 92.118.39.228:44116] [client 92.118.39.228] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.save"] [unique_id "Z7itR-EZ0gfr9DSj8f-ozgAAAMI"], referer: https://www.google.com/
[Fri Feb 21 16:43:51.707406 2025] [:error] [pid 12277:tid 140439088707328] [client 92.118.39.228:44120] [client 92.118.39.228] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.prod"] [unique_id "Z7itR-EZ0gfr9DSj8f-ozwAAANU"], referer: https://www.google.com/
[Fri Feb 21 16:43:52.426654 2025] [:error] [pid 12277:tid 140439113885440] [client 92.118.39.228:40032] [client 92.118.39.228] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/login/.env"] [unique_id "Z7itSOEZ0gfr9DSj8f-o0AAAANI"], referer: https://www.google.com/
[Fri Feb 21 16:43:53.138240 2025] [:error] [pid 12277:tid 140439097100032] [client 92.118.39.228:40034] [client 92.118.39.228] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/local/.env"] [unique_id "Z7itSeEZ0gfr9DSj8f-o0QAAANQ"], referer: https://www.google.com/
[Fri Feb 21 16:43:53.838922 2025] [:error] [pid 12277:tid 140439105492736] [client 92.118.39.228:40050] [client 92.118.39.228] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/admin/.env"] [unique_id "Z7itSeEZ0gfr9DSj8f-o0gAAANM"], referer: https://www.google.com/
[Fri Feb 21 16:43:54.706737 2025] [:error] [pid 12277:tid 140439181027072] [client 92.118.39.228:40052] [client 92.118.39.228] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/dev/.env"] [unique_id "Z7itSuEZ0gfr9DSj8f-o0wAAAMo"], referer: https://www.google.com/
[Fri Feb 21 16:43:55.416487 2025] [:error] [pid 12277:tid 140439189419776] [client 92.118.39.228:40062] [client 92.118.39.228] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/application/.env"] [unique_id "Z7itS-EZ0gfr9DSj8f-o1AAAAMk"], referer: https://www.google.com/
[Fri Feb 21 16:43:58.217805 2025] [:error] [pid 19237:tid 140439155848960] [client 92.118.39.228:40084] [client 92.118.39.228] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/config/.env"] [unique_id "Z7itTnxuP7lbSoH-Yi0PmgAAAI0"], referer: https://www.google.com/
[Fri Feb 21 16:43:58.918505 2025] [:error] [pid 19237:tid 140439172634368] [client 92.118.39.228:40096] [client 92.118.39.228] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/backend/.env"] [unique_id "Z7itTnxuP7lbSoH-Yi0PnAAAAIs"], referer: https://www.google.com/
[Fri Feb 21 16:43:59.620203 2025] [:error] [pid 12277:tid 140439155848960] [client 92.118.39.228:40112] [client 92.118.39.228] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/docker/.env"] [unique_id "Z7itT-EZ0gfr9DSj8f-o2QAAAM0"], referer: https://www.google.com/
[Fri Feb 21 20:13:56.094961 2025] [:error] [pid 19237:tid 140439147456256] [client 52.66.240.57:51680] [client 52.66.240.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z7jehHxuP7lbSoH-Yi0UFwAAAI4"]
[Sat Feb 22 13:57:46.925921 2025] [:error] [pid 8507:tid 139808919807744] [client 52.66.240.57:37196] [client 52.66.240.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z7nX2rSnLMGsEcCzahINFwAAAMU"]
[Sat Feb 22 14:32:48.008833 2025] [:error] [pid 15286:tid 139808693217024] [client 157.245.105.107:39496] [client 157.245.105.107] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Z7ngENMCpypWr_nuAtRv-gAAABg"]
[Sat Feb 22 14:32:53.591817 2025] [authz_core:error] [pid 15286:tid 139808768751360] [client 157.245.105.107:39564] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Sat Feb 22 14:32:56.451974 2025] [:error] [pid 8507:tid 139808735180544] [client 157.245.105.107:36428] [client 157.245.105.107] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z7ngGLSnLMGsEcCzahINvQAAANM"]
[Sat Feb 22 14:32:56.963564 2025] [:error] [pid 15286:tid 139808710002432] [client 157.245.105.107:36440] [client 157.245.105.107] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z7ngGNMCpypWr_nuAtRwBgAAABY"]
[Mon Feb 24 05:04:06.351089 2025] [:error] [pid 2706:tid 139782143317760] [client 138.68.144.227:45968] [client 138.68.144.227] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Z7v9xvmtOtvQI5UKk3IlLwAAAEk"]
[Mon Feb 24 05:04:11.564986 2025] [authz_core:error] [pid 2706:tid 139782067783424] [client 138.68.144.227:46008] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Mon Feb 24 05:04:14.381884 2025] [:error] [pid 2706:tid 139782025819904] [client 138.68.144.227:46034] [client 138.68.144.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z7v9zvmtOtvQI5UKk3IlNgAAAFc"]
[Mon Feb 24 05:04:14.864225 2025] [:error] [pid 2706:tid 139782017427200] [client 138.68.144.227:36746] [client 138.68.144.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z7v9zvmtOtvQI5UKk3IlNwAAAFg"]
[Mon Feb 24 22:24:32.329986 2025] [:error] [pid 28971:tid 139782034212608] [client 193.41.206.189:39026] [client 193.41.206.189] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/httpd.conf"] [unique_id "Z7zxoGJ4Iu4bbYV66Z4VXwAAANY"]
[Mon Feb 24 22:24:32.488930 2025] [:error] [pid 28971:tid 139782176888576] [client 193.41.206.189:39026] [client 193.41.206.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/apps/.env"] [unique_id "Z7zxoGJ4Iu4bbYV66Z4VYAAAAMU"]
[Tue Feb 25 07:23:04.624766 2025] [:error] [pid 28462:tid 139826342848256] [client 18.133.175.70:53428] [client 18.133.175.70] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z71v2MHx9-L6WXu_CM_xtwAAAJU"]
[Tue Feb 25 17:27:39.878578 2025] [:error] [pid 28462:tid 139826591164160] [client 196.251.88.97:53072] [client 196.251.88.97] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z739i8Hx9-L6WXu_CM_93wAAAIA"]
[Wed Feb 26 08:32:59.705790 2025] [:error] [pid 14041:tid 140212786566912] [client 207.154.212.47:49408] [client 207.154.212.47] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Z77Ru5p_bJVhn6o__4bBVAAAAMQ"]
[Wed Feb 26 08:33:11.652175 2025] [authz_core:error] [pid 13680:tid 140212663465728] [client 207.154.212.47:47530] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Wed Feb 26 08:33:17.632043 2025] [:error] [pid 13680:tid 140212621502208] [client 207.154.212.47:42156] [client 207.154.212.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z77RzSTN2MbD8P6IMccIYQAAAE8"]
[Wed Feb 26 08:33:19.347744 2025] [:error] [pid 12691:tid 140212697036544] [client 207.154.212.47:42160] [client 207.154.212.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z77RzyjUzWHsAdgSrAfaxQAAAUY"]
[Wed Feb 26 16:34:23.595812 2025] [:error] [pid 13680:tid 140212680251136] [client 157.230.19.140:54776] [client 157.230.19.140] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Z79CjyTN2MbD8P6IMccO5gAAAEg"]
[Wed Feb 26 16:34:28.672615 2025] [authz_core:error] [pid 12558:tid 140212663465728] [client 157.230.19.140:54834] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Wed Feb 26 16:34:30.965956 2025] [:error] [pid 12558:tid 140212579538688] [client 157.230.19.140:54868] [client 157.230.19.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z79Clj8xpEihsIKtz5MZVgAAARQ"]
[Wed Feb 26 16:34:31.357772 2025] [:error] [pid 13680:tid 140212629894912] [client 157.230.19.140:54870] [client 157.230.19.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z79ClyTN2MbD8P6IMccO7QAAAE4"]
[Wed Feb 26 18:03:55.190032 2025] [proxy_fcgi:error] [pid 12558:tid 140212680251136] (70007)The timeout specified has expired: [client 101.198.0.180:42433] AH01075: Error dispatching request to : (polling)
[Sat Mar 01 02:36:08.862130 2025] [:error] [pid 22546:tid 140086582630144] [client 164.92.244.132:49466] [client 164.92.244.132] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Z8JymI-PKAJWrsASIPS8aAAAAJI"]
[Sat Mar 01 02:36:14.889672 2025] [authz_core:error] [pid 22500:tid 140086616200960] [client 164.92.244.132:49532] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Sat Mar 01 02:36:18.185471 2025] [:error] [pid 22500:tid 140086574237440] [client 164.92.244.132:52516] [client 164.92.244.132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z8JyosM4UoCGKEEtiItkeAAAABM"]
[Sat Mar 01 02:36:18.700122 2025] [:error] [pid 22500:tid 140086700128000] [client 164.92.244.132:52518] [client 164.92.244.132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z8JyosM4UoCGKEEtiItkeQAAAAQ"]
[Sat Mar 01 05:11:58.790092 2025] [:error] [pid 8205:tid 140047676274432] [client 45.148.10.80:45876] [client 45.148.10.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z8KXHljN17dMobG1EEDacgAAAJY"]
[Sun Mar 02 15:08:25.147624 2025] [:error] [pid 27845:tid 140269789861632] [client 139.59.132.8:52222] [client 139.59.132.8] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Z8R0aZAq_Eq73Hv5wpavuAAAAFE"]
[Sun Mar 02 15:08:29.649774 2025] [authz_core:error] [pid 20930:tid 140269806647040] [client 139.59.132.8:47788] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Sun Mar 02 15:08:32.373631 2025] [:error] [pid 20930:tid 140269857003264] [client 139.59.132.8:47828] [client 139.59.132.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z8R0cAvuTl0pgZF_q7LtwAAAAMk"]
[Sun Mar 02 15:08:32.927670 2025] [:error] [pid 20930:tid 140269747898112] [client 139.59.132.8:47842] [client 139.59.132.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z8R0cAvuTl0pgZF_q7LtwQAAANY"]
[Mon Mar 03 07:15:48.193970 2025] [:error] [pid 12357:tid 140342284187392] [client 178.128.207.138:36400] [client 178.128.207.138] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Z8VXJAiyTFqUwkhAZgKMbgAAANU"]
[Mon Mar 03 07:15:54.058499 2025] [authz_core:error] [pid 12357:tid 140342342936320] [client 178.128.207.138:33758] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Mon Mar 03 07:15:56.918081 2025] [:error] [pid 12357:tid 140342317758208] [client 178.128.207.138:33786] [client 178.128.207.138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z8VXLAiyTFqUwkhAZgKMfAAAANE"]
[Mon Mar 03 07:15:57.412821 2025] [:error] [pid 12357:tid 140342309365504] [client 178.128.207.138:33796] [client 178.128.207.138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z8VXLQiyTFqUwkhAZgKMfQAAANI"]
[Tue Mar 04 18:15:03.543211 2025] [:error] [pid 30175:tid 139782545905408] [client 45.148.10.80:54132] [client 45.148.10.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z8dDJ-li8t7bCVgCDi0T8AAAAFg"]
[Tue Mar 04 21:36:38.282704 2025] [:error] [pid 30175:tid 139782545905408] [client 128.199.182.55:50000] [client 128.199.182.55] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Z8dyZuli8t7bCVgCDi0WdwAAAFg"]
[Tue Mar 04 21:36:43.081529 2025] [authz_core:error] [pid 30555:tid 139782671795968] [client 128.199.182.55:43058] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Tue Mar 04 21:36:45.636041 2025] [:error] [pid 30555:tid 139782638225152] [client 128.199.182.55:43084] [client 128.199.182.55] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z8dybfV4QD9-FEkuKRuoBQAAAM0"]
[Tue Mar 04 21:36:46.076279 2025] [:error] [pid 30555:tid 139782655010560] [client 128.199.182.55:43090] [client 128.199.182.55] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z8dybvV4QD9-FEkuKRuoBgAAAMs"]
[Wed Mar 05 00:38:17.497960 2025] [:error] [pid 30175:tid 139782806816512] [client 206.81.24.227:57786] [client 206.81.24.227] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Z8ec-eli8t7bCVgCDi0W9wAAAEE"]
[Wed Mar 05 00:38:23.241403 2025] [authz_core:error] [pid 30175:tid 139782545905408] [client 206.81.24.227:57838] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Wed Mar 05 00:38:26.368880 2025] [:error] [pid 30175:tid 139782730544896] [client 206.81.24.227:52246] [client 206.81.24.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z8edAuli8t7bCVgCDi0XAwAAAEI"]
[Wed Mar 05 00:38:26.944428 2025] [:error] [pid 30175:tid 139782663403264] [client 206.81.24.227:52248] [client 206.81.24.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z8edAuli8t7bCVgCDi0XBAAAAEo"]
[Wed Mar 05 03:45:40.868417 2025] [:error] [pid 18360:tid 140669473437440] [client 45.148.10.238:41932] [client 45.148.10.238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z8fI5LhIgkcvgebyiiJfnAAAAJQ"]
[Thu Mar 06 01:49:09.322015 2025] [:error] [pid 8730:tid 140669456652032] [client 165.227.39.235:57494] [client 165.227.39.235] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Z8j_FQRW9eeQNe4PCgHI1AAAANY"]
[Thu Mar 06 01:49:12.565704 2025] [authz_core:error] [pid 18360:tid 140669456652032] [client 165.227.39.235:57556] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Thu Mar 06 01:49:14.106487 2025] [:error] [pid 18332:tid 140669456652032] [client 165.227.39.235:57578] [client 165.227.39.235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z8j_GvBnvGepfxMFl6ag3QAAAFY"]
[Thu Mar 06 01:49:14.279868 2025] [:error] [pid 18360:tid 140669590935296] [client 165.227.39.235:57588] [client 165.227.39.235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z8j_GrhIgkcvgebyiiJzdQAAAIY"]
[Thu Mar 06 18:49:40.973767 2025] [:error] [pid 17394:tid 140233450395392] [client 140.245.50.20:52825] [client 140.245.50.20] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z8nuRLLBPp-vcfn7xoX24AAAARQ"]
[Thu Mar 06 23:19:01.010003 2025] [:error] [pid 3497:tid 140233686083328] [client 157.230.19.140:48170] [client 157.230.19.140] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Z8otZX7kC58ImAfb0TaRDAAAAEA"]
[Thu Mar 06 23:19:08.894450 2025] [authz_core:error] [pid 3525:tid 140233483966208] [client 157.230.19.140:37478] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Thu Mar 06 23:19:18.119612 2025] [:error] [pid 3497:tid 140233500751616] [client 157.230.19.140:54690] [client 157.230.19.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z8otdn7kC58ImAfb0TaREQAAAE4"]
[Thu Mar 06 23:19:20.352604 2025] [:error] [pid 3497:tid 140233652512512] [client 157.230.19.140:54698] [client 157.230.19.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z8oteH7kC58ImAfb0TaREgAAAEQ"]
[Fri Mar 07 23:41:34.290904 2025] [:error] [pid 25690:tid 140510777759488] [client 34.204.174.174:53718] [client 34.204.174.174] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z8uELgjum61egg6jc0WgsQAAANY"]
[Sat Mar 08 10:35:24.335397 2025] [:error] [pid 12339:tid 139797284775680] [client 64.226.78.121:50468] [client 64.226.78.121] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Z8wdbPr1bI7iEottNmvZcwAAAAI"]
[Sat Mar 08 10:35:28.470529 2025] [authz_core:error] [pid 12340:tid 139797374273280] [client 64.226.78.121:37940] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Sat Mar 08 10:35:30.622192 2025] [:error] [pid 12339:tid 139797251204864] [client 64.226.78.121:37992] [client 64.226.78.121] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z8wdcvr1bI7iEottNmvZegAAAAY"]
[Sat Mar 08 10:35:30.978089 2025] [:error] [pid 12340:tid 139797125314304] [client 64.226.78.121:38008] [client 64.226.78.121] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z8wdcjADsERGklN_fncUlQAAAFU"]
[Sun Mar 09 03:56:19.552375 2025] [:error] [pid 2430:tid 140263087335168] [client 46.101.111.185:51692] [client 46.101.111.185] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Z80RY63imSEb3QIq9dh3AAAAAJM"]
[Sun Mar 09 03:56:25.630965 2025] [authz_core:error] [pid 2430:tid 140263045371648] [client 46.101.111.185:38778] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Sun Mar 09 03:56:28.382555 2025] [:error] [pid 2430:tid 140263305787136] [client 46.101.111.185:38806] [client 46.101.111.185] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z80RbK3imSEb3QIq9dh3AwAAAIE"]
[Sun Mar 09 03:56:28.860535 2025] [:error] [pid 2401:tid 140263104120576] [client 46.101.111.185:38822] [client 46.101.111.185] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z80RbFCs5Dmuq4h4X1hAZwAAABE"]
[Mon Mar 10 00:19:04.652679 2025] [:error] [pid 2865:tid 140263104120576] [client 193.41.206.246:55946] [client 193.41.206.246] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/httpd.conf"] [unique_id "Z84v-PeB99891jSwO2sS3QAAANE"]
[Mon Mar 10 00:19:04.857550 2025] [:error] [pid 2865:tid 140263045371648] [client 193.41.206.246:55946] [client 193.41.206.246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/apps/.env"] [unique_id "Z84v-PeB99891jSwO2sS3gAAANg"]
[Mon Mar 10 00:19:07.757236 2025] [:error] [pid 2430:tid 140263053764352] [client 193.41.206.246:14522] [client 193.41.206.246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/api/.env"] [unique_id "Z84v-63imSEb3QIq9diC_gAAAJc"]
[Mon Mar 10 00:19:13.009120 2025] [:error] [pid 2430:tid 140263314179840] [client 193.41.206.246:14538] [client 193.41.206.246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.production"] [unique_id "Z84wAa3imSEb3QIq9diC_wAAAIA"]
[Mon Mar 10 00:19:20.570490 2025] [:error] [pid 2402:tid 140263095727872] [client 193.41.206.246:56624] [client 193.41.206.246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/config/.env"] [unique_id "Z84wCEoMPgIbkhl1ZGyKDgAAAFI"]
[Mon Mar 10 00:19:28.248087 2025] [:error] [pid 2401:tid 140263188047616] [client 193.41.206.246:18260] [client 193.41.206.246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.development"] [unique_id "Z84wEFCs5Dmuq4h4X1hKVwAAAAc"]
[Mon Mar 10 00:19:32.637474 2025] [:error] [pid 2401:tid 140263045371648] [client 193.41.206.246:18284] [client 193.41.206.246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/database/.env"] [unique_id "Z84wFFCs5Dmuq4h4X1hKWAAAABg"]
[Mon Mar 10 00:19:36.627353 2025] [:error] [pid 2401:tid 140263230011136] [client 193.41.206.246:18304] [client 193.41.206.246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.bak"] [unique_id "Z84wGFCs5Dmuq4h4X1hKWQAAAAI"]
[Mon Mar 10 00:19:40.651793 2025] [:error] [pid 2402:tid 140263213225728] [client 193.41.206.246:55230] [client 193.41.206.246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/conf/.env"] [unique_id "Z84wHEoMPgIbkhl1ZGyKDwAAAEQ"]
[Mon Mar 10 00:19:46.725992 2025] [:error] [pid 2402:tid 140263179654912] [client 193.41.206.246:55240] [client 193.41.206.246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/wp-config.php.save"] [unique_id "Z84wIkoMPgIbkhl1ZGyKEgAAAEg"]
[Mon Mar 10 00:19:50.062615 2025] [:error] [pid 2402:tid 140263154476800] [client 193.41.206.246:26432] [client 193.41.206.246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/backend/.env"] [unique_id "Z84wJkoMPgIbkhl1ZGyKEwAAAEs"]
[Mon Mar 10 00:19:54.740418 2025] [:error] [pid 2865:tid 140263162869504] [client 193.41.206.246:26450] [client 193.41.206.246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.save"] [unique_id "Z84wKveB99891jSwO2sS3wAAAMo"]
[Mon Mar 10 00:20:02.108453 2025] [:error] [pid 2865:tid 140263112513280] [client 193.41.206.246:58976] [client 193.41.206.246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/crm/.env"] [unique_id "Z84wMveB99891jSwO2sS4AAAANA"]
[Mon Mar 10 00:20:05.327568 2025] [:error] [pid 2865:tid 140263095727872] [client 193.41.206.246:58986] [client 193.41.206.246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/system/.env"] [unique_id "Z84wNfeB99891jSwO2sS4QAAANI"]
[Mon Mar 10 00:20:05.856762 2025] [:error] [pid 2430:tid 140263070549760] [client 193.41.206.246:58994] [client 193.41.206.246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/api/config/.env"] [unique_id "Z84wNa3imSEb3QIq9diDAAAAAJU"]
[Mon Mar 10 00:20:10.162813 2025] [:error] [pid 2865:tid 140263053764352] [client 193.41.206.246:50308] [client 193.41.206.246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/admin/.env"] [unique_id "Z84wOveB99891jSwO2sS4gAAANc"]
[Mon Mar 10 00:20:14.435707 2025] [:error] [pid 2402:tid 140263053764352] [client 193.41.206.246:50326] [client 193.41.206.246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/server/.env"] [unique_id "Z84wPkoMPgIbkhl1ZGyKFQAAAFc"]
[Mon Mar 10 00:20:21.575031 2025] [:error] [pid 2402:tid 140263070549760] [client 193.41.206.246:20952] [client 193.41.206.246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.json"] [unique_id "Z84wRUoMPgIbkhl1ZGyKFgAAAFU"]
[Mon Mar 10 00:20:28.026768 2025] [:error] [pid 2865:tid 140263305787136] [client 193.41.206.246:41294] [client 193.41.206.246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/resources/.env"] [unique_id "Z84wTPeB99891jSwO2sS4wAAAME"]
[Mon Mar 10 00:20:28.626527 2025] [:error] [pid 2430:tid 140263112513280] [client 193.41.206.246:41300] [client 193.41.206.246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/wp-config.php"] [unique_id "Z84wTK3imSEb3QIq9diDAQAAAJA"]
[Mon Mar 10 00:20:31.574166 2025] [:error] [pid 2401:tid 140263162869504] [client 193.41.206.246:41316] [client 193.41.206.246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/wp-content/.env"] [unique_id "Z84wT1Cs5Dmuq4h4X1hKWgAAAAo"]
[Mon Mar 10 00:20:32.692887 2025] [:error] [pid 2430:tid 140263213225728] [client 193.41.206.246:41318] [client 193.41.206.246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.backup"] [unique_id "Z84wUK3imSEb3QIq9diDAwAAAIQ"]
[Mon Mar 10 00:20:36.275431 2025] [:error] [pid 2865:tid 140263230011136] [client 193.41.206.246:41326] [client 193.41.206.246] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/php.ini"] [unique_id "Z84wVPeB99891jSwO2sS5AAAAMI"]
[Mon Mar 10 00:20:41.410756 2025] [:error] [pid 2865:tid 140263078942464] [client 193.41.206.246:41326] [client 193.41.206.246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z84wWfeB99891jSwO2sS5gAAANQ"]
[Mon Mar 10 00:20:42.530481 2025] [:error] [pid 2865:tid 140263213225728] [client 193.41.206.246:25638] [client 193.41.206.246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/library/.env"] [unique_id "Z84wWveB99891jSwO2sS5wAAAMQ"]
[Mon Mar 10 16:59:04.868986 2025] [:error] [pid 20435:tid 139807242032896] [client 164.90.208.56:59308] [client 164.90.208.56] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Z88aWA0lV8UciQt9qijHfAAAAMs"]
[Mon Mar 10 16:59:09.133024 2025] [authz_core:error] [pid 19932:tid 139807267211008] [client 164.90.208.56:50794] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Mon Mar 10 16:59:11.225347 2025] [:error] [pid 19932:tid 139807283996416] [client 164.90.208.56:50828] [client 164.90.208.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z88aX8NFH6-QjPgFsjHu3wAAAIY"]
[Mon Mar 10 16:59:11.543400 2025] [:error] [pid 19932:tid 139807373895424] [client 164.90.208.56:50832] [client 164.90.208.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z88aX8NFH6-QjPgFsjHu4AAAAIQ"]
[Tue Mar 11 01:06:12.318649 2025] [:error] [pid 19932:tid 139807166498560] [client 139.59.231.238:42948] [client 139.59.231.238] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Z8-MhMNFH6-QjPgFsjHybQAAAJQ"]
[Tue Mar 11 01:06:18.006380 2025] [authz_core:error] [pid 19904:tid 139807382288128] [client 139.59.231.238:43436] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Tue Mar 11 01:06:21.084294 2025] [:error] [pid 19904:tid 139807407466240] [client 139.59.231.238:43478] [client 139.59.231.238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z8-MjUL5shGnOPieG670KgAAAEA"]
[Tue Mar 11 01:06:21.653494 2025] [:error] [pid 19904:tid 139807183283968] [client 139.59.231.238:43488] [client 139.59.231.238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z8-MjUL5shGnOPieG670KwAAAFI"]
[Tue Mar 11 16:40:39.556349 2025] [:error] [pid 4997:tid 139727072085760] [client 18.175.222.15:50998] [client 18.175.222.15] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/sftp-config.json"] [unique_id "Z9BnhyYXh0pVr-ISzNjyxAAAAEs"]
[Wed Mar 12 15:59:53.465749 2025] [:error] [pid 23090:tid 140156434597632] [client 159.65.144.72:49898] [client 159.65.144.72] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Z9GveTezlBbJpM_KFA7kVwAAAE4"]
[Wed Mar 12 15:59:59.322617 2025] [authz_core:error] [pid 23090:tid 140156442990336] [client 159.65.144.72:55898] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Wed Mar 12 16:00:02.830268 2025] [:error] [pid 23089:tid 140156434597632] [client 159.65.144.72:55928] [client 159.65.144.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z9GvghKQxZiZbMgYyJkBCQAAAA4"]
[Wed Mar 12 16:00:03.352704 2025] [:error] [pid 23089:tid 140156359063296] [client 159.65.144.72:55934] [client 159.65.144.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z9GvgxKQxZiZbMgYyJkBCgAAABc"]
[Thu Mar 13 03:54:58.610165 2025] [:error] [pid 30950:tid 140061056116480] [client 159.89.12.166:33016] [client 159.89.12.166] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Z9JXEiihSUIZul5y8bxxnQAAAM8"]
[Thu Mar 13 03:55:05.055513 2025] [authz_core:error] [pid 5632:tid 140061047723776] [client 159.89.12.166:33078] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Thu Mar 13 03:55:08.139621 2025] [:error] [pid 30950:tid 140061039331072] [client 159.89.12.166:55678] [client 159.89.12.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z9JXHCihSUIZul5y8bxxngAAANE"]
[Thu Mar 13 03:55:08.630409 2025] [:error] [pid 30950:tid 140061030938368] [client 159.89.12.166:55686] [client 159.89.12.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z9JXHCihSUIZul5y8bxxnwAAANI"]
[Fri Mar 14 03:09:33.325819 2025] [:error] [pid 30950:tid 140061123258112] [client 194.233.91.58:38810] [client 194.233.91.58] ModSecurity: Access denied with code 403 (phase 2). String match "/.profile" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/30_Apps_OtherApps.conf"] [line "6621"] [id "243320"] [rev "1"] [msg "COMODO WAF: Information disclosure vulnerability in Cloud Foundry PHP Buildpack (aka php-buildpack) before 4.3.18 and PHP Buildpack Cf-release before 242, as used in Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.6.38 and 1.7.x before 1.7.19 and other products (CVE-2016-6639)||edu.richinei.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "edu.richinei.com"] [uri "/.profile"] [unique_id "Z9Od7SihSUIZul5y8byN1wAAAMc"]
[Fri Mar 14 03:09:49.031180 2025] [:error] [pid 5604:tid 140061140043520] [client 194.233.91.58:50886] [client 194.233.91.58] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z9Od_QO_BF08d7X0oIR0fQAAAEU"]
[Fri Mar 14 03:09:49.809920 2025] [:error] [pid 5604:tid 140061056116480] [client 194.233.91.58:55546] [client 194.233.91.58] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/config/.env"] [unique_id "Z9Od_QO_BF08d7X0oIR0fgAAAE8"]
[Fri Mar 14 03:09:50.593629 2025] [:error] [pid 5604:tid 140061123258112] [client 194.233.91.58:60424] [client 194.233.91.58] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.production"] [unique_id "Z9Od_gO_BF08d7X0oIR0fwAAAEc"]
[Fri Mar 14 03:09:51.500816 2025] [:error] [pid 5632:tid 140060988974848] [client 194.233.91.58:36980] [client 194.233.91.58] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.local"] [unique_id "Z9Od_-6K-gK0WIiNuzOq1wAAAJc"]
[Fri Mar 14 03:09:53.509302 2025] [:error] [pid 5604:tid 140061072901888] [client 194.233.91.58:50286] [client 194.233.91.58] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/api/.env"] [unique_id "Z9OeAQO_BF08d7X0oIR0gQAAAE0"]
[Fri Mar 14 09:20:49.290069 2025] [:error] [pid 27485:tid 139767924565760] [client 194.233.91.58:33206] [client 194.233.91.58] ModSecurity: Access denied with code 403 (phase 2). String match "/.profile" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/30_Apps_OtherApps.conf"] [line "6621"] [id "243320"] [rev "1"] [msg "COMODO WAF: Information disclosure vulnerability in Cloud Foundry PHP Buildpack (aka php-buildpack) before 4.3.18 and PHP Buildpack Cf-release before 242, as used in Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.6.38 and 1.7.x before 1.7.19 and other products (CVE-2016-6639)||edu.richinei.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "edu.richinei.com"] [uri "/.profile"] [unique_id "Z9P08Un-ECfBPdPdEvBFFgAAABU"]
[Fri Mar 14 09:21:03.326704 2025] [:error] [pid 27486:tid 139768016885504] [client 194.233.91.58:41486] [client 194.233.91.58] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z9P0_8KQOQcgzm7fxc4vfgAAAEo"]
[Fri Mar 14 09:21:04.074128 2025] [:error] [pid 27486:tid 139768050456320] [client 194.233.91.58:46196] [client 194.233.91.58] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/config/.env"] [unique_id "Z9P1AMKQOQcgzm7fxc4vgAAAAEY"]
[Fri Mar 14 09:21:04.820692 2025] [:error] [pid 27514:tid 139768050456320] [client 194.233.91.58:50830] [client 194.233.91.58] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.production"] [unique_id "Z9P1AM12EM7SwWCBdNpp3wAAAIY"]
[Fri Mar 14 09:21:05.567267 2025] [:error] [pid 27798:tid 139768050456320] [client 194.233.91.58:55364] [client 194.233.91.58] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.local"] [unique_id "Z9P1AQHEZVY9vk6V04JFoAAAAMY"]
[Fri Mar 14 09:21:07.315271 2025] [:error] [pid 27798:tid 139768042063616] [client 194.233.91.58:38328] [client 194.233.91.58] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/api/.env"] [unique_id "Z9P1AwHEZVY9vk6V04JFoQAAAMc"]
[Sat Mar 15 03:01:22.973227 2025] [:error] [pid 27486:tid 139767941351168] [client 167.172.158.128:32836] [client 167.172.158.128] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Z9TtgsKQOQcgzm7fxc49vwAAAFM"]
[Sat Mar 15 03:01:26.562151 2025] [authz_core:error] [pid 27486:tid 139767907780352] [client 167.172.158.128:32902] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Sat Mar 15 03:01:28.445918 2025] [:error] [pid 27486:tid 139767966529280] [client 167.172.158.128:41694] [client 167.172.158.128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z9TtiMKQOQcgzm7fxc49wwAAAFA"]
[Sat Mar 15 03:01:28.708146 2025] [:error] [pid 27485:tid 139767966529280] [client 167.172.158.128:41698] [client 167.172.158.128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z9TtiEn-ECfBPdPdEvBSlAAAABA"]
[Sat Mar 15 04:58:27.509620 2025] [:error] [pid 15863:tid 139776137090816] [client 194.233.91.58:40246] [client 194.233.91.58] ModSecurity: Access denied with code 403 (phase 2). String match "/.profile" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/30_Apps_OtherApps.conf"] [line "6621"] [id "243320"] [rev "1"] [msg "COMODO WAF: Information disclosure vulnerability in Cloud Foundry PHP Buildpack (aka php-buildpack) before 4.3.18 and PHP Buildpack Cf-release before 242, as used in Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.6.38 and 1.7.x before 1.7.19 and other products (CVE-2016-6639)||edu.richinei.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "edu.richinei.com"] [uri "/.profile"] [unique_id "Z9UI8xS6Dj28E9ZvTh59ngAAAII"]
[Sat Mar 15 04:58:41.378733 2025] [:error] [pid 15863:tid 139776078341888] [client 194.233.91.58:38500] [client 194.233.91.58] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z9UJARS6Dj28E9ZvTh59ogAAAIk"]
[Sat Mar 15 04:58:42.129694 2025] [:error] [pid 15834:tid 139776036378368] [client 194.233.91.58:38506] [client 194.233.91.58] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/config/.env"] [unique_id "Z9UJApmxQ35NZ10OpV3aeQAAAA4"]
[Sat Mar 15 04:58:43.018335 2025] [:error] [pid 15834:tid 139776019592960] [client 194.233.91.58:38510] [client 194.233.91.58] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.production"] [unique_id "Z9UJA5mxQ35NZ10OpV3aegAAABA"]
[Sat Mar 15 04:58:43.830314 2025] [:error] [pid 15834:tid 139776002807552] [client 194.233.91.58:41036] [client 194.233.91.58] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.local"] [unique_id "Z9UJA5mxQ35NZ10OpV3aewAAABI"]
[Sat Mar 15 04:58:45.618711 2025] [:error] [pid 15834:tid 139775969236736] [client 194.233.91.58:41054] [client 194.233.91.58] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/api/.env"] [unique_id "Z9UJBZmxQ35NZ10OpV3afQAAABY"]
[Mon Mar 17 06:11:57.937378 2025] [:error] [pid 16514:tid 140374320293632] [client 167.172.232.142:49284] [client 167.172.232.142] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Z9e9LdCOSOEQR-ut_zmfcQAAAJE"]
[Mon Mar 17 06:12:01.751126 2025] [authz_core:error] [pid 16486:tid 140374421006080] [client 167.172.232.142:49356] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Mon Mar 17 06:12:03.976877 2025] [:error] [pid 16514:tid 140374429398784] [client 167.172.232.142:52986] [client 167.172.232.142] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z9e9M9COSOEQR-ut_zmfdgAAAIQ"]
[Mon Mar 17 06:12:04.297809 2025] [:error] [pid 16514:tid 140374421006080] [client 167.172.232.142:52994] [client 167.172.232.142] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z9e9NNCOSOEQR-ut_zmfdwAAAIU"]
[Tue Mar 18 17:39:29.936528 2025] [:error] [pid 3505:tid 140198545426176] [client 167.172.158.128:36392] [client 167.172.158.128] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Z9mv0eGUrjhO7o8AJR6SwwAAAAg"]
[Tue Mar 18 17:39:33.017920 2025] [authz_core:error] [pid 3506:tid 140198684645120] [client 167.172.158.128:36458] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Tue Mar 18 17:39:34.547005 2025] [:error] [pid 3506:tid 140198520248064] [client 167.172.158.128:36490] [client 167.172.158.128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z9mv1hoSEWPq5SQ2sN9NKAAAAEs"]
[Tue Mar 18 17:39:34.723404 2025] [:error] [pid 3506:tid 140198537033472] [client 167.172.158.128:36494] [client 167.172.158.128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z9mv1hoSEWPq5SQ2sN9NKQAAAEk"]
[Wed Mar 19 05:20:10.175434 2025] [:error] [pid 17308:tid 140167725639424] [client 142.93.143.8:40708] [client 142.93.143.8] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Z9pUCl8cTKGXhFZPG8gMNwAAANU"]
[Wed Mar 19 05:20:18.220075 2025] [authz_core:error] [pid 24302:tid 140167775995648] [client 142.93.143.8:45160] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Wed Mar 19 05:20:22.102248 2025] [:error] [pid 24302:tid 140167967221504] [client 142.93.143.8:45198] [client 142.93.143.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z9pUFhBtCD7hvGBNjrallwAAAIE"]
[Wed Mar 19 05:20:22.830088 2025] [:error] [pid 24302:tid 140167708854016] [client 142.93.143.8:45212] [client 142.93.143.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z9pUFhBtCD7hvGBNjralmAAAAJc"]
[Wed Mar 19 19:59:37.860447 2025] [:error] [pid 24273:tid 140167843137280] [client 170.39.218.49:43340] [client 170.39.218.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z9siKTiUFXMpFRERNGWwhQAAAAc"]
[Wed Mar 19 19:59:39.416134 2025] [:error] [pid 24273:tid 140167708854016] [client 170.39.218.49:43350] [client 170.39.218.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/api/.env"] [unique_id "Z9siKziUFXMpFRERNGWwhwAAABc"]
[Wed Mar 19 19:59:42.965276 2025] [:error] [pid 17308:tid 140167792781056] [client 170.39.218.49:35950] [client 170.39.218.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.save"] [unique_id "Z9siLl8cTKGXhFZPG8gh8AAAAM0"]
[Wed Mar 19 19:59:43.882910 2025] [:error] [pid 24274:tid 140167792781056] [client 170.39.218.49:35956] [client 170.39.218.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.prod"] [unique_id "Z9siL804TdD_jHPpUmKnWQAAAE0"]
[Wed Mar 19 19:59:44.823396 2025] [:error] [pid 24273:tid 140167717246720] [client 170.39.218.49:35970] [client 170.39.218.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/login/.env"] [unique_id "Z9siMDiUFXMpFRERNGWwiAAAABY"]
[Wed Mar 19 19:59:45.729975 2025] [:error] [pid 24274:tid 140167725639424] [client 170.39.218.49:35980] [client 170.39.218.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/local/.env"] [unique_id "Z9siMc04TdD_jHPpUmKnWgAAAFU"]
[Wed Mar 19 19:59:46.484722 2025] [:error] [pid 24273:tid 140167725639424] [client 170.39.218.49:35982] [client 170.39.218.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/admin/.env"] [unique_id "Z9siMjiUFXMpFRERNGWwiQAAABU"]
[Wed Mar 19 19:59:47.803360 2025] [:error] [pid 24274:tid 140167742424832] [client 170.39.218.49:35998] [client 170.39.218.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/dev/.env"] [unique_id "Z9siM804TdD_jHPpUmKnWwAAAFM"]
[Wed Mar 19 19:59:48.397958 2025] [:error] [pid 17308:tid 140167843137280] [client 170.39.218.49:36004] [client 170.39.218.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/application/.env"] [unique_id "Z9siNF8cTKGXhFZPG8gh8QAAAMc"]
[Thu Mar 20 14:52:29.938935 2025] [:error] [pid 17406:tid 139648512816896] [client 143.110.217.244:45378] [client 143.110.217.244] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Z9wrrXJGwMZ-T7ghFUNQTQAAAIQ"]
[Thu Mar 20 14:52:32.802382 2025] [authz_core:error] [pid 17406:tid 139648370140928] [client 143.110.217.244:45424] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Thu Mar 20 14:52:34.186082 2025] [:error] [pid 17406:tid 139648594110208] [client 143.110.217.244:45458] [client 143.110.217.244] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z9wrsnJGwMZ-T7ghFUNQVQAAAIM"]
[Thu Mar 20 14:52:34.317424 2025] [:error] [pid 17406:tid 139648610895616] [client 143.110.217.244:45472] [client 143.110.217.244] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z9wrsnJGwMZ-T7ghFUNQVgAAAIE"]
[Fri Mar 21 12:04:46.904730 2025] [:error] [pid 7926:tid 140331854640896] [client 196.251.88.108:56468] [client 196.251.88.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z91V3lMCO5cNQuC1SeMaBAAAAEM"]
[Sat Mar 22 23:07:30.828113 2025] [:error] [pid 31602:tid 139880365483776] [client 159.89.12.166:55800] [client 159.89.12.166] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Z99CsjttHBNpJuZiWJA8TwAAANc"]
[Sat Mar 22 23:07:42.696870 2025] [authz_core:error] [pid 31602:tid 139880399054592] [client 159.89.12.166:38072] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Sat Mar 22 23:07:48.220988 2025] [:error] [pid 31276:tid 139880441018112] [client 159.89.12.166:40506] [client 159.89.12.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z99CxIi6z-7I6ONutLDC-wAAAI4"]
[Sat Mar 22 23:07:49.712202 2025] [:error] [pid 31276:tid 139880399054592] [client 159.89.12.166:40508] [client 159.89.12.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z99CxYi6z-7I6ONutLDC_AAAAJM"]
[Mon Mar 24 13:31:42.838157 2025] [:error] [pid 14260:tid 140192027473664] [client 103.102.230.8:46996] [client 103.102.230.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z-Fevu7LvoV9mFNP_Un2iQAAAAo"]
[Mon Mar 24 17:49:19.232084 2025] [:error] [pid 14260:tid 140192086222592] [client 103.102.230.8:52054] [client 103.102.230.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z-GbH-7LvoV9mFNP_Un9mQAAAAM"]
[Mon Mar 24 19:28:32.705505 2025] [:error] [pid 14642:tid 140191968724736] [client 89.248.165.177:33778] [client 89.248.165.177] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z-GyYGqKcIEEEJiPOVHntwAAANE"]
[Mon Mar 24 19:28:33.157448 2025] [:error] [pid 14260:tid 140192019080960] [client 89.248.165.177:37690] [client 89.248.165.177] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z-GyYe7LvoV9mFNP_Un_UQAAAAs"]
[Tue Mar 25 02:28:27.955637 2025] [:error] [pid 14642:tid 140191960332032] [client 103.102.230.8:33114] [client 103.102.230.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z-IUy2qKcIEEEJiPOVHo5wAAANI"]
[Sun Mar 30 06:49:35.255162 2025] [:error] [pid 14635:tid 140299661731584] [client 45.148.10.172:49038] [client 45.148.10.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z-jpf9tw2PcYyDNPU_NLBQAAAEU"]
[Sat Apr 05 15:53:07.345808 2025] [:error] [pid 19365:tid 139933457053440] [client 194.233.91.58:48936] [client 194.233.91.58] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/config/php.ini"] [unique_id "Z_FR46fIgK0kwEC34snq7QAAAIA"]
[Sat Apr 05 15:53:46.273924 2025] [:error] [pid 19336:tid 139933423482624] [client 194.233.91.58:58042] [client 194.233.91.58] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/config.ini"] [unique_id "Z_FSCrmsOhW7CKAg5SV1CAAAAAQ"]
[Sun Apr 06 17:46:56.822299 2025] [:error] [pid 9385:tid 139935327708928] [client 138.68.82.23:56550] [client 138.68.82.23] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Z_K-EOJY4fi_9Rn56Vb5SQAAAIg"]
[Sun Apr 06 17:47:00.869876 2025] [authz_core:error] [pid 2196:tid 139935327708928] [client 138.68.82.23:56602] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Sun Apr 06 17:47:03.040006 2025] [:error] [pid 2196:tid 139935319316224] [client 138.68.82.23:56640] [client 138.68.82.23] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z_K-F8VXRI5EYwtYyjknigAAAMk"]
[Sun Apr 06 17:47:03.357930 2025] [:error] [pid 2196:tid 139935260567296] [client 138.68.82.23:38782] [client 138.68.82.23] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z_K-F8VXRI5EYwtYyjkniwAAANA"]
[Mon Apr 07 01:43:37.899002 2025] [:error] [pid 9357:tid 139935302530816] [client 165.22.235.3:39410] [client 165.22.235.3] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Z_MtydMIqm3B3oF01twhigAAAEs"]
[Mon Apr 07 01:43:41.136734 2025] [authz_core:error] [pid 9357:tid 139935310923520] [client 165.22.235.3:39476] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Mon Apr 07 01:43:42.784714 2025] [:error] [pid 9357:tid 139935260567296] [client 165.22.235.3:39504] [client 165.22.235.3] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z_MtztMIqm3B3oF01twhlQAAAFA"]
[Mon Apr 07 01:43:42.986256 2025] [:error] [pid 9357:tid 139935319316224] [client 165.22.235.3:39512] [client 165.22.235.3] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z_MtztMIqm3B3oF01twhlgAAAEk"]
[Tue Apr 08 14:10:33.281127 2025] [:error] [pid 32725:tid 140296054540032] [client 159.89.127.165:50270] [client 159.89.127.165] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Z_UuWdFJ9WCkAPtFAy_DwwAAAFg"]
[Tue Apr 08 14:10:36.750652 2025] [authz_core:error] [pid 1602:tid 140296239179520] [client 159.89.127.165:52262] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Tue Apr 08 14:10:38.854915 2025] [:error] [pid 32727:tid 140296247572224] [client 159.89.127.165:52284] [client 159.89.127.165] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z_UuXtv6gmysOTzr9I46DAAAAIE"]
[Tue Apr 08 14:10:39.075086 2025] [:error] [pid 32725:tid 140296054540032] [client 159.89.127.165:52300] [client 159.89.127.165] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z_UuX9FJ9WCkAPtFAy_DzQAAAFg"]
[Wed Apr 09 03:47:12.536212 2025] [:error] [pid 2632:tid 140429827716864] [client 45.148.10.172:34052] [client 45.148.10.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z_XtwH4qBgsSudPit-C1kgAAAJE"]
[Wed Apr 09 14:33:45.389168 2025] [:error] [pid 2632:tid 140429785753344] [client 45.148.10.172:53938] [client 45.148.10.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z_aFSX4qBgsSudPit-C5mgAAAJY"]
[Thu Apr 10 07:01:21.279948 2025] [:error] [pid 22338:tid 140648040564480] [client 154.83.103.204:50286] [client 154.83.103.204] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/HEAD"] [unique_id "Z_dswSsbZi4uMUi2pXNw4wAAAJY"]
[Thu Apr 10 07:01:21.980772 2025] [:error] [pid 22338:tid 140648023779072] [client 154.83.103.204:50298] [client 154.83.103.204] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z_dswSsbZi4uMUi2pXNw5AAAAJg"]
[Thu Apr 10 07:01:22.615409 2025] [:error] [pid 22632:tid 140648166455040] [client 154.83.103.204:50300] [client 154.83.103.204] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.production"] [unique_id "Z_dswuvZwDzF34-_tM9VGgAAAMc"]
[Thu Apr 10 07:01:23.296567 2025] [:error] [pid 22632:tid 140648149669632] [client 154.83.103.204:50302] [client 154.83.103.204] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/settings/.env"] [unique_id "Z_dsw-vZwDzF34-_tM9VGwAAAMk"]
[Thu Apr 10 07:01:26.222553 2025] [:error] [pid 22338:tid 140648250713856] [client 154.83.103.204:50308] [client 154.83.103.204] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/db.ini"] [unique_id "Z_dsxisbZi4uMUi2pXNw6QAAAIU"]
[Thu Apr 10 07:01:31.439828 2025] [:error] [pid 22338:tid 140648090920704] [client 154.83.103.204:50308] [client 154.83.103.204] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/docker/.env"] [unique_id "Z_dsyysbZi4uMUi2pXNw9QAAAJA"]
[Thu Apr 10 07:01:33.368564 2025] [:error] [pid 22632:tid 140648107706112] [client 154.83.103.204:29616] [client 154.83.103.204] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/env.backup"] [unique_id "Z_dszevZwDzF34-_tM9VHwAAAM4"]
[Thu Apr 10 07:01:33.531188 2025] [:error] [pid 22632:tid 140648099313408] [client 154.83.103.204:29616] [client 154.83.103.204] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/settings.bak"] [unique_id "Z_dszevZwDzF34-_tM9VIAAAAM8"]
[Thu Apr 10 07:01:34.328998 2025] [:error] [pid 22632:tid 140648082528000] [client 154.83.103.204:29616] [client 154.83.103.204] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/old/.env"] [unique_id "Z_dszuvZwDzF34-_tM9VIgAAANE"]
[Thu Apr 10 07:01:36.293082 2025] [:error] [pid 22316:tid 140648149669632] [client 154.83.103.204:43664] [client 154.83.103.204] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/laravel/.env"] [unique_id "Z_ds0Gj9jpaReNZuqzElWgAAAAk"]
[Thu Apr 10 07:01:36.672509 2025] [:error] [pid 22632:tid 140648057349888] [client 154.83.103.204:43670] [client 154.83.103.204] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z_ds0OvZwDzF34-_tM9VIwAAANQ"]
[Thu Apr 10 07:01:37.298890 2025] [:error] [pid 22338:tid 140648065742592] [client 154.83.103.204:43678] [client 154.83.103.204] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/HEAD"] [unique_id "Z_ds0SsbZi4uMUi2pXNw9gAAAJM"]
[Thu Apr 10 07:01:37.928268 2025] [:error] [pid 22338:tid 140648048957184] [client 154.83.103.204:43686] [client 154.83.103.204] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/logs/HEAD"] [unique_id "Z_ds0SsbZi4uMUi2pXNw9wAAAJU"]
[Thu Apr 10 07:01:40.219716 2025] [:error] [pid 22338:tid 140648292677376] [client 154.83.103.204:43690] [client 154.83.103.204] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sites/default/settings.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/sites/default/settings.php"] [unique_id "Z_ds1CsbZi4uMUi2pXNw-wAAAIA"]
[Thu Apr 10 07:01:42.593560 2025] [:error] [pid 22338:tid 140648166455040] [client 154.83.103.204:43696] [client 154.83.103.204] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/php.ini"] [unique_id "Z_ds1isbZi4uMUi2pXNw_wAAAIc"]
[Thu Apr 10 07:01:44.053210 2025] [authz_host:error] [pid 22338:tid 140648132884224] [client 154.83.103.204:43696] AH01753: access check of 'localhost' to /server-status failed, reason: unable to get the remote host name
[Thu Apr 10 07:01:44.053258 2025] [authz_core:error] [pid 22338:tid 140648132884224] [client 154.83.103.204:43696] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Thu Apr 10 07:01:48.425096 2025] [:error] [pid 22338:tid 140648074135296] [client 154.83.103.204:43696] [client 154.83.103.204] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/public/.env"] [unique_id "Z_ds3CsbZi4uMUi2pXNxCgAAAJI"]
[Thu Apr 10 07:01:49.056107 2025] [:error] [pid 22338:tid 140648048957184] [client 154.83.103.204:59412] [client 154.83.103.204] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/composer.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/composer.json"] [unique_id "Z_ds3SsbZi4uMUi2pXNxCwAAAJU"]
[Thu Apr 10 13:37:24.036114 2025] [:error] [pid 22316:tid 140648242321152] [client 154.83.103.109:54376] [client 154.83.103.109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z_fJlGj9jpaReNZuqzEqGAAAAAY"]
[Thu Apr 10 13:37:26.104737 2025] [:error] [pid 22316:tid 140648166455040] [client 154.83.103.109:54386] [client 154.83.103.109] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/httpd.conf"] [unique_id "Z_fJlmj9jpaReNZuqzEqGwAAAAc"]
[Thu Apr 10 13:37:26.276690 2025] [:error] [pid 22316:tid 140648116098816] [client 154.83.103.109:54386] [client 154.83.103.109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/apps/.env"] [unique_id "Z_fJlmj9jpaReNZuqzEqHAAAAA0"]
[Thu Apr 10 13:37:30.815084 2025] [:error] [pid 22317:tid 140648158062336] [client 154.83.103.109:54394] [client 154.83.103.109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/backend/.env"] [unique_id "Z_fJmm9KH6Qhnw0l3YGMbAAAAEg"]
[Thu Apr 10 13:37:31.757887 2025] [:error] [pid 22317:tid 140648099313408] [client 154.83.103.109:54408] [client 154.83.103.109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/app/config/.env"] [unique_id "Z_fJm29KH6Qhnw0l3YGMbQAAAE8"]
[Thu Apr 10 13:37:33.027423 2025] [:error] [pid 22317:tid 140648090920704] [client 154.83.103.109:54410] [client 154.83.103.109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/wp-config.php"] [unique_id "Z_fJnW9KH6Qhnw0l3YGMbwAAAFA"]
[Thu Apr 10 13:37:33.657988 2025] [:error] [pid 22338:tid 140648275891968] [client 154.83.103.109:10030] [client 154.83.103.109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/server/.env"] [unique_id "Z_fJnSsbZi4uMUi2pXN1rAAAAII"]
[Thu Apr 10 13:37:34.337442 2025] [:error] [pid 22632:tid 140648132884224] [client 154.83.103.109:10038] [client 154.83.103.109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/wp-config.php.save"] [unique_id "Z_fJnuvZwDzF34-_tM9aoAAAAMs"]
[Thu Apr 10 13:37:35.604569 2025] [:error] [pid 22632:tid 140648149669632] [client 154.83.103.109:10054] [client 154.83.103.109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/env/.env"] [unique_id "Z_fJn-vZwDzF34-_tM9aogAAAMk"]
[Thu Apr 10 13:37:36.119577 2025] [:error] [pid 22632:tid 140648250713856] [client 154.83.103.109:10068] [client 154.83.103.109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/app/.env"] [unique_id "Z_fJoOvZwDzF34-_tM9aowAAAMU"]
[Thu Apr 10 13:37:37.825384 2025] [:error] [pid 22632:tid 140648023779072] [client 154.83.103.109:10074] [client 154.83.103.109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.save"] [unique_id "Z_fJoevZwDzF34-_tM9apwAAANg"]
[Thu Apr 10 13:37:38.454537 2025] [:error] [pid 22338:tid 140648099313408] [client 154.83.103.109:10080] [client 154.83.103.109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/config/.env"] [unique_id "Z_fJoisbZi4uMUi2pXN1rQAAAI8"]
[Thu Apr 10 13:37:40.154329 2025] [:error] [pid 22338:tid 140648090920704] [client 154.83.103.109:10090] [client 154.83.103.109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/core/.env"] [unique_id "Z_fJpCsbZi4uMUi2pXN1sAAAAJA"]
[Thu Apr 10 13:37:40.661328 2025] [:error] [pid 22338:tid 140648242321152] [client 154.83.103.109:10100] [client 154.83.103.109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/laravel/.env"] [unique_id "Z_fJpCsbZi4uMUi2pXN1sQAAAIY"]
[Thu Apr 10 16:29:35.930122 2025] [:error] [pid 22632:tid 140648292677376] [client 139.59.132.8:45820] [client 139.59.132.8] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Z_fx7-vZwDzF34-_tM9dIwAAAMA"]
[Thu Apr 10 16:29:40.242379 2025] [authz_core:error] [pid 22316:tid 140648107706112] [client 139.59.132.8:57256] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Thu Apr 10 16:29:42.303821 2025] [:error] [pid 22632:tid 140648141276928] [client 139.59.132.8:57296] [client 139.59.132.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z_fx9uvZwDzF34-_tM9dKgAAAMo"]
[Thu Apr 10 16:29:42.637929 2025] [:error] [pid 22632:tid 140648048957184] [client 139.59.132.8:57300] [client 139.59.132.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z_fx9uvZwDzF34-_tM9dKwAAANU"]
[Thu Apr 10 18:20:50.463877 2025] [:error] [pid 22316:tid 140648124491520] [client 3.80.120.4:59855] [client 3.80.120.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z_gMAmj9jpaReNZuqzEsywAAAAw"]
[Thu Apr 10 18:20:50.599655 2025] [:error] [pid 22317:tid 140648259106560] [client 3.80.120.4:51680] [client 3.80.120.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/update/.git/config"] [unique_id "Z_gMAm9KH6Qhnw0l3YGPEAAAAEQ"]
[Thu Apr 10 18:20:50.741556 2025] [:error] [pid 22316:tid 140648284284672] [client 3.80.120.4:64773] [client 3.80.120.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/app/.git/config"] [unique_id "Z_gMAmj9jpaReNZuqzEszAAAAAE"]
[Thu Apr 10 18:20:50.869697 2025] [:error] [pid 22632:tid 140648099313408] [client 3.80.120.4:61025] [client 3.80.120.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/admin/.git/config"] [unique_id "Z_gMAuvZwDzF34-_tM9eiwAAAM8"]
[Thu Apr 10 18:20:51.022117 2025] [:error] [pid 22632:tid 140648149669632] [client 3.80.120.4:51455] [client 3.80.120.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/private/.git/config"] [unique_id "Z_gMA-vZwDzF34-_tM9ejAAAAMk"]
[Thu Apr 10 18:20:51.150670 2025] [:error] [pid 22316:tid 140648141276928] [client 3.80.120.4:54437] [client 3.80.120.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/home/.git/config"] [unique_id "Z_gMA2j9jpaReNZuqzEszQAAAAo"]
[Thu Apr 10 18:20:51.293757 2025] [:error] [pid 22317:tid 140648284284672] [client 3.80.120.4:56498] [client 3.80.120.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/src/.git/config"] [unique_id "Z_gMA29KH6Qhnw0l3YGPEQAAAEE"]
[Thu Apr 10 18:20:51.421953 2025] [:error] [pid 22317:tid 140648141276928] [client 3.80.120.4:58418] [client 3.80.120.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/backend/.git/config"] [unique_id "Z_gMA29KH6Qhnw0l3YGPEgAAAEo"]
[Thu Apr 10 18:20:51.556201 2025] [:error] [pid 22317:tid 140648250713856] [client 3.80.120.4:53415] [client 3.80.120.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/frontend/.git/config"] [unique_id "Z_gMA29KH6Qhnw0l3YGPEwAAAEU"]
[Thu Apr 10 18:20:51.684709 2025] [:error] [pid 22317:tid 140648090920704] [client 3.80.120.4:54956] [client 3.80.120.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/api/.git/config"] [unique_id "Z_gMA29KH6Qhnw0l3YGPFAAAAFA"]
[Thu Apr 10 18:20:51.821763 2025] [:error] [pid 22316:tid 140648057349888] [client 3.80.120.4:53320] [client 3.80.120.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/dev/.git/config"] [unique_id "Z_gMA2j9jpaReNZuqzEszgAAABQ"]
[Thu Apr 10 18:20:51.951218 2025] [:error] [pid 22317:tid 140648023779072] [client 3.80.120.4:60358] [client 3.80.120.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/backup/.git/config"] [unique_id "Z_gMA29KH6Qhnw0l3YGPFQAAAFg"]
[Thu Apr 10 18:20:52.087647 2025] [:error] [pid 22317:tid 140648057349888] [client 3.80.120.4:56208] [client 3.80.120.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/production/.git/config"] [unique_id "Z_gMBG9KH6Qhnw0l3YGPFgAAAFQ"]
[Thu Apr 10 18:20:52.224378 2025] [:error] [pid 22338:tid 140648292677376] [client 3.80.120.4:57987] [client 3.80.120.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/website/.git/config"] [unique_id "Z_gMBCsbZi4uMUi2pXN41wAAAIA"]
[Thu Apr 10 18:20:52.360654 2025] [:error] [pid 22316:tid 140648099313408] [client 3.80.120.4:56640] [client 3.80.120.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/portal/.git/config"] [unique_id "Z_gMBGj9jpaReNZuqzEszwAAAA8"]
[Thu Apr 10 18:20:52.488903 2025] [:error] [pid 22316:tid 140648292677376] [client 3.80.120.4:57791] [client 3.80.120.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/dashboard/.git/config"] [unique_id "Z_gMBGj9jpaReNZuqzEs0AAAAAA"]
[Thu Apr 10 18:20:52.631401 2025] [:error] [pid 22317:tid 140648275891968] [client 3.80.120.4:62944] [client 3.80.120.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/cms/.git/config"] [unique_id "Z_gMBG9KH6Qhnw0l3YGPFwAAAEI"]
[Thu Apr 10 18:44:36.069651 2025] [:error] [pid 22316:tid 140648040564480] [client 45.148.10.172:42116] [client 45.148.10.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z_gRlGj9jpaReNZuqzEtSgAAABY"]
[Thu Apr 10 18:57:58.628352 2025] [:error] [pid 22317:tid 140648124491520] [client 154.83.103.111:12902] [client 154.83.103.111] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/HEAD"] [unique_id "Z_gUtm9KH6Qhnw0l3YGPaAAAAEw"]
[Thu Apr 10 18:57:59.314290 2025] [:error] [pid 22317:tid 140648284284672] [client 154.83.103.111:12904] [client 154.83.103.111] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z_gUt29KH6Qhnw0l3YGPaQAAAEE"]
[Thu Apr 10 18:58:00.045292 2025] [:error] [pid 22317:tid 140648082528000] [client 154.83.103.111:12912] [client 154.83.103.111] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.production"] [unique_id "Z_gUuG9KH6Qhnw0l3YGPagAAAFE"]
[Thu Apr 10 18:58:00.674056 2025] [:error] [pid 22317:tid 140648158062336] [client 154.83.103.111:12920] [client 154.83.103.111] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/settings/.env"] [unique_id "Z_gUuG9KH6Qhnw0l3YGPawAAAEg"]
[Thu Apr 10 18:58:04.115224 2025] [:error] [pid 22317:tid 140648099313408] [client 154.83.103.111:12922] [client 154.83.103.111] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/db.ini"] [unique_id "Z_gUvG9KH6Qhnw0l3YGPcAAAAE8"]
[Thu Apr 10 18:58:11.173078 2025] [:error] [pid 22317:tid 140648116098816] [client 154.83.103.111:12922] [client 154.83.103.111] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/docker/.env"] [unique_id "Z_gUw29KH6Qhnw0l3YGPfgAAAE0"]
[Thu Apr 10 18:58:13.177588 2025] [:error] [pid 22632:tid 140648090920704] [client 154.83.103.111:36966] [client 154.83.103.111] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/env.backup"] [unique_id "Z_gUxevZwDzF34-_tM9e0QAAANA"]
[Thu Apr 10 18:58:13.338327 2025] [:error] [pid 22632:tid 140648292677376] [client 154.83.103.111:36966] [client 154.83.103.111] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/settings.bak"] [unique_id "Z_gUxevZwDzF34-_tM9e0gAAAMA"]
[Thu Apr 10 18:58:14.085370 2025] [:error] [pid 22632:tid 140648275891968] [client 154.83.103.111:36966] [client 154.83.103.111] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/old/.env"] [unique_id "Z_gUxuvZwDzF34-_tM9e1AAAAMI"]
[Thu Apr 10 18:58:15.874212 2025] [:error] [pid 22338:tid 140648149669632] [client 154.83.103.111:39456] [client 154.83.103.111] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/laravel/.env"] [unique_id "Z_gUxysbZi4uMUi2pXN5CgAAAIk"]
[Thu Apr 10 18:58:16.521777 2025] [:error] [pid 22338:tid 140648158062336] [client 154.83.103.111:39466] [client 154.83.103.111] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z_gUyCsbZi4uMUi2pXN5CwAAAIg"]
[Thu Apr 10 18:58:17.186102 2025] [:error] [pid 22316:tid 140648032171776] [client 154.83.103.111:39472] [client 154.83.103.111] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/HEAD"] [unique_id "Z_gUyWj9jpaReNZuqzEtZQAAABc"]
[Thu Apr 10 18:58:17.980808 2025] [:error] [pid 22316:tid 140648107706112] [client 154.83.103.111:39488] [client 154.83.103.111] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/logs/HEAD"] [unique_id "Z_gUyWj9jpaReNZuqzEtZgAAAA4"]
[Thu Apr 10 18:58:20.576947 2025] [:error] [pid 22316:tid 140648099313408] [client 154.83.103.111:39494] [client 154.83.103.111] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sites/default/settings.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/sites/default/settings.php"] [unique_id "Z_gUzGj9jpaReNZuqzEtagAAAA8"]
[Thu Apr 10 18:58:22.991822 2025] [:error] [pid 22316:tid 140648284284672] [client 154.83.103.111:39496] [client 154.83.103.111] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/php.ini"] [unique_id "Z_gUzmj9jpaReNZuqzEtbgAAAAE"]
[Thu Apr 10 18:58:24.492665 2025] [authz_host:error] [pid 22316:tid 140648065742592] [client 154.83.103.111:39496] AH01753: access check of 'localhost' to /server-status failed, reason: unable to get the remote host name
[Thu Apr 10 18:58:24.492708 2025] [authz_core:error] [pid 22316:tid 140648065742592] [client 154.83.103.111:39496] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Thu Apr 10 18:58:28.875533 2025] [:error] [pid 22316:tid 140648275891968] [client 154.83.103.111:39496] [client 154.83.103.111] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/public/.env"] [unique_id "Z_gU1Gj9jpaReNZuqzEteQAAAAI"]
[Thu Apr 10 18:58:29.479120 2025] [:error] [pid 22338:tid 140648284284672] [client 154.83.103.111:38808] [client 154.83.103.111] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/composer.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/composer.json"] [unique_id "Z_gU1SsbZi4uMUi2pXN5DAAAAIE"]
[Thu Apr 10 22:58:36.419782 2025] [:error] [pid 28694:tid 140648250713856] [client 31.220.40.210:58820] [client 31.220.40.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z_hNHCZpofs2FOO6KXbEdwAAAQU"]
[Fri Apr 11 05:40:11.848549 2025] [:error] [pid 10576:tid 140711986951936] [client 64.226.65.160:54556] [client 64.226.65.160] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Z_irO1iMTD5f55bZMZmqXgAAAE4"]
[Fri Apr 11 05:40:17.075928 2025] [authz_core:error] [pid 10604:tid 140712003737344] [client 64.226.65.160:54608] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Fri Apr 11 05:40:20.146809 2025] [:error] [pid 10576:tid 140712133854976] [client 64.226.65.160:55758] [client 64.226.65.160] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z_irRFiMTD5f55bZMZmqZgAAAEU"]
[Fri Apr 11 05:40:20.634945 2025] [:error] [pid 10576:tid 140712045700864] [client 64.226.65.160:55764] [client 64.226.65.160] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z_irRFiMTD5f55bZMZmqZwAAAEc"]
[Fri Apr 11 10:16:51.873695 2025] [:error] [pid 10575:tid 140711961773824] [client 13.214.179.210:43398] [client 13.214.179.210] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||edu.richinei.com|F|4"] [data "EmailWolf"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "edu.richinei.com"] [uri "/edu.richinei.com/public/theme/edulia/js/dataTables.responsive.min.js"] [unique_id "Z_jsE1y_iOsssZHYa1s8AwAAABE"]
[Fri Apr 11 11:52:03.418143 2025] [:error] [pid 10576:tid 140712037308160] [client 45.148.10.172:36334] [client 45.148.10.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z_kCY1iMTD5f55bZMZmuKAAAAEg"]
[Fri Apr 11 13:46:42.551740 2025] [:error] [pid 10604:tid 140712037308160] [client 45.148.10.98:34348] [client 45.148.10.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z_kdQqTBhe9k55dxMGf9HAAAAIg"]
[Fri Apr 11 13:47:35.065502 2025] [:error] [pid 10575:tid 140712142247680] [client 45.148.10.98:47442] [client 45.148.10.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z_kdd1y_iOsssZHYa1s_zAAAAAQ"]
[Fri Apr 11 22:07:03.411577 2025] [:error] [pid 10604:tid 140712020522752] [client 3.85.82.245:58582] [client 3.85.82.245] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z_mSh6TBhe9k55dxMGcEGAAAAIo"]
[Fri Apr 11 22:39:02.626323 2025] [:error] [pid 10604:tid 140711911417600] [client 196.251.72.127:38092] [client 196.251.72.127] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z_maBqTBhe9k55dxMGcEIwAAAJc"]
[Fri Apr 11 22:39:03.989220 2025] [:error] [pid 10782:tid 140711903024896] [client 196.251.72.127:54998] [client 196.251.72.127] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z_maB6guUfXzyBYCYfAfhAAAANg"]
[Sat Apr 12 02:22:46.413477 2025] [:error] [pid 10782:tid 140711970166528] [client 154.83.103.207:20898] [client 154.83.103.207] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/HEAD"] [unique_id "Z_nOdqguUfXzyBYCYfAfxAAAANA"]
[Sat Apr 12 02:22:47.080716 2025] [:error] [pid 10782:tid 140712037308160] [client 154.83.103.207:20910] [client 154.83.103.207] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z_nOd6guUfXzyBYCYfAfxQAAAMg"]
[Sat Apr 12 02:22:47.723679 2025] [:error] [pid 10782:tid 140711911417600] [client 154.83.103.207:20920] [client 154.83.103.207] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.production"] [unique_id "Z_nOd6guUfXzyBYCYfAfxgAAANc"]
[Sat Apr 12 02:22:48.365340 2025] [:error] [pid 10782:tid 140712142247680] [client 154.83.103.207:20934] [client 154.83.103.207] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/settings/.env"] [unique_id "Z_nOeKguUfXzyBYCYfAfxwAAAMQ"]
[Sat Apr 12 02:22:59.760462 2025] [:error] [pid 10782:tid 140712175818496] [client 154.83.103.207:20944] [client 154.83.103.207] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/db.ini"] [unique_id "Z_nOg6guUfXzyBYCYfAfzAAAAMA"]
[Sat Apr 12 02:23:06.576876 2025] [:error] [pid 10782:tid 140712054093568] [client 154.83.103.207:20944] [client 154.83.103.207] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/docker/.env"] [unique_id "Z_nOiqguUfXzyBYCYfAf2AAAAMY"]
[Sat Apr 12 02:23:08.473882 2025] [:error] [pid 10576:tid 140711944988416] [client 154.83.103.207:26444] [client 154.83.103.207] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/env.backup"] [unique_id "Z_nOjFiMTD5f55bZMZm3ZAAAAFM"]
[Sat Apr 12 02:23:08.642924 2025] [:error] [pid 10576:tid 140711986951936] [client 154.83.103.207:26444] [client 154.83.103.207] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/settings.bak"] [unique_id "Z_nOjFiMTD5f55bZMZm3ZQAAAE4"]
[Sat Apr 12 02:23:09.256078 2025] [:error] [pid 10576:tid 140711936595712] [client 154.83.103.207:26444] [client 154.83.103.207] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/old/.env"] [unique_id "Z_nOjViMTD5f55bZMZm3ZwAAAFQ"]
[Sat Apr 12 02:23:10.878736 2025] [:error] [pid 10604:tid 140711911417600] [client 154.83.103.207:26454] [client 154.83.103.207] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/laravel/.env"] [unique_id "Z_nOjqTBhe9k55dxMGcEaQAAAJc"]
[Sat Apr 12 02:23:11.513475 2025] [:error] [pid 10604:tid 140711936595712] [client 154.83.103.207:58796] [client 154.83.103.207] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z_nOj6TBhe9k55dxMGcEagAAAJQ"]
[Sat Apr 12 02:23:11.980324 2025] [:error] [pid 10782:tid 140711919810304] [client 154.83.103.207:58810] [client 154.83.103.207] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/HEAD"] [unique_id "Z_nOj6guUfXzyBYCYfAf2QAAANY"]
[Sat Apr 12 02:23:12.453753 2025] [:error] [pid 10604:tid 140712020522752] [client 154.83.103.207:58818] [client 154.83.103.207] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/logs/HEAD"] [unique_id "Z_nOkKTBhe9k55dxMGcEawAAAIo"]
[Sat Apr 12 02:23:14.987954 2025] [:error] [pid 10604:tid 140712175818496] [client 154.83.103.207:58830] [client 154.83.103.207] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sites/default/settings.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/sites/default/settings.php"] [unique_id "Z_nOkqTBhe9k55dxMGcEbwAAAIA"]
[Sat Apr 12 02:23:17.611058 2025] [:error] [pid 10604:tid 140711986951936] [client 154.83.103.207:58834] [client 154.83.103.207] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/php.ini"] [unique_id "Z_nOlaTBhe9k55dxMGcEcwAAAI4"]
[Sat Apr 12 02:23:19.003842 2025] [authz_host:error] [pid 10604:tid 140712028915456] [client 154.83.103.207:58834] AH01753: access check of 'localhost' to /server-status failed, reason: unable to get the remote host name
[Sat Apr 12 02:23:19.003900 2025] [authz_core:error] [pid 10604:tid 140712028915456] [client 154.83.103.207:58834] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Sat Apr 12 02:23:23.381148 2025] [:error] [pid 10604:tid 140711936595712] [client 154.83.103.207:58834] [client 154.83.103.207] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/public/.env"] [unique_id "Z_nOm6TBhe9k55dxMGcEfgAAAJQ"]
[Sat Apr 12 02:23:24.020350 2025] [:error] [pid 10604:tid 140711978559232] [client 154.83.103.207:59518] [client 154.83.103.207] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/composer.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/composer.json"] [unique_id "Z_nOnKTBhe9k55dxMGcEfwAAAI8"]
[Sat Apr 12 04:47:13.016001 2025] [:error] [pid 2510:tid 139995046205184] [client 15.188.81.74:42694] [client 15.188.81.74] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z_nwUVTm4PiJVG7odJU7swAAAEk"]
[Sat Apr 12 07:06:40.579796 2025] [:error] [pid 2510:tid 139994928707328] [client 154.83.103.104:37992] [client 154.83.103.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/HEAD"] [unique_id "Z_oRAFTm4PiJVG7odJU8PQAAAFc"]
[Sat Apr 12 07:06:41.231456 2025] [:error] [pid 2510:tid 139994920314624] [client 154.83.103.104:38008] [client 154.83.103.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z_oRAVTm4PiJVG7odJU8PgAAAFg"]
[Sat Apr 12 07:06:41.862407 2025] [:error] [pid 2538:tid 139995021027072] [client 154.83.103.104:38012] [client 154.83.103.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.production"] [unique_id "Z_oRAQVWsDfzKNEGZFQW4QAAAIw"]
[Sat Apr 12 07:06:42.531297 2025] [:error] [pid 2509:tid 139995169539840] [client 154.83.103.104:38024] [client 154.83.103.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/settings/.env"] [unique_id "Z_oRAv9ewWPGaeFp-9AmDQAAAAM"]
[Sat Apr 12 07:06:45.710393 2025] [:error] [pid 2509:tid 139995021027072] [client 154.83.103.104:38026] [client 154.83.103.104] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/db.ini"] [unique_id "Z_oRBf9ewWPGaeFp-9AmEgAAAAw"]
[Sat Apr 12 07:06:52.644423 2025] [:error] [pid 2509:tid 139995194717952] [client 154.83.103.104:38026] [client 154.83.103.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/docker/.env"] [unique_id "Z_oRDP9ewWPGaeFp-9AmHgAAAAA"]
[Sat Apr 12 07:06:54.804101 2025] [:error] [pid 2538:tid 139994920314624] [client 154.83.103.104:45738] [client 154.83.103.104] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/env.backup"] [unique_id "Z_oRDgVWsDfzKNEGZFQW5QAAAJg"]
[Sat Apr 12 07:06:54.968115 2025] [:error] [pid 2538:tid 139995062990592] [client 154.83.103.104:45738] [client 154.83.103.104] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/settings.bak"] [unique_id "Z_oRDgVWsDfzKNEGZFQW5gAAAIc"]
[Sat Apr 12 07:06:55.738763 2025] [:error] [pid 2538:tid 139995186325248] [client 154.83.103.104:45738] [client 154.83.103.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/old/.env"] [unique_id "Z_oRDwVWsDfzKNEGZFQW6AAAAIE"]
[Sat Apr 12 07:06:57.098001 2025] [:error] [pid 2832:tid 139994928707328] [client 154.83.103.104:45754] [client 154.83.103.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/laravel/.env"] [unique_id "Z_oREbbt6ywWHvVkuPgzwwAAANc"]
[Sat Apr 12 07:06:57.834313 2025] [:error] [pid 2832:tid 139995161147136] [client 154.83.103.104:45756] [client 154.83.103.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z_oREbbt6ywWHvVkuPgzxAAAAMQ"]
[Sat Apr 12 07:06:58.341120 2025] [:error] [pid 2832:tid 139995037812480] [client 154.83.103.104:45772] [client 154.83.103.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/HEAD"] [unique_id "Z_oRErbt6ywWHvVkuPgzxQAAAMo"]
[Sat Apr 12 07:06:59.048623 2025] [:error] [pid 2538:tid 139995144361728] [client 154.83.103.104:45786] [client 154.83.103.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/logs/HEAD"] [unique_id "Z_oREwVWsDfzKNEGZFQW6QAAAIY"]
[Sat Apr 12 07:07:01.182581 2025] [:error] [pid 2538:tid 139995046205184] [client 154.83.103.104:45802] [client 154.83.103.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sites/default/settings.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/sites/default/settings.php"] [unique_id "Z_oRFQVWsDfzKNEGZFQW7gAAAIk"]
[Sat Apr 12 07:07:03.761527 2025] [:error] [pid 2538:tid 139994945492736] [client 154.83.103.104:21028] [client 154.83.103.104] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/php.ini"] [unique_id "Z_oRFwVWsDfzKNEGZFQW8gAAAJU"]
[Sat Apr 12 07:07:05.300956 2025] [authz_host:error] [pid 2538:tid 139994953885440] [client 154.83.103.104:21028] AH01753: access check of 'localhost' to /server-status failed, reason: unable to get the remote host name
[Sat Apr 12 07:07:05.301003 2025] [authz_core:error] [pid 2538:tid 139994953885440] [client 154.83.103.104:21028] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Sat Apr 12 07:07:09.882468 2025] [:error] [pid 2538:tid 139995152754432] [client 154.83.103.104:21028] [client 154.83.103.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/public/.env"] [unique_id "Z_oRHQVWsDfzKNEGZFQW_gAAAIU"]
[Sat Apr 12 07:07:10.397593 2025] [:error] [pid 2538:tid 139995029419776] [client 154.83.103.104:23288] [client 154.83.103.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/composer.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/composer.json"] [unique_id "Z_oRHgVWsDfzKNEGZFQW_wAAAIs"]
[Sat Apr 12 16:28:49.688126 2025] [:error] [pid 2509:tid 139995046205184] [client 18.119.12.12:57502] [client 18.119.12.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z_qUwf9ewWPGaeFp-9AtCwAAAAk"]
[Sat Apr 12 17:15:26.864015 2025] [:error] [pid 2510:tid 139995012634368] [client 54.93.199.186:57152] [client 54.93.199.186] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z_qfrlTm4PiJVG7odJVE3gAAAE0"]
[Sat Apr 12 20:58:09.253697 2025] [:error] [pid 2832:tid 139995037812480] [client 18.119.12.12:37616] [client 18.119.12.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/src/.git/config"] [unique_id "Z_rT4bbt6ywWHvVkuPg_AwAAAMo"]
[Sat Apr 12 22:27:26.734797 2025] [:error] [pid 2832:tid 139995046205184] [client 45.148.10.98:54132] [client 45.148.10.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z_rozrbt6ywWHvVkuPg_IQAAAMk"]
[Sat Apr 12 22:28:40.522950 2025] [:error] [pid 2510:tid 139995054597888] [client 45.148.10.98:45578] [client 45.148.10.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z_rpGFTm4PiJVG7odJVGeAAAAEg"]
[Sun Apr 13 05:04:28.913525 2025] [:error] [pid 23398:tid 140245714532096] [client 54.93.199.186:58440] [client 54.93.199.186] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z_tF3LVjceXVsGk4N9b_VQAAAJQ"]
[Sun Apr 13 09:06:13.011342 2025] [:error] [pid 23397:tid 140245764888320] [client 207.154.212.47:55582] [client 207.154.212.47] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Z_t-hfbKOpJh2DQ0PV5newAAAE4"]
[Sun Apr 13 09:06:18.303029 2025] [authz_core:error] [pid 23398:tid 140245706139392] [client 207.154.212.47:34760] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Sun Apr 13 09:06:21.428543 2025] [:error] [pid 23997:tid 140245773281024] [client 207.154.212.47:34802] [client 207.154.212.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z_t-jbxa0WO_TpPZKcSiFAAAAM0"]
[Sun Apr 13 09:06:21.994591 2025] [:error] [pid 23997:tid 140245781673728] [client 207.154.212.47:34816] [client 207.154.212.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z_t-jbxa0WO_TpPZKcSiFQAAAMw"]
[Sun Apr 13 11:01:12.172944 2025] [:error] [pid 23997:tid 140245947864832] [client 157.230.19.140:41514] [client 157.230.19.140] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Z_uZeLxa0WO_TpPZKcSiuwAAAME"]
[Sun Apr 13 11:01:17.420205 2025] [authz_core:error] [pid 23397:tid 140245832029952] [client 157.230.19.140:56990] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Sun Apr 13 11:01:20.219392 2025] [:error] [pid 23397:tid 140245798459136] [client 157.230.19.140:57050] [client 157.230.19.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z_uZgPbKOpJh2DQ0PV5oGgAAAEo"]
[Sun Apr 13 11:01:20.690590 2025] [:error] [pid 23397:tid 140245756495616] [client 157.230.19.140:57066] [client 157.230.19.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z_uZgPbKOpJh2DQ0PV5oGwAAAE8"]
[Sun Apr 13 19:30:26.401175 2025] [:error] [pid 23396:tid 140245790066432] [client 194.163.143.168:51866] [client 194.163.143.168] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z_wQ0kxM4MIhThMZB9Tq0AAAAAs"]
[Mon Apr 14 03:02:31.123384 2025] [:error] [pid 23398:tid 140245781673728] [client 54.224.180.15:40962] [client 54.224.180.15] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z_x6x7VjceXVsGk4N9YEFQAAAIw"]
[Mon Apr 14 03:35:44.322841 2025] [:error] [pid 23397:tid 140245739710208] [client 109.202.99.41:45921] [client 109.202.99.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.svn/wc.db"] [unique_id "Z_yCkPbKOpJh2DQ0PV5riwAAAFE"]
[Mon Apr 14 03:35:44.330428 2025] [:error] [pid 23396:tid 140245680961280] [client 109.202.99.41:20593] [client 109.202.99.41] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".key"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/etc/ssl/private/server.key"] [unique_id "Z_yCkExM4MIhThMZB9TrYQAAABg"]
[Mon Apr 14 03:35:44.355695 2025] [:error] [pid 23997:tid 140245947864832] [client 109.202.99.41:47501] [client 109.202.99.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/wp-config.php"] [unique_id "Z_yCkLxa0WO_TpPZKcSnJAAAAME"]
[Mon Apr 14 03:35:44.360669 2025] [:error] [pid 23396:tid 140245714532096] [client 109.202.99.41:13237] [client 109.202.99.41] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".pwd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/_vti_pvt/service.pwd"] [unique_id "Z_yCkExM4MIhThMZB9TrZAAAABQ"]
[Mon Apr 14 03:35:44.364025 2025] [:error] [pid 23396:tid 140245840422656] [client 109.202.99.41:50135] [client 109.202.99.41] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/backup.sql"] [unique_id "Z_yCkExM4MIhThMZB9TrZQAAAAU"]
[Mon Apr 14 03:35:44.364201 2025] [:error] [pid 23398:tid 140245689353984] [client 109.202.99.41:32725] [client 109.202.99.41] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/database_backup.sql"] [unique_id "Z_yCkLVjceXVsGk4N9YEIAAAAJc"]
[Mon Apr 14 03:35:44.365882 2025] [:error] [pid 23997:tid 140245781673728] [client 109.202.99.41:17943] [client 109.202.99.41] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".key"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/server.key"] [unique_id "Z_yCkLxa0WO_TpPZKcSnJgAAAMw"]
[Mon Apr 14 03:35:44.369240 2025] [:error] [pid 23997:tid 140245806851840] [client 109.202.99.41:46239] [client 109.202.99.41] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/dump.sql"] [unique_id "Z_yCkLxa0WO_TpPZKcSnKAAAAMk"]
[Mon Apr 14 03:35:44.376708 2025] [:error] [pid 23997:tid 140245706139392] [client 109.202.99.41:56183] [client 109.202.99.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/HEAD"] [unique_id "Z_yCkLxa0WO_TpPZKcSnKgAAANU"]
[Mon Apr 14 03:35:44.379257 2025] [:error] [pid 23997:tid 140245832029952] [client 109.202.99.41:50279] [client 109.202.99.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/api/.env"] [unique_id "Z_yCkLxa0WO_TpPZKcSnKwAAAMY"]
[Mon Apr 14 03:35:44.417459 2025] [:error] [pid 23997:tid 140245680961280] [client 109.202.99.41:23639] [client 109.202.99.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z_yCkLxa0WO_TpPZKcSnLAAAANg"]
[Mon Apr 14 03:35:44.437128 2025] [:error] [pid 23398:tid 140245764888320] [client 109.202.99.41:9501] [client 109.202.99.41] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/database.sql"] [unique_id "Z_yCkLVjceXVsGk4N9YEIQAAAI4"]
[Mon Apr 14 03:35:44.455122 2025] [:error] [pid 23997:tid 140245931079424] [client 109.202.99.41:57691] [client 109.202.99.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/Web.config" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/web.config"] [unique_id "Z_yCkLxa0WO_TpPZKcSnLgAAAMM"]
[Mon Apr 14 03:35:44.471190 2025] [:error] [pid 23396:tid 140245956257536] [client 109.202.99.41:2691] [client 109.202.99.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.production"] [unique_id "Z_yCkExM4MIhThMZB9TrawAAAAA"]
[Mon Apr 14 03:35:44.829235 2025] [authz_host:error] [pid 23397:tid 140245773281024] [client 109.202.99.41:31601] AH01753: access check of 'localhost' to /server-status failed, reason: unable to get the remote host name
[Mon Apr 14 03:35:44.829299 2025] [authz_core:error] [pid 23397:tid 140245773281024] [client 109.202.99.41:31601] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Mon Apr 14 08:59:27.252584 2025] [:error] [pid 10325:tid 139943872149248] [client 132.145.29.111:49643] [client 132.145.29.111] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z_zOb8xqaqXXsEfc8rifcQAAAAY"]
[Mon Apr 14 09:29:44.659714 2025] [:error] [pid 10327:tid 139943724676864] [client 45.148.10.172:37356] [client 45.148.10.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z_zViH_is-f3nvPBAzdrjQAAAE8"]
[Tue Apr 15 00:04:44.949789 2025] [:error] [pid 10661:tid 139943897327360] [client 128.199.182.77:36536] [client 128.199.182.77] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Z_2inDx-y6ZMXfhbLeWZPAAAAMM"]
[Tue Apr 15 00:04:51.017205 2025] [authz_core:error] [pid 10661:tid 139943716284160] [client 128.199.182.77:36594] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Tue Apr 15 00:04:54.126553 2025] [:error] [pid 10325:tid 139943775033088] [client 128.199.182.77:45604] [client 128.199.182.77] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z_2ipsxqaqXXsEfc8rimBQAAAAk"]
[Tue Apr 15 00:04:54.700736 2025] [:error] [pid 10381:tid 139943766640384] [client 128.199.182.77:45606] [client 128.199.182.77] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z_2ipps7e9i0WWnLur_YcwAAAIo"]
[Tue Apr 15 14:46:33.383677 2025] [:error] [pid 2616:tid 140538737043200] [client 45.148.10.172:41894] [client 45.148.10.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z_5xSdrRkWM8zo3aNFxG2AAAAEY"]
[Wed Apr 16 04:00:34.895212 2025] [:error] [pid 24071:tid 139896194815744] [client 3.80.2.220:39232] [client 3.80.2.220] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z_8rYsqfP5QLrRrCC4aKvgAAAEw"]
[Wed Apr 16 08:04:04.443817 2025] [:error] [pid 24071:tid 139896261957376] [client 143.244.168.161:33692] [client 143.244.168.161] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "Z_9kdMqfP5QLrRrCC4aLWQAAAEQ"]
[Wed Apr 16 08:04:07.454508 2025] [authz_core:error] [pid 24071:tid 139896094103296] [client 143.244.168.161:33786] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Wed Apr 16 08:04:08.936959 2025] [:error] [pid 24071:tid 139896228386560] [client 143.244.168.161:33836] [client 143.244.168.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z_9keMqfP5QLrRrCC4aLZAAAAEg"]
[Wed Apr 16 08:04:09.093243 2025] [:error] [pid 24071:tid 139896253564672] [client 143.244.168.161:33850] [client 143.244.168.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z_9kecqfP5QLrRrCC4aLZQAAAEU"]
[Wed Apr 16 17:23:47.349956 2025] [:error] [pid 24072:tid 139896270350080] [client 172.234.51.237:33594] [client 172.234.51.237] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "Z__no6Sw1euloE02YanXTgAAAIM"]
[Wed Apr 16 18:20:58.167879 2025] [:error] [pid 24070:tid 139896127674112] [client 93.123.109.7:49016] [client 93.123.109.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z__1CiiPUv-lR7EwmwtrZAAAABQ"]
[Wed Apr 16 18:20:58.187397 2025] [:error] [pid 24070:tid 139896270350080] [client 93.123.109.7:49022] [client 93.123.109.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "Z__1CiiPUv-lR7EwmwtrZQAAAAM"]
[Wed Apr 16 20:37:33.206978 2025] [:error] [pid 24070:tid 139896178030336] [client 93.123.109.7:35154] [client 93.123.109.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "aAAVDSiPUv-lR7EwmwtrogAAAA4"]
[Wed Apr 16 20:37:33.495998 2025] [:error] [pid 24070:tid 139896363374336] [client 93.123.109.7:35162] [client 93.123.109.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "aAAVDSiPUv-lR7EwmwtrowAAAAA"]
[Wed Apr 16 23:58:33.535972 2025] [:error] [pid 24072:tid 139896354981632] [client 206.189.233.36:36008] [client 206.189.233.36] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aABEKaSw1euloE02YanYTQAAAIE"]
[Wed Apr 16 23:58:37.074740 2025] [authz_core:error] [pid 24072:tid 139896136066816] [client 206.189.233.36:36068] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Wed Apr 16 23:58:38.942223 2025] [:error] [pid 5182:tid 139896236779264] [client 206.189.233.36:36098] [client 206.189.233.36] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "aABELhFABe5eteKsuNpD-gAAAMc"]
[Wed Apr 16 23:58:39.177042 2025] [:error] [pid 24072:tid 139896236779264] [client 206.189.233.36:36102] [client 206.189.233.36] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "aABEL6Sw1euloE02YanYWAAAAIc"]
[Fri Apr 18 15:39:22.338659 2025] [:error] [pid 3909:tid 139938607585024] [client 139.59.132.8:60840] [client 139.59.132.8] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aAJyKsM3tdyuBOs0zIqcfwAAAJc"]
[Fri Apr 18 15:39:26.307988 2025] [authz_core:error] [pid 3909:tid 139938708297472] [client 139.59.132.8:60906] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Fri Apr 18 15:39:28.354300 2025] [:error] [pid 3909:tid 139938716690176] [client 139.59.132.8:33010] [client 139.59.132.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "aAJyMMM3tdyuBOs0zIqcigAAAIo"]
[Fri Apr 18 15:39:28.660776 2025] [:error] [pid 3909:tid 139938750260992] [client 139.59.132.8:33022] [client 139.59.132.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "aAJyMMM3tdyuBOs0zIqciwAAAIY"]
[Fri Apr 18 16:18:33.184381 2025] [:error] [pid 3909:tid 139938847852288] [client 154.83.103.113:55976] [client 154.83.103.113] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/HEAD"] [unique_id "aAJ7WcM3tdyuBOs0zIqdEAAAAIM"]
[Fri Apr 18 16:18:33.839146 2025] [:error] [pid 3880:tid 139938657941248] [client 154.83.103.113:55984] [client 154.83.103.113] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "aAJ7WS8LQb3N5HSZ5JNklgAAABE"]
[Fri Apr 18 16:18:34.674014 2025] [:error] [pid 3909:tid 139938839459584] [client 154.83.103.113:55992] [client 154.83.103.113] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.production"] [unique_id "aAJ7WsM3tdyuBOs0zIqdEQAAAIQ"]
[Fri Apr 18 16:18:35.438358 2025] [:error] [pid 3880:tid 139938733475584] [client 154.83.103.113:55998] [client 154.83.103.113] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/settings/.env"] [unique_id "aAJ7Wy8LQb3N5HSZ5JNklwAAAAg"]
[Fri Apr 18 16:18:38.902615 2025] [:error] [pid 3880:tid 139938615977728] [client 154.83.103.113:56000] [client 154.83.103.113] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/db.ini"] [unique_id "aAJ7Xi8LQb3N5HSZ5JNknAAAABY"]
[Fri Apr 18 16:18:46.125201 2025] [:error] [pid 3880:tid 139938708297472] [client 154.83.103.113:56000] [client 154.83.103.113] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/docker/.env"] [unique_id "aAJ7Zi8LQb3N5HSZ5JNkqAAAAAs"]
[Fri Apr 18 16:18:48.223638 2025] [:error] [pid 3909:tid 139938624370432] [client 154.83.103.113:26660] [client 154.83.103.113] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/env.backup"] [unique_id "aAJ7aMM3tdyuBOs0zIqdFwAAAJU"]
[Fri Apr 18 16:18:48.392874 2025] [:error] [pid 3909:tid 139938641155840] [client 154.83.103.113:26660] [client 154.83.103.113] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/settings.bak"] [unique_id "aAJ7aMM3tdyuBOs0zIqdGAAAAJM"]
[Fri Apr 18 16:18:49.162528 2025] [:error] [pid 3909:tid 139938708297472] [client 154.83.103.113:26660] [client 154.83.103.113] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/old/.env"] [unique_id "aAJ7acM3tdyuBOs0zIqdGgAAAIs"]
[Fri Apr 18 16:18:50.678593 2025] [:error] [pid 29043:tid 139938691512064] [client 154.83.103.113:26670] [client 154.83.103.113] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/laravel/.env"] [unique_id "aAJ7avA_TjvsUnIL1LJpBgAAAM0"]
[Fri Apr 18 16:18:51.147501 2025] [:error] [pid 29043:tid 139938864637696] [client 154.83.103.113:50808] [client 154.83.103.113] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "aAJ7a_A_TjvsUnIL1LJpBwAAAME"]
[Fri Apr 18 16:18:51.860125 2025] [:error] [pid 29043:tid 139938615977728] [client 154.83.103.113:50824] [client 154.83.103.113] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/HEAD"] [unique_id "aAJ7a_A_TjvsUnIL1LJpCAAAANY"]
[Fri Apr 18 16:18:52.714332 2025] [:error] [pid 3909:tid 139938666333952] [client 154.83.103.113:50828] [client 154.83.103.113] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/logs/HEAD"] [unique_id "aAJ7bMM3tdyuBOs0zIqdGwAAAJA"]
[Fri Apr 18 16:18:55.061300 2025] [:error] [pid 3909:tid 139938683119360] [client 154.83.103.113:50838] [client 154.83.103.113] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sites/default/settings.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/sites/default/settings.php"] [unique_id "aAJ7b8M3tdyuBOs0zIqdHwAAAI4"]
[Fri Apr 18 16:18:57.203210 2025] [:error] [pid 3909:tid 139938699904768] [client 154.83.103.113:50840] [client 154.83.103.113] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||edu.richinei.com|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edu.richinei.com"] [uri "/php.ini"] [unique_id "aAJ7ccM3tdyuBOs0zIqdIwAAAIw"]
[Fri Apr 18 16:18:58.433152 2025] [authz_host:error] [pid 3909:tid 139938864637696] [client 154.83.103.113:50840] AH01753: access check of 'localhost' to /server-status failed, reason: unable to get the remote host name
[Fri Apr 18 16:18:58.433210 2025] [authz_core:error] [pid 3909:tid 139938864637696] [client 154.83.103.113:50840] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Fri Apr 18 16:19:01.894310 2025] [:error] [pid 3909:tid 139938758653696] [client 154.83.103.113:50840] [client 154.83.103.113] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/public/.env"] [unique_id "aAJ7dcM3tdyuBOs0zIqdLgAAAIU"]
[Fri Apr 18 16:19:02.376110 2025] [:error] [pid 3880:tid 139938733475584] [client 154.83.103.113:2030] [client 154.83.103.113] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/composer.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/composer.json"] [unique_id "aAJ7di8LQb3N5HSZ5JNkqgAAAAg"]
[Fri Apr 18 21:36:12.938544 2025] [:error] [pid 29043:tid 139938657941248] [client 207.154.197.113:38218] [client 207.154.197.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aALFzPA_TjvsUnIL1LJq9QAAANE"]
[Fri Apr 18 21:36:18.091284 2025] [authz_core:error] [pid 3880:tid 139938683119360] [client 207.154.197.113:36106] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Fri Apr 18 21:36:20.806448 2025] [:error] [pid 3880:tid 139938725082880] [client 207.154.197.113:36140] [client 207.154.197.113] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "aALF1C8LQb3N5HSZ5JNmPQAAAAk"]
[Fri Apr 18 21:36:21.266547 2025] [:error] [pid 3880:tid 139938873030400] [client 207.154.197.113:36152] [client 207.154.197.113] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "aALF1S8LQb3N5HSZ5JNmPgAAAAA"]
[Sat Apr 19 03:12:32.817713 2025] [:error] [pid 25122:tid 139674321929984] [client 45.148.10.80:52852] [client 45.148.10.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "aAMUoDtl7Y8oPkDJAP52LAAAAEA"]
[Sun Apr 20 03:27:42.044083 2025] [:error] [pid 14602:tid 140379370243840] [client 179.43.188.122:56504] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/laravel/.git/config"] [unique_id "aARprv-6Y5L_WnpLtvo0KwAAAJE"]
[Sun Apr 20 03:27:42.081480 2025] [:error] [pid 7738:tid 140379587077888] [client 179.43.188.122:56520] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/core/.git/config"] [unique_id "aARprjOelo9ycWEzqtDIlAAAAMA"]
[Sun Apr 20 03:27:42.083268 2025] [:error] [pid 14574:tid 140379378636544] [client 179.43.188.122:56544] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/staging/.git/config"] [unique_id "aARprk1-4KoIeKHGZZZzpwAAAFA"]
[Sun Apr 20 03:27:42.084540 2025] [:error] [pid 14574:tid 140379387029248] [client 179.43.188.122:56534] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/www/.git/config"] [unique_id "aARprk1-4KoIeKHGZZZzqAAAAE8"]
[Sun Apr 20 03:27:42.097025 2025] [:error] [pid 14573:tid 140379553507072] [client 179.43.188.122:56572] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/dev/.git/config"] [unique_id "aARprkPwDEQJIxUgjAVQAQAAAAQ"]
[Sun Apr 20 03:27:42.098068 2025] [:error] [pid 14574:tid 140379370243840] [client 179.43.188.122:56582] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/wp-content/.git/config"] [unique_id "aARprk1-4KoIeKHGZZZzqQAAAFE"]
[Sun Apr 20 03:27:42.111282 2025] [:error] [pid 14602:tid 140379361851136] [client 179.43.188.122:56588] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/old/.git/config"] [unique_id "aARprv-6Y5L_WnpLtvo0LAAAAJI"]
[Sun Apr 20 03:27:42.127703 2025] [:error] [pid 14573:tid 140379545114368] [client 179.43.188.122:56556] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/logs/.git/config"] [unique_id "aARprkPwDEQJIxUgjAVQAgAAAAU"]
[Sun Apr 20 03:27:42.230415 2025] [:error] [pid 14573:tid 140379462563584] [client 179.43.188.122:56604] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/media../.git/config"] [unique_id "aARprkPwDEQJIxUgjAVQAwAAAAY"]
[Sun Apr 20 03:27:42.230882 2025] [:error] [pid 14574:tid 140379361851136] [client 179.43.188.122:56620] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/dist/.git/config"] [unique_id "aARprk1-4KoIeKHGZZZzqgAAAFI"]
[Sun Apr 20 03:27:42.234619 2025] [:error] [pid 14602:tid 140379353458432] [client 179.43.188.122:56650] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/test/.git/config"] [unique_id "aARprv-6Y5L_WnpLtvo0LQAAAJM"]
[Sun Apr 20 03:27:42.235985 2025] [:error] [pid 7738:tid 140379570292480] [client 179.43.188.122:56634] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/app/.git/config"] [unique_id "aARprjOelo9ycWEzqtDIlQAAAMI"]
[Sun Apr 20 03:27:42.242461 2025] [:error] [pid 7738:tid 140379561899776] [client 179.43.188.122:56660] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/source/.git/config"] [unique_id "aARprjOelo9ycWEzqtDIlgAAAMM"]
[Sun Apr 20 03:27:42.243489 2025] [:error] [pid 14574:tid 140379353458432] [client 179.43.188.122:56652] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/lib/.git/config"] [unique_id "aARprk1-4KoIeKHGZZZzqwAAAFM"]
[Sun Apr 20 03:27:42.275167 2025] [:error] [pid 14602:tid 140379345065728] [client 179.43.188.122:56602] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/assets/.git/config"] [unique_id "aARprv-6Y5L_WnpLtvo0LgAAAJQ"]
[Sun Apr 20 03:27:42.386294 2025] [:error] [pid 14573:tid 140379454170880] [client 179.43.188.122:56672] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/scripts/.git/config"] [unique_id "aARprkPwDEQJIxUgjAVQBAAAAAc"]
[Sun Apr 20 03:27:42.393956 2025] [:error] [pid 7738:tid 140379553507072] [client 179.43.188.122:56668] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/api/.git/config"] [unique_id "aARprjOelo9ycWEzqtDIlwAAAMQ"]
[Sun Apr 20 03:27:42.426545 2025] [:error] [pid 14602:tid 140379336673024] [client 179.43.188.122:56688] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/public/.git/config"] [unique_id "aARprv-6Y5L_WnpLtvo0LwAAAJU"]
[Sun Apr 20 03:27:43.913070 2025] [:error] [pid 7738:tid 140379428992768] [client 179.43.188.122:56706] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/static../.git/config"] [unique_id "aARprzOelo9ycWEzqtDImAAAAMo"]
[Sun Apr 20 03:27:43.918996 2025] [:error] [pid 7738:tid 140379420600064] [client 179.43.188.122:56722] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/sandbox/.git/config"] [unique_id "aARprzOelo9ycWEzqtDImQAAAMs"]
[Sun Apr 20 03:27:43.920088 2025] [:error] [pid 7738:tid 140379437385472] [client 179.43.188.122:56696] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/plugins/.git/config"] [unique_id "aARprzOelo9ycWEzqtDImgAAAMk"]
[Sun Apr 20 03:27:43.923067 2025] [:error] [pid 14602:tid 140379561899776] [client 179.43.188.122:56726] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/backend/.git/config"] [unique_id "aARpr_-6Y5L_WnpLtvo0MAAAAIM"]
[Sun Apr 20 03:27:43.945074 2025] [:error] [pid 14574:tid 140379578685184] [client 179.43.188.122:56740] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/admin/.git/config"] [unique_id "aARpr01-4KoIeKHGZZZzrAAAAEE"]
[Sun Apr 20 03:27:44.083693 2025] [:error] [pid 7738:tid 140379412207360] [client 179.43.188.122:56742] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/template/.git/config"] [unique_id "aARpsDOelo9ycWEzqtDImwAAAMw"]
[Sun Apr 20 03:27:44.238678 2025] [:error] [pid 7738:tid 140379403814656] [client 179.43.188.122:56748] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/panel/.git/config"] [unique_id "aARpsDOelo9ycWEzqtDInAAAAM0"]
[Sun Apr 20 03:27:45.955890 2025] [:error] [pid 14602:tid 140379545114368] [client 179.43.188.122:56760] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/frontend/.git/config"] [unique_id "aARpsf-6Y5L_WnpLtvo0MQAAAIU"]
[Sun Apr 20 03:27:45.981501 2025] [:error] [pid 14602:tid 140379462563584] [client 179.43.188.122:56752] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/js../.git/config"] [unique_id "aARpsf-6Y5L_WnpLtvo0MgAAAIY"]
[Sun Apr 20 03:27:46.082908 2025] [:error] [pid 14602:tid 140379445778176] [client 179.43.188.122:56762] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/files/.git/config"] [unique_id "aARpsv-6Y5L_WnpLtvo0MwAAAIg"]
[Sun Apr 20 03:27:46.297116 2025] [:error] [pid 14602:tid 140379437385472] [client 179.43.188.122:56774] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/docs/.git/config"] [unique_id "aARpsv-6Y5L_WnpLtvo0NAAAAIk"]
[Sun Apr 20 03:27:47.923181 2025] [:error] [pid 14602:tid 140379403814656] [client 179.43.188.122:56780] [client 179.43.188.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/src/.git/config"] [unique_id "aARps_-6Y5L_WnpLtvo0NQAAAI0"]
[Sun Apr 20 05:34:00.100250 2025] [:error] [pid 14573:tid 140379328280320] [client 146.190.103.103:50262] [client 146.190.103.103] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aASHSEPwDEQJIxUgjAVQIwAAABY"]
[Sun Apr 20 05:34:04.744966 2025] [authz_core:error] [pid 14602:tid 140379403814656] [client 146.190.103.103:47082] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Sun Apr 20 05:34:07.139241 2025] [:error] [pid 14602:tid 140379353458432] [client 146.190.103.103:47118] [client 146.190.103.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "aASHT_-6Y5L_WnpLtvo0awAAAJM"]
[Sun Apr 20 05:34:07.524682 2025] [:error] [pid 7738:tid 140379462563584] [client 146.190.103.103:47130] [client 146.190.103.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "aASHTzOelo9ycWEzqtDIwAAAAMY"]
[Sun Apr 20 06:52:48.754318 2025] [:error] [pid 14602:tid 140379420600064] [client 34.162.225.221:51638] [client 34.162.225.221] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/HEAD"] [unique_id "aASZwP-6Y5L_WnpLtvo0lAAAAIs"]
[Sun Apr 20 09:59:31.967383 2025] [:error] [pid 7738:tid 140379420600064] [client 18.130.184.28:47164] [client 18.130.184.28] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||edu.richinei.com|F|4"] [data "grub-client"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "edu.richinei.com"] [uri "/edu.richinei.com/public/whatsapp-support/scripts.js"] [unique_id "aATFgzOelo9ycWEzqtDJXQAAAMs"]
[Sun Apr 20 13:57:07.416384 2025] [:error] [pid 7738:tid 140379311494912] [client 45.148.10.172:48966] [client 45.148.10.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "aAT9MzOelo9ycWEzqtDKaAAAANg"]
[Mon Apr 21 01:04:53.025665 2025] [:error] [pid 14574:tid 140379328280320] [client 2.58.56.225:56900] [client 2.58.56.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "aAWZtU1-4KoIeKHGZZZ2-QAAAFY"]
[Mon Apr 21 03:09:22.953383 2025] [:error] [pid 7738:tid 140379561899776] [client 165.227.39.235:35884] [client 165.227.39.235] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aAW24jOelo9ycWEzqtDMrQAAAMM"]
[Mon Apr 21 03:09:26.208263 2025] [authz_core:error] [pid 14574:tid 140379561899776] [client 165.227.39.235:56542] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Mon Apr 21 03:09:27.800836 2025] [:error] [pid 14574:tid 140379378636544] [client 165.227.39.235:56580] [client 165.227.39.235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "aAW2501-4KoIeKHGZZZ3bAAAAFA"]
[Mon Apr 21 03:09:27.991425 2025] [:error] [pid 14574:tid 140379395421952] [client 165.227.39.235:56594] [client 165.227.39.235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "aAW2501-4KoIeKHGZZZ3bQAAAE4"]
[Mon Apr 21 11:44:13.241705 2025] [:error] [pid 32757:tid 139928982644480] [client 196.251.83.88:36078] [client 196.251.83.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "aAYvjSQthdfVINk88NPEnAAAAEU"]
[Tue Apr 22 02:35:11.866577 2025] [:error] [pid 32756:tid 139928826509056] [client 159.89.127.165:32862] [client 159.89.127.165] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aAcAXzZWW0lHh4mgmafXcAAAAA8"]
[Tue Apr 22 02:35:14.684128 2025] [authz_core:error] [pid 32757:tid 139928999429888] [client 159.89.127.165:47532] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Tue Apr 22 02:35:16.075956 2025] [:error] [pid 322:tid 139928826509056] [client 159.89.127.165:47570] [client 159.89.127.165] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "aAcAZJt_iph_MwAN52MwVAAAAI8"]
[Tue Apr 22 02:35:16.207515 2025] [:error] [pid 322:tid 139928974251776] [client 159.89.127.165:47576] [client 159.89.127.165] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "aAcAZJt_iph_MwAN52MwVQAAAIY"]
[Tue Apr 22 07:38:26.055047 2025] [:error] [pid 20212:tid 140053497960192] [client 93.123.109.75:55415] [client 93.123.109.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "aAdHcuyBK7sjd-yyE6sAfQAAABg"]
[Tue Apr 22 07:38:26.409531 2025] [:error] [pid 20212:tid 140053767825152] [client 93.123.109.75:55060] [client 93.123.109.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "aAdHcuyBK7sjd-yyE6sAfgAAAAA"]
[Tue Apr 22 17:19:53.517885 2025] [:error] [pid 20213:tid 140053539923712] [client 143.110.217.244:53102] [client 143.110.217.244] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aAfPuZhbyAmJ27IT4fC5hAAAAFM"]
[Tue Apr 22 17:19:56.816263 2025] [authz_core:error] [pid 20213:tid 140053751039744] [client 143.110.217.244:53170] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Tue Apr 22 17:19:58.428620 2025] [:error] [pid 20213:tid 140053581887232] [client 143.110.217.244:53202] [client 143.110.217.244] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "aAfPvphbyAmJ27IT4fC5jAAAAE4"]
[Tue Apr 22 17:19:58.625699 2025] [:error] [pid 20213:tid 140053497960192] [client 143.110.217.244:56592] [client 143.110.217.244] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "aAfPvphbyAmJ27IT4fC5jQAAAFg"]
[Wed Apr 23 07:12:06.408748 2025] [:error] [pid 8026:tid 140545246537472] [client 196.251.88.108:51312] [client 196.251.88.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "aAiSxnv8AqoLKYhQFPquUwAAANY"]
[Wed Apr 23 08:21:08.487352 2025] [:error] [pid 7518:tid 140545422784256] [client 93.123.109.7:51272] [client 93.123.109.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "aAii9OkieTtOHwyskxTffgAAAAE"]
[Wed Apr 23 18:10:35.985807 2025] [:error] [pid 8026:tid 140545355642624] [client 93.123.109.107:61252] [client 93.123.109.107] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "aAktG3v8AqoLKYhQFPq24AAAAMk"]
[Wed Apr 23 18:10:36.371728 2025] [:error] [pid 8026:tid 140545347249920] [client 93.123.109.107:58349] [client 93.123.109.107] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "aAktHHv8AqoLKYhQFPq24QAAAMo"]
[Thu Apr 24 20:08:16.816712 2025] [:error] [pid 4947:tid 139792234825472] [client 138.68.82.23:46956] [client 138.68.82.23] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aAqaMHKo6zbhreDmCLK7QAAAAIY"]
[Thu Apr 24 20:08:22.144307 2025] [authz_core:error] [pid 4947:tid 139792184469248] [client 138.68.82.23:47026] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Thu Apr 24 20:08:24.877576 2025] [:error] [pid 4929:tid 139792167683840] [client 138.68.82.23:33686] [client 138.68.82.23] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "aAqaONv-FRhvn8ceoYnwjwAAAE4"]
[Thu Apr 24 20:08:25.343559 2025] [:error] [pid 4947:tid 139792176076544] [client 138.68.82.23:33694] [client 138.68.82.23] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "aAqaOXKo6zbhreDmCLK7QwAAAI0"]
[Fri Apr 25 06:46:46.553114 2025] [:error] [pid 28898:tid 139814548473600] [client 93.123.109.107:56041] [client 93.123.109.107] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "aAsv1t16TXPI9_OAnqLBVQAAAM8"]
[Fri Apr 25 06:46:46.858344 2025] [:error] [pid 3213:tid 139814665971456] [client 93.123.109.107:52845] [client 93.123.109.107] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "aAsv1tqoeXd6Wz6zlCY9PAAAAEE"]
[Fri Apr 25 16:20:54.275534 2025] [:error] [pid 3253:tid 139814472939264] [client 93.123.109.105:39668] [client 93.123.109.105] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "aAu2ZpJNH7V7bKt-h5h-xAAAAJg"]
[Sat Apr 26 14:28:39.688906 2025] [:error] [pid 2423:tid 140227788072704] [client 167.99.210.137:43932] [client 167.99.210.137] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aAztlzHXjWM8FjzWobJTaQAAAJc"]
[Sat Apr 26 14:28:44.741821 2025] [authz_core:error] [pid 2423:tid 140227913963264] [client 167.99.210.137:39848] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Sat Apr 26 14:28:47.378448 2025] [:error] [pid 2423:tid 140228044809984] [client 167.99.210.137:39872] [client 167.99.210.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "aAztnzHXjWM8FjzWobJTcAAAAIE"]
[Sat Apr 26 14:28:47.826679 2025] [:error] [pid 2423:tid 140227821643520] [client 167.99.210.137:39888] [client 167.99.210.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "aAztnzHXjWM8FjzWobJTcQAAAJM"]
[Sat Apr 26 22:23:44.725468 2025] [:error] [pid 22382:tid 140227897177856] [client 54.224.75.174:41182] [client 54.224.75.174] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "aA1c8FOkbbCcn4XU5JzuhwAAAQo"]
[Mon Apr 28 05:28:05.957649 2025] [:error] [pid 15906:tid 140008686089984] [client 138.68.82.23:55294] [client 138.68.82.23] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aA8R5SDlwVc1EdJ7-3DhpAAAAEY"]
[Mon Apr 28 05:28:10.344198 2025] [authz_core:error] [pid 15905:tid 140008660911872] [client 138.68.82.23:55340] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Mon Apr 28 05:28:12.523678 2025] [:error] [pid 16465:tid 140008766859008] [client 138.68.82.23:55390] [client 138.68.82.23] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "aA8R7MVn_P6ZrDDHUemmKQAAAMU"]
[Mon Apr 28 05:28:12.841387 2025] [:error] [pid 16465:tid 140008775251712] [client 138.68.82.23:55398] [client 138.68.82.23] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "aA8R7MVn_P6ZrDDHUemmKgAAAMQ"]
[Mon Apr 28 13:02:11.886573 2025] [:error] [pid 15934:tid 140008543414016] [client 188.166.108.93:53892] [client 188.166.108.93] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aA98U7ZaImLq7RDeTq0rFAAAAJc"]
[Mon Apr 28 13:02:16.818894 2025] [authz_core:error] [pid 15906:tid 140008644126464] [client 188.166.108.93:53976] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Mon Apr 28 13:02:19.541449 2025] [:error] [pid 15905:tid 140008585377536] [client 188.166.108.93:54010] [client 188.166.108.93] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "aA98WwfqknuBNEJGlPWBFgAAABI"]
[Mon Apr 28 13:02:19.994706 2025] [:error] [pid 15905:tid 140008568592128] [client 188.166.108.93:54012] [client 188.166.108.93] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "aA98WwfqknuBNEJGlPWBFwAAABQ"]
[Wed Apr 30 07:55:30.503531 2025] [:error] [pid 31821:tid 140230849967872] [client 64.226.65.160:50932] [client 64.226.65.160] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aBHXcgwmWBxRBb8aZRnJ2wAAAIo"]
[Wed Apr 30 07:55:34.859156 2025] [authz_core:error] [pid 31793:tid 140230732470016] [client 64.226.65.160:50970] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Wed Apr 30 07:55:37.192605 2025] [:error] [pid 31793:tid 140230991095552] [client 64.226.65.160:50998] [client 64.226.65.160] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "aBHXeTdz3iXz6JJ6eziPRgAAAEI"]
[Wed Apr 30 07:55:37.509533 2025] [:error] [pid 32209:tid 140230883538688] [client 64.226.65.160:51012] [client 64.226.65.160] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "aBHXeaeghzr8jcoY3tPulwAAAMY"]
[Wed Apr 30 08:43:09.755384 2025] [:error] [pid 31792:tid 140230833182464] [client 159.223.132.86:58164] [client 159.223.132.86] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aBHinarQOmJ8k5h1k4L1VgAAAAw"]
[Wed Apr 30 08:43:13.106814 2025] [authz_core:error] [pid 32209:tid 140230749255424] [client 159.223.132.86:58244] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Wed Apr 30 08:43:14.827182 2025] [:error] [pid 31792:tid 140230965917440] [client 159.223.132.86:58288] [client 159.223.132.86] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "aBHioqrQOmJ8k5h1k4L1XQAAAAU"]
[Wed Apr 30 08:43:15.052128 2025] [:error] [pid 32209:tid 140230875145984] [client 159.223.132.86:58296] [client 159.223.132.86] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "aBHio6eghzr8jcoY3tPuywAAAMc"]
[Fri May 02 05:24:44.043882 2025] [:error] [pid 17066:tid 140530633656064] [client 85.192.49.153:33676] [client 85.192.49.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "aBRXHO_Hb12hSYN2ZUSnmAAAAAk"]
[Fri May 02 06:02:04.767436 2025] [:error] [pid 17469:tid 140530766534400] [client 142.93.129.190:38422] [client 142.93.129.190] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aBRf3Bdp3qREkB9KDFRM3AAAAMI"]
[Fri May 02 06:02:09.840003 2025] [authz_core:error] [pid 17469:tid 140530658834176] [client 142.93.129.190:60268] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Fri May 02 06:02:12.526099 2025] [:error] [pid 17469:tid 140530616870656] [client 142.93.129.190:60296] [client 142.93.129.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "aBRf5Bdp3qREkB9KDFRM4gAAAMs"]
[Fri May 02 06:02:13.022688 2025] [:error] [pid 17090:tid 140530783319808] [client 142.93.129.190:60300] [client 142.93.129.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "aBRf5Z-Eohqkc0H1ukaYtgAAAIA"]
[Fri May 02 09:12:38.180152 2025] [:error] [pid 17090:tid 140530524550912] [client 139.59.143.102:42576] [client 139.59.143.102] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aBSMhp-Eohqkc0H1ukaZcwAAAJY"]
[Fri May 02 09:12:42.223084 2025] [authz_core:error] [pid 17090:tid 140530600085248] [client 139.59.143.102:39390] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Fri May 02 09:12:44.323272 2025] [:error] [pid 17090:tid 140530642048768] [client 139.59.143.102:39436] [client 139.59.143.102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "aBSMjJ-Eohqkc0H1ukaZfAAAAIg"]
[Fri May 02 09:12:44.629034 2025] [:error] [pid 17090:tid 140530758141696] [client 139.59.143.102:39438] [client 139.59.143.102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "aBSMjJ-Eohqkc0H1ukaZfQAAAIM"]
[Sun May 04 05:25:58.513149 2025] [:error] [pid 32388:tid 140410391291648] [client 143.244.168.161:37346] [client 143.244.168.161] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aBb6ZkR1d9QnM3vNFqGmgQAAAJE"]
[Sun May 04 05:26:02.027021 2025] [authz_core:error] [pid 32388:tid 140410366113536] [client 143.244.168.161:37396] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Sun May 04 05:26:03.782026 2025] [:error] [pid 32388:tid 140410340935424] [client 143.244.168.161:44518] [client 143.244.168.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "aBb6a0R1d9QnM3vNFqGmhQAAAJc"]
[Sun May 04 05:26:04.009681 2025] [:error] [pid 32360:tid 140410492004096] [client 143.244.168.161:44534] [client 143.244.168.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "aBb6bGS29_-p8bJSMi9-BQAAAEU"]
[Sun May 04 06:42:21.720079 2025] [:error] [pid 32691:tid 140410517182208] [client 142.93.129.190:41904] [client 142.93.129.190] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aBcMTZBC6N_XPaVVrGNrPAAAAMI"]
[Sun May 04 06:42:25.627630 2025] [authz_core:error] [pid 32691:tid 140410424862464] [client 142.93.129.190:41956] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Sun May 04 06:42:27.687916 2025] [:error] [pid 32691:tid 140410382898944] [client 142.93.129.190:57942] [client 142.93.129.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "aBcMU5BC6N_XPaVVrGNrRQAAANI"]
[Sun May 04 06:42:27.988668 2025] [:error] [pid 32691:tid 140410366113536] [client 142.93.129.190:57956] [client 142.93.129.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "aBcMU5BC6N_XPaVVrGNrRgAAANQ"]
[Mon May 05 19:00:13.261305 2025] [:error] [pid 24263:tid 139949420570368] [client 194.233.72.214:43208] [client 194.233.72.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "aBkKvZZC1E0aIAmHjsCbZwAAAIQ"]
[Mon May 05 19:00:14.003657 2025] [:error] [pid 24263:tid 139949428963072] [client 194.233.72.214:43214] [client 194.233.72.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/config/.env"] [unique_id "aBkKvpZC1E0aIAmHjsCbaAAAAIM"]
[Mon May 05 19:00:14.984535 2025] [:error] [pid 24263:tid 139949353428736] [client 194.233.72.214:43220] [client 194.233.72.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.production"] [unique_id "aBkKvpZC1E0aIAmHjsCbaQAAAIw"]
[Mon May 05 19:00:15.702528 2025] [:error] [pid 24248:tid 139949303072512] [client 194.233.72.214:43232] [client 194.233.72.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.local"] [unique_id "aBkKvwKZ3frtFlNtxDCZMwAAABI"]
[Mon May 05 19:00:17.588889 2025] [:error] [pid 24263:tid 139949311465216] [client 194.233.72.214:43250] [client 194.233.72.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/api/.env"] [unique_id "aBkKwZZC1E0aIAmHjsCbawAAAJE"]
[Tue May 06 03:22:13.489409 2025] [:error] [pid 24263:tid 139949512775424] [client 167.172.158.128:34340] [client 167.172.158.128] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aBmAZZZC1E0aIAmHjsCcbwAAAII"]
[Tue May 06 03:22:16.538841 2025] [authz_core:error] [pid 24248:tid 139949529560832] [client 167.172.158.128:34420] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Tue May 06 03:22:17.998071 2025] [:error] [pid 24248:tid 139949261108992] [client 167.172.158.128:49280] [client 167.172.158.128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "aBmAaQKZ3frtFlNtxDCaTwAAABc"]
[Tue May 06 03:22:18.167612 2025] [:error] [pid 24248:tid 139949353428736] [client 167.172.158.128:49286] [client 167.172.158.128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "aBmAagKZ3frtFlNtxDCaUAAAAAw"]
[Tue May 06 05:26:45.079941 2025] [:error] [pid 14322:tid 139707518195456] [client 194.233.72.214:51636] [client 194.233.72.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "aBmdlSc9o746I9Z34JAVxwAAAJY"]
[Tue May 06 05:26:45.821181 2025] [:error] [pid 14322:tid 139707543373568] [client 194.233.72.214:51638] [client 194.233.72.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/config/.env"] [unique_id "aBmdlSc9o746I9Z34JAVyAAAAJM"]
[Tue May 06 05:26:46.560814 2025] [:error] [pid 14322:tid 139707509802752] [client 194.233.72.214:51654] [client 194.233.72.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.production"] [unique_id "aBmdlic9o746I9Z34JAVyQAAAJc"]
[Tue May 06 05:26:47.309057 2025] [:error] [pid 14322:tid 139707694442240] [client 194.233.72.214:51664] [client 194.233.72.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.local"] [unique_id "aBmdlyc9o746I9Z34JAVygAAAIE"]
[Tue May 06 05:26:49.077021 2025] [:error] [pid 14322:tid 139707677656832] [client 194.233.72.214:51676] [client 194.233.72.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/api/.env"] [unique_id "aBmdmSc9o746I9Z34JAVzAAAAIM"]
[Tue May 06 06:03:24.998310 2025] [:error] [pid 14293:tid 139707660871424] [client 138.68.82.23:41532] [client 138.68.82.23] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aBmmLNfHlXUFZSdrStCgeAAAAAU"]
[Tue May 06 06:03:30.111311 2025] [authz_core:error] [pid 14293:tid 139707568551680] [client 138.68.82.23:41570] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Tue May 06 06:03:32.831568 2025] [:error] [pid 14293:tid 139707509802752] [client 138.68.82.23:41612] [client 138.68.82.23] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "aBmmNNfHlXUFZSdrStCggAAAABc"]
[Tue May 06 06:03:33.310580 2025] [:error] [pid 14293:tid 139707501410048] [client 138.68.82.23:41624] [client 138.68.82.23] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "aBmmNdfHlXUFZSdrStCggQAAABg"]
[Wed May 07 17:44:15.000066 2025] [:error] [pid 28488:tid 140521783645952] [client 15.237.130.80:50864] [client 15.237.130.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/sftp-config.json"] [unique_id "aBub7gQyTUsFlu58bnYY9QAAAMs"]
[Thu May 08 09:16:50.696355 2025] [:error] [pid 27159:tid 139986464663296] [client 138.68.82.23:35514] [client 138.68.82.23] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aBx2gsLrFjtxNXcfZUd5EAAAAIQ"]
[Thu May 08 09:16:56.969370 2025] [authz_core:error] [pid 27130:tid 139986347165440] [client 138.68.82.23:54834] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Thu May 08 09:16:59.766978 2025] [:error] [pid 27130:tid 139986338772736] [client 138.68.82.23:54862] [client 138.68.82.23] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "aBx2i-9h9izU5tmBMsbxtAAAABM"]
[Thu May 08 09:17:00.242696 2025] [:error] [pid 27130:tid 139986296809216] [client 138.68.82.23:54872] [client 138.68.82.23] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "aBx2jO9h9izU5tmBMsbxtQAAABg"]
[Thu May 08 17:01:04.103154 2025] [:error] [pid 27131:tid 139986405914368] [client 142.93.143.8:34052] [client 142.93.143.8] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aBzjUI7XoInm5GPe4NbAUwAAAEs"]
[Thu May 08 17:01:08.261977 2025] [authz_core:error] [pid 27131:tid 139986447877888] [client 142.93.143.8:40542] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Thu May 08 17:01:10.308917 2025] [:error] [pid 27592:tid 139986464663296] [client 142.93.143.8:40586] [client 142.93.143.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "aBzjVlODFwKRMnFddaU_0wAAAMQ"]
[Thu May 08 17:01:10.608810 2025] [:error] [pid 27592:tid 139986330380032] [client 142.93.143.8:40592] [client 142.93.143.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "aBzjVlODFwKRMnFddaU_1AAAANQ"]
[Sat May 10 10:16:16.240110 2025] [:error] [pid 7767:tid 139845678061312] [client 206.189.95.232:36766] [client 206.189.95.232] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aB8ncA8zUiqZ-CkE61mv3QAAAMA"]
[Sat May 10 10:16:21.949881 2025] [authz_core:error] [pid 7392:tid 139845452121856] [client 206.189.95.232:48900] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Sat May 10 10:16:25.035843 2025] [:error] [pid 7392:tid 139845636097792] [client 206.189.95.232:48940] [client 206.189.95.232] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "aB8neeTZ8stP8QRX96wFZQAAAEU"]
[Sat May 10 10:16:25.585641 2025] [:error] [pid 7392:tid 139845544441600] [client 206.189.95.232:48954] [client 206.189.95.232] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "aB8neeTZ8stP8QRX96wFZgAAAEc"]
[Sat May 10 21:25:33.477791 2025] [:error] [pid 7420:tid 139845418551040] [client 128.199.182.55:55584] [client 128.199.182.55] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aB_ETRXHjIRUe1vOqAl97wAAAJY"]
[Sat May 10 21:25:38.003640 2025] [authz_core:error] [pid 7767:tid 139845544441600] [client 128.199.182.55:55632] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Sat May 10 21:25:40.329057 2025] [:error] [pid 7420:tid 139845661275904] [client 128.199.182.55:55386] [client 128.199.182.55] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "aB_EVBXHjIRUe1vOqAl99gAAAII"]
[Sat May 10 21:25:40.703051 2025] [:error] [pid 7420:tid 139845426943744] [client 128.199.182.55:55400] [client 128.199.182.55] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "aB_EVBXHjIRUe1vOqAl99wAAAJU"]
[Sun May 11 16:08:25.721212 2025] [:error] [pid 2193:tid 140618328123136] [client 194.233.72.214:55470] [client 194.233.72.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "aCDLeaKDtwNqbVqXhFnpqAAAAM4"]
[Sun May 11 16:08:26.698885 2025] [:error] [pid 2193:tid 140618302945024] [client 194.233.72.214:55484] [client 194.233.72.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/config/.env"] [unique_id "aCDLeqKDtwNqbVqXhFnpqQAAANE"]
[Sun May 11 16:08:27.517923 2025] [:error] [pid 2193:tid 140618244196096] [client 194.233.72.214:55506] [client 194.233.72.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.production"] [unique_id "aCDLe6KDtwNqbVqXhFnpqgAAANg"]
[Sun May 11 16:08:28.495084 2025] [:error] [pid 2193:tid 140618311337728] [client 194.233.72.214:55514] [client 194.233.72.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.local"] [unique_id "aCDLfKKDtwNqbVqXhFnpqwAAANA"]
[Sun May 11 16:08:30.540214 2025] [:error] [pid 2193:tid 140618269374208] [client 194.233.72.214:55556] [client 194.233.72.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/api/.env"] [unique_id "aCDLfqKDtwNqbVqXhFnprQAAANU"]
[Mon May 12 11:56:41.679218 2025] [:error] [pid 21285:tid 140561553991424] [client 64.227.32.66:52068] [client 64.227.32.66] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aCHh-SqzvVKHf8niz_VKlAAAAFg"]
[Mon May 12 11:56:46.682296 2025] [authz_core:error] [pid 21313:tid 140561705060096] [client 64.227.32.66:48530] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Mon May 12 11:56:49.336921 2025] [:error] [pid 21313:tid 140561721845504] [client 64.227.32.66:48556] [client 64.227.32.66] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "aCHiAdPs5wcf4WoWwb2ySgAAAIQ"]
[Mon May 12 11:56:49.809071 2025] [:error] [pid 21313:tid 140561587562240] [client 64.227.32.66:48562] [client 64.227.32.66] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "aCHiAdPs5wcf4WoWwb2ySwAAAJQ"]
[Mon May 12 18:11:45.732141 2025] [:error] [pid 21285:tid 140561696667392] [client 92.118.39.236:39060] [client 92.118.39.236] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "aCI54SqzvVKHf8niz_VL9AAAAEc"]
[Mon May 12 18:11:46.646060 2025] [:error] [pid 21285:tid 140561637918464] [client 92.118.39.236:53186] [client 92.118.39.236] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "aCI54iqzvVKHf8niz_VL9QAAAE4"]
[Mon May 12 22:22:37.732696 2025] [:error] [pid 21709:tid 140561721845504] [client 178.128.207.138:49914] [client 178.128.207.138] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aCJ0rboRnhw9a4bpxyy0ygAAAMQ"]
[Mon May 12 22:22:41.637917 2025] [authz_core:error] [pid 21313:tid 140561579169536] [client 178.128.207.138:39252] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Mon May 12 22:22:43.712486 2025] [:error] [pid 21313:tid 140561818007296] [client 178.128.207.138:39288] [client 178.128.207.138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "aCJ0s9Ps5wcf4WoWwb20sQAAAIE"]
[Mon May 12 22:22:44.019423 2025] [:error] [pid 21313:tid 140561646311168] [client 178.128.207.138:39296] [client 178.128.207.138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "aCJ0tNPs5wcf4WoWwb20sgAAAI0"]
[Wed May 14 07:29:11.791109 2025] [:error] [pid 3291:tid 140534190425856] [client 194.233.72.214:60466] [client 194.233.72.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "aCRGR9A1XaNbvmko0J-eUQAAAMM"]
[Wed May 14 07:29:12.511821 2025] [:error] [pid 2794:tid 140534148462336] [client 194.233.72.214:60470] [client 194.233.72.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/config/.env"] [unique_id "aCRGSKdi-JMiFJUNydi-5AAAAAg"]
[Wed May 14 07:29:13.484006 2025] [:error] [pid 3291:tid 140534182033152] [client 194.233.72.214:60486] [client 194.233.72.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.production"] [unique_id "aCRGSdA1XaNbvmko0J-eUgAAAMQ"]
[Wed May 14 07:29:14.218372 2025] [:error] [pid 2795:tid 140534014179072] [client 194.233.72.214:60488] [client 194.233.72.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.local"] [unique_id "aCRGSrxpnlxUCv5ei-jxoQAAAFg"]
[Wed May 14 09:29:40.118812 2025] [:error] [pid 3291:tid 140534106498816] [client 167.71.81.114:37332] [client 167.71.81.114] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aCRihNA1XaNbvmko0J-elAAAAM0"]
[Wed May 14 09:29:43.975189 2025] [authz_core:error] [pid 2794:tid 140534182033152] [client 167.71.81.114:37376] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Wed May 14 09:29:45.704607 2025] [:error] [pid 2794:tid 140534140069632] [client 167.71.81.114:37410] [client 167.71.81.114] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "aCRiiadi-JMiFJUNydi_KQAAAAk"]
[Wed May 14 09:29:45.931806 2025] [:error] [pid 2823:tid 140534064535296] [client 167.71.81.114:37420] [client 167.71.81.114] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "aCRiiXSqa2M7LCTJiyQougAAAJI"]
[Wed May 14 10:11:20.448118 2025] [:error] [pid 2823:tid 140534014179072] [client 85.237.194.110:56049] [client 85.237.194.110] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "aCRsSHSqa2M7LCTJiyQo_AAAAJg"]
[Wed May 14 10:11:22.367105 2025] [:error] [pid 3291:tid 140534072928000] [client 85.237.194.87:48641] [client 85.237.194.87] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "aCRsStA1XaNbvmko0J-exgAAANE"]
[Wed May 14 10:11:22.744896 2025] [:error] [pid 2823:tid 140534123284224] [client 181.215.65.76:8317] [client 181.215.65.76] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "aCRsSnSqa2M7LCTJiyQo_wAAAIs"]
[Wed May 14 10:11:23.035661 2025] [:error] [pid 2823:tid 140534081320704] [client 85.237.194.120:38885] [client 85.237.194.120] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.prod"] [unique_id "aCRsS3Sqa2M7LCTJiyQpAAAAAJA"]
[Wed May 14 10:11:23.337251 2025] [:error] [pid 2823:tid 140534072928000] [client 85.237.194.114:17843] [client 85.237.194.114] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.prod"] [unique_id "aCRsS3Sqa2M7LCTJiyQpAQAAAJE"]
[Wed May 14 10:11:23.949333 2025] [:error] [pid 2823:tid 140534047749888] [client 85.237.194.106:10077] [client 85.237.194.106] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.production"] [unique_id "aCRsS3Sqa2M7LCTJiyQpAgAAAJQ"]
[Wed May 14 10:11:24.260839 2025] [:error] [pid 2823:tid 140534056142592] [client 181.215.65.65:64561] [client 181.215.65.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.production"] [unique_id "aCRsTHSqa2M7LCTJiyQpAwAAAJM"]
[Wed May 14 10:11:25.093129 2025] [:error] [pid 2823:tid 140534039357184] [client 85.237.194.72:53765] [client 85.237.194.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/redmine/.env"] [unique_id "aCRsTXSqa2M7LCTJiyQpBAAAAJU"]
[Wed May 14 10:11:25.441060 2025] [:error] [pid 2823:tid 140534198818560] [client 181.215.65.72:20975] [client 181.215.65.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/redmine/.env"] [unique_id "aCRsTXSqa2M7LCTJiyQpBQAAAII"]
[Wed May 14 10:11:26.056895 2025] [:error] [pid 2823:tid 140534182033152] [client 85.237.194.143:29135] [client 85.237.194.143] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/__tests__/test-become/.env"] [unique_id "aCRsTnSqa2M7LCTJiyQpBgAAAIQ"]
[Wed May 14 10:11:26.373414 2025] [:error] [pid 2823:tid 140534148462336] [client 85.237.194.61:53349] [client 85.237.194.61] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/__tests__/test-become/.env"] [unique_id "aCRsTnSqa2M7LCTJiyQpBwAAAIg"]
[Wed May 14 10:11:58.166934 2025] [:error] [pid 2794:tid 140534064535296] [client 85.237.194.85:35741] [client 85.237.194.85] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/config/parameters.yml" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/app_dev.php/_profiler/open"] [unique_id "aCRsbqdi-JMiFJUNydi_UAAAABI"]
[Wed May 14 10:11:58.441942 2025] [:error] [pid 2794:tid 140534056142592] [client 85.237.194.100:3105] [client 85.237.194.100] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/config/parameters.yml" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/_profiler/open"] [unique_id "aCRsbqdi-JMiFJUNydi_UQAAABM"]
[Wed May 14 10:11:58.777125 2025] [:error] [pid 2794:tid 140534022571776] [client 85.237.194.72:1463] [client 85.237.194.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/config/parameters.yml" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/app/config/parameters.yml"] [unique_id "aCRsbqdi-JMiFJUNydi_UgAAABc"]
[Wed May 14 10:11:59.142223 2025] [:error] [pid 2794:tid 140534207211264] [client 85.237.194.55:7847] [client 85.237.194.55] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/config/parameters.yml" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/config/parameters.yml"] [unique_id "aCRsb6di-JMiFJUNydi_UwAAAAE"]
[Wed May 14 14:49:28.463600 2025] [:error] [pid 2795:tid 140534098106112] [client 206.189.19.19:45632] [client 206.189.19.19] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aCSteLxpnlxUCv5ei-jymQAAAE4"]
[Wed May 14 14:49:32.458478 2025] [authz_core:error] [pid 2795:tid 140534131676928] [client 206.189.19.19:45696] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Wed May 14 14:49:34.533372 2025] [:error] [pid 2795:tid 140534198818560] [client 206.189.19.19:45748] [client 206.189.19.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "aCStfrxpnlxUCv5ei-jypAAAAEI"]
[Wed May 14 14:49:34.832620 2025] [:error] [pid 2795:tid 140534081320704] [client 206.189.19.19:45756] [client 206.189.19.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "aCStfrxpnlxUCv5ei-jypQAAAFA"]
[Fri May 16 04:13:52.088252 2025] [:error] [pid 25268:tid 140183345219328] [client 142.93.143.8:45196] [client 142.93.143.8] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aCa7gJd9QGyd8dYFELfZxgAAABM"]
[Fri May 16 04:13:56.190622 2025] [authz_core:error] [pid 25297:tid 140183345219328] [client 142.93.143.8:45264] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Fri May 16 04:13:58.200325 2025] [:error] [pid 25297:tid 140183320041216] [client 142.93.143.8:49076] [client 142.93.143.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "aCa7hst-4yc-hIj3VpuQ7AAAAJY"]
[Fri May 16 04:13:58.499008 2025] [:error] [pid 18542:tid 140183479502592] [client 142.93.143.8:49090] [client 142.93.143.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "aCa7hiOjHcNpa6Q4H3posQAAAMM"]
[Fri May 16 09:33:37.640314 2025] [:error] [pid 25268:tid 140183445931776] [client 167.71.81.114:44238] [client 167.71.81.114] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aCcGcZd9QGyd8dYFELfaTgAAAAc"]
[Fri May 16 09:33:40.981778 2025] [authz_core:error] [pid 25297:tid 140183311648512] [client 167.71.81.114:41872] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Fri May 16 09:33:42.700277 2025] [:error] [pid 25297:tid 140183487895296] [client 167.71.81.114:41914] [client 167.71.81.114] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "aCcGdst-4yc-hIj3VpuSEgAAAII"]
[Fri May 16 09:33:42.921803 2025] [:error] [pid 25297:tid 140183445931776] [client 167.71.81.114:41918] [client 167.71.81.114] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "aCcGdst-4yc-hIj3VpuSEwAAAIc"]
[Sat May 17 08:54:13.639143 2025] [:error] [pid 9746:tid 140095541679872] [client 85.237.194.100:23413] [client 85.237.194.100] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "aChOtQRP-mfMsQjFrS-HggAAANQ"]
[Sat May 17 08:54:13.981813 2025] [:error] [pid 9746:tid 140095755613952] [client 104.234.32.2:10739] [client 104.234.32.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "aChOtQRP-mfMsQjFrS-HgwAAAMM"]
[Sat May 17 08:54:14.303171 2025] [:error] [pid 16606:tid 140095617214208] [client 181.215.65.68:37729] [client 181.215.65.68] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.prod"] [unique_id "aChOtiHg5u1pqLyyT1vQmQAAAEs"]
[Sat May 17 08:54:15.672944 2025] [:error] [pid 16606:tid 140095608821504] [client 104.234.32.3:20403] [client 104.234.32.3] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.prod"] [unique_id "aChOtyHg5u1pqLyyT1vQmgAAAEw"]
[Sat May 17 08:54:16.044842 2025] [:error] [pid 9746:tid 140095650785024] [client 85.237.194.145:16693] [client 85.237.194.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.production"] [unique_id "aChOuARP-mfMsQjFrS-HhAAAAMc"]
[Sat May 17 08:54:17.381024 2025] [:error] [pid 9746:tid 140095738828544] [client 85.237.194.122:34979] [client 85.237.194.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.production"] [unique_id "aChOuQRP-mfMsQjFrS-HhQAAAMU"]
[Sat May 17 08:54:17.716550 2025] [:error] [pid 16634:tid 140095508109056] [client 181.215.65.70:6203] [client 181.215.65.70] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/redmine/.env"] [unique_id "aChOuandzOLx_aZoUzH-jgAAAJg"]
[Sat May 17 08:54:18.144154 2025] [:error] [pid 16634:tid 140095516501760] [client 85.237.194.140:39587] [client 85.237.194.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/redmine/.env"] [unique_id "aChOuqndzOLx_aZoUzH-jwAAAJc"]
[Sat May 17 08:54:18.856819 2025] [:error] [pid 16634:tid 140095780792064] [client 85.237.194.72:6551] [client 85.237.194.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/__tests__/test-become/.env"] [unique_id "aChOuqndzOLx_aZoUzH-kAAAAIA"]
[Sat May 17 08:54:20.183556 2025] [:error] [pid 16634:tid 140095764006656] [client 85.237.194.122:1433] [client 85.237.194.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/__tests__/test-become/.env"] [unique_id "aChOvKndzOLx_aZoUzH-kQAAAII"]
[Sat May 17 08:54:47.507389 2025] [:error] [pid 16606:tid 140095541679872] [client 181.215.65.65:1045] [client 181.215.65.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/config/parameters.yml" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/app_dev.php/_profiler/open"] [unique_id "aChO1yHg5u1pqLyyT1vQtwAAAFQ"]
[Sat May 17 08:54:47.887674 2025] [:error] [pid 16606:tid 140095633999616] [client 85.237.194.72:59045] [client 85.237.194.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/config/parameters.yml" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/_profiler/open"] [unique_id "aChO1yHg5u1pqLyyT1vQuAAAAEk"]
[Sat May 17 08:54:48.209020 2025] [:error] [pid 16606:tid 140095516501760] [client 85.237.194.70:36571] [client 85.237.194.70] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/config/parameters.yml" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/app/config/parameters.yml"] [unique_id "aChO2CHg5u1pqLyyT1vQuQAAAFc"]
[Sat May 17 08:54:48.541502 2025] [:error] [pid 16606:tid 140095780792064] [client 104.234.32.1:24243] [client 104.234.32.1] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/config/parameters.yml" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/config/parameters.yml"] [unique_id "aChO2CHg5u1pqLyyT1vQugAAAEA"]
[Sun May 18 02:49:36.525285 2025] [:error] [pid 9746:tid 140095541679872] [client 138.197.45.97:57778] [client 138.197.45.97] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "aClKwARP-mfMsQjFrS-KJgAAANQ"]
[Sun May 18 03:54:28.348748 2025] [:error] [pid 11537:tid 140551941236480] [client 147.182.149.75:57036] [client 147.182.149.75] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aClZ9KIDjEiLDpqdrQYl-AAAAIM"]
[Sun May 18 03:54:31.175632 2025] [authz_core:error] [pid 11509:tid 140551756130048] [client 147.182.149.75:57086] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Sun May 18 03:54:32.590448 2025] [:error] [pid 11537:tid 140551781308160] [client 147.182.149.75:57104] [client 147.182.149.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "aClZ-KIDjEiLDpqdrQYl_wAAAI4"]
[Sun May 18 03:54:32.743494 2025] [:error] [pid 11537:tid 140551772915456] [client 147.182.149.75:57114] [client 147.182.149.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "aClZ-KIDjEiLDpqdrQYmAAAAAI8"]
[Sun May 18 05:02:23.295460 2025] [:error] [pid 12831:tid 140551789700864] [client 139.59.136.184:52842] [client 139.59.136.184] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aClp3xjQ2qo4yErET-LULwAAAM0"]
[Sun May 18 05:02:28.428373 2025] [authz_core:error] [pid 11537:tid 140551966414592] [client 139.59.136.184:58970] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Sun May 18 05:02:31.748482 2025] [:error] [pid 12831:tid 140551739344640] [client 139.59.136.184:58994] [client 139.59.136.184] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "aClp5xjQ2qo4yErET-LUMgAAANM"]
[Sun May 18 05:02:32.472591 2025] [:error] [pid 12831:tid 140551730951936] [client 139.59.136.184:58996] [client 139.59.136.184] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "aClp6BjQ2qo4yErET-LUMwAAANQ"]
[Mon May 19 03:31:05.497560 2025] [:error] [pid 11508:tid 140551806486272] [client 194.233.72.214:50984] [client 194.233.72.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "aCql-dKIJvq9RR5yXrArTAAAAAs"]
[Mon May 19 03:31:06.247472 2025] [:error] [pid 11508:tid 140551697381120] [client 194.233.72.214:50992] [client 194.233.72.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/config/.env"] [unique_id "aCql-tKIJvq9RR5yXrArTQAAABg"]
[Mon May 19 03:31:07.002571 2025] [:error] [pid 11508:tid 140551781308160] [client 194.233.72.214:50998] [client 194.233.72.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.production"] [unique_id "aCql-9KIJvq9RR5yXrArTgAAAA4"]
[Mon May 19 03:31:41.304394 2025] [:error] [pid 12831:tid 140551831664384] [client 194.233.72.214:55434] [client 194.233.72.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.local"] [unique_id "aCqmHRjQ2qo4yErET-LYYQAAAMg"]
[Tue May 20 03:19:30.006935 2025] [:error] [pid 5132:tid 140074721146624] [client 157.245.204.205:56758] [client 157.245.204.205] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aCv0wRraoUwmazvIQLWUIQAAAJM"]
[Tue May 20 03:19:34.762478 2025] [authz_core:error] [pid 5132:tid 140074746324736] [client 157.245.204.205:46490] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Tue May 20 03:19:37.108330 2025] [:error] [pid 5132:tid 140074944571136] [client 157.245.204.205:46534] [client 157.245.204.205] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "aCv0yRraoUwmazvIQLWUKwAAAIE"]
[Tue May 20 03:19:37.478605 2025] [:error] [pid 5132:tid 140074936178432] [client 157.245.204.205:46548] [client 157.245.204.205] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "aCv0yRraoUwmazvIQLWULAAAAII"]
[Tue May 20 04:32:23.275596 2025] [:error] [pid 28948:tid 140316992571136] [client 157.230.19.140:48292] [client 157.230.19.140] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aCwF1xL7LhZYq9adg23VrgAAAE4"]
[Tue May 20 04:32:28.462285 2025] [authz_core:error] [pid 29771:tid 140316917036800] [client 157.230.19.140:46020] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Tue May 20 04:32:31.184733 2025] [:error] [pid 28947:tid 140317034534656] [client 157.230.19.140:46050] [client 157.230.19.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "aCwF37r9l51U4FDDl7SN3QAAAAk"]
[Tue May 20 04:32:31.663153 2025] [:error] [pid 28948:tid 140316975785728] [client 157.230.19.140:46052] [client 157.230.19.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "aCwF3xL7LhZYq9adg23VrwAAAFA"]
[Wed May 21 16:20:16.953003 2025] [:error] [pid 19375:tid 139769452615424] [client 194.233.72.214:37566] [client 194.233.72.214] ModSecurity: Access denied with code 403 (phase 2). String match "/.profile" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/30_Apps_OtherApps.conf"] [line "6621"] [id "243320"] [rev "1"] [msg "COMODO WAF: Information disclosure vulnerability in Cloud Foundry PHP Buildpack (aka php-buildpack) before 4.3.18 and PHP Buildpack Cf-release before 242, as used in Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.6.38 and 1.7.x before 1.7.19 and other products (CVE-2016-6639)||edu.richinei.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "edu.richinei.com"] [uri "/.profile"] [unique_id "aC39QM91wa-TFqDTCRqQ8QAAAAQ"]
[Wed May 21 16:20:32.700774 2025] [:error] [pid 19838:tid 139769233204992] [client 194.233.72.214:53750] [client 194.233.72.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "aC39UO5pFOa3yYc3xJYJuAAAANY"]
[Wed May 21 16:20:38.456594 2025] [:error] [pid 19838:tid 139769350702848] [client 194.233.72.214:42902] [client 194.233.72.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/config/.env"] [unique_id "aC39Vu5pFOa3yYc3xJYJuQAAAMg"]
[Wed May 21 16:20:39.212215 2025] [:error] [pid 19375:tid 139769342310144] [client 194.233.72.214:42916] [client 194.233.72.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.production"] [unique_id "aC39V891wa-TFqDTCRqQ8gAAAAk"]
[Wed May 21 16:20:39.963386 2025] [:error] [pid 19375:tid 139769291953920] [client 194.233.72.214:42924] [client 194.233.72.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.local"] [unique_id "aC39V891wa-TFqDTCRqQ8wAAAA8"]
[Wed May 21 16:20:46.786919 2025] [:error] [pid 19376:tid 139769469400832] [client 194.233.72.214:38044] [client 194.233.72.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/api/.env"] [unique_id "aC39XknLMheO9cgtSFVYBgAAAEI"]
[Thu May 22 02:44:46.636353 2025] [:error] [pid 19377:tid 139769224812288] [client 68.183.180.73:37116] [client 68.183.180.73] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aC6PnjX1VBv5ayoICFYKEAAAAJc"]
[Thu May 22 02:44:51.288696 2025] [authz_core:error] [pid 19377:tid 139769266775808] [client 68.183.180.73:33772] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Thu May 22 02:44:53.601738 2025] [:error] [pid 19376:tid 139769283561216] [client 68.183.180.73:33812] [client 68.183.180.73] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "aC6PpUnLMheO9cgtSFVaBgAAAFA"]
[Thu May 22 02:44:53.971998 2025] [:error] [pid 19376:tid 139769367488256] [client 68.183.180.73:33828] [client 68.183.180.73] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "aC6PpUnLMheO9cgtSFVaBwAAAEY"]
[Thu May 22 05:49:40.874576 2025] [:error] [pid 10245:tid 140146401773312] [client 164.92.244.132:41224] [client 164.92.244.132] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aC669OpMDuNDqK24zBvpiAAAAFg"]
[Thu May 22 05:49:46.006617 2025] [authz_core:error] [pid 20027:tid 140146594805504] [client 164.92.244.132:41294] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Thu May 22 05:49:48.679966 2025] [:error] [pid 20027:tid 140146519271168] [client 164.92.244.132:48686] [client 164.92.244.132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "aC66_GnYStosqxjDcXVo1AAAAMo"]
[Thu May 22 05:49:49.156672 2025] [:error] [pid 10244:tid 140146494093056] [client 164.92.244.132:48688] [client 164.92.244.132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "aC66_QEgG2d86fOm7ypiKQAAAA0"]
[Sat May 24 04:29:26.034471 2025] [:error] [pid 30293:tid 140459229824768] [client 165.227.84.14:48366] [client 165.227.84.14] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aDFLJi2YZLWSAkQC_W_liAAAAIQ"]
[Sat May 24 04:29:29.101500 2025] [authz_core:error] [pid 30265:tid 140459129112320] [client 165.227.84.14:48426] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Sat May 24 04:29:30.532024 2025] [:error] [pid 30293:tid 140459179468544] [client 165.227.84.14:48478] [client 165.227.84.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "aDFLKi2YZLWSAkQC_W_liwAAAIo"]
[Sat May 24 04:29:30.683574 2025] [:error] [pid 30264:tid 140459112326912] [client 165.227.84.14:48494] [client 165.227.84.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "aDFLKlpGoGIlxxEDOhambQAAABI"]
[Sat May 24 04:53:25.357180 2025] [:error] [pid 23244:tid 140459246610176] [client 147.182.200.94:42072] [client 147.182.200.94] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aDFQxdTPglZGal6k_6Tx2AAAAMI"]
[Sat May 24 04:53:27.852537 2025] [authz_core:error] [pid 30265:tid 140459187861248] [client 147.182.200.94:42130] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Sat May 24 04:53:29.030148 2025] [:error] [pid 23244:tid 140459213039360] [client 147.182.200.94:45482] [client 147.182.200.94] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "aDFQydTPglZGal6k_6Tx2gAAAMY"]
[Sat May 24 04:53:29.082626 2025] [:error] [pid 23244:tid 140459204646656] [client 147.182.200.94:45492] [client 147.182.200.94] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "aDFQydTPglZGal6k_6Tx2wAAAMc"]
[Sat May 24 22:10:01.958676 2025] [:error] [pid 15398:tid 15424] [client 192.18.135.47:58922] [client 192.18.135.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "aDJDuTfaR1SAEuKBQtvmxAAAANg"]
[Sat May 24 22:10:02.045785 2025] [:error] [pid 15307:tid 15337] [client 192.18.135.47:57935] [client 192.18.135.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "aDJDuva_YBL_bjlYUGpFcQAAAEA"]
[Sun May 25 13:15:21.356445 2025] [:error] [pid 29380:tid 29387] [client 157.245.220.69:42460] [client 157.245.220.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "aDMX6bsM_ona-xcXW7H3LwAAAMU"]
[Mon May 26 01:51:42.856361 2025] [:error] [pid 29380:tid 29394] [client 35.204.239.67:47864] [client 35.204.239.67] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "aDPJLrsM_ona-xcXW7H76AAAAMw"]
[Mon May 26 04:32:21.689907 2025] [:error] [pid 12954:tid 12969] [client 159.65.18.197:58940] [client 159.65.18.197] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aDPu1RVvQpUX3O-5svF0mAAAAM0"]
[Mon May 26 04:32:25.789948 2025] [authz_core:error] [pid 11789:tid 11819] [client 159.65.18.197:58990] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Mon May 26 04:32:28.005188 2025] [:error] [pid 11788:tid 11799] [client 159.65.18.197:59024] [client 159.65.18.197] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "aDPu3GbSwhGAhPZGIX9TQQAAAAg"]
[Mon May 26 04:32:28.313934 2025] [:error] [pid 11810:tid 11865] [client 159.65.18.197:59038] [client 159.65.18.197] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "aDPu3PEm_O9mmAqk0U9WqwAAAJM"]
[Mon May 26 08:12:44.792241 2025] [:error] [pid 12954:tid 12975] [client 206.189.19.19:44414] [client 206.189.19.19] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aDQifBVvQpUX3O-5svF1DgAAANM"]
[Mon May 26 08:12:49.829003 2025] [authz_core:error] [pid 11810:tid 11852] [client 206.189.19.19:47946] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Mon May 26 08:12:52.488700 2025] [:error] [pid 12954:tid 12957] [client 206.189.19.19:47988] [client 206.189.19.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "aDQihBVvQpUX3O-5svF1EQAAAME"]
[Mon May 26 08:12:52.938025 2025] [:error] [pid 12954:tid 12956] [client 206.189.19.19:47998] [client 206.189.19.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "aDQihBVvQpUX3O-5svF1EgAAAMA"]
[Mon May 26 09:41:11.721936 2025] [:error] [pid 11810:tid 11860] [client 157.245.220.69:45926] [client 157.245.220.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "aDQ3N_Em_O9mmAqk0U9XUwAAAI4"]
[Wed May 28 04:02:54.072521 2025] [:error] [pid 12284:tid 12299] [client 138.197.191.87:60228] [client 138.197.191.87] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aDaK7oIBszxVdWz-aAhGkQAAAAw"]
[Wed May 28 04:02:58.429526 2025] [authz_core:error] [pid 5169:tid 5172] [client 138.197.191.87:48190] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Wed May 28 04:03:00.475704 2025] [:error] [pid 12285:tid 12339] [client 138.197.191.87:48232] [client 138.197.191.87] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "aDaK9KKyrWTvN8N-9wHOggAAAFg"]
[Wed May 28 04:03:00.841605 2025] [:error] [pid 12323:tid 12361] [client 138.197.191.87:48240] [client 138.197.191.87] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "aDaK9EudhptAPzM-BVjdKQAAAJM"]
[Wed May 28 09:59:12.669417 2025] [:error] [pid 5169:tid 5191] [client 138.68.82.23:60568] [client 138.68.82.23] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aDbecHUJ4J-8Dc20zVi8TwAAANQ"]
[Wed May 28 09:59:18.223047 2025] [authz_core:error] [pid 12323:tid 12349] [client 138.68.82.23:33020] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Wed May 28 09:59:20.970353 2025] [:error] [pid 12323:tid 12358] [client 138.68.82.23:33052] [client 138.68.82.23] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "aDbeeEudhptAPzM-BVjd4wAAAJA"]
[Wed May 28 09:59:21.442780 2025] [:error] [pid 12285:tid 12332] [client 138.68.82.23:33060] [client 138.68.82.23] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "aDbeeaKyrWTvN8N-9wHPvwAAAFE"]
[Wed May 28 19:58:44.588889 2025] [:error] [pid 12323:tid 12357] [client 45.148.10.80:53688] [client 45.148.10.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "aDdq9EudhptAPzM-BVjm1gAAAI8"]
[Thu May 29 23:14:51.707430 2025] [:error] [pid 12989:tid 13027] [client 194.233.72.214:36680] [client 194.233.72.214] ModSecurity: Access denied with code 403 (phase 2). String match "/.profile" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/30_Apps_OtherApps.conf"] [line "6621"] [id "243320"] [rev "1"] [msg "COMODO WAF: Information disclosure vulnerability in Cloud Foundry PHP Buildpack (aka php-buildpack) before 4.3.18 and PHP Buildpack Cf-release before 242, as used in Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.6.38 and 1.7.x before 1.7.19 and other products (CVE-2016-6639)||edu.richinei.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "edu.richinei.com"] [uri "/.profile"] [unique_id "aDjqazLq4hhfVUrhSoBC7QAAAEg"]
[Thu May 29 23:15:10.407809 2025] [:error] [pid 12989:tid 13041] [client 194.233.72.214:38964] [client 194.233.72.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "aDjqfjLq4hhfVUrhSoBC7wAAAFY"]
[Fri May 30 10:32:52.248191 2025] [:error] [pid 26446:tid 26448] [client 128.199.182.77:40326] [client 128.199.182.77] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aDmJVLZPmVHqhJLXiDTuCQAAAMA"]
[Fri May 30 10:32:58.111881 2025] [authz_core:error] [pid 26316:tid 26321] [client 128.199.182.77:36584] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Fri May 30 10:33:01.324586 2025] [:error] [pid 26316:tid 26331] [client 128.199.182.77:36606] [client 128.199.182.77] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "aDmJXYiF5WjnDtWX5NUWzgAAAAw"]
[Fri May 30 10:33:01.910557 2025] [:error] [pid 26316:tid 26328] [client 128.199.182.77:36612] [client 128.199.182.77] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "aDmJXYiF5WjnDtWX5NUWzwAAAAk"]
[Mon Jun 02 01:08:22.057805 2025] [:error] [pid 20454:tid 20477] [client 151.240.45.83:43633] [client 151.240.45.83] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "aDz5hqm00pI1jDgzuD6SDQAAANU"]
[Mon Jun 02 01:08:24.666043 2025] [:error] [pid 20185:tid 20221] [client 151.240.45.78:18379] [client 151.240.45.78] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "aDz5iI8viaekZyAVOkDi1AAAAIc"]
[Mon Jun 02 01:08:25.327771 2025] [:error] [pid 20454:tid 20466] [client 151.240.45.102:51949] [client 151.240.45.102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "aDz5iam00pI1jDgzuD6SDgAAAMo"]
[Mon Jun 02 01:08:25.862818 2025] [:error] [pid 20185:tid 20236] [client 151.240.45.65:1397] [client 151.240.45.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.prod"] [unique_id "aDz5iY8viaekZyAVOkDi1QAAAJY"]
[Mon Jun 02 01:08:26.352366 2025] [:error] [pid 20454:tid 20461] [client 151.240.45.81:6401] [client 151.240.45.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.prod"] [unique_id "aDz5iqm00pI1jDgzuD6SDwAAAMU"]
[Mon Jun 02 01:08:26.829169 2025] [:error] [pid 20185:tid 20214] [client 151.240.45.65:43957] [client 151.240.45.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.production"] [unique_id "aDz5io8viaekZyAVOkDi1gAAAIA"]
[Mon Jun 02 01:08:28.308168 2025] [:error] [pid 20185:tid 20231] [client 151.240.45.57:47059] [client 151.240.45.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.production"] [unique_id "aDz5jI8viaekZyAVOkDi1wAAAJE"]
[Mon Jun 02 01:08:28.661618 2025] [:error] [pid 20454:tid 20468] [client 151.240.45.56:46159] [client 151.240.45.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/redmine/.env"] [unique_id "aDz5jKm00pI1jDgzuD6SEAAAAMw"]
[Mon Jun 02 01:08:29.004248 2025] [:error] [pid 20157:tid 20190] [client 151.240.45.69:27803] [client 151.240.45.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/redmine/.env"] [unique_id "aDz5jQtiDjKdwmPHn98GvQAAAEM"]
[Mon Jun 02 01:08:29.558034 2025] [:error] [pid 20185:tid 20216] [client 151.240.45.63:3447] [client 151.240.45.63] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/__tests__/test-become/.env"] [unique_id "aDz5jY8viaekZyAVOkDi2AAAAII"]
[Mon Jun 02 01:08:30.028563 2025] [:error] [pid 20157:tid 20191] [client 151.240.45.78:12307] [client 151.240.45.78] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/__tests__/test-become/.env"] [unique_id "aDz5jgtiDjKdwmPHn98GvgAAAEQ"]
[Mon Jun 02 01:09:05.868718 2025] [:error] [pid 20454:tid 20464] [client 151.240.45.61:61515] [client 151.240.45.61] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/config/parameters.yml" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/app_dev.php/_profiler/open"] [unique_id "aDz5sam00pI1jDgzuD6SIAAAAMg"]
[Mon Jun 02 01:09:07.351282 2025] [:error] [pid 20185:tid 20219] [client 151.240.45.92:37835] [client 151.240.45.92] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/config/parameters.yml" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/_profiler/open"] [unique_id "aDz5s48viaekZyAVOkDi3wAAAIU"]
[Mon Jun 02 01:09:07.711593 2025] [:error] [pid 20156:tid 20165] [client 151.240.45.95:4735] [client 151.240.45.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/config/parameters.yml" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/app/config/parameters.yml"] [unique_id "aDz5s6un9D6qCW-BSSowFAAAAAY"]
[Mon Jun 02 01:09:08.100417 2025] [:error] [pid 20156:tid 20162] [client 151.240.45.65:54055] [client 151.240.45.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/config/parameters.yml" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/config/parameters.yml"] [unique_id "aDz5tKun9D6qCW-BSSowFQAAAAM"]
[Mon Jun 02 01:15:35.139465 2025] [:error] [pid 20185:tid 20225] [client 151.240.45.92:44245] [client 151.240.45.92] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "aDz7N48viaekZyAVOkDjqwAAAIs"]
[Mon Jun 02 01:15:38.689967 2025] [:error] [pid 20157:tid 20198] [client 151.240.45.71:2451] [client 151.240.45.71] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "aDz7OgtiDjKdwmPHn98HjQAAAEs"]
[Mon Jun 02 01:15:39.649392 2025] [:error] [pid 20185:tid 20233] [client 151.240.45.90:3115] [client 151.240.45.90] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "aDz7O48viaekZyAVOkDjrQAAAJM"]
[Mon Jun 02 01:15:40.603181 2025] [:error] [pid 20156:tid 20168] [client 151.240.45.60:36843] [client 151.240.45.60] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.prod"] [unique_id "aDz7PKun9D6qCW-BSSow1QAAAAk"]
[Mon Jun 02 01:15:41.511524 2025] [:error] [pid 20157:tid 20206] [client 151.240.45.61:63383] [client 151.240.45.61] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.prod"] [unique_id "aDz7PQtiDjKdwmPHn98HjwAAAFM"]
[Mon Jun 02 01:15:42.483403 2025] [:error] [pid 20156:tid 20164] [client 151.240.45.59:16279] [client 151.240.45.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.production"] [unique_id "aDz7Pqun9D6qCW-BSSow1gAAAAU"]
[Mon Jun 02 01:15:43.223251 2025] [:error] [pid 20454:tid 20471] [client 151.240.45.85:18085] [client 151.240.45.85] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.production"] [unique_id "aDz7P6m00pI1jDgzuD6S9QAAAM8"]
[Mon Jun 02 01:15:43.883830 2025] [:error] [pid 20185:tid 20218] [client 151.240.45.97:20105] [client 151.240.45.97] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/redmine/.env"] [unique_id "aDz7P48viaekZyAVOkDjrgAAAIQ"]
[Mon Jun 02 01:15:44.770117 2025] [:error] [pid 20156:tid 20171] [client 151.240.45.80:16361] [client 151.240.45.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/redmine/.env"] [unique_id "aDz7QKun9D6qCW-BSSow1wAAAAw"]
[Mon Jun 02 01:15:45.640785 2025] [:error] [pid 20157:tid 20207] [client 151.240.45.75:42973] [client 151.240.45.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/__tests__/test-become/.env"] [unique_id "aDz7QQtiDjKdwmPHn98HkwAAAFQ"]
[Mon Jun 02 01:15:46.422804 2025] [:error] [pid 20156:tid 20175] [client 151.240.45.84:23801] [client 151.240.45.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/__tests__/test-become/.env"] [unique_id "aDz7Qqun9D6qCW-BSSow2QAAABA"]
[Mon Jun 02 01:16:37.270604 2025] [:error] [pid 20454:tid 20471] [client 151.240.45.102:63333] [client 151.240.45.102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/config/parameters.yml" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/app_dev.php/_profiler/open"] [unique_id "aDz7dam00pI1jDgzuD6TAQAAAM8"]
[Mon Jun 02 01:16:37.993489 2025] [:error] [pid 20454:tid 20475] [client 151.240.45.85:51739] [client 151.240.45.85] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/config/parameters.yml" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/_profiler/open"] [unique_id "aDz7dam00pI1jDgzuD6TAgAAANM"]
[Mon Jun 02 01:16:38.917482 2025] [:error] [pid 20157:tid 20208] [client 151.240.45.99:49501] [client 151.240.45.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/config/parameters.yml" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/app/config/parameters.yml"] [unique_id "aDz7dgtiDjKdwmPHn98HowAAAFU"]
[Mon Jun 02 01:16:40.496083 2025] [:error] [pid 20185:tid 20237] [client 151.240.45.75:4369] [client 151.240.45.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/config/parameters.yml" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/config/parameters.yml"] [unique_id "aDz7eI8viaekZyAVOkDjwgAAAJc"]
[Mon Jun 02 05:56:13.709244 2025] [:error] [pid 2532:tid 2544] [client 159.89.12.166:48116] [client 159.89.12.166] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aD08_QueIF6jZ-8qKw-rPwAAAAk"]
[Mon Jun 02 05:56:18.917295 2025] [authz_core:error] [pid 2532:tid 2545] [client 159.89.12.166:37934] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Mon Jun 02 05:56:21.623144 2025] [:error] [pid 2659:tid 2681] [client 159.89.12.166:37978] [client 159.89.12.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "aD09BRmDhQTP9onrnE-oMgAAANQ"]
[Mon Jun 02 05:56:22.096325 2025] [:error] [pid 2533:tid 2575] [client 159.89.12.166:37986] [client 159.89.12.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "aD09Bo57S_xo9jc9RptcIAAAAEw"]
[Mon Jun 02 07:36:38.019651 2025] [:error] [pid 2659:tid 2663] [client 185.137.164.17:15029] [client 185.137.164.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/HEAD"] [unique_id "aD1UhhmDhQTP9onrnE-s9gAAAMI"]
[Mon Jun 02 08:29:37.414988 2025] [:error] [pid 2532:tid 2553] [client 185.137.164.21:47715] [client 185.137.164.21] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "aD1g8QueIF6jZ-8qKw-wlAAAABI"]
[Mon Jun 02 08:29:38.081574 2025] [:error] [pid 2532:tid 2556] [client 185.137.164.20:28925] [client 185.137.164.20] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.local"] [unique_id "aD1g8gueIF6jZ-8qKw-wlQAAABU"]
[Mon Jun 02 08:29:38.748455 2025] [:error] [pid 2532:tid 2557] [client 185.137.164.17:23115] [client 185.137.164.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.prod"] [unique_id "aD1g8gueIF6jZ-8qKw-wlgAAABY"]
[Mon Jun 02 08:29:39.436394 2025] [:error] [pid 2532:tid 2554] [client 185.137.164.14:60701] [client 185.137.164.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.production"] [unique_id "aD1g8wueIF6jZ-8qKw-wmAAAABM"]
[Mon Jun 02 08:29:40.104085 2025] [:error] [pid 2532:tid 2555] [client 185.137.164.20:25653] [client 185.137.164.20] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "aD1g9AueIF6jZ-8qKw-wmQAAABQ"]
[Mon Jun 02 14:31:02.469958 2025] [:error] [pid 2561:tid 2602] [client 167.99.181.249:53132] [client 167.99.181.249] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aD21poOhsntvMQze9qQ9xgAAAIw"]
[Mon Jun 02 14:31:05.233049 2025] [authz_core:error] [pid 2561:tid 2611] [client 167.99.181.249:53170] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Mon Jun 02 14:31:06.673824 2025] [:error] [pid 2561:tid 2596] [client 167.99.181.249:53208] [client 167.99.181.249] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "aD21qoOhsntvMQze9qQ9ygAAAIY"]
[Mon Jun 02 14:31:06.825410 2025] [:error] [pid 2533:tid 2583] [client 167.99.181.249:53218] [client 167.99.181.249] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "aD21qo57S_xo9jc9RptplwAAAFQ"]
[Mon Jun 02 20:05:20.599687 2025] [:error] [pid 2561:tid 2594] [client 194.233.72.214:54226] [client 194.233.72.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "aD4EAIOhsntvMQze9qRMkwAAAIQ"]
[Mon Jun 02 20:05:21.346180 2025] [:error] [pid 2659:tid 2677] [client 194.233.72.214:54234] [client 194.233.72.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/config/.env"] [unique_id "aD4EARmDhQTP9onrnE_JKQAAANA"]
[Mon Jun 02 20:05:22.092108 2025] [:error] [pid 2659:tid 2679] [client 194.233.72.214:54236] [client 194.233.72.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.production"] [unique_id "aD4EAhmDhQTP9onrnE_JKwAAANI"]
[Mon Jun 02 20:05:22.840072 2025] [:error] [pid 2659:tid 2662] [client 194.233.72.214:54248] [client 194.233.72.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.local"] [unique_id "aD4EAhmDhQTP9onrnE_JLAAAAME"]
[Tue Jun 03 06:41:37.151518 2025] [:error] [pid 1150:tid 1197] [client 159.89.12.166:52450] [client 159.89.12.166] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aD6ZIapDJhXJLaYKRWyVGAAAAFE"]
[Tue Jun 03 06:41:42.114518 2025] [authz_core:error] [pid 1150:tid 1187] [client 159.89.12.166:52508] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Tue Jun 03 06:41:44.799480 2025] [:error] [pid 1178:tid 1219] [client 159.89.12.166:52526] [client 159.89.12.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "aD6ZKCxw71KgWsaU5pL26QAAAIo"]
[Tue Jun 03 06:41:45.264757 2025] [:error] [pid 1178:tid 1217] [client 159.89.12.166:52538] [client 159.89.12.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "aD6ZKSxw71KgWsaU5pL26gAAAIg"]
[Wed Jun 04 11:22:31.746596 2025] [:error] [pid 25272:tid 25283] [client 185.177.72.3:52145] [client 185.177.72.3] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "aEAsd9R5jFlRFD7i7j28bAAAAMk"]
[Wed Jun 04 11:22:32.057435 2025] [:error] [pid 25086:tid 25113] [client 185.177.72.3:52072] [client 185.177.72.3] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "aEAseNfrxUDEE81pjohArwAAABg"]
[Wed Jun 04 11:22:32.543701 2025] [:error] [pid 25087:tid 25141] [client 185.177.72.3:50441] [client 185.177.72.3] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/config/.env"] [unique_id "aEAseJ-qjSho8Ck75lFPiwAAAFg"]
[Wed Jun 04 11:22:32.654003 2025] [:error] [pid 25272:tid 25289] [client 185.177.72.3:53151] [client 185.177.72.3] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/config/.env"] [unique_id "aEAseNR5jFlRFD7i7j28ewAAAM8"]
[Wed Jun 04 11:22:32.854253 2025] [:error] [pid 25272:tid 25274] [client 185.177.72.3:53176] [client 185.177.72.3] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "aEAseNR5jFlRFD7i7j28gQAAAMA"]
[Wed Jun 04 11:22:33.077965 2025] [:error] [pid 25115:tid 25149] [client 185.177.72.3:53366] [client 185.177.72.3] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/api/.env"] [unique_id "aEAseTXagGfY3AQse3s_lwAAAIU"]
[Wed Jun 04 11:22:33.320628 2025] [:error] [pid 25087:tid 25117] [client 185.177.72.3:52419] [client 185.177.72.3] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/api/.env"] [unique_id "aEAseZ-qjSho8Ck75lFPjQAAAEA"]
[Wed Jun 04 11:22:33.606300 2025] [:error] [pid 25272:tid 25283] [client 185.177.72.3:53544] [client 185.177.72.3] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/config/.env"] [unique_id "aEAsedR5jFlRFD7i7j28jwAAAMk"]
[Wed Jun 04 11:22:34.093440 2025] [:error] [pid 25086:tid 25091] [client 185.177.72.3:53671] [client 185.177.72.3] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/api/.env"] [unique_id "aEAsetfrxUDEE81pjohAswAAAAI"]
[Wed Jun 04 11:22:35.423811 2025] [:error] [pid 25087:tid 25127] [client 185.177.72.3:54238] [client 185.177.72.3] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.local.dist"] [unique_id "aEAse5-qjSho8Ck75lFPlQAAAEo"]
[Wed Jun 04 11:22:35.496010 2025] [:error] [pid 25087:tid 25117] [client 185.177.72.3:52610] [client 185.177.72.3] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.dist"] [unique_id "aEAse5-qjSho8Ck75lFPlgAAAEA"]
[Wed Jun 04 11:22:35.682930 2025] [:error] [pid 25087:tid 25132] [client 185.177.72.3:54381] [client 185.177.72.3] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "aEAse5-qjSho8Ck75lFPmgAAAE8"]
[Wed Jun 04 12:47:09.527085 2025] [:error] [pid 25086:tid 25101] [client 206.81.24.227:49718] [client 206.81.24.227] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aEBATdfrxUDEE81pjohCXQAAAAw"]
[Wed Jun 04 12:47:13.451044 2025] [authz_core:error] [pid 25086:tid 25107] [client 206.81.24.227:49798] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Wed Jun 04 12:47:15.508549 2025] [:error] [pid 25272:tid 25280] [client 206.81.24.227:59502] [client 206.81.24.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "aEBAU9R5jFlRFD7i7j2_FwAAAMY"]
[Wed Jun 04 12:47:15.821322 2025] [:error] [pid 14475:tid 14483] [client 206.81.24.227:59510] [client 206.81.24.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "aEBAU9KH-_TFLUOZ6VyqqwAAAQY"]
[Wed Jun 04 20:54:57.559967 2025] [:error] [pid 14475:tid 14500] [client 165.227.39.235:51758] [client 165.227.39.235] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aECyodKH-_TFLUOZ6Vy0VgAAARc"]
[Wed Jun 04 20:55:00.713144 2025] [authz_core:error] [pid 25086:tid 25097] [client 165.227.39.235:51816] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Wed Jun 04 20:55:02.866469 2025] [:error] [pid 25272:tid 25274] [client 165.227.39.235:51846] [client 165.227.39.235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "aECyptR5jFlRFD7i7j3GwgAAAMA"]
[Wed Jun 04 20:55:03.076735 2025] [:error] [pid 25115:tid 25166] [client 165.227.39.235:51852] [client 165.227.39.235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "aECypzXagGfY3AQse3tJTgAAAJY"]
[Fri Jun 06 11:41:00.133919 2025] [:error] [pid 22881:tid 22933] [client 209.38.208.202:59110] [client 209.38.208.202] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aELTzKg_wAnN_MOcO9GzJgAAAJc"]
[Fri Jun 06 11:41:04.632579 2025] [authz_core:error] [pid 22881:tid 22932] [client 209.38.208.202:59190] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Fri Jun 06 11:41:06.742008 2025] [:error] [pid 22853:tid 22902] [client 209.38.208.202:59234] [client 209.38.208.202] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "aELT0m0wqOoF-qWHs--lZAAAAFM"]
[Fri Jun 06 11:41:07.059484 2025] [:error] [pid 22852:tid 22870] [client 209.38.208.202:59250] [client 209.38.208.202] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "aELT0zTUH3RlgF7dxbBdgwAAAA8"]
[Sat Jun 07 06:59:55.344427 2025] [:error] [pid 12351:tid 12353] [client 194.233.72.214:37488] [client 194.233.72.214] ModSecurity: Access denied with code 403 (phase 2). String match "/.profile" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/30_Apps_OtherApps.conf"] [line "6621"] [id "243320"] [rev "1"] [msg "COMODO WAF: Information disclosure vulnerability in Cloud Foundry PHP Buildpack (aka php-buildpack) before 4.3.18 and PHP Buildpack Cf-release before 242, as used in Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.6.38 and 1.7.x before 1.7.19 and other products (CVE-2016-6639)||edu.richinei.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "edu.richinei.com"] [uri "/.profile"] [unique_id "aEPja_KmGWsSQTeyk1mteAAAAQA"]
[Sat Jun 07 07:00:28.517823 2025] [:error] [pid 16781:tid 16803] [client 194.233.72.214:49164] [client 194.233.72.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "aEPjjLk6QmGAne7MfDckAAAAAE0"]
[Sat Jun 07 07:00:29.314539 2025] [:error] [pid 16760:tid 16787] [client 194.233.72.214:49170] [client 194.233.72.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/config/.env"] [unique_id "aEPjjRheKmTj3Ch4oLyuLgAAABg"]
[Sat Jun 07 07:00:30.031084 2025] [:error] [pid 16760:tid 16783] [client 194.233.72.214:49176] [client 194.233.72.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.production"] [unique_id "aEPjjhheKmTj3Ch4oLyuMAAAABQ"]
[Sat Jun 07 07:00:35.753850 2025] [:error] [pid 12351:tid 12372] [client 194.233.72.214:49638] [client 194.233.72.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.local"] [unique_id "aEPjk_KmGWsSQTeyk1mtuAAAARM"]
[Sat Jun 07 07:00:37.570374 2025] [:error] [pid 16781:tid 16801] [client 194.233.72.214:49650] [client 194.233.72.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/api/.env"] [unique_id "aEPjlbk6QmGAne7MfDckDwAAAEs"]
[Sat Jun 07 14:10:34.820107 2025] [:error] [pid 16760:tid 16767] [client 46.101.111.185:45938] [client 46.101.111.185] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aERIWhheKmTj3Ch4oLwGegAAAAU"]
[Sat Jun 07 14:10:40.112912 2025] [authz_core:error] [pid 3052:tid 3076] [client 46.101.111.185:46004] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Sat Jun 07 14:10:43.229982 2025] [:error] [pid 16760:tid 16770] [client 46.101.111.185:46032] [client 46.101.111.185] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "aERIYxheKmTj3Ch4oLwGewAAAAg"]
[Sat Jun 07 14:10:43.691867 2025] [:error] [pid 12351:tid 12368] [client 46.101.111.185:46038] [client 46.101.111.185] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "aERIY_KmGWsSQTeyk1k_YQAAAQ8"]
[Sat Jun 07 22:59:46.349635 2025] [core:error] [pid 12351:tid 12374] [client 20.171.207.167:46336] AH10244: invalid URI path (/public/theme/edulia/packages/magnific/%url%)
[Sun Jun 08 02:13:14.355902 2025] [:error] [pid 16760:tid 16784] [client 34.162.217.59:46250] [client 34.162.217.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/HEAD"] [unique_id "aETxuhheKmTj3Ch4oLxQSAAAABU"]
[Sun Jun 08 05:59:14.695754 2025] [:error] [pid 15003:tid 15046] [client 3.85.225.1:50706] [client 3.85.225.1] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "aEUmstgkQTveiN3Da25RCQAAAE0"]
[Sun Jun 08 10:45:04.071532 2025] [:error] [pid 15002:tid 15005] [client 45.144.212.129:37638] [client 45.144.212.129] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "aEVpsEVF81mGEiu3sAjFnQAAAAA"]
[Sun Jun 08 18:21:03.872459 2025] [:error] [pid 15031:tid 15060] [client 89.21.85.134:40520] [client 89.21.85.134] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "aEXUj0WFuWnb33UlU8KDowAAAIA"]
[Sun Jun 08 19:47:09.724887 2025] [:error] [pid 15002:tid 15022] [client 91.206.169.53:48148] [client 91.206.169.53] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "aEXovUVF81mGEiu3sAgNCwAAABE"]
[Sun Jun 08 22:32:08.281857 2025] [:error] [pid 15122:tid 15124] [client 93.123.109.101:34518] [client 93.123.109.101] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "aEYPaCatvz5ZoAauXICbcAAAAMA"]
[Sun Jun 08 22:32:09.151820 2025] [:error] [pid 15122:tid 15147] [client 93.123.109.101:34522] [client 93.123.109.101] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.save"] [unique_id "aEYPaSatvz5ZoAauXICbcQAAANc"]
[Sun Jun 08 22:32:10.086991 2025] [:error] [pid 10044:tid 10049] [client 93.123.109.101:34534] [client 93.123.109.101] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.prod"] [unique_id "aEYPavR0poKaUgaEqSmyXwAAAQM"]
[Sun Jun 08 22:32:10.936869 2025] [:error] [pid 15122:tid 15132] [client 93.123.109.101:34546] [client 93.123.109.101] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/api/.env"] [unique_id "aEYPaiatvz5ZoAauXICbcwAAAMg"]
[Sun Jun 08 22:32:12.302179 2025] [:error] [pid 15122:tid 15144] [client 93.123.109.101:34548] [client 93.123.109.101] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/dev/.env"] [unique_id "aEYPbCatvz5ZoAauXICbdQAAANQ"]
[Sun Jun 08 22:32:13.578067 2025] [:error] [pid 15122:tid 15143] [client 93.123.109.101:40068] [client 93.123.109.101] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/application/.env"] [unique_id "aEYPbSatvz5ZoAauXICbdwAAANM"]
[Sun Jun 08 22:32:18.362024 2025] [:error] [pid 15122:tid 15132] [client 93.123.109.101:40130] [client 93.123.109.101] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/backend/.env"] [unique_id "aEYPciatvz5ZoAauXICbgAAAAMg"]
[Sun Jun 08 22:32:18.966382 2025] [:error] [pid 15122:tid 15138] [client 93.123.109.101:40140] [client 93.123.109.101] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.example"] [unique_id "aEYPciatvz5ZoAauXICbgQAAAM4"]
[Sun Jun 08 22:32:19.571224 2025] [:error] [pid 15122:tid 15144] [client 93.123.109.101:40144] [client 93.123.109.101] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/admin/.env"] [unique_id "aEYPcyatvz5ZoAauXICbggAAANQ"]
[Mon Jun 09 00:32:44.407270 2025] [:error] [pid 15031:tid 15082] [client 212.102.33.212:25014] [client 212.102.33.212] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "aEYrrEWFuWnb33UlU8K67AAAAJY"]
[Mon Jun 09 01:04:01.765607 2025] [:error] [pid 15031:tid 15070] [client 167.71.81.114:38840] [client 167.71.81.114] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aEYzAUWFuWnb33UlU8LCowAAAIo"]
[Mon Jun 09 01:04:05.168298 2025] [authz_core:error] [pid 15003:tid 15048] [client 167.71.81.114:38880] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Mon Jun 09 01:04:06.853577 2025] [:error] [pid 15122:tid 15134] [client 167.71.81.114:38906] [client 167.71.81.114] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "aEYzBiatvz5ZoAauXICzjAAAAMo"]
[Mon Jun 09 01:04:07.084396 2025] [:error] [pid 10044:tid 10064] [client 167.71.81.114:38916] [client 167.71.81.114] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "aEYzB_R0poKaUgaEqSnUBgAAARI"]
[Mon Jun 09 01:14:50.117396 2025] [:error] [pid 15122:tid 15147] [client 159.89.12.166:38922] [client 159.89.12.166] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aEY1iiatvz5ZoAauXIC2kwAAANc"]
[Mon Jun 09 01:14:54.016194 2025] [authz_core:error] [pid 10044:tid 10061] [client 159.89.12.166:38984] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Mon Jun 09 01:14:56.194371 2025] [:error] [pid 15002:tid 15028] [client 159.89.12.166:53646] [client 159.89.12.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "aEY1kEVF81mGEiu3sAg3ZwAAABc"]
[Mon Jun 09 01:14:56.598518 2025] [:error] [pid 10044:tid 10054] [client 159.89.12.166:53650] [client 159.89.12.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "aEY1kPR0poKaUgaEqSnXWgAAAQg"]
[Mon Jun 09 03:08:19.114677 2025] [:error] [pid 15122:tid 15128] [client 3.85.225.1:47730] [client 3.85.225.1] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "aEZQIyatvz5ZoAauXIDRwQAAAMQ"]
[Mon Jun 09 20:50:21.264083 2025] [:error] [pid 2482:tid 2487] [client 31.56.56.156:33328] [client 31.56.56.156] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "aEdJDbafFIQlQ7ly459fOQAAAMM"]
[Tue Jun 10 07:28:13.275324 2025] [:error] [pid 6679:tid 6705] [client 194.233.72.214:50220] [client 194.233.72.214] ModSecurity: Access denied with code 403 (phase 2). String match "/.profile" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/30_Apps_OtherApps.conf"] [line "6621"] [id "243320"] [rev "1"] [msg "COMODO WAF: Information disclosure vulnerability in Cloud Foundry PHP Buildpack (aka php-buildpack) before 4.3.18 and PHP Buildpack Cf-release before 242, as used in Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.6.38 and 1.7.x before 1.7.19 and other products (CVE-2016-6639)||edu.richinei.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "edu.richinei.com"] [uri "/.profile"] [unique_id "aEfejVLZg8PfwiPRIXf9mwAAABc"]
[Tue Jun 10 07:28:41.972223 2025] [:error] [pid 6877:tid 6880] [client 194.233.72.214:33590] [client 194.233.72.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "aEfeqdLEv0oqCutTGYL27wAAAME"]
[Tue Jun 10 07:28:42.732940 2025] [:error] [pid 6877:tid 6879] [client 194.233.72.214:33598] [client 194.233.72.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/config/.env"] [unique_id "aEfeqtLEv0oqCutTGYL28gAAAMA"]
[Tue Jun 10 07:28:43.489437 2025] [:error] [pid 6708:tid 6757] [client 194.233.72.214:33608] [client 194.233.72.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.production"] [unique_id "aEfeqxEpwkog5V6a-J7frwAAAJQ"]
[Tue Jun 10 07:28:44.221122 2025] [:error] [pid 3350:tid 3375] [client 194.233.72.214:33614] [client 194.233.72.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.local"] [unique_id "aEferHDS-ng81KAySI-amwAAARU"]
[Tue Jun 10 07:28:50.989310 2025] [:error] [pid 6679:tid 6686] [client 194.233.72.214:55412] [client 194.233.72.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/api/.env"] [unique_id "aEfeslLZg8PfwiPRIXf95QAAAAQ"]
[Tue Jun 10 08:32:37.324585 2025] [:error] [pid 3350:tid 3374] [client 178.128.207.138:50228] [client 178.128.207.138] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aEftpXDS-ng81KAySI-xSwAAARQ"]
[Tue Jun 10 08:32:41.339933 2025] [authz_core:error] [pid 6877:tid 6893] [client 178.128.207.138:50280] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Tue Jun 10 08:32:43.324744 2025] [:error] [pid 3350:tid 3366] [client 178.128.207.138:57878] [client 178.128.207.138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "aEftq3DS-ng81KAySI-xWgAAAQw"]
[Tue Jun 10 08:32:43.627135 2025] [:error] [pid 3350:tid 3368] [client 178.128.207.138:57884] [client 178.128.207.138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "aEftq3DS-ng81KAySI-xWwAAAQ4"]
[Tue Jun 10 12:07:06.379277 2025] [:error] [pid 3350:tid 3365] [client 5.62.57.246:1330] [client 5.62.57.246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "aEgf6nDS-ng81KAySI_6hwAAAQs"]
[Tue Jun 10 15:16:11.090992 2025] [:error] [pid 6877:tid 6888] [client 185.177.72.106:11528] [client 185.177.72.106] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/HEAD"] [unique_id "aEhMO9LEv0oqCutTGYJ7AwAAAMk"]
[Tue Jun 10 15:16:14.767289 2025] [:error] [pid 6679:tid 6682] [client 185.177.72.106:32762] [client 185.177.72.106] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "aEhMPlLZg8PfwiPRIXdiFgAAAAA"]
[Tue Jun 10 15:16:15.933694 2025] [:error] [pid 6708:tid 6751] [client 185.177.72.106:44146] [client 185.177.72.106] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.bak"] [unique_id "aEhMPxEpwkog5V6a-J5N9QAAAI4"]
[Tue Jun 10 15:16:16.901564 2025] [:error] [pid 6680:tid 6734] [client 185.177.72.106:44148] [client 185.177.72.106] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.local"] [unique_id "aEhMQFjZ0w0C5-I-KbZ9SgAAAFg"]
[Tue Jun 10 15:16:17.871196 2025] [:error] [pid 6680:tid 6711] [client 185.177.72.106:44160] [client 185.177.72.106] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.prod"] [unique_id "aEhMQVjZ0w0C5-I-KbZ9TQAAAEE"]
[Tue Jun 10 15:16:18.686444 2025] [:error] [pid 3350:tid 3371] [client 185.177.72.106:44176] [client 185.177.72.106] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.stage"] [unique_id "aEhMQnDS-ng81KAySI814QAAARE"]
[Tue Jun 10 15:16:19.636326 2025] [:error] [pid 6679:tid 6701] [client 185.177.72.106:44190] [client 185.177.72.106] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/api/.env"] [unique_id "aEhMQ1LZg8PfwiPRIXdiIwAAABM"]
[Tue Jun 10 15:16:20.588540 2025] [:error] [pid 3350:tid 3378] [client 185.177.72.106:44196] [client 185.177.72.106] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "aEhMRHDS-ng81KAySI817QAAARg"]
[Wed Jun 11 02:19:32.172076 2025] [:error] [pid 3350:tid 3378] [client 167.99.210.137:59270] [client 167.99.210.137] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||edu.richinei.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "edu.richinei.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aEjntHDS-ng81KAySI_X0AAAARg"]
[Wed Jun 11 02:19:37.051467 2025] [authz_core:error] [pid 27431:tid 27441] [client 167.99.210.137:59322] AH01630: client denied by server configuration: /home/richine/edu.richinei.com/server-status
[Wed Jun 11 02:19:39.669168 2025] [:error] [pid 27210:tid 27219] [client 167.99.210.137:59350] [client 167.99.210.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "aEjnu2yV2jhb7SkaiEBC4AAAAYc"]
[Wed Jun 11 02:19:40.114916 2025] [:error] [pid 27493:tid 27515] [client 167.99.210.137:59366] [client 167.99.210.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "aEjnvIblTOwVRnNYSM-zpwAAAlQ"]
[Wed Jun 11 09:10:22.089548 2025] [:error] [pid 25297:tid 25343] [client 196.251.88.26:57314] [client 196.251.88.26] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "aElH_sfuc8k6ifTLUnlMMgAAAFA"]
[Wed Jun 11 10:11:35.471274 2025] [:error] [pid 25325:tid 25356] [client 185.177.72.106:63810] [client 185.177.72.106] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/HEAD"] [unique_id "aElWVzdzDk1XEFXAFwMFwAAAAII"]
[Wed Jun 11 10:11:39.032754 2025] [:error] [pid 25296:tid 25300] [client 185.177.72.106:36180] [client 185.177.72.106] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "aElWWyLlZ2fxeM2_WVzpJgAAAAE"]
[Wed Jun 11 10:11:39.962038 2025] [:error] [pid 25413:tid 25420] [client 185.177.72.106:36238] [client 185.177.72.106] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.bak"] [unique_id "aElWW1pdHJL7gt2tPCp6pQAAAMU"]
[Wed Jun 11 10:11:40.915136 2025] [:error] [pid 25296:tid 25315] [client 185.177.72.106:36262] [client 185.177.72.106] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.local"] [unique_id "aElWXCLlZ2fxeM2_WVzpJwAAABA"]
[Wed Jun 11 10:11:41.851622 2025] [:error] [pid 3657:tid 3680] [client 185.177.72.106:36284] [client 185.177.72.106] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.prod"] [unique_id "aElWXXwK-THFJlwyhC_spgAAARU"]
[Wed Jun 11 10:11:42.779305 2025] [:error] [pid 25296:tid 25311] [client 185.177.72.106:33606] [client 185.177.72.106] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.stage"] [unique_id "aElWXiLlZ2fxeM2_WVzpKwAAAAw"]
[Wed Jun 11 10:11:43.545099 2025] [:error] [pid 25325:tid 25366] [client 185.177.72.106:33622] [client 185.177.72.106] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/api/.env"] [unique_id "aElWXzdzDk1XEFXAFwMFxAAAAIw"]
[Wed Jun 11 10:11:44.324013 2025] [:error] [pid 25325:tid 25364] [client 185.177.72.106:33628] [client 185.177.72.106] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.git/config"] [unique_id "aElWYDdzDk1XEFXAFwMFxQAAAIo"]
[Wed Jun 11 17:09:06.483186 2025] [:error] [pid 25413:tid 25418] [client 194.233.72.214:50956] [client 194.233.72.214] ModSecurity: Access denied with code 403 (phase 2). String match "/.profile" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/30_Apps_OtherApps.conf"] [line "6621"] [id "243320"] [rev "1"] [msg "COMODO WAF: Information disclosure vulnerability in Cloud Foundry PHP Buildpack (aka php-buildpack) before 4.3.18 and PHP Buildpack Cf-release before 242, as used in Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.6.38 and 1.7.x before 1.7.19 and other products (CVE-2016-6639)||edu.richinei.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "edu.richinei.com"] [uri "/.profile"] [unique_id "aEm4MlpdHJL7gt2tPCrjTAAAAMM"]
[Wed Jun 11 17:09:26.232800 2025] [:error] [pid 25413:tid 25433] [client 194.233.72.214:51058] [client 194.233.72.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env"] [unique_id "aEm4RlpdHJL7gt2tPCrjWAAAANI"]
[Wed Jun 11 17:09:31.981007 2025] [:error] [pid 25296:tid 25308] [client 194.233.72.214:51060] [client 194.233.72.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/config/.env"] [unique_id "aEm4SyLlZ2fxeM2_WVw3mAAAAAk"]
[Wed Jun 11 17:09:32.721560 2025] [:error] [pid 3657:tid 3666] [client 194.233.72.214:51064] [client 194.233.72.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.production"] [unique_id "aEm4THwK-THFJlwyhC9uogAAAQc"]
[Wed Jun 11 17:09:33.471520 2025] [:error] [pid 3657:tid 3678] [client 194.233.72.214:51072] [client 194.233.72.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/.env.local"] [unique_id "aEm4TXwK-THFJlwyhC9upAAAARM"]
[Wed Jun 11 17:09:45.272854 2025] [:error] [pid 25325:tid 25355] [client 194.233.72.214:45974] [client 194.233.72.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edu.richinei.com"] [uri "/api/.env"] [unique_id "aEm4WTdzDk1XEFXAFwNdXgAAAIE"]