[Tue Sep 01 03:22:20.143277 2026] [:error] [pid 617:tid 140446302926592] [client 35.185.87.253:47660] [client 35.185.87.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env.dev"] [unique_id "apaLPM8nTxDPjwuMBwXWkAAAAhM"]
[Tue Sep 01 03:22:20.143277 2026] [:error] [pid 677:tid 140446353282816] [client 35.185.87.253:47686] [client 35.185.87.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env.prod"] [unique_id "apaLPDwdf4ngaA5uWQ07wQAAAo0"]
[Tue Sep 01 03:22:20.145163 2026] [:error] [pid 708:tid 140446428817152] [client 35.185.87.253:47760] [client 35.185.87.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env.local"] [unique_id "apaLPCJE4SYzHzgHHvRJhQAAAwQ"]
[Tue Sep 01 03:22:20.145164 2026] [:error] [pid 17952:tid 140446420424448] [client 35.185.87.253:47654] [client 35.185.87.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env.example"] [unique_id "apaLPGJizQlLkjAJlwIe2wAAAcU"]
[Tue Sep 01 03:22:20.146927 2026] [:error] [pid 708:tid 140446277748480] [client 35.185.87.253:47750] [client 35.185.87.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env.old"] [unique_id "apaLPCJE4SYzHzgHHvRJhgAAAxY"]
[Tue Sep 01 03:22:20.147068 2026] [:error] [pid 677:tid 140446420424448] [client 35.185.87.253:47802] [client 35.185.87.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env"] [unique_id "apaLPDwdf4ngaA5uWQ07xAAAAoU"]
[Tue Sep 01 03:22:20.147377 2026] [:error] [pid 738:tid 140446302926592] [client 35.185.87.253:47688] [client 35.185.87.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env.bak"] [unique_id "apaLPCG6Yu47bFuDRpOcQgAAA1M"]
[Tue Sep 01 03:22:20.148136 2026] [:error] [pid 708:tid 140446286141184] [client 35.185.87.253:47706] [client 35.185.87.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env.save"] [unique_id "apaLPCJE4SYzHzgHHvRJhwAAAxU"]
[Tue Sep 01 03:22:20.149072 2026] [:error] [pid 738:tid 140446344890112] [client 35.185.87.253:47714] [client 35.185.87.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/wp-config.php.bak"] [unique_id "apaLPCG6Yu47bFuDRpOcQwAAA04"]
[Tue Sep 01 03:22:20.149362 2026] [:error] [pid 708:tid 140446517597952] [client 35.185.87.253:47740] [client 35.185.87.253] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||menabern.com|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "menabern.com"] [uri "/storage/logs/laravel.log"] [unique_id "apaLPCJE4SYzHzgHHvRJhAAAAwI"]
[Tue Sep 01 03:22:20.150506 2026] [:error] [pid 708:tid 140446534383360] [client 35.185.87.253:47724] [client 35.185.87.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/wp-config.php.swp"] [unique_id "apaLPCJE4SYzHzgHHvRJiQAAAwA"]
[Tue Sep 01 03:22:20.151745 2026] [:error] [pid 677:tid 140446428817152] [client 35.185.87.253:47820] [client 35.185.87.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env.backup"] [unique_id "apaLPDwdf4ngaA5uWQ07xgAAAoQ"]
[Tue Sep 01 03:22:20.152167 2026] [:error] [pid 771:tid 140446277748480] [client 35.185.87.253:47788] [client 35.185.87.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env.production"] [unique_id "apaLPFxBU0smRYQlcQnt2QAAA5Y"]
[Tue Sep 01 03:22:20.159483 2026] [:error] [pid 677:tid 140446517597952] [client 35.185.87.253:47772] [client 35.185.87.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/wp-config.php~"] [unique_id "apaLPDwdf4ngaA5uWQ07xwAAAoI"]
[Tue Sep 01 03:22:29.302989 2026] [:error] [pid 17847:tid 140446302926592] [client 35.185.87.253:49148] [client 35.185.87.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env"] [unique_id "apaLRahRGm_Covn2S36Q_AAAARM"]
[Tue Sep 01 03:22:29.320527 2026] [:error] [pid 804:tid 140446294533888] [client 35.185.87.253:49202] [client 35.185.87.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env;.png"] [unique_id "apaLRRnlua1IzmdjymZHmAAAA9Q"]
[Tue Sep 01 03:22:29.320536 2026] [:error] [pid 804:tid 140446403639040] [client 35.185.87.253:49160] [client 35.185.87.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env/"] [unique_id "apaLRRnlua1IzmdjymZHlwAAA8c"]
[Tue Sep 01 03:22:29.321845 2026] [:error] [pid 708:tid 140446361675520] [client 35.185.87.253:49172] [client 35.185.87.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env."] [unique_id "apaLRSJE4SYzHzgHHvRJjgAAAww"]
[Tue Sep 01 03:22:29.322950 2026] [:error] [pid 17847:tid 140446378460928] [client 35.185.87.253:49210] [client 35.185.87.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.ENV"] [unique_id "apaLRahRGm_Covn2S36Q_QAAAQo"]
[Tue Sep 01 03:39:53.205857 2026] [authz_core:error] [pid 9194:tid 140353273288448] [client 192.64.118.67:41062] AH01630: client denied by server configuration: /home/menabern/public_html/xmlrpc.php
[Tue Sep 01 03:39:53.227906 2026] [proxy_fcgi:error] [pid 6411:tid 140353348822784] [client 192.64.118.67:41064] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 03:39:53.233123 2026] [authz_core:error] [pid 9194:tid 140353264895744] [client 192.64.118.67:41070] AH01630: client denied by server configuration: /home/menabern/public_html/xmlrpc.php
[Tue Sep 01 03:39:53.267504 2026] [proxy_fcgi:error] [pid 9194:tid 140353290073856] [client 192.64.118.67:41078] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 03:48:20.932948 2026] [:error] [pid 6091:tid 140353206146816] [client 35.221.82.14:45732] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/.git/config"] [unique_id "apaRVMkVYOXruxV21N7JwgAAAJU"]
[Tue Sep 01 03:48:22.237213 2026] [:error] [pid 6090:tid 140353443960576] [client 35.221.82.14:38654] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/.env"] [unique_id "apaRVrPf1VxWhFqgvWuvcAAAAEE"]
[Tue Sep 01 03:48:23.280681 2026] [:error] [pid 6411:tid 140353189361408] [client 35.221.82.14:38668] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/.env.local"] [unique_id "apaRV6-5XxGfLhlq8xlKCAAAANc"]
[Tue Sep 01 03:48:24.344487 2026] [:error] [pid 6091:tid 140353214539520] [client 35.221.82.14:38676] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/.env.production"] [unique_id "apaRWMkVYOXruxV21N7JwwAAAJQ"]
[Tue Sep 01 03:48:25.380501 2026] [:error] [pid 6090:tid 140353197754112] [client 35.221.82.14:38682] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/.env.staging"] [unique_id "apaRWbPf1VxWhFqgvWuvcQAAAFY"]
[Tue Sep 01 03:48:26.407191 2026] [:error] [pid 9194:tid 140353290073856] [client 35.221.82.14:38684] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/.env.development"] [unique_id "apaRWodqWCmIAB5WEG8JFgAAAQs"]
[Tue Sep 01 03:48:27.434923 2026] [:error] [pid 6090:tid 140353222932224] [client 35.221.82.14:38692] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/.env.test"] [unique_id "apaRW7Pf1VxWhFqgvWuvcgAAAFM"]
[Tue Sep 01 03:48:28.465353 2026] [:error] [pid 6089:tid 140353443960576] [client 35.221.82.14:38708] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/.env.remote"] [unique_id "apaRXJjeM2TaVrIYSc-OggAAAAE"]
[Tue Sep 01 03:48:29.489292 2026] [:error] [pid 6089:tid 140353290073856] [client 35.221.82.14:38716] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/.env.bak"] [unique_id "apaRXZjeM2TaVrIYSc-OhAAAAAs"]
[Tue Sep 01 03:48:30.514310 2026] [:error] [pid 6090:tid 140353248110336] [client 35.221.82.14:38722] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/.env.backup"] [unique_id "apaRXrPf1VxWhFqgvWuvcwAAAFA"]
[Tue Sep 01 03:48:31.540311 2026] [:error] [pid 9194:tid 140353298466560] [client 35.221.82.14:47430] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/.env.save"] [unique_id "apaRX4dqWCmIAB5WEG8JGwAAAQo"]
[Tue Sep 01 03:48:32.572707 2026] [:error] [pid 9194:tid 140353323644672] [client 35.221.82.14:47438] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/.env.old"] [unique_id "apaRYIdqWCmIAB5WEG8JHQAAAQc"]
[Tue Sep 01 03:48:33.593468 2026] [:error] [pid 9194:tid 140353332037376] [client 35.221.82.14:47448] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/.env.sample"] [unique_id "apaRYYdqWCmIAB5WEG8JHwAAAQY"]
[Tue Sep 01 03:48:34.624205 2026] [:error] [pid 9194:tid 140353206146816] [client 35.221.82.14:47452] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/.env.example"] [unique_id "apaRYodqWCmIAB5WEG8JJQAAARU"]
[Tue Sep 01 03:48:35.672201 2026] [:error] [pid 6089:tid 140353452353280] [client 35.221.82.14:47460] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/.env.dev"] [unique_id "apaRY5jeM2TaVrIYSc-OiwAAAAA"]
[Tue Sep 01 03:48:36.703525 2026] [:error] [pid 9194:tid 140353306859264] [client 35.221.82.14:47472] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/.env.prod"] [unique_id "apaRZIdqWCmIAB5WEG8JRQAAAQk"]
[Tue Sep 01 03:48:37.747398 2026] [:error] [pid 6091:tid 140353357215488] [client 35.221.82.14:47478] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/.env.stage"] [unique_id "apaRZckVYOXruxV21N7JyQAAAIM"]
[Tue Sep 01 03:48:38.780231 2026] [:error] [pid 6090:tid 140353214539520] [client 35.221.82.14:47482] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/.env.ci"] [unique_id "apaRZrPf1VxWhFqgvWuvgwAAAFQ"]
[Tue Sep 01 03:48:39.853527 2026] [:error] [pid 9194:tid 140353452353280] [client 35.221.82.14:47498] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/.env.docker"] [unique_id "apaRZ4dqWCmIAB5WEG8JWgAAAQA"]
[Tue Sep 01 03:48:40.905781 2026] [:error] [pid 6091:tid 140353290073856] [client 35.221.82.14:47502] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/.env.live"] [unique_id "apaRaMkVYOXruxV21N7JzgAAAIs"]
[Tue Sep 01 03:48:41.948479 2026] [:error] [pid 6091:tid 140353323644672] [client 35.221.82.14:49114] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/.env.preprod"] [unique_id "apaRackVYOXruxV21N7JzwAAAIc"]
[Tue Sep 01 03:48:42.975028 2026] [:error] [pid 9194:tid 140353340430080] [client 35.221.82.14:49116] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/.env.uat"] [unique_id "apaRaodqWCmIAB5WEG8JZwAAAQU"]
[Tue Sep 01 03:48:44.019512 2026] [:error] [pid 6091:tid 140353222932224] [client 35.221.82.14:49120] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/.env.dist"] [unique_id "apaRbMkVYOXruxV21N7J0QAAAJM"]
[Tue Sep 01 03:48:45.111255 2026] [:error] [pid 6090:tid 140353298466560] [client 35.221.82.14:49136] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/.env.swp"] [unique_id "apaRbbPf1VxWhFqgvWuviQAAAEo"]
[Tue Sep 01 03:48:46.151513 2026] [:error] [pid 6091:tid 140353180968704] [client 35.221.82.14:49150] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/.env~"] [unique_id "apaRbskVYOXruxV21N7J0wAAAJg"]
[Tue Sep 01 03:48:47.213302 2026] [:error] [pid 6091:tid 140353443960576] [client 35.221.82.14:49156] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/.env1"] [unique_id "apaRb8kVYOXruxV21N7J1AAAAIE"]
[Tue Sep 01 03:48:48.242820 2026] [:error] [pid 9194:tid 140353264895744] [client 35.221.82.14:49168] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/.env2"] [unique_id "apaRcIdqWCmIAB5WEG8JeQAAAQ4"]
[Tue Sep 01 03:48:49.283402 2026] [:error] [pid 6090:tid 140353256503040] [client 35.221.82.14:49180] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/.env_copy"] [unique_id "apaRcbPf1VxWhFqgvWuvjgAAAE8"]
[Tue Sep 01 03:48:50.315505 2026] [:error] [pid 6411:tid 140353256503040] [client 35.221.82.14:49188] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/.env.txt"] [unique_id "apaRcq-5XxGfLhlq8xlKSAAAAM8"]
[Tue Sep 01 03:48:51.360599 2026] [:error] [pid 9194:tid 140353214539520] [client 35.221.82.14:49190] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/.env.json"] [unique_id "apaRc4dqWCmIAB5WEG8JsAAAARQ"]
[Tue Sep 01 03:48:52.408963 2026] [:error] [pid 6089:tid 140353306859264] [client 35.221.82.14:43720] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/.env.yaml"] [unique_id "apaRdJjeM2TaVrIYSc-OrQAAAAk"]
[Tue Sep 01 03:48:53.465423 2026] [:error] [pid 9194:tid 140353357215488] [client 35.221.82.14:43728] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/.env.yml"] [unique_id "apaRdYdqWCmIAB5WEG8JwwAAAQM"]
[Tue Sep 01 03:48:54.541301 2026] [:error] [pid 9194:tid 140353206146816] [client 35.221.82.14:43740] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/app/.env"] [unique_id "apaRdodqWCmIAB5WEG8JxwAAARU"]
[Tue Sep 01 03:48:55.633602 2026] [:error] [pid 6411:tid 140353231324928] [client 35.221.82.14:43744] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/apps/.env"] [unique_id "apaRd6-5XxGfLhlq8xlKVQAAANI"]
[Tue Sep 01 03:48:56.668383 2026] [:error] [pid 6091:tid 140353348822784] [client 35.221.82.14:43752] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/api/.env"] [unique_id "apaReMkVYOXruxV21N7J7QAAAIQ"]
[Tue Sep 01 03:48:57.720350 2026] [:error] [pid 6090:tid 140353315251968] [client 35.221.82.14:43760] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/web/.env"] [unique_id "apaRebPf1VxWhFqgvWuvoAAAAEg"]
[Tue Sep 01 03:48:58.744381 2026] [:error] [pid 6090:tid 140353340430080] [client 35.221.82.14:43774] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/site/.env"] [unique_id "apaRerPf1VxWhFqgvWuvoQAAAEU"]
[Tue Sep 01 03:48:59.781507 2026] [:error] [pid 6411:tid 140353348822784] [client 35.221.82.14:43780] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/public/.env"] [unique_id "apaRe6-5XxGfLhlq8xlKVwAAAMQ"]
[Tue Sep 01 03:49:00.820957 2026] [:error] [pid 9194:tid 140353281681152] [client 35.221.82.14:43782] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/admin/.env"] [unique_id "apaRfIdqWCmIAB5WEG8JzgAAAQw"]
[Tue Sep 01 03:49:01.857145 2026] [:error] [pid 6091:tid 140353222932224] [client 35.221.82.14:40252] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/backend/.env"] [unique_id "apaRfckVYOXruxV21N7J7wAAAJM"]
[Tue Sep 01 03:49:02.909830 2026] [:error] [pid 9194:tid 140353340430080] [client 35.221.82.14:40254] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/server/.env"] [unique_id "apaRfodqWCmIAB5WEG8J0QAAAQU"]
[Tue Sep 01 03:49:03.960804 2026] [:error] [pid 6411:tid 140353189361408] [client 35.221.82.14:40256] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/frontend/.env"] [unique_id "apaRf6-5XxGfLhlq8xlKWQAAANc"]
[Tue Sep 01 03:49:04.991612 2026] [:error] [pid 6089:tid 140353214539520] [client 35.221.82.14:40264] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/src/.env"] [unique_id "apaRgJjeM2TaVrIYSc-OsAAAABQ"]
[Tue Sep 01 03:49:06.032351 2026] [:error] [pid 6089:tid 140353323644672] [client 35.221.82.14:40276] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/core/.env"] [unique_id "apaRgpjeM2TaVrIYSc-OsQAAAAc"]
[Tue Sep 01 03:49:07.081190 2026] [:error] [pid 9194:tid 140353281681152] [client 35.221.82.14:40284] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/core/app/.env"] [unique_id "apaRg4dqWCmIAB5WEG8J1AAAAQw"]
[Tue Sep 01 03:49:08.123300 2026] [:error] [pid 6090:tid 140353273288448] [client 35.221.82.14:40286] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/config/.env"] [unique_id "apaRhLPf1VxWhFqgvWuvpgAAAE0"]
[Tue Sep 01 03:49:09.165139 2026] [:error] [pid 6090:tid 140353214539520] [client 35.221.82.14:40294] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/private/.env"] [unique_id "apaRhbPf1VxWhFqgvWuvpwAAAFQ"]
[Tue Sep 01 03:49:10.211491 2026] [:error] [pid 9194:tid 140353180968704] [client 35.221.82.14:40296] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/application/.env"] [unique_id "apaRhodqWCmIAB5WEG8J1wAAARg"]
[Tue Sep 01 03:49:11.242165 2026] [:error] [pid 6411:tid 140353443960576] [client 35.221.82.14:40310] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/bootstrap/.env"] [unique_id "apaRh6-5XxGfLhlq8xlKWgAAAME"]
[Tue Sep 01 03:49:12.321335 2026] [:error] [pid 9194:tid 140353222932224] [client 35.221.82.14:41268] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/database/.env"] [unique_id "apaRiIdqWCmIAB5WEG8J2gAAARM"]
[Tue Sep 01 03:49:13.457863 2026] [:error] [pid 9194:tid 140353357215488] [client 35.221.82.14:41274] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/storage/.env"] [unique_id "apaRiYdqWCmIAB5WEG8J2wAAAQM"]
[Tue Sep 01 03:49:14.509221 2026] [:error] [pid 6091:tid 140353315251968] [client 35.221.82.14:41284] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/var/www/.env"] [unique_id "apaRiskVYOXruxV21N7J8wAAAIg"]
[Tue Sep 01 03:49:15.577037 2026] [:error] [pid 9194:tid 140353264895744] [client 35.221.82.14:41296] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/var/www/html/.env"] [unique_id "apaRi4dqWCmIAB5WEG8J3QAAAQ4"]
[Tue Sep 01 03:49:16.673702 2026] [:error] [pid 9194:tid 140353340430080] [client 35.221.82.14:41298] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/current/.env"] [unique_id "apaRjIdqWCmIAB5WEG8J3wAAAQU"]
[Tue Sep 01 03:49:17.777085 2026] [:error] [pid 6089:tid 140353189361408] [client 35.221.82.14:41308] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/release/.env"] [unique_id "apaRjZjeM2TaVrIYSc-OswAAABc"]
[Tue Sep 01 03:49:18.857419 2026] [:error] [pid 9194:tid 140353256503040] [client 35.221.82.14:41314] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/releases/.env"] [unique_id "apaRjodqWCmIAB5WEG8J4QAAAQ8"]
[Tue Sep 01 03:49:19.919220 2026] [:error] [pid 9194:tid 140353443960576] [client 35.221.82.14:41330] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/shared/.env"] [unique_id "apaRj4dqWCmIAB5WEG8J4gAAAQE"]
[Tue Sep 01 03:49:20.983221 2026] [:error] [pid 6411:tid 140353222932224] [client 35.221.82.14:41332] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/deploy/.env"] [unique_id "apaRkK-5XxGfLhlq8xlKXwAAANM"]
[Tue Sep 01 03:49:22.058179 2026] [:error] [pid 6089:tid 140353206146816] [client 35.221.82.14:59256] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/build/.env"] [unique_id "apaRkpjeM2TaVrIYSc-OxwAAABU"]
[Tue Sep 01 03:49:26.139288 2026] [:error] [pid 6091:tid 140353273288448] [client 35.221.82.14:59270] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/public_html/.env"] [unique_id "apaRlskVYOXruxV21N7KCwAAAI0"]
[Tue Sep 01 03:49:27.204141 2026] [:error] [pid 6411:tid 140353197754112] [client 35.221.82.14:59272] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/htdocs/.env"] [unique_id "apaRl6-5XxGfLhlq8xlKeAAAANY"]
[Tue Sep 01 03:49:28.284580 2026] [:error] [pid 6091:tid 140353357215488] [client 35.221.82.14:59284] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/www/.env"] [unique_id "apaRmMkVYOXruxV21N7KDgAAAIM"]
[Tue Sep 01 03:49:29.390055 2026] [:error] [pid 6411:tid 140353298466560] [client 35.221.82.14:59292] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/html/.env"] [unique_id "apaRma-5XxGfLhlq8xlKewAAAMo"]
[Tue Sep 01 03:49:30.500741 2026] [:error] [pid 9194:tid 140353273288448] [client 35.221.82.14:59302] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/live/.env"] [unique_id "apaRmodqWCmIAB5WEG8KPAAAAQ0"]
[Tue Sep 01 03:49:31.569627 2026] [:error] [pid 9194:tid 140353214539520] [client 35.221.82.14:43166] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/prod/.env"] [unique_id "apaRm4dqWCmIAB5WEG8KQAAAARQ"]
[Tue Sep 01 03:49:32.657322 2026] [:error] [pid 9194:tid 140353298466560] [client 35.221.82.14:43180] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/dev/.env"] [unique_id "apaRnIdqWCmIAB5WEG8KRgAAAQo"]
[Tue Sep 01 03:49:33.728869 2026] [:error] [pid 9194:tid 140353340430080] [client 35.221.82.14:43184] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/staging/.env"] [unique_id "apaRnYdqWCmIAB5WEG8KWgAAAQU"]
[Tue Sep 01 03:49:34.882011 2026] [:error] [pid 9194:tid 140353256503040] [client 35.221.82.14:43192] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/opt/.env"] [unique_id "apaRnodqWCmIAB5WEG8KdAAAAQ8"]
[Tue Sep 01 03:49:35.939931 2026] [:error] [pid 9194:tid 140353315251968] [client 35.221.82.14:43206] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/laravel/.env"] [unique_id "apaRn4dqWCmIAB5WEG8KfAAAAQg"]
[Tue Sep 01 03:49:36.989043 2026] [:error] [pid 9194:tid 140353222932224] [client 35.221.82.14:43210] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/symfony/.env"] [unique_id "apaRoIdqWCmIAB5WEG8KigAAARM"]
[Tue Sep 01 03:49:38.083254 2026] [:error] [pid 6089:tid 140353248110336] [client 35.221.82.14:43224] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/wordpress/.env"] [unique_id "apaRopjeM2TaVrIYSc-O1wAAABA"]
[Tue Sep 01 03:49:39.146340 2026] [:error] [pid 9194:tid 140353197754112] [client 35.221.82.14:43230] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/wp/.env"] [unique_id "apaRo4dqWCmIAB5WEG8KowAAARY"]
[Tue Sep 01 03:49:40.196830 2026] [:error] [pid 9194:tid 140353281681152] [client 35.221.82.14:43232] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/cms/.env"] [unique_id "apaRpIdqWCmIAB5WEG8KrgAAAQw"]
[Tue Sep 01 03:49:41.254168 2026] [:error] [pid 6411:tid 140353452353280] [client 35.221.82.14:43242] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/drupal/.env"] [unique_id "apaRpa-5XxGfLhlq8xlKtwAAAMA"]
[Tue Sep 01 03:49:42.320937 2026] [:error] [pid 9194:tid 140353323644672] [client 35.221.82.14:57674] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/joomla/.env"] [unique_id "apaRpodqWCmIAB5WEG8KvwAAAQc"]
[Tue Sep 01 03:49:43.363446 2026] [:error] [pid 9194:tid 140353248110336] [client 35.221.82.14:57678] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/magento/.env"] [unique_id "apaRp4dqWCmIAB5WEG8KwwAAARA"]
[Tue Sep 01 03:49:44.428726 2026] [:error] [pid 9194:tid 140353452353280] [client 35.221.82.14:57690] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/shopify/.env"] [unique_id "apaRqIdqWCmIAB5WEG8KxwAAAQA"]
[Tue Sep 01 03:49:45.499818 2026] [:error] [pid 6411:tid 140353298466560] [client 35.221.82.14:57706] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/prestashop/.env"] [unique_id "apaRqa-5XxGfLhlq8xlKygAAAMo"]
[Tue Sep 01 03:49:46.563708 2026] [:error] [pid 6091:tid 140353273288448] [client 35.221.82.14:57710] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/codeigniter/.env"] [unique_id "apaRqskVYOXruxV21N7KOgAAAI0"]
[Tue Sep 01 03:49:47.609081 2026] [:error] [pid 6091:tid 140353206146816] [client 35.221.82.14:57724] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/cakephp/.env"] [unique_id "apaRq8kVYOXruxV21N7KOwAAAJU"]
[Tue Sep 01 03:49:48.649476 2026] [:error] [pid 6411:tid 140353273288448] [client 35.221.82.14:57740] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/zend/.env"] [unique_id "apaRrK-5XxGfLhlq8xlKzAAAAM0"]
[Tue Sep 01 03:49:49.720231 2026] [:error] [pid 9194:tid 140353281681152] [client 35.221.82.14:57744] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/yii/.env"] [unique_id "apaRrYdqWCmIAB5WEG8K9AAAAQw"]
[Tue Sep 01 03:49:50.788403 2026] [:error] [pid 9194:tid 140353443960576] [client 35.221.82.14:57750] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/laravel5/.env"] [unique_id "apaRrodqWCmIAB5WEG8LBAAAAQE"]
[Tue Sep 01 03:49:51.861319 2026] [:error] [pid 6091:tid 140353239717632] [client 35.221.82.14:44784] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/v1/.env"] [unique_id "apaRr8kVYOXruxV21N7KUwAAAJE"]
[Tue Sep 01 03:49:52.950144 2026] [:error] [pid 6411:tid 140353435567872] [client 35.221.82.14:44786] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/v2/.env"] [unique_id "apaRsK-5XxGfLhlq8xlK0gAAAMI"]
[Tue Sep 01 03:49:53.989968 2026] [:error] [pid 9194:tid 140353332037376] [client 35.221.82.14:44798] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/v3/.env"] [unique_id "apaRsYdqWCmIAB5WEG8LEAAAAQY"]
[Tue Sep 01 03:49:55.040305 2026] [:error] [pid 6411:tid 140353239717632] [client 35.221.82.14:44804] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/api/v1/.env"] [unique_id "apaRs6-5XxGfLhlq8xlK2AAAANE"]
[Tue Sep 01 03:49:56.091578 2026] [:error] [pid 9194:tid 140353239717632] [client 35.221.82.14:44816] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/api/v2/.env"] [unique_id "apaRtIdqWCmIAB5WEG8LFAAAARE"]
[Tue Sep 01 03:49:57.202610 2026] [:error] [pid 6411:tid 140353206146816] [client 35.221.82.14:44830] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/rest/.env"] [unique_id "apaRta-5XxGfLhlq8xlK4QAAANU"]
[Tue Sep 01 03:49:58.275365 2026] [:error] [pid 6089:tid 140353206146816] [client 35.221.82.14:44840] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/graphql/.env"] [unique_id "apaRtpjeM2TaVrIYSc-PBgAAABU"]
[Tue Sep 01 03:49:59.318899 2026] [:error] [pid 6089:tid 140353189361408] [client 35.221.82.14:44856] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/gateway/.env"] [unique_id "apaRt5jeM2TaVrIYSc-PCQAAABc"]
[Tue Sep 01 03:50:00.373514 2026] [:error] [pid 6411:tid 140353281681152] [client 35.221.82.14:44866] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/microservice/.env"] [unique_id "apaRuK-5XxGfLhlq8xlK6gAAAMw"]
[Tue Sep 01 03:50:01.412796 2026] [:error] [pid 6411:tid 140353298466560] [client 35.221.82.14:53408] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/service/.env"] [unique_id "apaRua-5XxGfLhlq8xlK8gAAAMo"]
[Tue Sep 01 03:50:02.453460 2026] [:error] [pid 6090:tid 140353273288448] [client 35.221.82.14:53422] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/api/v3/.env"] [unique_id "apaRurPf1VxWhFqgvWuwCAAAAE0"]
[Tue Sep 01 03:50:03.500087 2026] [:error] [pid 6091:tid 140353443960576] [client 35.221.82.14:53434] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/api/dev/.env"] [unique_id "apaRu8kVYOXruxV21N7KcAAAAIE"]
[Tue Sep 01 03:50:04.552294 2026] [:error] [pid 6411:tid 140353348822784] [client 35.221.82.14:53442] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/api/staging/.env"] [unique_id "apaRvK-5XxGfLhlq8xlLEgAAAMQ"]
[Tue Sep 01 03:50:05.588411 2026] [:error] [pid 6090:tid 140353197754112] [client 35.221.82.14:53446] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/vendor/.env"] [unique_id "apaRvbPf1VxWhFqgvWuwEwAAAFY"]
[Tue Sep 01 03:50:06.634496 2026] [:error] [pid 6411:tid 140353332037376] [client 35.221.82.14:53458] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/lib/.env"] [unique_id "apaRvq-5XxGfLhlq8xlLFgAAAMY"]
[Tue Sep 01 03:50:07.665234 2026] [:error] [pid 6411:tid 140353323644672] [client 35.221.82.14:53472] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/resources/.env"] [unique_id "apaRv6-5XxGfLhlq8xlLGgAAAMc"]
[Tue Sep 01 03:50:08.720293 2026] [:error] [pid 9194:tid 140353290073856] [client 35.221.82.14:53480] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/assets/.env"] [unique_id "apaRwIdqWCmIAB5WEG8LdwAAAQs"]
[Tue Sep 01 03:50:09.750032 2026] [:error] [pid 6090:tid 140353340430080] [client 35.221.82.14:53492] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/uploads/.env"] [unique_id "apaRwbPf1VxWhFqgvWuwIAAAAEU"]
[Tue Sep 01 03:50:10.854962 2026] [:error] [pid 6090:tid 140353435567872] [client 35.221.82.14:53508] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/internal/.env"] [unique_id "apaRwrPf1VxWhFqgvWuwLAAAAEI"]
[Tue Sep 01 03:50:11.914311 2026] [:error] [pid 9194:tid 140353443960576] [client 35.221.82.14:35986] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/tools/.env"] [unique_id "apaRw4dqWCmIAB5WEG8LhgAAAQE"]
[Tue Sep 01 03:50:12.973324 2026] [:error] [pid 6091:tid 140353239717632] [client 35.221.82.14:35992] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/scripts/.env"] [unique_id "apaRxMkVYOXruxV21N7KiAAAAJE"]
[Tue Sep 01 03:50:14.081673 2026] [:error] [pid 6090:tid 140353435567872] [client 35.221.82.14:36008] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/bin/.env"] [unique_id "apaRxrPf1VxWhFqgvWuwWAAAAEI"]
[Tue Sep 01 03:50:15.126155 2026] [:error] [pid 6090:tid 140353222932224] [client 35.221.82.14:36022] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/sbin/.env"] [unique_id "apaRx7Pf1VxWhFqgvWuwYwAAAFM"]
[Tue Sep 01 03:50:16.162836 2026] [:error] [pid 6091:tid 140353222932224] [client 35.221.82.14:36036] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/local/.env"] [unique_id "apaRyMkVYOXruxV21N7KlgAAAJM"]
[Tue Sep 01 03:50:17.213795 2026] [:error] [pid 6411:tid 140353180968704] [client 35.221.82.14:36044] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/portal/.env"] [unique_id "apaRya-5XxGfLhlq8xlLKwAAANg"]
[Tue Sep 01 03:50:18.275548 2026] [:error] [pid 6089:tid 140353323644672] [client 35.221.82.14:36046] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/dashboard/.env"] [unique_id "apaRypjeM2TaVrIYSc-PMgAAAAc"]
[Tue Sep 01 03:50:19.320295 2026] [:error] [pid 9194:tid 140353256503040] [client 35.221.82.14:36058] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/panel/.env"] [unique_id "apaRy4dqWCmIAB5WEG8LvQAAAQ8"]
[Tue Sep 01 03:50:20.391723 2026] [:error] [pid 6090:tid 140353264895744] [client 35.221.82.14:36074] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/crm/.env"] [unique_id "apaRzLPf1VxWhFqgvWuwswAAAE4"]
[Tue Sep 01 03:50:21.446920 2026] [:error] [pid 9194:tid 140353248110336] [client 35.221.82.14:55604] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/erp/.env"] [unique_id "apaRzYdqWCmIAB5WEG8LwgAAARA"]
[Tue Sep 01 03:50:22.521550 2026] [:error] [pid 9194:tid 140353206146816] [client 35.221.82.14:55618] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/shop/.env"] [unique_id "apaRzodqWCmIAB5WEG8LxQAAARU"]
[Tue Sep 01 03:50:23.564208 2026] [:error] [pid 9194:tid 140353340430080] [client 35.221.82.14:55624] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/store/.env"] [unique_id "apaRz4dqWCmIAB5WEG8LyAAAAQU"]
[Tue Sep 01 03:50:24.619152 2026] [:error] [pid 6090:tid 140353248110336] [client 35.221.82.14:55626] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/saas/.env"] [unique_id "apaR0LPf1VxWhFqgvWuwuwAAAFA"]
[Tue Sep 01 03:50:25.654995 2026] [:error] [pid 6411:tid 140353281681152] [client 35.221.82.14:55628] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/client/.env"] [unique_id "apaR0a-5XxGfLhlq8xlLNgAAAMw"]
[Tue Sep 01 03:50:26.703445 2026] [:error] [pid 9194:tid 140353239717632] [client 35.221.82.14:55638] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/project/.env"] [unique_id "apaR0odqWCmIAB5WEG8LzwAAARE"]
[Tue Sep 01 03:50:27.748975 2026] [:error] [pid 6089:tid 140353180968704] [client 35.221.82.14:55650] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/admin-panel/.env"] [unique_id "apaR05jeM2TaVrIYSc-PNgAAABg"]
[Tue Sep 01 03:50:28.819876 2026] [:error] [pid 6411:tid 140353315251968] [client 35.221.82.14:55664] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/control-panel/.env"] [unique_id "apaR1K-5XxGfLhlq8xlLOQAAAMg"]
[Tue Sep 01 03:50:29.876532 2026] [:error] [pid 9194:tid 140353435567872] [client 35.221.82.14:55672] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/user-panel/.env"] [unique_id "apaR1YdqWCmIAB5WEG8L2AAAAQI"]
[Tue Sep 01 03:50:30.911529 2026] [:error] [pid 6090:tid 140353214539520] [client 35.221.82.14:55678] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/node/.env"] [unique_id "apaR1rPf1VxWhFqgvWuwvAAAAFQ"]
[Tue Sep 01 03:50:31.940592 2026] [:error] [pid 6411:tid 140353231324928] [client 35.221.82.14:57922] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/express/.env"] [unique_id "apaR16-5XxGfLhlq8xlLPAAAANI"]
[Tue Sep 01 03:50:32.988512 2026] [:error] [pid 6090:tid 140353332037376] [client 35.221.82.14:57924] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/next/.env"] [unique_id "apaR2LPf1VxWhFqgvWuwvgAAAEY"]
[Tue Sep 01 03:50:34.016828 2026] [:error] [pid 6091:tid 140353435567872] [client 35.221.82.14:57936] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/nuxt/.env"] [unique_id "apaR2skVYOXruxV21N7KowAAAII"]
[Tue Sep 01 03:50:35.044097 2026] [:error] [pid 6089:tid 140353189361408] [client 35.221.82.14:57942] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/nest/.env"] [unique_id "apaR25jeM2TaVrIYSc-PNwAAABc"]
[Tue Sep 01 03:50:36.065156 2026] [:error] [pid 6091:tid 140353315251968] [client 35.221.82.14:57954] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/react/.env"] [unique_id "apaR3MkVYOXruxV21N7KpQAAAIg"]
[Tue Sep 01 03:50:37.098111 2026] [:error] [pid 6089:tid 140353248110336] [client 35.221.82.14:57956] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/vue/.env"] [unique_id "apaR3ZjeM2TaVrIYSc-POAAAABA"]
[Tue Sep 01 03:50:38.147921 2026] [:error] [pid 9194:tid 140353222932224] [client 35.221.82.14:57958] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/angular/.env"] [unique_id "apaR3odqWCmIAB5WEG8L6wAAARM"]
[Tue Sep 01 03:50:39.183399 2026] [:error] [pid 6090:tid 140353323644672] [client 35.221.82.14:57964] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/svelte/.env"] [unique_id "apaR37Pf1VxWhFqgvWuwvwAAAEc"]
[Tue Sep 01 03:50:40.231029 2026] [:error] [pid 6090:tid 140353340430080] [client 35.221.82.14:57978] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/vite/.env"] [unique_id "apaR4LPf1VxWhFqgvWuwwQAAAEU"]
[Tue Sep 01 03:50:41.270032 2026] [:error] [pid 6090:tid 140353443960576] [client 35.221.82.14:57994] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/backup/.env"] [unique_id "apaR4bPf1VxWhFqgvWuwwgAAAEE"]
[Tue Sep 01 03:50:42.292334 2026] [:error] [pid 6411:tid 140353197754112] [client 35.221.82.14:35962] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/backups/.env"] [unique_id "apaR4q-5XxGfLhlq8xlLQAAAANY"]
[Tue Sep 01 03:50:43.319709 2026] [:error] [pid 6090:tid 140353315251968] [client 35.221.82.14:35968] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/old/.env"] [unique_id "apaR47Pf1VxWhFqgvWuwxAAAAEg"]
[Tue Sep 01 03:50:44.372316 2026] [:error] [pid 6089:tid 140353332037376] [client 35.221.82.14:35974] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/tmp/.env"] [unique_id "apaR5JjeM2TaVrIYSc-POgAAAAY"]
[Tue Sep 01 03:50:45.409081 2026] [:error] [pid 6091:tid 140353206146816] [client 35.221.82.14:35990] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/temp/.env"] [unique_id "apaR5ckVYOXruxV21N7KqAAAAJU"]
[Tue Sep 01 03:50:46.476375 2026] [:error] [pid 6089:tid 140353315251968] [client 35.221.82.14:36006] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/lab/.env"] [unique_id "apaR5pjeM2TaVrIYSc-PPAAAAAg"]
[Tue Sep 01 03:50:47.532707 2026] [:error] [pid 6411:tid 140353214539520] [client 35.221.82.14:36010] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/cronlab/.env"] [unique_id "apaR56-5XxGfLhlq8xlLQgAAANQ"]
[Tue Sep 01 03:50:48.564522 2026] [:error] [pid 9194:tid 140353340430080] [client 35.221.82.14:36014] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/cron/.env"] [unique_id "apaR6IdqWCmIAB5WEG8MDQAAAQU"]
[Tue Sep 01 03:50:49.636082 2026] [:error] [pid 6411:tid 140353256503040] [client 35.221.82.14:36026] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/en/.env"] [unique_id "apaR6a-5XxGfLhlq8xlLQwAAAM8"]
[Tue Sep 01 03:50:50.693934 2026] [:error] [pid 9194:tid 140353281681152] [client 35.221.82.14:36030] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/administrator/.env"] [unique_id "apaR6odqWCmIAB5WEG8MJQAAAQw"]
[Tue Sep 01 03:50:51.743732 2026] [:error] [pid 6090:tid 140353256503040] [client 35.221.82.14:42316] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/psnlink/.env"] [unique_id "apaR67Pf1VxWhFqgvWuwxwAAAE8"]
[Tue Sep 01 03:50:52.779482 2026] [:error] [pid 6090:tid 140353189361408] [client 35.221.82.14:42328] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/exapi/.env"] [unique_id "apaR7LPf1VxWhFqgvWuwyAAAAFc"]
[Tue Sep 01 03:50:53.796401 2026] [:error] [pid 6089:tid 140353452353280] [client 35.221.82.14:42332] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/sitemaps/.env"] [unique_id "apaR7ZjeM2TaVrIYSc-PQwAAAAA"]
[Tue Sep 01 03:50:54.824557 2026] [:error] [pid 6090:tid 140353264895744] [client 35.221.82.14:42346] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/.env.backup1"] [unique_id "apaR7rPf1VxWhFqgvWuwygAAAE4"]
[Tue Sep 01 03:50:55.861265 2026] [:error] [pid 9194:tid 140353443960576] [client 35.221.82.14:42354] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/.env.backup2"] [unique_id "apaR74dqWCmIAB5WEG8MXwAAAQE"]
[Tue Sep 01 03:50:56.891904 2026] [:error] [pid 6091:tid 140353222932224] [client 35.221.82.14:42364] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/logs/.env"] [unique_id "apaR8MkVYOXruxV21N7KrgAAAJM"]
[Tue Sep 01 03:50:57.933153 2026] [:error] [pid 9194:tid 140353290073856] [client 35.221.82.14:42380] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/mailer/.env"] [unique_id "apaR8YdqWCmIAB5WEG8McwAAAQs"]
[Tue Sep 01 03:50:58.970018 2026] [:error] [pid 6411:tid 140353298466560] [client 35.221.82.14:42394] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/mail/.env"] [unique_id "apaR8q-5XxGfLhlq8xlLRgAAAMo"]
[Tue Sep 01 03:51:00.019405 2026] [:error] [pid 6411:tid 140353306859264] [client 35.221.82.14:42408] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/email/.env"] [unique_id "apaR9K-5XxGfLhlq8xlLRwAAAMk"]
[Tue Sep 01 03:51:01.048412 2026] [:error] [pid 9194:tid 140353180968704] [client 35.221.82.14:42422] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/smtp/.env"] [unique_id "apaR9YdqWCmIAB5WEG8MjQAAARg"]
[Tue Sep 01 03:51:02.067158 2026] [:error] [pid 6411:tid 140353443960576] [client 35.221.82.14:46708] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/mailing/.env"] [unique_id "apaR9q-5XxGfLhlq8xlLSgAAAME"]
[Tue Sep 01 03:51:03.080546 2026] [:error] [pid 6091:tid 140353248110336] [client 35.221.82.14:46724] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/notifications/.env"] [unique_id "apaR98kVYOXruxV21N7KsAAAAJA"]
[Tue Sep 01 03:51:04.111268 2026] [:error] [pid 9194:tid 140353443960576] [client 35.221.82.14:46728] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/notify/.env"] [unique_id "apaR-IdqWCmIAB5WEG8MpwAAAQE"]
[Tue Sep 01 03:51:05.128437 2026] [:error] [pid 6411:tid 140353273288448] [client 35.221.82.14:46736] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/sender/.env"] [unique_id "apaR-a-5XxGfLhlq8xlLUwAAAM0"]
[Tue Sep 01 03:51:06.135338 2026] [:error] [pid 6091:tid 140353206146816] [client 35.221.82.14:46750] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/campaign/.env"] [unique_id "apaR-skVYOXruxV21N7KtgAAAJU"]
[Tue Sep 01 03:51:07.156418 2026] [:error] [pid 9194:tid 140353323644672] [client 35.221.82.14:46758] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/newsletter/.env"] [unique_id "apaR-4dqWCmIAB5WEG8M1QAAAQc"]
[Tue Sep 01 03:51:08.174808 2026] [:error] [pid 6090:tid 140353222932224] [client 35.221.82.14:46760] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/ses/.env"] [unique_id "apaR_LPf1VxWhFqgvWuw5wAAAFM"]
[Tue Sep 01 03:51:09.190873 2026] [:error] [pid 9194:tid 140353435567872] [client 35.221.82.14:46774] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/sendgrid/.env"] [unique_id "apaR_YdqWCmIAB5WEG8M6wAAAQI"]
[Tue Sep 01 03:51:10.222550 2026] [:error] [pid 6411:tid 140353443960576] [client 35.221.82.14:46776] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/sparkpost/.env"] [unique_id "apaR_q-5XxGfLhlq8xlLbgAAAME"]
[Tue Sep 01 03:51:11.240277 2026] [:error] [pid 6091:tid 140353231324928] [client 35.221.82.14:46788] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/postmark/.env"] [unique_id "apaR_8kVYOXruxV21N7KzgAAAJI"]
[Tue Sep 01 03:51:12.252673 2026] [:error] [pid 9194:tid 140353348822784] [client 35.221.82.14:53278] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/mailgun/.env"] [unique_id "apaSAIdqWCmIAB5WEG8NIQAAAQQ"]
[Tue Sep 01 03:51:16.280232 2026] [:error] [pid 6090:tid 140353214539520] [client 35.221.82.14:53292] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/mailjet/.env"] [unique_id "apaSBLPf1VxWhFqgvWuw-QAAAFQ"]
[Tue Sep 01 03:51:17.294850 2026] [:error] [pid 6411:tid 140353452353280] [client 35.221.82.14:53296] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/brevo/.env"] [unique_id "apaSBa-5XxGfLhlq8xlLeQAAAMA"]
[Tue Sep 01 03:51:18.308118 2026] [:error] [pid 6090:tid 140353340430080] [client 35.221.82.14:53298] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/transactional/.env"] [unique_id "apaSBrPf1VxWhFqgvWuw_QAAAEU"]
[Tue Sep 01 03:51:22.344740 2026] [:error] [pid 6091:tid 140353306859264] [client 35.221.82.14:50210] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/aws/.env"] [unique_id "apaSCskVYOXruxV21N7K0AAAAIk"]
[Tue Sep 01 03:51:23.374543 2026] [:error] [pid 6089:tid 140353222932224] [client 35.221.82.14:50218] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/azure/.env"] [unique_id "apaSC5jeM2TaVrIYSc-PXwAAABM"]
[Tue Sep 01 03:51:24.402171 2026] [:error] [pid 6091:tid 140353323644672] [client 35.221.82.14:50222] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/gcp/.env"] [unique_id "apaSDMkVYOXruxV21N7K0gAAAIc"]
[Tue Sep 01 03:51:25.433177 2026] [:error] [pid 9194:tid 140353264895744] [client 35.221.82.14:50224] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/cloud/.env"] [unique_id "apaSDYdqWCmIAB5WEG8NsQAAAQ4"]
[Tue Sep 01 03:51:26.477412 2026] [:error] [pid 6411:tid 140353323644672] [client 35.221.82.14:50234] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/infrastructure/.env"] [unique_id "apaSDq-5XxGfLhlq8xlLfwAAAMc"]
[Tue Sep 01 03:51:27.489389 2026] [:error] [pid 6091:tid 140353315251968] [client 35.221.82.14:50236] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/docker/.env"] [unique_id "apaSD8kVYOXruxV21N7K1AAAAIg"]
[Tue Sep 01 03:51:28.506291 2026] [:error] [pid 6411:tid 140353180968704] [client 35.221.82.14:50244] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/k8s/.env"] [unique_id "apaSEK-5XxGfLhlq8xlLiAAAANg"]
[Tue Sep 01 03:51:29.537501 2026] [:error] [pid 6411:tid 140353273288448] [client 35.221.82.14:50248] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/kubernetes/.env"] [unique_id "apaSEa-5XxGfLhlq8xlLjAAAAM0"]
[Tue Sep 01 03:51:30.561792 2026] [:error] [pid 9194:tid 140353452353280] [client 35.221.82.14:50252] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/terraform/.env"] [unique_id "apaSEodqWCmIAB5WEG8NyAAAAQA"]
[Tue Sep 01 03:51:31.578155 2026] [:error] [pid 6090:tid 140353214539520] [client 35.221.82.14:34164] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/ansible/.env"] [unique_id "apaSE7Pf1VxWhFqgvWuxJwAAAFQ"]
[Tue Sep 01 03:51:32.600198 2026] [:error] [pid 6089:tid 140353206146816] [client 35.221.82.14:34174] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/.git/.env"] [unique_id "apaSFJjeM2TaVrIYSc-PbQAAABU"]
[Tue Sep 01 03:51:33.611753 2026] [:error] [pid 6089:tid 140353348822784] [client 35.221.82.14:34190] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/ci/.env"] [unique_id "apaSFZjeM2TaVrIYSc-PcwAAAAQ"]
[Tue Sep 01 03:51:34.636547 2026] [:error] [pid 9194:tid 140353298466560] [client 35.221.82.14:34196] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/cd/.env"] [unique_id "apaSFodqWCmIAB5WEG8NzQAAAQo"]
[Tue Sep 01 03:51:35.660488 2026] [:error] [pid 9194:tid 140353256503040] [client 35.221.82.14:34200] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/jenkins/.env"] [unique_id "apaSF4dqWCmIAB5WEG8N0gAAAQ8"]
[Tue Sep 01 03:51:36.684051 2026] [:error] [pid 6089:tid 140353264895744] [client 35.221.82.14:34204] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/gitlab/.env"] [unique_id "apaSGJjeM2TaVrIYSc-PfAAAAA4"]
[Tue Sep 01 03:51:37.726993 2026] [:error] [pid 6090:tid 140353290073856] [client 35.221.82.14:34206] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/github/.env"] [unique_id "apaSGbPf1VxWhFqgvWuxMAAAAEs"]
[Tue Sep 01 03:51:38.766993 2026] [:error] [pid 6089:tid 140353323644672] [client 35.221.82.14:34216] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/actions/.env"] [unique_id "apaSGpjeM2TaVrIYSc-PfQAAAAc"]
[Tue Sep 01 03:51:39.814838 2026] [:error] [pid 6090:tid 140353214539520] [client 35.221.82.14:34232] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/circleci/.env"] [unique_id "apaSG7Pf1VxWhFqgvWuxMgAAAFQ"]
[Tue Sep 01 03:51:40.842246 2026] [:error] [pid 9194:tid 140353273288448] [client 35.221.82.14:34248] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/travis/.env"] [unique_id "apaSHIdqWCmIAB5WEG8N2gAAAQ0"]
[Tue Sep 01 03:51:41.863149 2026] [:error] [pid 9194:tid 140353332037376] [client 35.221.82.14:51992] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/buildkite/.env"] [unique_id "apaSHYdqWCmIAB5WEG8N3gAAAQY"]
[Tue Sep 01 03:51:42.883451 2026] [:error] [pid 6090:tid 140353273288448] [client 35.221.82.14:52004] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/mysql/.env"] [unique_id "apaSHrPf1VxWhFqgvWuxNAAAAE0"]
[Tue Sep 01 03:51:43.893796 2026] [:error] [pid 6090:tid 140353306859264] [client 35.221.82.14:52014] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/postgres/.env"] [unique_id "apaSH7Pf1VxWhFqgvWuxOAAAAEk"]
[Tue Sep 01 03:51:44.914461 2026] [:error] [pid 6089:tid 140353239717632] [client 35.221.82.14:52016] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/mongodb/.env"] [unique_id "apaSIJjeM2TaVrIYSc-PfgAAABE"]
[Tue Sep 01 03:51:45.931329 2026] [:error] [pid 9194:tid 140353443960576] [client 35.221.82.14:52028] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/redis/.env"] [unique_id "apaSIYdqWCmIAB5WEG8N7QAAAQE"]
[Tue Sep 01 03:51:46.943717 2026] [:error] [pid 6411:tid 140353323644672] [client 35.221.82.14:52044] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/elasticsearch/.env"] [unique_id "apaSIq-5XxGfLhlq8xlLmQAAAMc"]
[Tue Sep 01 03:51:50.987116 2026] [:error] [pid 6411:tid 140353264895744] [client 35.221.82.14:52054] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/kafka/.env"] [unique_id "apaSJq-5XxGfLhlq8xlLrAAAAM4"]
[Tue Sep 01 03:51:52.068353 2026] [:error] [pid 6411:tid 140353348822784] [client 35.221.82.14:36356] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/queue/.env"] [unique_id "apaSKK-5XxGfLhlq8xlLuAAAAMQ"]
[Tue Sep 01 03:51:53.157688 2026] [:error] [pid 6091:tid 140353306859264] [client 35.221.82.14:36358] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/worker/.env"] [unique_id "apaSKckVYOXruxV21N7K4wAAAIk"]
[Tue Sep 01 03:51:54.222922 2026] [:error] [pid 6411:tid 140353206146816] [client 35.221.82.14:36368] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/job/.env"] [unique_id "apaSKq-5XxGfLhlq8xlL0AAAANU"]
[Tue Sep 01 03:51:55.251728 2026] [:error] [pid 9194:tid 140353323644672] [client 35.221.82.14:36372] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/test/.env"] [unique_id "apaSK4dqWCmIAB5WEG8N-gAAAQc"]
[Tue Sep 01 03:51:56.286346 2026] [:error] [pid 9194:tid 140353443960576] [client 35.221.82.14:36374] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/qa/.env"] [unique_id "apaSLIdqWCmIAB5WEG8N_QAAAQE"]
[Tue Sep 01 03:51:58.022696 2026] [:error] [pid 6089:tid 140353298466560] [client 35.221.82.14:36384] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/preview/.env"] [unique_id "apaSLpjeM2TaVrIYSc-PhwAAAAo"]
[Tue Sep 01 03:51:59.034141 2026] [:error] [pid 6090:tid 140353306859264] [client 35.221.82.14:36396] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/beta/.env"] [unique_id "apaSL7Pf1VxWhFqgvWuxQwAAAEk"]
[Tue Sep 01 03:52:00.064181 2026] [:error] [pid 6411:tid 140353189361408] [client 35.221.82.14:36408] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/uat/.env"] [unique_id "apaSMK-5XxGfLhlq8xlL6wAAANc"]
[Tue Sep 01 03:52:01.104853 2026] [:error] [pid 9194:tid 140353298466560] [client 35.221.82.14:36416] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/stage/.env"] [unique_id "apaSMYdqWCmIAB5WEG8OBAAAAQo"]
[Tue Sep 01 03:52:02.164149 2026] [:error] [pid 9194:tid 140353290073856] [client 35.221.82.14:45554] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/development/.env"] [unique_id "apaSModqWCmIAB5WEG8OCAAAAQs"]
[Tue Sep 01 03:52:03.203903 2026] [:error] [pid 9194:tid 140353214539520] [client 35.221.82.14:45558] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/production/.env"] [unique_id "apaSM4dqWCmIAB5WEG8OEQAAARQ"]
[Tue Sep 01 03:52:04.296878 2026] [:error] [pid 9194:tid 140353290073856] [client 35.221.82.14:45570] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/config/app/.env"] [unique_id "apaSNIdqWCmIAB5WEG8OFQAAAQs"]
[Tue Sep 01 03:52:05.361848 2026] [proxy_fcgi:error] [pid 6091:tid 140353357215488] [client 35.221.82.14:45580] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 03:52:05.635824 2026] [proxy_fcgi:error] [pid 6091:tid 140353264895744] [client 35.221.82.14:45580] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 03:52:05.919029 2026] [proxy_fcgi:error] [pid 6091:tid 140353281681152] [client 35.221.82.14:45580] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 03:52:06.180784 2026] [proxy_fcgi:error] [pid 6091:tid 140353231324928] [client 35.221.82.14:45580] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 03:52:06.440971 2026] [proxy_fcgi:error] [pid 6091:tid 140353332037376] [client 35.221.82.14:45580] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 03:52:06.700609 2026] [proxy_fcgi:error] [pid 6091:tid 140353222932224] [client 35.221.82.14:45580] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 03:52:06.961788 2026] [proxy_fcgi:error] [pid 6091:tid 140353306859264] [client 35.221.82.14:45580] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 03:52:07.480407 2026] [proxy_fcgi:error] [pid 6091:tid 140353323644672] [client 35.221.82.14:45580] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 03:52:07.741481 2026] [proxy_fcgi:error] [pid 6091:tid 140353435567872] [client 35.221.82.14:45580] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 03:52:09.809917 2026] [proxy_fcgi:error] [pid 6091:tid 140353357215488] [client 35.221.82.14:45580] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 03:52:10.068724 2026] [proxy_fcgi:error] [pid 6091:tid 140353264895744] [client 35.221.82.14:45580] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 03:52:10.329102 2026] [proxy_fcgi:error] [pid 6091:tid 140353281681152] [client 35.221.82.14:45580] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 03:52:10.587916 2026] [proxy_fcgi:error] [pid 6091:tid 140353443960576] [client 35.221.82.14:45580] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 03:52:10.846737 2026] [proxy_fcgi:error] [pid 6091:tid 140353239717632] [client 35.221.82.14:45580] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 03:52:11.105617 2026] [proxy_fcgi:error] [pid 6091:tid 140353231324928] [client 35.221.82.14:45580] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 03:52:15.657134 2026] [:error] [pid 6090:tid 140353256503040] [client 35.221.82.14:55668] [client 35.221.82.14] ModSecurity: Warning. Operator GT matched 25 at IP:scan_404_count. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "11"] [id "9000204"] [msg "Scanner detected - blocking IP 1h"] [tag "scanner-detect"] [hostname "www.menabern.com"] [uri "/mail/phpinfo.php"] [unique_id "apaSP7Pf1VxWhFqgvWuxSwAAAE8"]
[Tue Sep 01 03:52:17.928047 2026] [:error] [pid 6090:tid 140353435567872] [client 35.221.82.14:55668] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/cpanel/phpinfo.php"] [unique_id "apaSQbPf1VxWhFqgvWuxUwAAAEI"]
[Tue Sep 01 03:52:18.847984 2026] [:error] [pid 6091:tid 140353452353280] [client 35.221.82.14:45580] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/webroot/index.php/_environment"] [unique_id "apaSQskVYOXruxV21N7LEwAAAIA"]
[Tue Sep 01 03:52:18.943559 2026] [:error] [pid 6091:tid 140353315251968] [client 35.221.82.14:55682] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/hosting/phpinfo.php"] [unique_id "apaSQskVYOXruxV21N7LFAAAAIg"]
[Tue Sep 01 03:52:19.968311 2026] [:error] [pid 6091:tid 140353273288448] [client 35.221.82.14:55686] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/webmail/phpinfo.php"] [unique_id "apaSQ8kVYOXruxV21N7LFQAAAI0"]
[Tue Sep 01 03:52:20.986744 2026] [:error] [pid 6411:tid 140353180968704] [client 35.221.82.14:55690] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/smtp/phpinfo.php"] [unique_id "apaSRK-5XxGfLhlq8xlMGwAAANg"]
[Tue Sep 01 03:52:22.003002 2026] [:error] [pid 9194:tid 140353206146816] [client 35.221.82.14:45986] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/phpinfo.php.bak"] [unique_id "apaSRodqWCmIAB5WEG8ONgAAARU"]
[Tue Sep 01 03:52:23.023963 2026] [:error] [pid 6090:tid 140353248110336] [client 35.221.82.14:45996] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/phpinfo.php.old"] [unique_id "apaSR7Pf1VxWhFqgvWuxVwAAAFA"]
[Tue Sep 01 03:52:24.033749 2026] [:error] [pid 6090:tid 140353206146816] [client 35.221.82.14:46002] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/phpinfo.php~"] [unique_id "apaSSLPf1VxWhFqgvWuxWAAAAFU"]
[Tue Sep 01 03:52:25.046735 2026] [:error] [pid 9194:tid 140353435567872] [client 35.221.82.14:46016] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/info.php.bak"] [unique_id "apaSSYdqWCmIAB5WEG8OPAAAAQI"]
[Tue Sep 01 03:52:29.073983 2026] [:error] [pid 9194:tid 140353222932224] [client 35.221.82.14:46024] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/staging/phpinfo.php"] [unique_id "apaSTYdqWCmIAB5WEG8ORQAAARM"]
[Tue Sep 01 03:52:30.090034 2026] [:error] [pid 6090:tid 140353180968704] [client 35.221.82.14:46032] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/beta/phpinfo.php"] [unique_id "apaSTrPf1VxWhFqgvWuxXQAAAFg"]
[Tue Sep 01 03:52:31.116565 2026] [:error] [pid 6411:tid 140353264895744] [client 35.221.82.14:46038] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/uat/phpinfo.php"] [unique_id "apaST6-5XxGfLhlq8xlMKgAAAM4"]
[Tue Sep 01 03:52:32.132849 2026] [:error] [pid 6091:tid 140353332037376] [client 35.221.82.14:49960] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/qa/phpinfo.php"] [unique_id "apaSUMkVYOXruxV21N7LIAAAAIY"]
[Tue Sep 01 03:52:33.159795 2026] [:error] [pid 6411:tid 140353197754112] [client 35.221.82.14:49964] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/preview/phpinfo.php"] [unique_id "apaSUa-5XxGfLhlq8xlMLQAAANY"]
[Tue Sep 01 03:52:34.171906 2026] [:error] [pid 9194:tid 140353332037376] [client 35.221.82.14:49976] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/www/phpinfo.php"] [unique_id "apaSUodqWCmIAB5WEG8OTQAAAQY"]
[Tue Sep 01 03:52:35.193225 2026] [:error] [pid 6089:tid 140353281681152] [client 35.221.82.14:49980] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/htdocs/phpinfo.php"] [unique_id "apaSU5jeM2TaVrIYSc-PqQAAAAw"]
[Tue Sep 01 03:52:36.205882 2026] [:error] [pid 6091:tid 140353452353280] [client 35.221.82.14:49986] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/public_html/phpinfo.php"] [unique_id "apaSVMkVYOXruxV21N7LNQAAAIA"]
[Tue Sep 01 03:52:37.230379 2026] [:error] [pid 9194:tid 140353231324928] [client 35.221.82.14:49990] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/site/phpinfo.php"] [unique_id "apaSVYdqWCmIAB5WEG8OWAAAARI"]
[Tue Sep 01 03:52:38.243096 2026] [:error] [pid 9194:tid 140353306859264] [client 35.221.82.14:50006] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/docs/phpinfo.php"] [unique_id "apaSVodqWCmIAB5WEG8OWwAAAQk"]
[Tue Sep 01 03:52:39.259931 2026] [:error] [pid 6091:tid 140353264895744] [client 35.221.82.14:50014] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/wp-admin/phpinfo.php"] [unique_id "apaSV8kVYOXruxV21N7LOgAAAI4"]
[Tue Sep 01 03:52:40.280398 2026] [:error] [pid 6411:tid 140353332037376] [client 35.221.82.14:50016] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/administrator/phpinfo.php"] [unique_id "apaSWK-5XxGfLhlq8xlMQAAAAMY"]
[Tue Sep 01 03:52:41.311348 2026] [:error] [pid 6089:tid 140353306859264] [client 35.221.82.14:50022] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/core/phpinfo.php"] [unique_id "apaSWZjeM2TaVrIYSc-PrgAAAAk"]
[Tue Sep 01 03:52:42.333031 2026] [:error] [pid 9194:tid 140353435567872] [client 35.221.82.14:56660] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/includes/phpinfo.php"] [unique_id "apaSWodqWCmIAB5WEG8OcgAAAQI"]
[Tue Sep 01 03:52:43.349681 2026] [:error] [pid 9194:tid 140353206146816] [client 35.221.82.14:56670] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/service-account.json"] [unique_id "apaSW4dqWCmIAB5WEG8OdgAAARU"]
[Tue Sep 01 03:52:44.367922 2026] [:error] [pid 6089:tid 140353323644672] [client 35.221.82.14:56674] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/sa.json"] [unique_id "apaSXJjeM2TaVrIYSc-PrwAAAAc"]
[Tue Sep 01 03:52:45.386487 2026] [:error] [pid 6411:tid 140353206146816] [client 35.221.82.14:56680] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/gcp-key.json"] [unique_id "apaSXa-5XxGfLhlq8xlMTAAAANU"]
[Tue Sep 01 03:52:46.408990 2026] [:error] [pid 9194:tid 140353206146816] [client 35.221.82.14:56688] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/gcp-credentials.json"] [unique_id "apaSXodqWCmIAB5WEG8OiAAAARU"]
[Tue Sep 01 03:52:47.425899 2026] [:error] [pid 6089:tid 140353357215488] [client 35.221.82.14:56702] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/gcp-sa.json"] [unique_id "apaSX5jeM2TaVrIYSc-PtAAAAAM"]
[Tue Sep 01 03:52:48.446213 2026] [:error] [pid 9194:tid 140353231324928] [client 35.221.82.14:56718] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/credentials.json"] [unique_id "apaSYIdqWCmIAB5WEG8OkAAAARI"]
[Tue Sep 01 03:52:49.463503 2026] [:error] [pid 6090:tid 140353256503040] [client 35.221.82.14:56732] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/google-credentials.json"] [unique_id "apaSYbPf1VxWhFqgvWuxcAAAAE8"]
[Tue Sep 01 03:52:50.486177 2026] [:error] [pid 9194:tid 140353323644672] [client 35.221.82.14:56742] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/google-key.json"] [unique_id "apaSYodqWCmIAB5WEG8OmQAAAQc"]
[Tue Sep 01 03:52:51.502503 2026] [:error] [pid 6090:tid 140353264895744] [client 35.221.82.14:54302] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/.config/gcloud/application_default_credentials.json"] [unique_id "apaSY7Pf1VxWhFqgvWuxcQAAAE4"]
[Tue Sep 01 03:52:52.522893 2026] [:error] [pid 9194:tid 140353206146816] [client 35.221.82.14:54312] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/application_default_credentials.json"] [unique_id "apaSZIdqWCmIAB5WEG8OnwAAARU"]
[Tue Sep 01 03:52:53.551902 2026] [:error] [pid 6091:tid 140353435567872] [client 35.221.82.14:54326] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/key.json"] [unique_id "apaSZckVYOXruxV21N7LRwAAAII"]
[Tue Sep 01 03:52:54.571536 2026] [:error] [pid 6090:tid 140353452353280] [client 35.221.82.14:54330] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/keyfile.json"] [unique_id "apaSZrPf1VxWhFqgvWuxeQAAAEA"]
[Tue Sep 01 03:52:55.591875 2026] [:error] [pid 6090:tid 140353189361408] [client 35.221.82.14:54342] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/firebase-adminsdk.json"] [unique_id "apaSZ7Pf1VxWhFqgvWuxfAAAAFc"]
[Tue Sep 01 03:52:56.610734 2026] [:error] [pid 6411:tid 140353357215488] [client 35.221.82.14:54358] [client 35.221.82.14] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/firebase-key.json"] [unique_id "apaSaK-5XxGfLhlq8xlMYAAAAMM"]
[Tue Sep 01 04:02:52.710375 2026] [:error] [pid 6411:tid 140353231324928] [client 34.39.219.103:46366] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.git/config"] [unique_id "apaUvK-5XxGfLhlq8xlQdgAAANI"]
[Tue Sep 01 04:02:54.112384 2026] [:error] [pid 6089:tid 140353443960576] [client 34.39.219.103:46370] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env"] [unique_id "apaUvpjeM2TaVrIYSc-ThQAAAAE"]
[Tue Sep 01 04:02:55.176671 2026] [:error] [pid 6411:tid 140353281681152] [client 34.39.219.103:46378] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env.local"] [unique_id "apaUv6-5XxGfLhlq8xlQggAAAMw"]
[Tue Sep 01 04:02:56.151699 2026] [:error] [pid 6089:tid 140353323644672] [client 34.39.219.103:46380] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env.production"] [unique_id "apaUwJjeM2TaVrIYSc-ThwAAAAc"]
[Tue Sep 01 04:02:57.220555 2026] [:error] [pid 9194:tid 140353239717632] [client 34.39.219.103:46386] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env.staging"] [unique_id "apaUwYdqWCmIAB5WEG8VYAAAARE"]
[Tue Sep 01 04:02:58.462674 2026] [:error] [pid 6089:tid 140353239717632] [client 34.39.219.103:46398] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env.development"] [unique_id "apaUwpjeM2TaVrIYSc-TiQAAABE"]
[Tue Sep 01 04:02:59.549606 2026] [:error] [pid 6090:tid 140353239717632] [client 34.39.219.103:46404] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env.test"] [unique_id "apaUw7Pf1VxWhFqgvWuz6wAAAFE"]
[Tue Sep 01 04:03:00.463263 2026] [:error] [pid 6091:tid 140353306859264] [client 34.39.219.103:46416] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env.remote"] [unique_id "apaUxMkVYOXruxV21N7Q8AAAAIk"]
[Tue Sep 01 04:03:01.338930 2026] [:error] [pid 6411:tid 140353348822784] [client 34.39.219.103:49090] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env.bak"] [unique_id "apaUxa-5XxGfLhlq8xlQlAAAAMQ"]
[Tue Sep 01 04:03:02.223375 2026] [:error] [pid 6411:tid 140353239717632] [client 34.39.219.103:49094] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env.backup"] [unique_id "apaUxq-5XxGfLhlq8xlQlgAAANE"]
[Tue Sep 01 04:03:03.245892 2026] [:error] [pid 9194:tid 140353323644672] [client 34.39.219.103:49098] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env.save"] [unique_id "apaUx4dqWCmIAB5WEG8VZgAAAQc"]
[Tue Sep 01 04:03:04.254074 2026] [:error] [pid 6091:tid 140353298466560] [client 34.39.219.103:49110] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env.old"] [unique_id "apaUyMkVYOXruxV21N7Q9QAAAIo"]
[Tue Sep 01 04:03:05.244584 2026] [:error] [pid 9194:tid 140353357215488] [client 34.39.219.103:49116] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env.sample"] [unique_id "apaUyYdqWCmIAB5WEG8VaQAAAQM"]
[Tue Sep 01 04:03:06.445537 2026] [:error] [pid 6090:tid 140353357215488] [client 34.39.219.103:49120] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env.example"] [unique_id "apaUyrPf1VxWhFqgvWuz7wAAAEM"]
[Tue Sep 01 04:03:07.548532 2026] [:error] [pid 6090:tid 140353180968704] [client 34.39.219.103:49122] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env.dev"] [unique_id "apaUy7Pf1VxWhFqgvWuz8QAAAFg"]
[Tue Sep 01 04:03:08.771707 2026] [:error] [pid 6089:tid 140353298466560] [client 34.39.219.103:49138] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env.prod"] [unique_id "apaUzJjeM2TaVrIYSc-TlwAAAAo"]
[Tue Sep 01 04:03:09.943678 2026] [:error] [pid 6090:tid 140353332037376] [client 34.39.219.103:49154] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env.stage"] [unique_id "apaUzbPf1VxWhFqgvWuz8wAAAEY"]
[Tue Sep 01 04:03:10.862502 2026] [:error] [pid 6090:tid 140353435567872] [client 34.39.219.103:49158] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env.ci"] [unique_id "apaUzrPf1VxWhFqgvWuz9AAAAEI"]
[Tue Sep 01 04:03:11.969240 2026] [:error] [pid 6089:tid 140353435567872] [client 34.39.219.103:49760] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env.docker"] [unique_id "apaUz5jeM2TaVrIYSc-TnQAAAAI"]
[Tue Sep 01 04:03:13.321040 2026] [:error] [pid 6090:tid 140353231324928] [client 34.39.219.103:49768] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env.live"] [unique_id "apaU0bPf1VxWhFqgvWuz9QAAAFI"]
[Tue Sep 01 04:03:14.341692 2026] [:error] [pid 9194:tid 140353231324928] [client 34.39.219.103:49774] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env.preprod"] [unique_id "apaU0odqWCmIAB5WEG8VdAAAARI"]
[Tue Sep 01 04:03:15.332427 2026] [:error] [pid 6091:tid 140353256503040] [client 34.39.219.103:49784] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env.uat"] [unique_id "apaU08kVYOXruxV21N7Q_gAAAI8"]
[Tue Sep 01 04:03:16.307707 2026] [:error] [pid 6411:tid 140353239717632] [client 34.39.219.103:49796] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env.dist"] [unique_id "apaU1K-5XxGfLhlq8xlQngAAANE"]
[Tue Sep 01 04:03:17.347289 2026] [:error] [pid 9194:tid 140353206146816] [client 34.39.219.103:49802] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env.swp"] [unique_id "apaU1YdqWCmIAB5WEG8VfAAAARU"]
[Tue Sep 01 04:03:18.928657 2026] [:error] [pid 9194:tid 140353290073856] [client 34.39.219.103:49808] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env~"] [unique_id "apaU1odqWCmIAB5WEG8VgAAAAQs"]
[Tue Sep 01 04:03:19.927426 2026] [:error] [pid 6411:tid 140353443960576] [client 34.39.219.103:49822] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env1"] [unique_id "apaU16-5XxGfLhlq8xlQpQAAAME"]
[Tue Sep 01 04:03:20.789980 2026] [:error] [pid 6091:tid 140353357215488] [client 34.39.219.103:49826] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env2"] [unique_id "apaU2MkVYOXruxV21N7RAAAAAIM"]
[Tue Sep 01 04:03:21.666249 2026] [:error] [pid 6411:tid 140353348822784] [client 34.39.219.103:42458] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env_copy"] [unique_id "apaU2a-5XxGfLhlq8xlQqQAAAMQ"]
[Tue Sep 01 04:03:22.583595 2026] [:error] [pid 6090:tid 140353306859264] [client 34.39.219.103:42472] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env.txt"] [unique_id "apaU2rPf1VxWhFqgvWuz-wAAAEk"]
[Tue Sep 01 04:03:23.501694 2026] [:error] [pid 6411:tid 140353239717632] [client 34.39.219.103:42478] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env.json"] [unique_id "apaU26-5XxGfLhlq8xlQqwAAANE"]
[Tue Sep 01 04:03:24.501590 2026] [:error] [pid 6411:tid 140353435567872] [client 34.39.219.103:42490] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env.yaml"] [unique_id "apaU3K-5XxGfLhlq8xlQrQAAAMI"]
[Tue Sep 01 04:03:25.637888 2026] [:error] [pid 9194:tid 140353189361408] [client 34.39.219.103:42504] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env.yml"] [unique_id "apaU3YdqWCmIAB5WEG8ViAAAARc"]
[Tue Sep 01 04:03:26.718857 2026] [:error] [pid 6411:tid 140353189361408] [client 34.39.219.103:42520] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/app/.env"] [unique_id "apaU3q-5XxGfLhlq8xlQsQAAANc"]
[Tue Sep 01 04:03:27.751678 2026] [:error] [pid 6089:tid 140353239717632] [client 34.39.219.103:42532] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/apps/.env"] [unique_id "apaU35jeM2TaVrIYSc-TqwAAABE"]
[Tue Sep 01 04:03:28.709832 2026] [:error] [pid 6411:tid 140353298466560] [client 34.39.219.103:42534] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/api/.env"] [unique_id "apaU4K-5XxGfLhlq8xlQtAAAAMo"]
[Tue Sep 01 04:03:29.697753 2026] [:error] [pid 6091:tid 140353214539520] [client 34.39.219.103:42544] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/web/.env"] [unique_id "apaU4ckVYOXruxV21N7RBgAAAJQ"]
[Tue Sep 01 04:03:33.695891 2026] [:error] [pid 6091:tid 140353306859264] [client 34.39.219.103:41084] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/public/.env"] [unique_id "apaU5ckVYOXruxV21N7RDgAAAIk"]
[Tue Sep 01 04:03:34.645103 2026] [:error] [pid 6089:tid 140353256503040] [client 34.39.219.103:41090] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/admin/.env"] [unique_id "apaU5pjeM2TaVrIYSc-TtQAAAA8"]
[Tue Sep 01 04:03:35.555664 2026] [:error] [pid 6091:tid 140353435567872] [client 34.39.219.103:41098] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/backend/.env"] [unique_id "apaU58kVYOXruxV21N7REQAAAII"]
[Tue Sep 01 04:03:37.063475 2026] [:error] [pid 6089:tid 140353323644672] [client 34.39.219.103:41106] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/server/.env"] [unique_id "apaU6ZjeM2TaVrIYSc-TvwAAAAc"]
[Tue Sep 01 04:03:38.028240 2026] [:error] [pid 9194:tid 140353298466560] [client 34.39.219.103:41118] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/frontend/.env"] [unique_id "apaU6odqWCmIAB5WEG8VnAAAAQo"]
[Tue Sep 01 04:03:38.930255 2026] [:error] [pid 6411:tid 140353306859264] [client 34.39.219.103:41130] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/src/.env"] [unique_id "apaU6q-5XxGfLhlq8xlQvQAAAMk"]
[Tue Sep 01 04:03:39.807160 2026] [:error] [pid 6090:tid 140353189361408] [client 34.39.219.103:41142] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/core/.env"] [unique_id "apaU67Pf1VxWhFqgvWu0BAAAAFc"]
[Tue Sep 01 04:03:40.748377 2026] [:error] [pid 6411:tid 140353443960576] [client 34.39.219.103:41152] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/core/app/.env"] [unique_id "apaU7K-5XxGfLhlq8xlQvgAAAME"]
[Tue Sep 01 04:03:41.755213 2026] [:error] [pid 6091:tid 140353298466560] [client 34.39.219.103:57558] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/config/.env"] [unique_id "apaU7ckVYOXruxV21N7RGAAAAIo"]
[Tue Sep 01 04:03:42.784106 2026] [:error] [pid 9194:tid 140353298466560] [client 34.39.219.103:57574] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/private/.env"] [unique_id "apaU7odqWCmIAB5WEG8VqAAAAQo"]
[Tue Sep 01 04:03:44.054353 2026] [:error] [pid 9194:tid 140353435567872] [client 34.39.219.103:57582] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/application/.env"] [unique_id "apaU8IdqWCmIAB5WEG8VqwAAAQI"]
[Tue Sep 01 04:03:45.227563 2026] [:error] [pid 6411:tid 140353222932224] [client 34.39.219.103:57596] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/bootstrap/.env"] [unique_id "apaU8a-5XxGfLhlq8xlQwgAAANM"]
[Tue Sep 01 04:03:46.191870 2026] [:error] [pid 9194:tid 140353273288448] [client 34.39.219.103:57600] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/database/.env"] [unique_id "apaU8odqWCmIAB5WEG8VsQAAAQ0"]
[Tue Sep 01 04:03:47.583515 2026] [:error] [pid 6091:tid 140353332037376] [client 34.39.219.103:57608] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/storage/.env"] [unique_id "apaU88kVYOXruxV21N7RHAAAAIY"]
[Tue Sep 01 04:03:48.638626 2026] [:error] [pid 9194:tid 140353435567872] [client 34.39.219.103:57618] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/var/www/.env"] [unique_id "apaU9IdqWCmIAB5WEG8VuAAAAQI"]
[Tue Sep 01 04:03:49.825189 2026] [:error] [pid 6090:tid 140353290073856] [client 34.39.219.103:57626] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/var/www/html/.env"] [unique_id "apaU9bPf1VxWhFqgvWu0CgAAAEs"]
[Tue Sep 01 04:03:50.898460 2026] [:error] [pid 6091:tid 140353273288448] [client 34.39.219.103:57642] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/current/.env"] [unique_id "apaU9skVYOXruxV21N7RIAAAAI0"]
[Tue Sep 01 04:03:51.927772 2026] [:error] [pid 6090:tid 140353281681152] [client 34.39.219.103:45158] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/release/.env"] [unique_id "apaU97Pf1VxWhFqgvWu0DgAAAEw"]
[Tue Sep 01 04:03:52.848983 2026] [:error] [pid 6091:tid 140353281681152] [client 34.39.219.103:45162] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/releases/.env"] [unique_id "apaU-MkVYOXruxV21N7RIgAAAIw"]
[Tue Sep 01 04:03:53.926604 2026] [:error] [pid 9194:tid 140353180968704] [client 34.39.219.103:45168] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/shared/.env"] [unique_id "apaU-YdqWCmIAB5WEG8VxAAAARg"]
[Tue Sep 01 04:03:55.166430 2026] [:error] [pid 6090:tid 140353435567872] [client 34.39.219.103:45180] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/deploy/.env"] [unique_id "apaU-7Pf1VxWhFqgvWu0EQAAAEI"]
[Tue Sep 01 04:03:56.225345 2026] [:error] [pid 6089:tid 140353189361408] [client 34.39.219.103:45194] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/build/.env"] [unique_id "apaU_JjeM2TaVrIYSc-T5QAAABc"]
[Tue Sep 01 04:03:57.189578 2026] [:error] [pid 6091:tid 140353443960576] [client 34.39.219.103:45204] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/dist/.env"] [unique_id "apaU_ckVYOXruxV21N7RJQAAAIE"]
[Tue Sep 01 04:03:58.078282 2026] [:error] [pid 6089:tid 140353264895744] [client 34.39.219.103:45218] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/public_html/.env"] [unique_id "apaU_pjeM2TaVrIYSc-T6gAAAA4"]
[Tue Sep 01 04:03:59.017990 2026] [:error] [pid 9194:tid 140353290073856] [client 34.39.219.103:45220] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/htdocs/.env"] [unique_id "apaU_4dqWCmIAB5WEG8VzwAAAQs"]
[Tue Sep 01 04:03:59.952513 2026] [:error] [pid 6411:tid 140353323644672] [client 34.39.219.103:45230] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/www/.env"] [unique_id "apaU_6-5XxGfLhlq8xlQzwAAAMc"]
[Tue Sep 01 04:04:01.103707 2026] [:error] [pid 6091:tid 140353332037376] [client 34.39.219.103:45238] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/html/.env"] [unique_id "apaVAckVYOXruxV21N7RKAAAAIY"]
[Tue Sep 01 04:04:02.113876 2026] [:error] [pid 6411:tid 140353239717632] [client 34.39.219.103:38616] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/live/.env"] [unique_id "apaVAq-5XxGfLhlq8xlQ1AAAANE"]
[Tue Sep 01 04:04:03.509403 2026] [:error] [pid 9194:tid 140353248110336] [client 34.39.219.103:38622] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/prod/.env"] [unique_id "apaVA4dqWCmIAB5WEG8V1wAAARA"]
[Tue Sep 01 04:04:04.785065 2026] [:error] [pid 6411:tid 140353248110336] [client 34.39.219.103:38626] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/dev/.env"] [unique_id "apaVBK-5XxGfLhlq8xlQ2gAAANA"]
[Tue Sep 01 04:04:05.760843 2026] [:error] [pid 9194:tid 140353443960576] [client 34.39.219.103:38632] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/staging/.env"] [unique_id "apaVBYdqWCmIAB5WEG8V2wAAAQE"]
[Tue Sep 01 04:04:06.779492 2026] [:error] [pid 6090:tid 140353231324928] [client 34.39.219.103:38644] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/opt/.env"] [unique_id "apaVBrPf1VxWhFqgvWu0GQAAAFI"]
[Tue Sep 01 04:04:07.760777 2026] [:error] [pid 6090:tid 140353222932224] [client 34.39.219.103:38660] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/laravel/.env"] [unique_id "apaVB7Pf1VxWhFqgvWu0GwAAAFM"]
[Tue Sep 01 04:04:08.988845 2026] [:error] [pid 9194:tid 140353273288448] [client 34.39.219.103:38674] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/symfony/.env"] [unique_id "apaVCIdqWCmIAB5WEG8V4QAAAQ0"]
[Tue Sep 01 04:04:10.017236 2026] [:error] [pid 9194:tid 140353264895744] [client 34.39.219.103:38690] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/wordpress/.env"] [unique_id "apaVCodqWCmIAB5WEG8V5gAAAQ4"]
[Tue Sep 01 04:04:11.009090 2026] [:error] [pid 6411:tid 140353348822784] [client 34.39.219.103:38698] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/wp/.env"] [unique_id "apaVC6-5XxGfLhlq8xlQ3QAAAMQ"]
[Tue Sep 01 04:04:12.120295 2026] [:error] [pid 6411:tid 140353340430080] [client 34.39.219.103:59554] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/cms/.env"] [unique_id "apaVDK-5XxGfLhlq8xlQ3gAAAMU"]
[Tue Sep 01 04:04:13.539507 2026] [:error] [pid 9194:tid 140353306859264] [client 34.39.219.103:59568] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/drupal/.env"] [unique_id "apaVDYdqWCmIAB5WEG8V7QAAAQk"]
[Tue Sep 01 04:04:14.605449 2026] [:error] [pid 6090:tid 140353332037376] [client 34.39.219.103:59582] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/joomla/.env"] [unique_id "apaVDrPf1VxWhFqgvWu0IAAAAEY"]
[Tue Sep 01 04:04:15.636024 2026] [:error] [pid 9194:tid 140353248110336] [client 34.39.219.103:59598] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/magento/.env"] [unique_id "apaVD4dqWCmIAB5WEG8V8AAAARA"]
[Tue Sep 01 04:04:16.575866 2026] [:error] [pid 6411:tid 140353222932224] [client 34.39.219.103:59610] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/shopify/.env"] [unique_id "apaVEK-5XxGfLhlq8xlQ5gAAANM"]
[Tue Sep 01 04:04:17.481386 2026] [:error] [pid 6089:tid 140353239717632] [client 34.39.219.103:59614] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/prestashop/.env"] [unique_id "apaVEZjeM2TaVrIYSc-UBAAAABE"]
[Tue Sep 01 04:04:18.353867 2026] [:error] [pid 6411:tid 140353298466560] [client 34.39.219.103:59616] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/codeigniter/.env"] [unique_id "apaVEq-5XxGfLhlq8xlQ7AAAAMo"]
[Tue Sep 01 04:04:19.402870 2026] [:error] [pid 9194:tid 140353281681152] [client 34.39.219.103:59626] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/cakephp/.env"] [unique_id "apaVE4dqWCmIAB5WEG8V9QAAAQw"]
[Tue Sep 01 04:04:20.349713 2026] [:error] [pid 6411:tid 140353248110336] [client 34.39.219.103:59640] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/zend/.env"] [unique_id "apaVFK-5XxGfLhlq8xlQ7wAAANA"]
[Tue Sep 01 04:04:21.450433 2026] [:error] [pid 9194:tid 140353452353280] [client 34.39.219.103:34184] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/yii/.env"] [unique_id "apaVFYdqWCmIAB5WEG8V-gAAAQA"]
[Tue Sep 01 04:04:23.037737 2026] [:error] [pid 9194:tid 140353206146816] [client 34.39.219.103:34186] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/laravel5/.env"] [unique_id "apaVF4dqWCmIAB5WEG8V_QAAARU"]
[Tue Sep 01 04:04:24.204026 2026] [:error] [pid 6091:tid 140353222932224] [client 34.39.219.103:34194] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/v1/.env"] [unique_id "apaVGMkVYOXruxV21N7RMgAAAJM"]
[Tue Sep 01 04:04:25.228786 2026] [:error] [pid 6090:tid 140353248110336] [client 34.39.219.103:34206] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/v2/.env"] [unique_id "apaVGbPf1VxWhFqgvWu0JwAAAFA"]
[Tue Sep 01 04:04:26.346969 2026] [:error] [pid 6089:tid 140353273288448] [client 34.39.219.103:34210] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/v3/.env"] [unique_id "apaVGpjeM2TaVrIYSc-UFQAAAA0"]
[Tue Sep 01 04:04:27.405223 2026] [:error] [pid 9194:tid 140353248110336] [client 34.39.219.103:34220] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/api/v1/.env"] [unique_id "apaVG4dqWCmIAB5WEG8WCgAAARA"]
[Tue Sep 01 04:04:28.850513 2026] [:error] [pid 9194:tid 140353264895744] [client 34.39.219.103:34230] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/api/v2/.env"] [unique_id "apaVHIdqWCmIAB5WEG8WEAAAAQ4"]
[Tue Sep 01 04:04:29.845479 2026] [:error] [pid 9194:tid 140353231324928] [client 34.39.219.103:34240] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/rest/.env"] [unique_id "apaVHYdqWCmIAB5WEG8WFAAAARI"]
[Tue Sep 01 04:04:30.750342 2026] [:error] [pid 6090:tid 140353323644672] [client 34.39.219.103:34250] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/graphql/.env"] [unique_id "apaVHrPf1VxWhFqgvWu0KQAAAEc"]
[Tue Sep 01 04:04:31.730254 2026] [:error] [pid 9194:tid 140353452353280] [client 34.39.219.103:53812] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/gateway/.env"] [unique_id "apaVH4dqWCmIAB5WEG8WFwAAAQA"]
[Tue Sep 01 04:04:32.831147 2026] [:error] [pid 9194:tid 140353180968704] [client 34.39.219.103:53814] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/microservice/.env"] [unique_id "apaVIIdqWCmIAB5WEG8WGQAAARg"]
[Tue Sep 01 04:04:34.056730 2026] [:error] [pid 6091:tid 140353189361408] [client 34.39.219.103:53826] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/service/.env"] [unique_id "apaVIskVYOXruxV21N7ROQAAAJc"]
[Tue Sep 01 04:04:35.121876 2026] [:error] [pid 9194:tid 140353231324928] [client 34.39.219.103:53834] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/api/v3/.env"] [unique_id "apaVI4dqWCmIAB5WEG8WIQAAARI"]
[Tue Sep 01 04:04:36.091505 2026] [:error] [pid 6089:tid 140353214539520] [client 34.39.219.103:53836] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/api/dev/.env"] [unique_id "apaVJJjeM2TaVrIYSc-UKgAAABQ"]
[Tue Sep 01 04:04:37.012111 2026] [:error] [pid 6411:tid 140353189361408] [client 34.39.219.103:53848] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/api/staging/.env"] [unique_id "apaVJa-5XxGfLhlq8xlRDQAAANc"]
[Tue Sep 01 04:04:37.885348 2026] [:error] [pid 9194:tid 140353273288448] [client 34.39.219.103:53856] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/vendor/.env"] [unique_id "apaVJYdqWCmIAB5WEG8WKgAAAQ0"]
[Tue Sep 01 04:04:38.800762 2026] [:error] [pid 9194:tid 140353248110336] [client 34.39.219.103:53868] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/lib/.env"] [unique_id "apaVJodqWCmIAB5WEG8WLgAAARA"]
[Tue Sep 01 04:04:39.821204 2026] [:error] [pid 9194:tid 140353435567872] [client 34.39.219.103:53876] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/resources/.env"] [unique_id "apaVJ4dqWCmIAB5WEG8WMwAAAQI"]
[Tue Sep 01 04:04:40.793856 2026] [:error] [pid 9194:tid 140353214539520] [client 34.39.219.103:53888] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/assets/.env"] [unique_id "apaVKIdqWCmIAB5WEG8WNwAAARQ"]
[Tue Sep 01 04:04:41.862382 2026] [:error] [pid 9194:tid 140353264895744] [client 34.39.219.103:34278] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/uploads/.env"] [unique_id "apaVKYdqWCmIAB5WEG8WPQAAAQ4"]
[Tue Sep 01 04:04:43.259299 2026] [:error] [pid 6411:tid 140353206146816] [client 34.39.219.103:34290] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/internal/.env"] [unique_id "apaVK6-5XxGfLhlq8xlRIgAAANU"]
[Tue Sep 01 04:04:44.348144 2026] [:error] [pid 6091:tid 140353315251968] [client 34.39.219.103:34304] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/tools/.env"] [unique_id "apaVLMkVYOXruxV21N7RSwAAAIg"]
[Tue Sep 01 04:04:45.290323 2026] [:error] [pid 6090:tid 140353452353280] [client 34.39.219.103:34310] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/scripts/.env"] [unique_id "apaVLbPf1VxWhFqgvWu0NwAAAEA"]
[Tue Sep 01 04:04:46.336849 2026] [:error] [pid 6089:tid 140353273288448] [client 34.39.219.103:34320] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/bin/.env"] [unique_id "apaVLpjeM2TaVrIYSc-UTAAAAA0"]
[Tue Sep 01 04:04:47.425906 2026] [:error] [pid 6411:tid 140353357215488] [client 34.39.219.103:34332] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/sbin/.env"] [unique_id "apaVL6-5XxGfLhlq8xlRNAAAAMM"]
[Tue Sep 01 04:04:48.524994 2026] [:error] [pid 6090:tid 140353180968704] [client 34.39.219.103:34338] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/local/.env"] [unique_id "apaVMLPf1VxWhFqgvWu0PwAAAFg"]
[Tue Sep 01 04:04:49.541732 2026] [:error] [pid 6411:tid 140353180968704] [client 34.39.219.103:34352] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/portal/.env"] [unique_id "apaVMa-5XxGfLhlq8xlRPwAAANg"]
[Tue Sep 01 04:04:50.521783 2026] [:error] [pid 9194:tid 140353298466560] [client 34.39.219.103:34368] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/dashboard/.env"] [unique_id "apaVModqWCmIAB5WEG8WcwAAAQo"]
[Tue Sep 01 04:04:51.468182 2026] [:error] [pid 6411:tid 140353231324928] [client 34.39.219.103:38652] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/panel/.env"] [unique_id "apaVM6-5XxGfLhlq8xlRRAAAANI"]
[Tue Sep 01 04:04:52.589938 2026] [:error] [pid 9194:tid 140353180968704] [client 34.39.219.103:38656] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/crm/.env"] [unique_id "apaVNIdqWCmIAB5WEG8WfwAAARg"]
[Tue Sep 01 04:04:53.898624 2026] [:error] [pid 9194:tid 140353273288448] [client 34.39.219.103:38670] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/erp/.env"] [unique_id "apaVNYdqWCmIAB5WEG8WhQAAAQ0"]
[Tue Sep 01 04:04:55.004851 2026] [:error] [pid 6091:tid 140353348822784] [client 34.39.219.103:38674] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/shop/.env"] [unique_id "apaVN8kVYOXruxV21N7RfgAAAIQ"]
[Tue Sep 01 04:04:55.948135 2026] [:error] [pid 9194:tid 140353273288448] [client 34.39.219.103:38688] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/store/.env"] [unique_id "apaVN4dqWCmIAB5WEG8WkQAAAQ0"]
[Tue Sep 01 04:04:56.791437 2026] [:error] [pid 6091:tid 140353281681152] [client 34.39.219.103:38704] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/saas/.env"] [unique_id "apaVOMkVYOXruxV21N7RfwAAAIw"]
[Tue Sep 01 04:04:57.637898 2026] [:error] [pid 6090:tid 140353323644672] [client 34.39.219.103:38712] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/client/.env"] [unique_id "apaVObPf1VxWhFqgvWu0RAAAAEc"]
[Tue Sep 01 04:04:58.528489 2026] [:error] [pid 9194:tid 140353214539520] [client 34.39.219.103:38722] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/project/.env"] [unique_id "apaVOodqWCmIAB5WEG8WmgAAARQ"]
[Tue Sep 01 04:04:59.628162 2026] [:error] [pid 6089:tid 140353315251968] [client 34.39.219.103:38730] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/admin-panel/.env"] [unique_id "apaVO5jeM2TaVrIYSc-UZwAAAAg"]
[Tue Sep 01 04:05:00.681649 2026] [:error] [pid 6091:tid 140353332037376] [client 34.39.219.103:38744] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/control-panel/.env"] [unique_id "apaVPMkVYOXruxV21N7RhQAAAIY"]
[Tue Sep 01 04:05:01.717114 2026] [:error] [pid 9194:tid 140353189361408] [client 34.39.219.103:57692] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/user-panel/.env"] [unique_id "apaVPYdqWCmIAB5WEG8WogAAARc"]
[Tue Sep 01 04:05:02.779710 2026] [:error] [pid 6090:tid 140353264895744] [client 34.39.219.103:57708] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/node/.env"] [unique_id "apaVPrPf1VxWhFqgvWu0RwAAAE4"]
[Tue Sep 01 04:05:03.851670 2026] [:error] [pid 9194:tid 140353290073856] [client 34.39.219.103:57716] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/express/.env"] [unique_id "apaVP4dqWCmIAB5WEG8WqQAAAQs"]
[Tue Sep 01 04:05:04.829247 2026] [:error] [pid 6090:tid 140353281681152] [client 34.39.219.103:57722] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/next/.env"] [unique_id "apaVQLPf1VxWhFqgvWu0SQAAAEw"]
[Tue Sep 01 04:05:05.915430 2026] [:error] [pid 9194:tid 140353256503040] [client 34.39.219.103:57734] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/nuxt/.env"] [unique_id "apaVQYdqWCmIAB5WEG8WsQAAAQ8"]
[Tue Sep 01 04:05:06.943955 2026] [:error] [pid 9194:tid 140353298466560] [client 34.39.219.103:57744] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/nest/.env"] [unique_id "apaVQodqWCmIAB5WEG8WswAAAQo"]
[Tue Sep 01 04:05:08.422089 2026] [:error] [pid 6089:tid 140353452353280] [client 34.39.219.103:57746] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/react/.env"] [unique_id "apaVRJjeM2TaVrIYSc-UcwAAAAA"]
[Tue Sep 01 04:05:09.686979 2026] [:error] [pid 6090:tid 140353189361408] [client 34.39.219.103:57762] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/vue/.env"] [unique_id "apaVRbPf1VxWhFqgvWu0UAAAAFc"]
[Tue Sep 01 04:05:10.777592 2026] [:error] [pid 6411:tid 140353248110336] [client 34.39.219.103:57772] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/angular/.env"] [unique_id "apaVRq-5XxGfLhlq8xlRVQAAANA"]
[Tue Sep 01 04:05:11.875762 2026] [:error] [pid 9194:tid 140353197754112] [client 34.39.219.103:56080] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/svelte/.env"] [unique_id "apaVR4dqWCmIAB5WEG8WyQAAARY"]
[Tue Sep 01 04:05:12.969252 2026] [:error] [pid 6090:tid 140353264895744] [client 34.39.219.103:56092] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/vite/.env"] [unique_id "apaVSLPf1VxWhFqgvWu0VQAAAE4"]
[Tue Sep 01 04:05:14.016614 2026] [:error] [pid 6089:tid 140353248110336] [client 34.39.219.103:56094] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/backup/.env"] [unique_id "apaVSpjeM2TaVrIYSc-UdwAAABA"]
[Tue Sep 01 04:05:15.364187 2026] [:error] [pid 6090:tid 140353273288448] [client 34.39.219.103:56096] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/backups/.env"] [unique_id "apaVS7Pf1VxWhFqgvWu0VgAAAE0"]
[Tue Sep 01 04:05:16.344419 2026] [:error] [pid 6089:tid 140353239717632] [client 34.39.219.103:56098] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/old/.env"] [unique_id "apaVTJjeM2TaVrIYSc-UeAAAABE"]
[Tue Sep 01 04:05:17.307312 2026] [:error] [pid 6089:tid 140353264895744] [client 34.39.219.103:56112] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/tmp/.env"] [unique_id "apaVTZjeM2TaVrIYSc-UegAAAA4"]
[Tue Sep 01 04:05:18.214770 2026] [:error] [pid 9194:tid 140353197754112] [client 34.39.219.103:56114] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/temp/.env"] [unique_id "apaVTodqWCmIAB5WEG8W2wAAARY"]
[Tue Sep 01 04:05:19.206419 2026] [:error] [pid 6091:tid 140353323644672] [client 34.39.219.103:56126] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/lab/.env"] [unique_id "apaVT8kVYOXruxV21N7RoQAAAIc"]
[Tue Sep 01 04:05:20.218939 2026] [:error] [pid 9194:tid 140353298466560] [client 34.39.219.103:56138] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/cronlab/.env"] [unique_id "apaVUIdqWCmIAB5WEG8W4wAAAQo"]
[Tue Sep 01 04:05:21.292835 2026] [:error] [pid 6091:tid 140353332037376] [client 34.39.219.103:56142] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/cron/.env"] [unique_id "apaVUckVYOXruxV21N7RogAAAIY"]
[Tue Sep 01 04:05:22.278990 2026] [:error] [pid 9194:tid 140353281681152] [client 34.39.219.103:43438] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/en/.env"] [unique_id "apaVUodqWCmIAB5WEG8W6wAAAQw"]
[Tue Sep 01 04:05:23.428700 2026] [:error] [pid 6411:tid 140353273288448] [client 34.39.219.103:43450] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/administrator/.env"] [unique_id "apaVU6-5XxGfLhlq8xlRWQAAAM0"]
[Tue Sep 01 04:05:24.721923 2026] [:error] [pid 6090:tid 140353239717632] [client 34.39.219.103:43460] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/psnlink/.env"] [unique_id "apaVVLPf1VxWhFqgvWu0WAAAAFE"]
[Tue Sep 01 04:05:25.822076 2026] [:error] [pid 6091:tid 140353206146816] [client 34.39.219.103:43474] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/exapi/.env"] [unique_id "apaVVckVYOXruxV21N7RpQAAAJU"]
[Tue Sep 01 04:05:26.850403 2026] [:error] [pid 9194:tid 140353214539520] [client 34.39.219.103:43486] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/sitemaps/.env"] [unique_id "apaVVodqWCmIAB5WEG8W_gAAARQ"]
[Tue Sep 01 04:05:27.928452 2026] [:error] [pid 6090:tid 140353264895744] [client 34.39.219.103:43500] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env.backup1"] [unique_id "apaVV7Pf1VxWhFqgvWu0XQAAAE4"]
[Tue Sep 01 04:05:29.053623 2026] [:error] [pid 6411:tid 140353197754112] [client 34.39.219.103:43510] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env.backup2"] [unique_id "apaVWa-5XxGfLhlq8xlRXAAAANY"]
[Tue Sep 01 04:05:30.062784 2026] [:error] [pid 6091:tid 140353306859264] [client 34.39.219.103:43514] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/logs/.env"] [unique_id "apaVWskVYOXruxV21N7RqQAAAIk"]
[Tue Sep 01 04:05:31.356242 2026] [:error] [pid 6090:tid 140353452353280] [client 34.39.219.103:43528] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/mailer/.env"] [unique_id "apaVW7Pf1VxWhFqgvWu0YgAAAEA"]
[Tue Sep 01 04:05:32.805913 2026] [:error] [pid 9194:tid 140353273288448] [client 34.39.219.103:53200] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/mail/.env"] [unique_id "apaVXIdqWCmIAB5WEG8XEgAAAQ0"]
[Tue Sep 01 04:05:34.074875 2026] [:error] [pid 6089:tid 140353197754112] [client 34.39.219.103:53212] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/email/.env"] [unique_id "apaVXpjeM2TaVrIYSc-UkQAAABY"]
[Tue Sep 01 04:05:35.036208 2026] [:error] [pid 6089:tid 140353306859264] [client 34.39.219.103:53228] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/smtp/.env"] [unique_id "apaVX5jeM2TaVrIYSc-UnAAAAAk"]
[Tue Sep 01 04:05:36.228163 2026] [:error] [pid 6411:tid 140353298466560] [client 34.39.219.103:53236] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/mailing/.env"] [unique_id "apaVYK-5XxGfLhlq8xlRYwAAAMo"]
[Tue Sep 01 04:05:37.361701 2026] [:error] [pid 6411:tid 140353197754112] [client 34.39.219.103:53252] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/notifications/.env"] [unique_id "apaVYa-5XxGfLhlq8xlRZQAAANY"]
[Tue Sep 01 04:05:38.505334 2026] [:error] [pid 6411:tid 140353290073856] [client 34.39.219.103:53262] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/notify/.env"] [unique_id "apaVYq-5XxGfLhlq8xlRZwAAAMs"]
[Tue Sep 01 04:05:40.081068 2026] [:error] [pid 6411:tid 140353264895744] [client 34.39.219.103:53268] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/sender/.env"] [unique_id "apaVZK-5XxGfLhlq8xlRaAAAAM4"]
[Tue Sep 01 04:05:41.157856 2026] [:error] [pid 6411:tid 140353357215488] [client 34.39.219.103:53274] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/campaign/.env"] [unique_id "apaVZa-5XxGfLhlq8xlRaQAAAMM"]
[Tue Sep 01 04:05:42.157282 2026] [:error] [pid 6411:tid 140353239717632] [client 34.39.219.103:57402] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/newsletter/.env"] [unique_id "apaVZq-5XxGfLhlq8xlRbAAAANE"]
[Tue Sep 01 04:05:43.154583 2026] [:error] [pid 6090:tid 140353273288448] [client 34.39.219.103:57418] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/ses/.env"] [unique_id "apaVZ7Pf1VxWhFqgvWu0agAAAE0"]
[Tue Sep 01 04:05:44.062856 2026] [:error] [pid 9194:tid 140353222932224] [client 34.39.219.103:57434] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/sendgrid/.env"] [unique_id "apaVaIdqWCmIAB5WEG8XJQAAARM"]
[Tue Sep 01 04:05:45.018305 2026] [:error] [pid 6090:tid 140353452353280] [client 34.39.219.103:57444] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/sparkpost/.env"] [unique_id "apaVabPf1VxWhFqgvWu0bQAAAEA"]
[Tue Sep 01 04:05:46.326281 2026] [:error] [pid 6090:tid 140353248110336] [client 34.39.219.103:57460] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/postmark/.env"] [unique_id "apaVarPf1VxWhFqgvWu0bgAAAFA"]
[Tue Sep 01 04:05:47.340503 2026] [:error] [pid 6089:tid 140353452353280] [client 34.39.219.103:57464] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/mailgun/.env"] [unique_id "apaVa5jeM2TaVrIYSc-U9AAAAAA"]
[Tue Sep 01 04:05:48.552619 2026] [:error] [pid 9194:tid 140353340430080] [client 34.39.219.103:57468] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/mandrill/.env"] [unique_id "apaVbIdqWCmIAB5WEG8XMQAAAQU"]
[Tue Sep 01 04:05:49.923008 2026] [:error] [pid 6091:tid 140353332037376] [client 34.39.219.103:57484] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/mailjet/.env"] [unique_id "apaVbckVYOXruxV21N7RxwAAAIY"]
[Tue Sep 01 04:05:51.078180 2026] [:error] [pid 6411:tid 140353239717632] [client 34.39.219.103:57486] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/brevo/.env"] [unique_id "apaVb6-5XxGfLhlq8xlRfgAAANE"]
[Tue Sep 01 04:05:52.337565 2026] [:error] [pid 9194:tid 140353435567872] [client 34.39.219.103:42314] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/transactional/.env"] [unique_id "apaVcIdqWCmIAB5WEG8XTAAAAQI"]
[Tue Sep 01 04:05:53.473304 2026] [:error] [pid 6411:tid 140353435567872] [client 34.39.219.103:42324] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/bulk/.env"] [unique_id "apaVca-5XxGfLhlq8xlRiwAAAMI"]
[Tue Sep 01 04:05:54.869881 2026] [:error] [pid 6091:tid 140353323644672] [client 34.39.219.103:42334] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/aws/.env"] [unique_id "apaVcskVYOXruxV21N7R0gAAAIc"]
[Tue Sep 01 04:05:55.875094 2026] [:error] [pid 6411:tid 140353348822784] [client 34.39.219.103:42336] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/azure/.env"] [unique_id "apaVc6-5XxGfLhlq8xlRjQAAAMQ"]
[Tue Sep 01 04:05:56.888109 2026] [:error] [pid 6089:tid 140353323644672] [client 34.39.219.103:42340] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/gcp/.env"] [unique_id "apaVdJjeM2TaVrIYSc-VCAAAAAc"]
[Tue Sep 01 04:05:58.493449 2026] [:error] [pid 9194:tid 140353348822784] [client 34.39.219.103:42348] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/cloud/.env"] [unique_id "apaVdodqWCmIAB5WEG8XZwAAAQQ"]
[Tue Sep 01 04:05:59.714116 2026] [:error] [pid 9194:tid 140353214539520] [client 34.39.219.103:42364] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/infrastructure/.env"] [unique_id "apaVd4dqWCmIAB5WEG8XcAAAARQ"]
[Tue Sep 01 04:06:00.745585 2026] [:error] [pid 6090:tid 140353189361408] [client 34.39.219.103:42374] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/docker/.env"] [unique_id "apaVeLPf1VxWhFqgvWu0hQAAAFc"]
[Tue Sep 01 04:06:01.713753 2026] [:error] [pid 6089:tid 140353290073856] [client 34.39.219.103:45420] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/k8s/.env"] [unique_id "apaVeZjeM2TaVrIYSc-VDAAAAAs"]
[Tue Sep 01 04:06:03.189232 2026] [:error] [pid 6089:tid 140353222932224] [client 34.39.219.103:45422] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/kubernetes/.env"] [unique_id "apaVe5jeM2TaVrIYSc-VDgAAABM"]
[Tue Sep 01 04:06:04.302828 2026] [:error] [pid 6411:tid 140353306859264] [client 34.39.219.103:45432] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/terraform/.env"] [unique_id "apaVfK-5XxGfLhlq8xlRogAAAMk"]
[Tue Sep 01 04:06:05.547276 2026] [:error] [pid 9194:tid 140353443960576] [client 34.39.219.103:45448] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/ansible/.env"] [unique_id "apaVfYdqWCmIAB5WEG8XgwAAAQE"]
[Tue Sep 01 04:06:06.667212 2026] [:error] [pid 6411:tid 140353281681152] [client 34.39.219.103:45450] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.git/.env"] [unique_id "apaVfq-5XxGfLhlq8xlRpQAAAMw"]
[Tue Sep 01 04:06:07.676165 2026] [:error] [pid 6091:tid 140353452353280] [client 34.39.219.103:45456] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/ci/.env"] [unique_id "apaVf8kVYOXruxV21N7R5AAAAIA"]
[Tue Sep 01 04:06:08.595389 2026] [:error] [pid 9194:tid 140353340430080] [client 34.39.219.103:45462] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/cd/.env"] [unique_id "apaVgIdqWCmIAB5WEG8XhgAAAQU"]
[Tue Sep 01 04:06:12.755763 2026] [:error] [pid 6091:tid 140353239717632] [client 34.39.219.103:54210] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/gitlab/.env"] [unique_id "apaVhMkVYOXruxV21N7R6AAAAJE"]
[Tue Sep 01 04:06:13.890313 2026] [:error] [pid 6090:tid 140353340430080] [client 34.39.219.103:54214] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/github/.env"] [unique_id "apaVhbPf1VxWhFqgvWu0ngAAAEU"]
[Tue Sep 01 04:06:15.070812 2026] [:error] [pid 6090:tid 140353248110336] [client 34.39.219.103:54230] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/actions/.env"] [unique_id "apaVh7Pf1VxWhFqgvWu0oQAAAFA"]
[Tue Sep 01 04:06:16.990917 2026] [:error] [pid 6089:tid 140353180968704] [client 34.39.219.103:54236] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/circleci/.env"] [unique_id "apaViJjeM2TaVrIYSc-VGAAAABg"]
[Tue Sep 01 04:06:18.195045 2026] [:error] [pid 6091:tid 140353214539520] [client 34.39.219.103:54240] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/travis/.env"] [unique_id "apaViskVYOXruxV21N7R7QAAAJQ"]
[Tue Sep 01 04:06:19.237919 2026] [:error] [pid 6091:tid 140353281681152] [client 34.39.219.103:54246] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/buildkite/.env"] [unique_id "apaVi8kVYOXruxV21N7R7gAAAIw"]
[Tue Sep 01 04:06:20.301757 2026] [:error] [pid 6089:tid 140353452353280] [client 34.39.219.103:54262] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/mysql/.env"] [unique_id "apaVjJjeM2TaVrIYSc-VGwAAAAA"]
[Tue Sep 01 04:06:21.449240 2026] [:error] [pid 9194:tid 140353357215488] [client 34.39.219.103:46740] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/postgres/.env"] [unique_id "apaVjYdqWCmIAB5WEG8XigAAAQM"]
[Tue Sep 01 04:06:22.604713 2026] [:error] [pid 6089:tid 140353348822784] [client 34.39.219.103:46750] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/mongodb/.env"] [unique_id "apaVjpjeM2TaVrIYSc-VHQAAAAQ"]
[Tue Sep 01 04:06:23.683355 2026] [:error] [pid 9194:tid 140353315251968] [client 34.39.219.103:46766] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/redis/.env"] [unique_id "apaVj4dqWCmIAB5WEG8XjQAAAQg"]
[Tue Sep 01 04:06:24.901174 2026] [:error] [pid 9194:tid 140353452353280] [client 34.39.219.103:46770] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/elasticsearch/.env"] [unique_id "apaVkIdqWCmIAB5WEG8XjwAAAQA"]
[Tue Sep 01 04:06:26.288275 2026] [:error] [pid 6411:tid 140353315251968] [client 34.39.219.103:46782] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/rabbitmq/.env"] [unique_id "apaVkq-5XxGfLhlq8xlRtgAAAMg"]
[Tue Sep 01 04:06:27.461342 2026] [:error] [pid 9194:tid 140353332037376] [client 34.39.219.103:46784] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/kafka/.env"] [unique_id "apaVk4dqWCmIAB5WEG8XkgAAAQY"]
[Tue Sep 01 04:06:28.672774 2026] [:error] [pid 6091:tid 140353273288448] [client 34.39.219.103:46800] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/queue/.env"] [unique_id "apaVlMkVYOXruxV21N7R9QAAAI0"]
[Tue Sep 01 04:06:29.791430 2026] [:error] [pid 6091:tid 140353214539520] [client 34.39.219.103:46804] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/worker/.env"] [unique_id "apaVlckVYOXruxV21N7R9gAAAJQ"]
[Tue Sep 01 04:06:30.842730 2026] [:error] [pid 6411:tid 140353231324928] [client 34.39.219.103:46818] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/job/.env"] [unique_id "apaVlq-5XxGfLhlq8xlRvQAAANI"]
[Tue Sep 01 04:06:32.446022 2026] [:error] [pid 9194:tid 140353357215488] [client 34.39.219.103:45186] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/test/.env"] [unique_id "apaVmIdqWCmIAB5WEG8XmAAAAQM"]
[Tue Sep 01 04:06:33.781769 2026] [:error] [pid 6089:tid 140353340430080] [client 34.39.219.103:45196] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/qa/.env"] [unique_id "apaVmZjeM2TaVrIYSc-VJgAAAAU"]
[Tue Sep 01 04:06:35.222490 2026] [:error] [pid 9194:tid 140353452353280] [client 34.39.219.103:45200] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/preview/.env"] [unique_id "apaVm4dqWCmIAB5WEG8XoAAAAQA"]
[Tue Sep 01 04:06:36.646800 2026] [:error] [pid 6091:tid 140353206146816] [client 34.39.219.103:45202] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/beta/.env"] [unique_id "apaVnMkVYOXruxV21N7R-gAAAJU"]
[Tue Sep 01 04:06:37.879575 2026] [:error] [pid 9194:tid 140353256503040] [client 34.39.219.103:45214] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/uat/.env"] [unique_id "apaVnYdqWCmIAB5WEG8XpQAAAQ8"]
[Tue Sep 01 04:06:39.110603 2026] [:error] [pid 6411:tid 140353206146816] [client 34.39.219.103:45226] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/stage/.env"] [unique_id "apaVn6-5XxGfLhlq8xlRzAAAANU"]
[Tue Sep 01 04:06:40.187407 2026] [:error] [pid 6089:tid 140353323644672] [client 34.39.219.103:45238] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/development/.env"] [unique_id "apaVoJjeM2TaVrIYSc-VKgAAAAc"]
[Tue Sep 01 04:06:41.191352 2026] [:error] [pid 6411:tid 140353180968704] [client 34.39.219.103:45250] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/production/.env"] [unique_id "apaVoa-5XxGfLhlq8xlRzwAAANg"]
[Tue Sep 01 04:06:42.228859 2026] [:error] [pid 6411:tid 140353239717632] [client 34.39.219.103:39238] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/config/app/.env"] [unique_id "apaVoq-5XxGfLhlq8xlR0gAAANE"]
[Tue Sep 01 04:06:43.301994 2026] [proxy_fcgi:error] [pid 9194:tid 140353239717632] [client 34.39.219.103:39254] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 04:06:43.537364 2026] [proxy_fcgi:error] [pid 9194:tid 140353197754112] [client 34.39.219.103:39254] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 04:06:43.782220 2026] [proxy_fcgi:error] [pid 9194:tid 140353348822784] [client 34.39.219.103:39254] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 04:06:44.021739 2026] [proxy_fcgi:error] [pid 9194:tid 140353298466560] [client 34.39.219.103:39254] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 04:06:44.270666 2026] [proxy_fcgi:error] [pid 9194:tid 140353231324928] [client 34.39.219.103:39254] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 04:06:44.569035 2026] [proxy_fcgi:error] [pid 9194:tid 140353264895744] [client 34.39.219.103:39254] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 04:06:45.029734 2026] [proxy_fcgi:error] [pid 9194:tid 140353256503040] [client 34.39.219.103:39254] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 04:06:45.546863 2026] [proxy_fcgi:error] [pid 9194:tid 140353180968704] [client 34.39.219.103:39254] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 04:06:45.870508 2026] [proxy_fcgi:error] [pid 9194:tid 140353214539520] [client 34.39.219.103:39254] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 04:06:56.045441 2026] [proxy_fcgi:error] [pid 9194:tid 140353306859264] [client 34.39.219.103:37384] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 04:06:56.330765 2026] [proxy_fcgi:error] [pid 9194:tid 140353248110336] [client 34.39.219.103:37384] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 04:06:56.740894 2026] [proxy_fcgi:error] [pid 9194:tid 140353315251968] [client 34.39.219.103:37384] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 04:06:57.201876 2026] [proxy_fcgi:error] [pid 9194:tid 140353323644672] [client 34.39.219.103:37384] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 04:06:57.445292 2026] [proxy_fcgi:error] [pid 9194:tid 140353197754112] [client 34.39.219.103:37384] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 04:06:57.730754 2026] [proxy_fcgi:error] [pid 9194:tid 140353332037376] [client 34.39.219.103:37384] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 04:06:58.609178 2026] [:error] [pid 9194:tid 140353340430080] [client 34.39.219.103:37384] [client 34.39.219.103] ModSecurity: Warning. Operator GT matched 25 at IP:scan_404_count. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "11"] [id "9000204"] [msg "Scanner detected - blocking IP 1h"] [tag "scanner-detect"] [hostname "menabern.com"] [uri "/webroot/index.php/_environment"] [unique_id "apaVsodqWCmIAB5WEG8X1AAAAQU"]
[Tue Sep 01 04:06:58.980887 2026] [:error] [pid 9194:tid 140353443960576] [client 34.39.219.103:37384] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/mail/phpinfo.php"] [unique_id "apaVsodqWCmIAB5WEG8X1gAAAQE"]
[Tue Sep 01 04:07:00.169708 2026] [:error] [pid 6091:tid 140353273288448] [client 34.39.219.103:37394] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/cpanel/phpinfo.php"] [unique_id "apaVtMkVYOXruxV21N7SBwAAAI0"]
[Tue Sep 01 04:07:01.567328 2026] [:error] [pid 6411:tid 140353214539520] [client 34.39.219.103:48684] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/hosting/phpinfo.php"] [unique_id "apaVta-5XxGfLhlq8xlR6AAAANQ"]
[Tue Sep 01 04:07:03.078586 2026] [:error] [pid 6090:tid 140353340430080] [client 34.39.219.103:48690] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/webmail/phpinfo.php"] [unique_id "apaVt7Pf1VxWhFqgvWu00AAAAEU"]
[Tue Sep 01 04:07:04.169554 2026] [:error] [pid 6411:tid 140353206146816] [client 34.39.219.103:48696] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/smtp/phpinfo.php"] [unique_id "apaVuK-5XxGfLhlq8xlR6wAAANU"]
[Tue Sep 01 04:07:05.618339 2026] [:error] [pid 6090:tid 140353256503040] [client 34.39.219.103:48712] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/phpinfo.php.bak"] [unique_id "apaVubPf1VxWhFqgvWu01AAAAE8"]
[Tue Sep 01 04:07:06.670726 2026] [:error] [pid 9194:tid 140353222932224] [client 34.39.219.103:48724] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/phpinfo.php.old"] [unique_id "apaVuodqWCmIAB5WEG8X4QAAARM"]
[Tue Sep 01 04:07:07.682590 2026] [:error] [pid 6411:tid 140353256503040] [client 34.39.219.103:48728] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/phpinfo.php~"] [unique_id "apaVu6-5XxGfLhlq8xlR7wAAAM8"]
[Tue Sep 01 04:07:08.768993 2026] [:error] [pid 6091:tid 140353197754112] [client 34.39.219.103:48744] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/info.php.bak"] [unique_id "apaVvMkVYOXruxV21N7SDgAAAJY"]
[Tue Sep 01 04:07:10.053018 2026] [:error] [pid 9194:tid 140353348822784] [client 34.39.219.103:48750] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/phpinfo.php.save"] [unique_id "apaVvodqWCmIAB5WEG8X6wAAAQQ"]
[Tue Sep 01 04:07:11.238067 2026] [:error] [pid 6411:tid 140353348822784] [client 34.39.219.103:48764] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/staging/phpinfo.php"] [unique_id "apaVv6-5XxGfLhlq8xlR9gAAAMQ"]
[Tue Sep 01 04:07:12.392977 2026] [:error] [pid 6091:tid 140353180968704] [client 34.39.219.103:42352] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/beta/phpinfo.php"] [unique_id "apaVwMkVYOXruxV21N7SrQAAAJg"]
[Tue Sep 01 04:07:13.609275 2026] [:error] [pid 6411:tid 140353452353280] [client 34.39.219.103:42366] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/uat/phpinfo.php"] [unique_id "apaVwa-5XxGfLhlq8xlSEAAAAMA"]
[Tue Sep 01 04:07:14.679989 2026] [:error] [pid 6091:tid 140353357215488] [client 34.39.219.103:42368] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/qa/phpinfo.php"] [unique_id "apaVwskVYOXruxV21N7S8AAAAIM"]
[Tue Sep 01 04:07:15.827113 2026] [:error] [pid 6411:tid 140353214539520] [client 34.39.219.103:42376] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/preview/phpinfo.php"] [unique_id "apaVw6-5XxGfLhlq8xlSqwAAANQ"]
[Tue Sep 01 04:07:19.913241 2026] [:error] [pid 6089:tid 140353248110336] [client 34.39.219.103:42390] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/htdocs/phpinfo.php"] [unique_id "apaVx5jeM2TaVrIYSc-VeAAAABA"]
[Tue Sep 01 04:07:20.979436 2026] [:error] [pid 6091:tid 140353332037376] [client 34.39.219.103:42400] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/public_html/phpinfo.php"] [unique_id "apaVyMkVYOXruxV21N7TZwAAAIY"]
[Tue Sep 01 04:07:21.989810 2026] [:error] [pid 6091:tid 140353306859264] [client 34.39.219.103:55154] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/site/phpinfo.php"] [unique_id "apaVyckVYOXruxV21N7TagAAAIk"]
[Tue Sep 01 04:07:23.153268 2026] [:error] [pid 9194:tid 140353323644672] [client 34.39.219.103:55162] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/docs/phpinfo.php"] [unique_id "apaVy4dqWCmIAB5WEG8Y9wAAAQc"]
[Tue Sep 01 04:07:24.422817 2026] [:error] [pid 6089:tid 140353264895744] [client 34.39.219.103:55176] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-admin/phpinfo.php"] [unique_id "apaVzJjeM2TaVrIYSc-VfQAAAA4"]
[Tue Sep 01 04:07:25.914818 2026] [:error] [pid 9194:tid 140353340430080] [client 34.39.219.103:55184] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/administrator/phpinfo.php"] [unique_id "apaVzYdqWCmIAB5WEG8ZTwAAAQU"]
[Tue Sep 01 04:07:26.967662 2026] [:error] [pid 6411:tid 140353256503040] [client 34.39.219.103:55188] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/core/phpinfo.php"] [unique_id "apaVzq-5XxGfLhlq8xlTAAAAAM8"]
[Tue Sep 01 04:07:28.151577 2026] [:error] [pid 6411:tid 140353306859264] [client 34.39.219.103:55192] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/includes/phpinfo.php"] [unique_id "apaV0K-5XxGfLhlq8xlTBQAAAMk"]
[Tue Sep 01 04:07:29.231119 2026] [:error] [pid 9194:tid 140353197754112] [client 34.39.219.103:55196] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/service-account.json"] [unique_id "apaV0YdqWCmIAB5WEG8ZVwAAARY"]
[Tue Sep 01 04:07:30.372989 2026] [:error] [pid 6411:tid 140353222932224] [client 34.39.219.103:55212] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/sa.json"] [unique_id "apaV0q-5XxGfLhlq8xlTCwAAANM"]
[Tue Sep 01 04:07:31.431177 2026] [:error] [pid 6411:tid 140353323644672] [client 34.39.219.103:55356] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/gcp-key.json"] [unique_id "apaV06-5XxGfLhlq8xlTGwAAAMc"]
[Tue Sep 01 04:07:32.955084 2026] [:error] [pid 6411:tid 140353273288448] [client 34.39.219.103:55358] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/gcp-credentials.json"] [unique_id "apaV1K-5XxGfLhlq8xlTbQAAAM0"]
[Tue Sep 01 04:07:33.893865 2026] [:error] [pid 6089:tid 140353239717632] [client 34.39.219.103:55368] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/gcp-sa.json"] [unique_id "apaV1ZjeM2TaVrIYSc-V8AAAABE"]
[Tue Sep 01 04:07:35.086368 2026] [:error] [pid 6089:tid 140353189361408] [client 34.39.219.103:55380] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/credentials.json"] [unique_id "apaV15jeM2TaVrIYSc-V8wAAABc"]
[Tue Sep 01 04:07:36.142036 2026] [:error] [pid 6411:tid 140353443960576] [client 34.39.219.103:55384] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/google-credentials.json"] [unique_id "apaV2K-5XxGfLhlq8xlT3AAAAME"]
[Tue Sep 01 04:07:37.140315 2026] [:error] [pid 6089:tid 140353348822784] [client 34.39.219.103:55394] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/google-key.json"] [unique_id "apaV2ZjeM2TaVrIYSc-V9gAAAAQ"]
[Tue Sep 01 04:07:38.186412 2026] [:error] [pid 6411:tid 140353323644672] [client 34.39.219.103:55404] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/.config/gcloud/application_default_credentials.json"] [unique_id "apaV2q-5XxGfLhlq8xlT7wAAAMc"]
[Tue Sep 01 04:07:39.210042 2026] [:error] [pid 6411:tid 140353214539520] [client 34.39.219.103:55414] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/application_default_credentials.json"] [unique_id "apaV26-5XxGfLhlq8xlT8QAAANQ"]
[Tue Sep 01 04:07:40.232398 2026] [:error] [pid 6411:tid 140353298466560] [client 34.39.219.103:55430] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/key.json"] [unique_id "apaV3K-5XxGfLhlq8xlT9QAAAMo"]
[Tue Sep 01 04:07:41.532551 2026] [:error] [pid 6411:tid 140353264895744] [client 34.39.219.103:59686] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/keyfile.json"] [unique_id "apaV3a-5XxGfLhlq8xlT-gAAAM4"]
[Tue Sep 01 04:07:42.599404 2026] [:error] [pid 6089:tid 140353180968704] [client 34.39.219.103:59692] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/firebase-adminsdk.json"] [unique_id "apaV3pjeM2TaVrIYSc-V-wAAABg"]
[Tue Sep 01 04:07:43.609906 2026] [:error] [pid 9194:tid 140353306859264] [client 34.39.219.103:59700] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/firebase-key.json"] [unique_id "apaV34dqWCmIAB5WEG8bOAAAAQk"]
[Tue Sep 01 04:07:44.573019 2026] [:error] [pid 6411:tid 140353180968704] [client 34.39.219.103:59712] [client 34.39.219.103] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/"] [unique_id "apaV4K-5XxGfLhlq8xlUAgAAANg"]
[Tue Sep 01 04:09:12.195168 2026] [:error] [pid 6411:tid 140353306859264] [client 1.13.158.23:39128] [client 1.13.158.23] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||menabern.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "menabern.com"] [uri "/"] [unique_id "apaWOK-5XxGfLhlq8xlVxQAAAMk"]
[Tue Sep 01 04:17:23.802380 2026] [proxy_fcgi:error] [pid 6091:tid 140353348822784] [client 20.151.10.161:63428] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 04:17:23.907996 2026] [proxy_fcgi:error] [pid 6091:tid 140353452353280] [client 20.151.10.161:63428] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 04:17:24.034366 2026] [proxy_fcgi:error] [pid 6091:tid 140353222932224] [client 20.151.10.161:63428] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 04:17:24.139757 2026] [proxy_fcgi:error] [pid 6091:tid 140353281681152] [client 20.151.10.161:63428] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 04:17:24.251013 2026] [proxy_fcgi:error] [pid 6091:tid 140353214539520] [client 20.151.10.161:63428] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 04:17:24.354758 2026] [proxy_fcgi:error] [pid 6091:tid 140353206146816] [client 20.151.10.161:63428] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 04:17:24.458779 2026] [proxy_fcgi:error] [pid 6091:tid 140353357215488] [client 20.151.10.161:63428] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 04:17:24.564961 2026] [proxy_fcgi:error] [pid 6091:tid 140353340430080] [client 20.151.10.161:63428] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 04:17:24.673143 2026] [proxy_fcgi:error] [pid 6091:tid 140353189361408] [client 20.151.10.161:63428] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 04:17:24.780167 2026] [proxy_fcgi:error] [pid 6091:tid 140353197754112] [client 20.151.10.161:63428] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 04:17:24.885656 2026] [proxy_fcgi:error] [pid 6091:tid 140353248110336] [client 20.151.10.161:63428] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 04:17:24.989840 2026] [proxy_fcgi:error] [pid 6091:tid 140353231324928] [client 20.151.10.161:63428] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 04:17:25.095256 2026] [proxy_fcgi:error] [pid 6091:tid 140353443960576] [client 20.151.10.161:63428] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 04:17:25.200476 2026] [proxy_fcgi:error] [pid 6091:tid 140353180968704] [client 20.151.10.161:63428] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 04:17:25.305298 2026] [proxy_fcgi:error] [pid 6091:tid 140353273288448] [client 20.151.10.161:63428] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 04:17:25.409792 2026] [proxy_fcgi:error] [pid 6091:tid 140353306859264] [client 20.151.10.161:63428] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 04:17:25.514433 2026] [proxy_fcgi:error] [pid 6091:tid 140353290073856] [client 20.151.10.161:63428] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 04:17:25.617675 2026] [proxy_fcgi:error] [pid 6091:tid 140353435567872] [client 20.151.10.161:63428] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 04:17:25.721356 2026] [proxy_fcgi:error] [pid 6091:tid 140353323644672] [client 20.151.10.161:63428] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 04:17:25.825476 2026] [proxy_fcgi:error] [pid 6091:tid 140353239717632] [client 20.151.10.161:63428] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 04:17:25.929774 2026] [proxy_fcgi:error] [pid 6091:tid 140353298466560] [client 20.151.10.161:63428] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 04:17:26.034677 2026] [proxy_fcgi:error] [pid 6091:tid 140353264895744] [client 20.151.10.161:63428] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 04:17:26.142438 2026] [proxy_fcgi:error] [pid 6091:tid 140353348822784] [client 20.151.10.161:63428] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 04:17:26.244839 2026] [proxy_fcgi:error] [pid 6091:tid 140353452353280] [client 20.151.10.161:63428] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 04:17:26.348664 2026] [proxy_fcgi:error] [pid 6091:tid 140353222932224] [client 20.151.10.161:63428] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 04:17:26.348786 2026] [:error] [pid 6091:tid 140353222932224] [client 20.151.10.161:63428] [client 20.151.10.161] ModSecurity: Warning. Operator GT matched 25 at IP:scan_404_count. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "11"] [id "9000204"] [msg "Scanner detected - blocking IP 1h"] [tag "scanner-detect"] [hostname "menabern.com"] [uri "/h02ugyh.php"] [unique_id "apaYJskVYOXruxV21N7aggAAAJM"]
[Tue Sep 01 04:17:26.452966 2026] [:error] [pid 6091:tid 140353214539520] [client 20.151.10.161:63428] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/155.php"] [unique_id "apaYJskVYOXruxV21N7agwAAAJQ"]
[Tue Sep 01 04:17:26.682815 2026] [:error] [pid 6091:tid 140353357215488] [client 20.151.10.161:61964] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/ops.php"] [unique_id "apaYJskVYOXruxV21N7ahQAAAIM"]
[Tue Sep 01 04:17:26.898017 2026] [:error] [pid 6091:tid 140353197754112] [client 20.151.10.161:61960] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/mac.php"] [unique_id "apaYJskVYOXruxV21N7ahwAAAJY"]
[Tue Sep 01 04:17:27.107791 2026] [:error] [pid 6090:tid 140353231324928] [client 20.151.10.161:63452] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/makeasmtp.php"] [unique_id "apaYJ7Pf1VxWhFqgvWu5TwAAAFI"]
[Tue Sep 01 04:17:27.328706 2026] [:error] [pid 6091:tid 140353323644672] [client 20.151.10.161:62056] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/pucci.php"] [unique_id "apaYJ8kVYOXruxV21N7ajAAAAIc"]
[Tue Sep 01 04:17:27.541808 2026] [:error] [pid 6091:tid 140353298466560] [client 20.151.10.161:62068] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/puc.php"] [unique_id "apaYJ8kVYOXruxV21N7ajQAAAIo"]
[Tue Sep 01 04:17:27.749228 2026] [:error] [pid 6091:tid 140353452353280] [client 20.151.10.161:61962] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/8.php"] [unique_id "apaYJ8kVYOXruxV21N7ajgAAAIA"]
[Tue Sep 01 04:17:27.952045 2026] [:error] [pid 6411:tid 140353239717632] [client 20.151.10.161:63439] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/1.php"] [unique_id "apaYJ6-5XxGfLhlq8xld1wAAANE"]
[Tue Sep 01 04:17:28.162729 2026] [:error] [pid 9194:tid 140353256503040] [client 20.151.10.161:62073] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/admin.php"] [unique_id "apaYKIdqWCmIAB5WEG8pkwAAAQ8"]
[Tue Sep 01 04:17:28.368277 2026] [:error] [pid 9194:tid 140353290073856] [client 20.151.10.161:63469] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/edit.php"] [unique_id "apaYKIdqWCmIAB5WEG8plAAAAQs"]
[Tue Sep 01 04:17:28.574531 2026] [:error] [pid 9194:tid 140353197754112] [client 20.151.10.161:61965] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/inputs.php"] [unique_id "apaYKIdqWCmIAB5WEG8plQAAARY"]
[Tue Sep 01 04:17:28.785253 2026] [:error] [pid 6411:tid 140353435567872] [client 20.151.10.161:63443] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/av.php"] [unique_id "apaYKK-5XxGfLhlq8xld2AAAAMI"]
[Tue Sep 01 04:17:28.994955 2026] [:error] [pid 6089:tid 140353340430080] [client 20.151.10.161:63430] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/classwithtostring.php"] [unique_id "apaYKJjeM2TaVrIYSc-apQAAAAU"]
[Tue Sep 01 04:17:29.212509 2026] [:error] [pid 9194:tid 140353306859264] [client 20.151.10.161:63438] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/adminfuns.php"] [unique_id "apaYKYdqWCmIAB5WEG8pmAAAAQk"]
[Tue Sep 01 04:17:29.419468 2026] [:error] [pid 6091:tid 140353214539520] [client 20.151.10.161:62017] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/ms-edit.php"] [unique_id "apaYKckVYOXruxV21N7akQAAAJQ"]
[Tue Sep 01 04:17:29.630110 2026] [:error] [pid 9194:tid 140353348822784] [client 20.151.10.161:61956] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/222.php"] [unique_id "apaYKYdqWCmIAB5WEG8pmgAAAQQ"]
[Tue Sep 01 04:17:29.834389 2026] [:error] [pid 6411:tid 140353323644672] [client 20.151.10.161:61968] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/BDKR28WP.php"] [unique_id "apaYKa-5XxGfLhlq8xld3gAAAMc"]
[Tue Sep 01 04:17:30.047481 2026] [:error] [pid 6091:tid 140353323644672] [client 20.151.10.161:63440] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp.php"] [unique_id "apaYKskVYOXruxV21N7alwAAAIc"]
[Tue Sep 01 04:17:30.257601 2026] [:error] [pid 6090:tid 140353357215488] [client 20.151.10.161:63461] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/abcd.php"] [unique_id "apaYKrPf1VxWhFqgvWu5WwAAAEM"]
[Tue Sep 01 04:17:30.468611 2026] [:error] [pid 6411:tid 140353357215488] [client 20.151.10.161:62023] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/simple.php"] [unique_id "apaYKq-5XxGfLhlq8xld4gAAAMM"]
[Tue Sep 01 04:17:30.670159 2026] [:error] [pid 6411:tid 140353298466560] [client 20.151.10.161:63457] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/chosen.php"] [unique_id "apaYKq-5XxGfLhlq8xld6AAAAMo"]
[Tue Sep 01 04:17:30.875103 2026] [:error] [pid 6411:tid 140353315251968] [client 20.151.10.161:63460] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/als.php"] [unique_id "apaYKq-5XxGfLhlq8xld6gAAAMg"]
[Tue Sep 01 04:17:31.095144 2026] [:error] [pid 9194:tid 140353332037376] [client 20.151.10.161:61958] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/nox.php"] [unique_id "apaYK4dqWCmIAB5WEG8pqgAAAQY"]
[Tue Sep 01 04:17:31.303505 2026] [:error] [pid 6411:tid 140353273288448] [client 20.151.10.161:55492] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/file59.php"] [unique_id "apaYK6-5XxGfLhlq8xld6wAAAM0"]
[Tue Sep 01 04:17:31.505945 2026] [:error] [pid 6411:tid 140353452353280] [client 20.151.10.161:62020] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/admin.php"] [unique_id "apaYK6-5XxGfLhlq8xld8QAAAMA"]
[Tue Sep 01 04:17:31.707458 2026] [:error] [pid 9194:tid 140353180968704] [client 20.151.10.161:63424] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/xamp.php"] [unique_id "apaYK4dqWCmIAB5WEG8prwAAARg"]
[Tue Sep 01 04:17:31.914286 2026] [:error] [pid 6411:tid 140353306859264] [client 20.151.10.161:63480] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/bless.php"] [unique_id "apaYK6-5XxGfLhlq8xld-AAAAMk"]
[Tue Sep 01 04:17:32.121212 2026] [:error] [pid 9194:tid 140353315251968] [client 20.151.10.161:55497] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/f35.php"] [unique_id "apaYLIdqWCmIAB5WEG8ptgAAAQg"]
[Tue Sep 01 04:17:32.326649 2026] [:error] [pid 6089:tid 140353306859264] [client 20.151.10.161:55513] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/aaa.php"] [unique_id "apaYLJjeM2TaVrIYSc-arAAAAAk"]
[Tue Sep 01 04:17:32.533116 2026] [:error] [pid 9194:tid 140353290073856] [client 20.151.10.161:63427] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/gecko.php"] [unique_id "apaYLIdqWCmIAB5WEG8ptwAAAQs"]
[Tue Sep 01 04:17:32.735522 2026] [:error] [pid 9194:tid 140353231324928] [client 20.151.10.161:62074] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/xiugai.php"] [unique_id "apaYLIdqWCmIAB5WEG8puAAAARI"]
[Tue Sep 01 04:17:32.938573 2026] [:error] [pid 6411:tid 140353180968704] [client 20.151.10.161:61961] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/adminner.php"] [unique_id "apaYLK-5XxGfLhlq8xld-gAAANg"]
[Tue Sep 01 04:17:33.145374 2026] [:error] [pid 9194:tid 140353222932224] [client 20.151.10.161:62064] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/file1221.php"] [unique_id "apaYLYdqWCmIAB5WEG8puQAAARM"]
[Tue Sep 01 04:17:33.365512 2026] [:error] [pid 9194:tid 140353348822784] [client 20.151.10.161:62026] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/inx.php"] [unique_id "apaYLYdqWCmIAB5WEG8pugAAAQQ"]
[Tue Sep 01 04:17:33.589700 2026] [:error] [pid 9194:tid 140353435567872] [client 20.151.10.161:63478] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/reviall.php"] [unique_id "apaYLYdqWCmIAB5WEG8puwAAAQI"]
[Tue Sep 01 04:17:33.798060 2026] [:error] [pid 6411:tid 140353290073856] [client 20.151.10.161:63455] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/11.php"] [unique_id "apaYLa-5XxGfLhlq8xld-wAAAMs"]
[Tue Sep 01 04:17:34.018754 2026] [:error] [pid 9194:tid 140353264895744] [client 20.151.10.161:62027] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/File.php"] [unique_id "apaYLodqWCmIAB5WEG8pvAAAAQ4"]
[Tue Sep 01 04:17:34.235063 2026] [:error] [pid 9194:tid 140353298466560] [client 20.151.10.161:63466] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/fi22.php"] [unique_id "apaYLodqWCmIAB5WEG8pvQAAAQo"]
[Tue Sep 01 04:17:34.443520 2026] [:error] [pid 6089:tid 140353281681152] [client 20.151.10.161:63437] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/3PJcpMFsD8B.php"] [unique_id "apaYLpjeM2TaVrIYSc-asgAAAAw"]
[Tue Sep 01 04:17:34.657350 2026] [:error] [pid 6089:tid 140353214539520] [client 20.151.10.161:62038] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/a3ampzmbipnkpxeqhqpsanCdefault.php"] [unique_id "apaYLpjeM2TaVrIYSc-atwAAABQ"]
[Tue Sep 01 04:17:34.865583 2026] [:error] [pid 6090:tid 140353348822784] [client 20.151.10.161:62069] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/4PJcpMFsD8B.php"] [unique_id "apaYLrPf1VxWhFqgvWu5cQAAAEQ"]
[Tue Sep 01 04:17:35.075903 2026] [:error] [pid 9194:tid 140353332037376] [client 20.151.10.161:63454] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/i99z7zzbwtpteujvv6s8hiCdefault.php"] [unique_id "apaYL4dqWCmIAB5WEG8pvwAAAQY"]
[Tue Sep 01 04:17:35.283683 2026] [:error] [pid 6090:tid 140353323644672] [client 20.151.10.161:62079] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/gwaih1gfzp5vuwr04Cdefault.php"] [unique_id "apaYL7Pf1VxWhFqgvWu5fQAAAEc"]
[Tue Sep 01 04:17:35.490372 2026] [:error] [pid 6090:tid 140353222932224] [client 20.151.10.161:61970] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/1wvekeybd9it2di2vyipgr6Cdefault.php"] [unique_id "apaYL7Pf1VxWhFqgvWu5gQAAAFM"]
[Tue Sep 01 04:17:35.697398 2026] [:error] [pid 6411:tid 140353315251968] [client 20.151.10.161:63470] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/media.php"] [unique_id "apaYL6-5XxGfLhlq8xld_gAAAMg"]
[Tue Sep 01 04:17:35.900850 2026] [:error] [pid 6090:tid 140353348822784] [client 20.151.10.161:62053] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/inso.php"] [unique_id "apaYL7Pf1VxWhFqgvWu5iQAAAEQ"]
[Tue Sep 01 04:17:36.119136 2026] [:error] [pid 6090:tid 140353452353280] [client 20.151.10.161:62019] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/shiny.php"] [unique_id "apaYMLPf1VxWhFqgvWu5jgAAAEA"]
[Tue Sep 01 04:17:36.340980 2026] [:error] [pid 6090:tid 140353214539520] [client 20.151.10.161:63445] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/403dd.php"] [unique_id "apaYMLPf1VxWhFqgvWu5kgAAAFQ"]
[Tue Sep 01 04:17:36.545468 2026] [:error] [pid 6090:tid 140353357215488] [client 20.151.10.161:62061] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/baba.php"] [unique_id "apaYMLPf1VxWhFqgvWu5lgAAAEM"]
[Tue Sep 01 04:17:36.765719 2026] [:error] [pid 6090:tid 140353214539520] [client 20.151.10.161:62055] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/site.php"] [unique_id "apaYMLPf1VxWhFqgvWu5nQAAAFQ"]
[Tue Sep 01 04:17:36.988581 2026] [:error] [pid 6090:tid 140353222932224] [client 20.151.10.161:61959] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/cabs.php"] [unique_id "apaYMLPf1VxWhFqgvWu5pQAAAFM"]
[Tue Sep 01 04:17:37.196841 2026] [:error] [pid 6090:tid 140353443960576] [client 20.151.10.161:62072] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/insc.php"] [unique_id "apaYMbPf1VxWhFqgvWu5pwAAAEE"]
[Tue Sep 01 04:17:37.492114 2026] [:error] [pid 6090:tid 140353273288448] [client 20.151.10.161:62062] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/file.php"] [unique_id "apaYMbPf1VxWhFqgvWu5qAAAAE0"]
[Tue Sep 01 04:17:37.710459 2026] [:error] [pid 6090:tid 140353214539520] [client 20.151.10.161:55548] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/dex.php"] [unique_id "apaYMbPf1VxWhFqgvWu5qQAAAFQ"]
[Tue Sep 01 04:17:37.927557 2026] [:error] [pid 6090:tid 140353348822784] [client 20.151.10.161:62033] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/key.php"] [unique_id "apaYMbPf1VxWhFqgvWu5qwAAAEQ"]
[Tue Sep 01 04:17:38.130911 2026] [:error] [pid 6090:tid 140353357215488] [client 20.151.10.161:55541] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/kir.php"] [unique_id "apaYMrPf1VxWhFqgvWu5rAAAAEM"]
[Tue Sep 01 04:17:38.339086 2026] [:error] [pid 6090:tid 140353306859264] [client 20.151.10.161:63473] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/nofile.php"] [unique_id "apaYMrPf1VxWhFqgvWu5rQAAAEk"]
[Tue Sep 01 04:17:38.585455 2026] [:error] [pid 6090:tid 140353256503040] [client 20.151.10.161:62022] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/fling.php"] [unique_id "apaYMrPf1VxWhFqgvWu5rgAAAE8"]
[Tue Sep 01 04:17:38.807378 2026] [:error] [pid 6411:tid 140353443960576] [client 20.151.10.161:62070] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/btyuio.php"] [unique_id "apaYMq-5XxGfLhlq8xleAQAAAME"]
[Tue Sep 01 04:17:39.024580 2026] [:error] [pid 6090:tid 140353222932224] [client 20.151.10.161:55501] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/00zip.php"] [unique_id "apaYM7Pf1VxWhFqgvWu5rwAAAFM"]
[Tue Sep 01 04:17:39.277054 2026] [:error] [pid 6411:tid 140353197754112] [client 20.151.10.161:62029] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/silver.php"] [unique_id "apaYM6-5XxGfLhlq8xleAgAAANY"]
[Tue Sep 01 04:17:39.503285 2026] [:error] [pid 6090:tid 140353189361408] [client 20.151.10.161:63429] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-mails.php"] [unique_id "apaYM7Pf1VxWhFqgvWu5sgAAAFc"]
[Tue Sep 01 04:17:39.711493 2026] [:error] [pid 6090:tid 140353290073856] [client 20.151.10.161:63442] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/sm.php"] [unique_id "apaYM7Pf1VxWhFqgvWu5swAAAEs"]
[Tue Sep 01 04:17:39.925900 2026] [:error] [pid 6091:tid 140353214539520] [client 20.151.10.161:61980] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/araso.php"] [unique_id "apaYM8kVYOXruxV21N7aoQAAAJQ"]
[Tue Sep 01 04:17:40.146271 2026] [:error] [pid 9194:tid 140353281681152] [client 20.151.10.161:62035] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/a.php"] [unique_id "apaYNIdqWCmIAB5WEG8pzwAAAQw"]
[Tue Sep 01 04:17:40.368064 2026] [:error] [pid 9194:tid 140353452353280] [client 20.151.10.161:62009] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/sb.php"] [unique_id "apaYNIdqWCmIAB5WEG8p0AAAAQA"]
[Tue Sep 01 04:17:40.589802 2026] [:error] [pid 6090:tid 140353332037376] [client 20.151.10.161:62077] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/in.php"] [unique_id "apaYNLPf1VxWhFqgvWu5tAAAAEY"]
[Tue Sep 01 04:17:40.812034 2026] [:error] [pid 9194:tid 140353443960576] [client 20.151.10.161:61988] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/xnm-apc.php"] [unique_id "apaYNIdqWCmIAB5WEG8p0QAAAQE"]
[Tue Sep 01 04:17:41.024066 2026] [:error] [pid 6089:tid 140353298466560] [client 20.151.10.161:62052] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/adminimagess.php"] [unique_id "apaYNZjeM2TaVrIYSc-auwAAAAo"]
[Tue Sep 01 04:17:41.241889 2026] [:error] [pid 9194:tid 140353248110336] [client 20.151.10.161:55429] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-content/index.php"] [unique_id "apaYNYdqWCmIAB5WEG8p0gAAARA"]
[Tue Sep 01 04:17:41.446787 2026] [:error] [pid 9194:tid 140353214539520] [client 20.151.10.161:63447] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "apaYNYdqWCmIAB5WEG8p0wAAARQ"]
[Tue Sep 01 04:17:41.681496 2026] [:error] [pid 6091:tid 140353435567872] [client 20.151.10.161:63441] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-admin/css/"] [unique_id "apaYNckVYOXruxV21N7aogAAAII"]
[Tue Sep 01 04:17:41.887980 2026] [:error] [pid 6411:tid 140353348822784] [client 20.151.10.161:62044] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-admin/css/colors/modern/"] [unique_id "apaYNa-5XxGfLhlq8xleBAAAAMQ"]
[Tue Sep 01 04:17:42.102141 2026] [:error] [pid 6411:tid 140353189361408] [client 20.151.10.161:62032] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-includes/blocks/details/"] [unique_id "apaYNq-5XxGfLhlq8xleBQAAANc"]
[Tue Sep 01 04:17:42.337919 2026] [:error] [pid 6089:tid 140353323644672] [client 20.151.10.161:63426] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-includes/blocks/audio/"] [unique_id "apaYNpjeM2TaVrIYSc-avQAAAAc"]
[Tue Sep 01 04:17:42.553504 2026] [:error] [pid 6090:tid 140353206146816] [client 20.151.10.161:63474] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-temp.php"] [unique_id "apaYNrPf1VxWhFqgvWu5tgAAAFU"]
[Tue Sep 01 04:17:42.781299 2026] [:error] [pid 6089:tid 140353239717632] [client 20.151.10.161:61952] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-admin/js/index.php"] [unique_id "apaYNpjeM2TaVrIYSc-avwAAABE"]
[Tue Sep 01 04:17:43.000139 2026] [:error] [pid 6411:tid 140353452353280] [client 20.151.10.161:62057] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-includes/Requests/"] [unique_id "apaYNq-5XxGfLhlq8xleBgAAAMA"]
[Tue Sep 01 04:17:43.205561 2026] [:error] [pid 9194:tid 140353332037376] [client 20.151.10.161:62049] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-content/admin.php"] [unique_id "apaYN4dqWCmIAB5WEG8p1gAAAQY"]
[Tue Sep 01 04:17:43.408473 2026] [:error] [pid 6411:tid 140353248110336] [client 20.151.10.161:62028] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-content/themes/index.php"] [unique_id "apaYN6-5XxGfLhlq8xleCQAAANA"]
[Tue Sep 01 04:17:43.624249 2026] [:error] [pid 9194:tid 140353315251968] [client 20.151.10.161:55544] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/av.php"] [unique_id "apaYN4dqWCmIAB5WEG8p1wAAAQg"]
[Tue Sep 01 04:17:43.929526 2026] [:error] [pid 6090:tid 140353315251968] [client 20.151.10.161:63456] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-content/themes/index.php"] [unique_id "apaYN7Pf1VxWhFqgvWu5uAAAAEg"]
[Tue Sep 01 04:17:44.142749 2026] [:error] [pid 6411:tid 140353264895744] [client 20.151.10.161:61954] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-blog.php"] [unique_id "apaYOK-5XxGfLhlq8xleEQAAAM4"]
[Tue Sep 01 04:17:44.354095 2026] [:error] [pid 9194:tid 140353340430080] [client 20.151.10.161:55533] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-includes/js/jquery/"] [unique_id "apaYOIdqWCmIAB5WEG8p2AAAAQU"]
[Tue Sep 01 04:17:44.561551 2026] [:error] [pid 9194:tid 140353306859264] [client 20.151.10.161:62045] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/cgi-bin/index.php"] [unique_id "apaYOIdqWCmIAB5WEG8p2QAAAQk"]
[Tue Sep 01 04:17:44.774331 2026] [:error] [pid 9194:tid 140353222932224] [client 20.151.10.161:61975] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-includes/l10n/"] [unique_id "apaYOIdqWCmIAB5WEG8p2gAAARM"]
[Tue Sep 01 04:17:44.980498 2026] [:error] [pid 9194:tid 140353435567872] [client 20.151.10.161:62071] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-manager.php"] [unique_id "apaYOIdqWCmIAB5WEG8p3AAAAQI"]
[Tue Sep 01 04:17:45.195085 2026] [:error] [pid 6411:tid 140353315251968] [client 20.151.10.161:63468] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "apaYOa-5XxGfLhlq8xleHQAAAMg"]
[Tue Sep 01 04:17:45.404779 2026] [:error] [pid 9194:tid 140353264895744] [client 20.151.10.161:63433] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/cgi-bin/admin.php"] [unique_id "apaYOYdqWCmIAB5WEG8p3QAAAQ4"]
[Tue Sep 01 04:17:45.613051 2026] [:error] [pid 9194:tid 140353214539520] [client 20.151.10.161:63451] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-content/"] [unique_id "apaYOYdqWCmIAB5WEG8p3gAAARQ"]
[Tue Sep 01 04:17:45.825013 2026] [:error] [pid 6411:tid 140353443960576] [client 20.151.10.161:63444] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-admin/css/colors/blue/"] [unique_id "apaYOa-5XxGfLhlq8xleJAAAAME"]
[Tue Sep 01 04:17:46.060051 2026] [:error] [pid 9194:tid 140353323644672] [client 20.151.10.161:63476] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-includes/block-bindings/"] [unique_id "apaYOodqWCmIAB5WEG8p3wAAAQc"]
[Tue Sep 01 04:17:46.275887 2026] [:error] [pid 9194:tid 140353357215488] [client 20.151.10.161:62059] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-includes/assets/"] [unique_id "apaYOodqWCmIAB5WEG8p4AAAAQM"]
[Tue Sep 01 04:17:46.504325 2026] [:error] [pid 6091:tid 140353248110336] [client 20.151.10.161:62039] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "apaYOskVYOXruxV21N7apQAAAJA"]
[Tue Sep 01 04:17:46.711152 2026] [:error] [pid 6091:tid 140353231324928] [client 20.151.10.161:62011] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-admin/network/plugins.php"] [unique_id "apaYOskVYOXruxV21N7apgAAAJI"]
[Tue Sep 01 04:17:46.941795 2026] [:error] [pid 9194:tid 140353189361408] [client 20.151.10.161:62054] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-admin/maint/index.php"] [unique_id "apaYOodqWCmIAB5WEG8p4gAAARc"]
[Tue Sep 01 04:17:47.162720 2026] [:error] [pid 6089:tid 140353222932224] [client 20.151.10.161:55534] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-includes/blocks/post-comments-form/"] [unique_id "apaYO5jeM2TaVrIYSc-axgAAABM"]
[Tue Sep 01 04:17:47.371494 2026] [:error] [pid 6091:tid 140353332037376] [client 20.151.10.161:61955] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/qazwsx.php"] [unique_id "apaYO8kVYOXruxV21N7apwAAAIY"]
[Tue Sep 01 04:17:47.583709 2026] [:error] [pid 9194:tid 140353197754112] [client 20.151.10.161:62014] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/cae2.2.php"] [unique_id "apaYO4dqWCmIAB5WEG8p4wAAARY"]
[Tue Sep 01 04:17:47.804464 2026] [:error] [pid 6089:tid 140353256503040] [client 20.151.10.161:63462] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/b8.php"] [unique_id "apaYO5jeM2TaVrIYSc-ayQAAAA8"]
[Tue Sep 01 04:17:54.812611 2026] [:error] [pid 6089:tid 140353239717632] [client 20.151.10.161:62067] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/xs.php"] [unique_id "apaYQpjeM2TaVrIYSc-a5AAAABE"]
[Tue Sep 01 04:17:55.014472 2026] [:error] [pid 6091:tid 140353273288448] [client 20.151.10.161:63427] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-content/uploads/"] [unique_id "apaYQ8kVYOXruxV21N7axAAAAI0"]
[Tue Sep 01 04:17:55.232342 2026] [:error] [pid 9194:tid 140353298466560] [client 20.151.10.161:62021] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp_blog_footer.php"] [unique_id "apaYQ4dqWCmIAB5WEG8qIQAAAQo"]
[Tue Sep 01 04:17:55.454969 2026] [:error] [pid 6091:tid 140353323644672] [client 20.151.10.161:62018] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/billzgs.php"] [unique_id "apaYQ8kVYOXruxV21N7axgAAAIc"]
[Tue Sep 01 04:17:55.658328 2026] [:error] [pid 6089:tid 140353357215488] [client 20.151.10.161:61997] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/ded.php"] [unique_id "apaYQ5jeM2TaVrIYSc-a6wAAAAM"]
[Tue Sep 01 04:17:55.860194 2026] [:error] [pid 9194:tid 140353248110336] [client 20.151.10.161:61985] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/CAE-2.5.php"] [unique_id "apaYQ4dqWCmIAB5WEG8qJgAAARA"]
[Tue Sep 01 04:17:56.073013 2026] [:error] [pid 9194:tid 140353357215488] [client 20.151.10.161:55522] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/0.php"] [unique_id "apaYRIdqWCmIAB5WEG8qKgAAAQM"]
[Tue Sep 01 04:17:56.291990 2026] [:error] [pid 6090:tid 140353197754112] [client 20.151.10.161:50825] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/v4on3fxtoo5z5cq0yCdefault.php"] [unique_id "apaYRLPf1VxWhFqgvWu56QAAAFY"]
[Tue Sep 01 04:17:56.507603 2026] [:error] [pid 6089:tid 140353206146816] [client 20.151.10.161:62005] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/8xmlr9ommwdy3ro8dCdefault.php"] [unique_id "apaYRJjeM2TaVrIYSc-a8AAAABU"]
[Tue Sep 01 04:17:56.715977 2026] [:error] [pid 6411:tid 140353357215488] [client 20.151.10.161:61984] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/fms.php"] [unique_id "apaYRK-5XxGfLhlq8xlelgAAAMM"]
[Tue Sep 01 04:17:56.919452 2026] [:error] [pid 6090:tid 140353231324928] [client 20.151.10.161:63458] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/0day.php"] [unique_id "apaYRLPf1VxWhFqgvWu56wAAAFI"]
[Tue Sep 01 04:17:57.121446 2026] [:error] [pid 9194:tid 140353281681152] [client 20.151.10.161:61966] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/das.php"] [unique_id "apaYRYdqWCmIAB5WEG8qMQAAAQw"]
[Tue Sep 01 05:28:04.035154 2026] [authz_core:error] [pid 11529:tid 140353197754112] [client 122.161.172.166:11989] AH01630: client denied by server configuration: /home/menabern/public_html/xmlrpc.php
[Tue Sep 01 05:46:17.553764 2026] [:error] [pid 28194:tid 140353315251968] [client 101.32.52.164:55450] [client 101.32.52.164] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||menabern.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "menabern.com"] [uri "/"] [unique_id "apas-Qdz-EN0cDNAEVIBsAAAAUg"]
[Tue Sep 01 06:24:09.169234 2026] [:error] [pid 11529:tid 140353206146816] [client 43.133.220.37:33192] [client 43.133.220.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.menabern.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.menabern.com"] [uri "/"] [unique_id "apa12S580fjDz1VV6ydMrgAAAdU"]
[Tue Sep 01 06:42:26.265758 2026] [proxy_fcgi:error] [pid 9194:tid 140353452353280] [client 20.220.227.7:39040] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 06:42:26.370919 2026] [proxy_fcgi:error] [pid 9194:tid 140353340430080] [client 20.220.227.7:39040] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 06:42:26.476232 2026] [proxy_fcgi:error] [pid 9194:tid 140353197754112] [client 20.220.227.7:39040] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 06:42:26.579851 2026] [proxy_fcgi:error] [pid 9194:tid 140353298466560] [client 20.220.227.7:39040] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 06:42:26.683649 2026] [proxy_fcgi:error] [pid 9194:tid 140353435567872] [client 20.220.227.7:39040] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 06:42:26.786716 2026] [proxy_fcgi:error] [pid 9194:tid 140353239717632] [client 20.220.227.7:39040] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 06:42:34.063477 2026] [:error] [pid 6091:tid 140353281681152] [client 20.48.179.39:10418] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apa6KskVYOXruxV21N7-TAAAAIw"]
[Tue Sep 01 06:42:34.293158 2026] [:error] [pid 28500:tid 140353264895744] [client 20.48.179.39:10414] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apa6KjQYUm0S3Gh9Jn-uKAAAAY4"]
[Tue Sep 01 06:42:34.543292 2026] [:error] [pid 11529:tid 140353214539520] [client 20.48.179.39:10391] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/nail.php"] [unique_id "apa6Ki580fjDz1VV6ydRpwAAAdQ"]
[Tue Sep 01 06:42:34.759341 2026] [:error] [pid 6089:tid 140353189361408] [client 20.48.179.39:10388] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/or.php"] [unique_id "apa6KpjeM2TaVrIYSc_TpwAAABc"]
[Tue Sep 01 06:42:34.960997 2026] [:error] [pid 6091:tid 140353248110336] [client 20.48.179.39:10259] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/verox.php"] [unique_id "apa6KskVYOXruxV21N7-TQAAAJA"]
[Tue Sep 01 06:42:35.163205 2026] [:error] [pid 6091:tid 140353306859264] [client 20.48.179.39:10389] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/ba.php"] [unique_id "apa6K8kVYOXruxV21N7-TgAAAIk"]
[Tue Sep 01 06:42:35.387600 2026] [:error] [pid 28500:tid 140353332037376] [client 20.48.179.39:10241] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/great.php"] [unique_id "apa6KzQYUm0S3Gh9Jn-uKQAAAYY"]
[Tue Sep 01 06:42:35.622471 2026] [:error] [pid 28194:tid 140353231324928] [client 20.48.179.39:10258] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/dyt8mjxc3yofbkoriukvgjaCdefault.php"] [unique_id "apa6Kwdz-EN0cDNAEVIS5AAAAVI"]
[Tue Sep 01 06:42:35.836907 2026] [:error] [pid 6089:tid 140353197754112] [client 20.48.179.39:10405] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/robots.php"] [unique_id "apa6K5jeM2TaVrIYSc_TqAAAABY"]
[Tue Sep 01 06:42:36.039686 2026] [:error] [pid 6090:tid 140353435567872] [client 20.48.179.39:10416] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/sky.php"] [unique_id "apa6LLPf1VxWhFqgvWvZMQAAAEI"]
[Tue Sep 01 06:42:36.260781 2026] [:error] [pid 6090:tid 140353348822784] [client 20.48.179.39:10398] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/k.php"] [unique_id "apa6LLPf1VxWhFqgvWvZMgAAAEQ"]
[Tue Sep 01 06:42:36.467192 2026] [:error] [pid 28194:tid 140353315251968] [client 20.48.179.39:10407] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/w.php"] [unique_id "apa6LAdz-EN0cDNAEVIS5QAAAUg"]
[Tue Sep 01 06:42:36.684267 2026] [:error] [pid 6411:tid 140353315251968] [client 20.48.179.39:10242] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/FWAZ.php"] [unique_id "apa6LK-5XxGfLhlq8xmBQQAAAMg"]
[Tue Sep 01 06:42:36.898305 2026] [:error] [pid 11529:tid 140353348822784] [client 20.48.179.39:10249] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/blurbs.php"] [unique_id "apa6LC580fjDz1VV6ydRqQAAAcQ"]
[Tue Sep 01 06:42:37.110072 2026] [:error] [pid 11529:tid 140353315251968] [client 20.48.179.39:10254] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/100.php"] [unique_id "apa6LS580fjDz1VV6ydRqgAAAcg"]
[Tue Sep 01 06:42:37.316552 2026] [:error] [pid 6089:tid 140353248110336] [client 20.48.179.39:10250] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/ccc.php"] [unique_id "apa6LZjeM2TaVrIYSc_TqgAAABA"]
[Tue Sep 01 06:42:37.534941 2026] [:error] [pid 9194:tid 140353222932224] [client 20.48.179.39:10385] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/images.php"] [unique_id "apa6LYdqWCmIAB5WEG9UhwAAARM"]
[Tue Sep 01 06:42:37.759030 2026] [:error] [pid 6089:tid 140353264895744] [client 20.48.179.39:10265] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/alls.php"] [unique_id "apa6LZjeM2TaVrIYSc_TrAAAAA4"]
[Tue Sep 01 06:42:37.977863 2026] [:error] [pid 9194:tid 140353452353280] [client 20.48.179.39:10240] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/red.php"] [unique_id "apa6LYdqWCmIAB5WEG9UiAAAAQA"]
[Tue Sep 01 06:42:38.186474 2026] [:error] [pid 11529:tid 140353452353280] [client 20.48.179.39:10419] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/admin.php"] [unique_id "apa6Li580fjDz1VV6ydRrAAAAcA"]
[Tue Sep 01 06:42:38.387390 2026] [:error] [pid 6091:tid 140353264895744] [client 20.48.179.39:10284] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/file52.php"] [unique_id "apa6LskVYOXruxV21N7-VQAAAI4"]
[Tue Sep 01 06:42:38.590479 2026] [:error] [pid 28500:tid 140353290073856] [client 20.48.179.39:10400] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/geck.php"] [unique_id "apa6LjQYUm0S3Gh9Jn-uKgAAAYs"]
[Tue Sep 01 06:42:38.843299 2026] [:error] [pid 6089:tid 140353256503040] [client 20.48.179.39:10410] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/biufile.php"] [unique_id "apa6LpjeM2TaVrIYSc_TrwAAAA8"]
[Tue Sep 01 06:42:39.048398 2026] [:error] [pid 6091:tid 140353452353280] [client 20.48.179.39:10377] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/dejavu.php"] [unique_id "apa6L8kVYOXruxV21N7-VgAAAIA"]
[Tue Sep 01 06:42:39.257202 2026] [:error] [pid 6089:tid 140353435567872] [client 20.48.179.39:10257] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/aaf.php"] [unique_id "apa6L5jeM2TaVrIYSc_TsQAAAAI"]
[Tue Sep 01 06:42:39.469905 2026] [:error] [pid 6089:tid 140353323644672] [client 20.48.179.39:10379] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/h02ugyh.php"] [unique_id "apa6L5jeM2TaVrIYSc_TsgAAAAc"]
[Tue Sep 01 06:42:39.677310 2026] [:error] [pid 9194:tid 140353298466560] [client 20.48.179.39:10250] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/155.php"] [unique_id "apa6L4dqWCmIAB5WEG9UigAAAQo"]
[Tue Sep 01 06:42:39.917829 2026] [:error] [pid 28194:tid 140353248110336] [client 20.48.179.39:10251] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/ops.php"] [unique_id "apa6Lwdz-EN0cDNAEVIS6AAAAVA"]
[Tue Sep 01 06:42:40.117739 2026] [:error] [pid 9194:tid 140353231324928] [client 20.48.179.39:10417] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/mac.php"] [unique_id "apa6MIdqWCmIAB5WEG9UiwAAARI"]
[Tue Sep 01 06:42:40.321304 2026] [:error] [pid 28194:tid 140353264895744] [client 20.48.179.39:10290] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/makeasmtp.php"] [unique_id "apa6MAdz-EN0cDNAEVIS6wAAAU4"]
[Tue Sep 01 06:42:40.526113 2026] [:error] [pid 6089:tid 140353256503040] [client 20.48.179.39:10386] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/pucci.php"] [unique_id "apa6MJjeM2TaVrIYSc_TugAAAA8"]
[Tue Sep 01 06:42:40.738028 2026] [:error] [pid 6089:tid 140353435567872] [client 20.48.179.39:11072] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/puc.php"] [unique_id "apa6MJjeM2TaVrIYSc_TvgAAAAI"]
[Tue Sep 01 06:42:40.947031 2026] [:error] [pid 28194:tid 140353239717632] [client 20.48.179.39:10411] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/8.php"] [unique_id "apa6MAdz-EN0cDNAEVIS7gAAAVE"]
[Tue Sep 01 06:42:41.164909 2026] [:error] [pid 6091:tid 140353332037376] [client 20.48.179.39:10392] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/1.php"] [unique_id "apa6MckVYOXruxV21N7-WAAAAIY"]
[Tue Sep 01 06:42:41.367440 2026] [:error] [pid 6089:tid 140353357215488] [client 20.48.179.39:10369] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/admin.php"] [unique_id "apa6MZjeM2TaVrIYSc_TwQAAAAM"]
[Tue Sep 01 06:42:41.576133 2026] [:error] [pid 6089:tid 140353222932224] [client 20.48.179.39:10403] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/edit.php"] [unique_id "apa6MZjeM2TaVrIYSc_TxAAAABM"]
[Tue Sep 01 06:42:41.780345 2026] [:error] [pid 6089:tid 140353281681152] [client 20.48.179.39:10420] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/inputs.php"] [unique_id "apa6MZjeM2TaVrIYSc_TyAAAAAw"]
[Tue Sep 01 06:42:41.985179 2026] [:error] [pid 6090:tid 140353264895744] [client 20.48.179.39:10264] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/av.php"] [unique_id "apa6MbPf1VxWhFqgvWvZNwAAAE4"]
[Tue Sep 01 06:42:42.208887 2026] [:error] [pid 28194:tid 140353298466560] [client 20.48.179.39:10394] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/classwithtostring.php"] [unique_id "apa6Mgdz-EN0cDNAEVIS8AAAAUo"]
[Tue Sep 01 06:42:42.420743 2026] [:error] [pid 6091:tid 140353248110336] [client 20.48.179.39:10404] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/adminfuns.php"] [unique_id "apa6MskVYOXruxV21N7-WgAAAJA"]
[Tue Sep 01 06:42:42.625500 2026] [:error] [pid 28500:tid 140353197754112] [client 20.48.179.39:10395] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/ms-edit.php"] [unique_id "apa6MjQYUm0S3Gh9Jn-uLAAAAZY"]
[Tue Sep 01 06:42:42.838386 2026] [:error] [pid 28194:tid 140353248110336] [client 20.48.179.39:11100] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/222.php"] [unique_id "apa6Mgdz-EN0cDNAEVIS8gAAAVA"]
[Tue Sep 01 06:42:43.040797 2026] [:error] [pid 6090:tid 140353357215488] [client 20.48.179.39:10372] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/BDKR28WP.php"] [unique_id "apa6M7Pf1VxWhFqgvWvZOAAAAEM"]
[Tue Sep 01 06:42:43.257668 2026] [:error] [pid 6089:tid 140353214539520] [client 20.48.179.39:10376] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp.php"] [unique_id "apa6M5jeM2TaVrIYSc_TywAAABQ"]
[Tue Sep 01 06:42:43.463493 2026] [:error] [pid 11529:tid 140353281681152] [client 20.48.179.39:10382] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/abcd.php"] [unique_id "apa6My580fjDz1VV6ydRuAAAAcw"]
[Tue Sep 01 06:42:43.666568 2026] [:error] [pid 6411:tid 140353222932224] [client 20.48.179.39:10426] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/simple.php"] [unique_id "apa6M6-5XxGfLhlq8xmBSwAAANM"]
[Tue Sep 01 06:42:43.872088 2026] [:error] [pid 6411:tid 140353452353280] [client 20.48.179.39:10431] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/chosen.php"] [unique_id "apa6M6-5XxGfLhlq8xmBTQAAAMA"]
[Tue Sep 01 06:42:44.071888 2026] [:error] [pid 9194:tid 140353256503040] [client 20.48.179.39:10380] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/als.php"] [unique_id "apa6NIdqWCmIAB5WEG9UjQAAAQ8"]
[Tue Sep 01 06:42:44.277809 2026] [:error] [pid 28500:tid 140353443960576] [client 20.48.179.39:10368] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/nox.php"] [unique_id "apa6NDQYUm0S3Gh9Jn-uLgAAAYE"]
[Tue Sep 01 06:42:44.497055 2026] [:error] [pid 11529:tid 140353452353280] [client 20.48.179.39:10288] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/file59.php"] [unique_id "apa6NC580fjDz1VV6ydRugAAAcA"]
[Tue Sep 01 06:42:44.699310 2026] [:error] [pid 6089:tid 140353256503040] [client 20.48.179.39:10422] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/admin.php"] [unique_id "apa6NJjeM2TaVrIYSc_TzQAAAA8"]
[Tue Sep 01 06:42:44.900892 2026] [:error] [pid 6411:tid 140353340430080] [client 20.48.179.39:10428] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/xamp.php"] [unique_id "apa6NK-5XxGfLhlq8xmBTwAAAMU"]
[Tue Sep 01 06:42:45.108027 2026] [:error] [pid 6411:tid 140353231324928] [client 20.48.179.39:10390] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/bless.php"] [unique_id "apa6Na-5XxGfLhlq8xmBUAAAANI"]
[Tue Sep 01 06:42:45.315768 2026] [:error] [pid 11529:tid 140353231324928] [client 20.48.179.39:10401] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/f35.php"] [unique_id "apa6NS580fjDz1VV6ydRuwAAAdI"]
[Tue Sep 01 06:42:45.521943 2026] [:error] [pid 6089:tid 140353231324928] [client 20.48.179.39:10396] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/aaa.php"] [unique_id "apa6NZjeM2TaVrIYSc_T0AAAABI"]
[Tue Sep 01 06:42:45.735661 2026] [:error] [pid 6090:tid 140353180968704] [client 20.48.179.39:10409] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/gecko.php"] [unique_id "apa6NbPf1VxWhFqgvWvZOgAAAFg"]
[Tue Sep 01 06:42:45.944428 2026] [:error] [pid 6089:tid 140353206146816] [client 20.48.179.39:10408] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/xiugai.php"] [unique_id "apa6NZjeM2TaVrIYSc_T1AAAABU"]
[Tue Sep 01 06:42:46.152668 2026] [:error] [pid 9194:tid 140353248110336] [client 20.48.179.39:10274] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/adminner.php"] [unique_id "apa6NodqWCmIAB5WEG9UjgAAARA"]
[Tue Sep 01 06:42:46.391384 2026] [:error] [pid 6411:tid 140353323644672] [client 20.48.179.39:11091] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/file1221.php"] [unique_id "apa6Nq-5XxGfLhlq8xmBUgAAAMc"]
[Tue Sep 01 06:42:46.599346 2026] [:error] [pid 28194:tid 140353340430080] [client 20.48.179.39:10243] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/inx.php"] [unique_id "apa6Ngdz-EN0cDNAEVIS9AAAAUU"]
[Tue Sep 01 06:42:46.816451 2026] [:error] [pid 6089:tid 140353315251968] [client 20.48.179.39:10280] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/reviall.php"] [unique_id "apa6NpjeM2TaVrIYSc_T1gAAAAg"]
[Tue Sep 01 06:42:47.019856 2026] [:error] [pid 28194:tid 140353214539520] [client 20.48.179.39:10393] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/11.php"] [unique_id "apa6Nwdz-EN0cDNAEVIS9QAAAVQ"]
[Tue Sep 01 06:42:47.228187 2026] [:error] [pid 28194:tid 140353332037376] [client 20.48.179.39:10248] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/File.php"] [unique_id "apa6Nwdz-EN0cDNAEVIS9gAAAUY"]
[Tue Sep 01 06:42:47.466267 2026] [:error] [pid 6411:tid 140353231324928] [client 20.48.179.39:10287] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/fi22.php"] [unique_id "apa6N6-5XxGfLhlq8xmBUwAAANI"]
[Tue Sep 01 06:42:47.688486 2026] [:error] [pid 6089:tid 140353435567872] [client 20.48.179.39:10292] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/3PJcpMFsD8B.php"] [unique_id "apa6N5jeM2TaVrIYSc_T1wAAAAI"]
[Tue Sep 01 06:42:47.898624 2026] [:error] [pid 6089:tid 140353180968704] [client 20.48.179.39:10301] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/a3ampzmbipnkpxeqhqpsanCdefault.php"] [unique_id "apa6N5jeM2TaVrIYSc_T2AAAABg"]
[Tue Sep 01 06:42:48.108993 2026] [:error] [pid 11529:tid 140353348822784] [client 20.48.179.39:10300] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/4PJcpMFsD8B.php"] [unique_id "apa6OC580fjDz1VV6ydRvQAAAcQ"]
[Tue Sep 01 06:42:48.314176 2026] [:error] [pid 28500:tid 140353357215488] [client 20.48.179.39:10285] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/i99z7zzbwtpteujvv6s8hiCdefault.php"] [unique_id "apa6ODQYUm0S3Gh9Jn-uMQAAAYM"]
[Tue Sep 01 06:42:48.540004 2026] [:error] [pid 28194:tid 140353323644672] [client 20.48.179.39:10387] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/gwaih1gfzp5vuwr04Cdefault.php"] [unique_id "apa6OAdz-EN0cDNAEVIS9wAAAUc"]
[Tue Sep 01 06:42:48.744454 2026] [:error] [pid 28194:tid 140353264895744] [client 20.48.179.39:10378] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/1wvekeybd9it2di2vyipgr6Cdefault.php"] [unique_id "apa6OAdz-EN0cDNAEVIS-AAAAU4"]
[Tue Sep 01 06:42:48.948382 2026] [:error] [pid 6089:tid 140353281681152] [client 20.48.179.39:11078] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/media.php"] [unique_id "apa6OJjeM2TaVrIYSc_T2gAAAAw"]
[Tue Sep 01 06:42:49.157251 2026] [:error] [pid 28500:tid 140353222932224] [client 20.48.179.39:10268] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/inso.php"] [unique_id "apa6OTQYUm0S3Gh9Jn-uMwAAAZM"]
[Tue Sep 01 06:42:49.363620 2026] [:error] [pid 28500:tid 140353298466560] [client 20.48.179.39:11127] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/shiny.php"] [unique_id "apa6OTQYUm0S3Gh9Jn-uNAAAAYo"]
[Tue Sep 01 06:42:49.605412 2026] [:error] [pid 6089:tid 140353290073856] [client 20.48.179.39:10296] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/403dd.php"] [unique_id "apa6OZjeM2TaVrIYSc_T3gAAAAs"]
[Tue Sep 01 06:42:49.812048 2026] [:error] [pid 28194:tid 140353180968704] [client 20.48.179.39:10293] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/baba.php"] [unique_id "apa6OQdz-EN0cDNAEVIS-QAAAVg"]
[Tue Sep 01 06:42:50.013424 2026] [:error] [pid 28500:tid 140353435567872] [client 20.48.179.39:10303] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/site.php"] [unique_id "apa6OjQYUm0S3Gh9Jn-uNQAAAYI"]
[Tue Sep 01 06:42:50.221783 2026] [:error] [pid 28500:tid 140353306859264] [client 20.48.179.39:10262] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/cabs.php"] [unique_id "apa6OjQYUm0S3Gh9Jn-uNgAAAYk"]
[Tue Sep 01 06:42:50.431976 2026] [:error] [pid 6089:tid 140353189361408] [client 20.48.179.39:10423] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/insc.php"] [unique_id "apa6OpjeM2TaVrIYSc_T3wAAABc"]
[Tue Sep 01 06:42:50.679566 2026] [:error] [pid 11529:tid 140353290073856] [client 20.48.179.39:10270] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/file.php"] [unique_id "apa6Oi580fjDz1VV6ydRvgAAAcs"]
[Tue Sep 01 06:42:50.896146 2026] [:error] [pid 6089:tid 140353206146816] [client 20.48.179.39:10430] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/dex.php"] [unique_id "apa6OpjeM2TaVrIYSc_T4AAAABU"]
[Tue Sep 01 06:42:51.146992 2026] [:error] [pid 28500:tid 140353239717632] [client 20.48.179.39:10373] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/key.php"] [unique_id "apa6OzQYUm0S3Gh9Jn-uOAAAAZE"]
[Tue Sep 01 06:42:51.350108 2026] [:error] [pid 6411:tid 140353443960576] [client 20.48.179.39:10275] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/kir.php"] [unique_id "apa6O6-5XxGfLhlq8xmBVAAAAME"]
[Tue Sep 01 06:42:51.552457 2026] [:error] [pid 11529:tid 140353256503040] [client 20.48.179.39:10283] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/nofile.php"] [unique_id "apa6Oy580fjDz1VV6ydRvwAAAc8"]
[Tue Sep 01 06:42:51.771981 2026] [:error] [pid 6411:tid 140353281681152] [client 20.48.179.39:10412] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/fling.php"] [unique_id "apa6O6-5XxGfLhlq8xmBVQAAAMw"]
[Tue Sep 01 06:42:51.982363 2026] [:error] [pid 28500:tid 140353357215488] [client 20.48.179.39:10244] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/btyuio.php"] [unique_id "apa6OzQYUm0S3Gh9Jn-uOQAAAYM"]
[Tue Sep 01 06:42:52.190993 2026] [:error] [pid 6089:tid 140353443960576] [client 20.48.179.39:10253] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/00zip.php"] [unique_id "apa6PJjeM2TaVrIYSc_T4gAAAAE"]
[Tue Sep 01 06:42:52.392601 2026] [:error] [pid 28194:tid 140353239717632] [client 20.48.179.39:10276] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/silver.php"] [unique_id "apa6PAdz-EN0cDNAEVIS-wAAAVE"]
[Tue Sep 01 06:42:52.604186 2026] [:error] [pid 28500:tid 140353222932224] [client 20.48.179.39:10297] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-mails.php"] [unique_id "apa6PDQYUm0S3Gh9Jn-uOgAAAZM"]
[Tue Sep 01 06:42:52.830667 2026] [:error] [pid 6411:tid 140353435567872] [client 20.48.179.39:10255] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/sm.php"] [unique_id "apa6PK-5XxGfLhlq8xmBVgAAAMI"]
[Tue Sep 01 06:42:53.036719 2026] [:error] [pid 11529:tid 140353231324928] [client 20.48.179.39:10260] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/araso.php"] [unique_id "apa6PS580fjDz1VV6ydRwQAAAdI"]
[Tue Sep 01 06:42:53.244653 2026] [:error] [pid 28194:tid 140353206146816] [client 20.48.179.39:10399] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/a.php"] [unique_id "apa6PQdz-EN0cDNAEVIS_AAAAVU"]
[Tue Sep 01 06:42:53.450479 2026] [:error] [pid 6089:tid 140353357215488] [client 20.48.179.39:10427] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/sb.php"] [unique_id "apa6PZjeM2TaVrIYSc_T5wAAAAM"]
[Tue Sep 01 06:42:53.656527 2026] [:error] [pid 6089:tid 140353264895744] [client 20.48.179.39:10406] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/in.php"] [unique_id "apa6PZjeM2TaVrIYSc_T6AAAAA4"]
[Tue Sep 01 06:42:53.906540 2026] [:error] [pid 11529:tid 140353298466560] [client 20.48.179.39:11101] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/xnm-apc.php"] [unique_id "apa6PS580fjDz1VV6ydRwgAAAco"]
[Tue Sep 01 06:42:54.110205 2026] [:error] [pid 28500:tid 140353298466560] [client 20.48.179.39:11075] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/adminimagess.php"] [unique_id "apa6PjQYUm0S3Gh9Jn-uOwAAAYo"]
[Tue Sep 01 06:42:54.315218 2026] [:error] [pid 6091:tid 140353298466560] [client 20.48.179.39:10375] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-content/index.php"] [unique_id "apa6PskVYOXruxV21N7-YQAAAIo"]
[Tue Sep 01 06:42:54.518298 2026] [:error] [pid 6090:tid 140353435567872] [client 20.48.179.39:10286] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "apa6PrPf1VxWhFqgvWvZOwAAAEI"]
[Tue Sep 01 06:42:54.725606 2026] [:error] [pid 28500:tid 140353206146816] [client 20.48.179.39:10256] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-admin/css/"] [unique_id "apa6PjQYUm0S3Gh9Jn-uPAAAAZU"]
[Tue Sep 01 06:42:54.993170 2026] [:error] [pid 6089:tid 140353290073856] [client 20.48.179.39:11124] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-admin/css/colors/modern/"] [unique_id "apa6PpjeM2TaVrIYSc_T7QAAAAs"]
[Tue Sep 01 06:42:55.202432 2026] [:error] [pid 28194:tid 140353231324928] [client 20.48.179.39:10291] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-includes/blocks/details/"] [unique_id "apa6Pwdz-EN0cDNAEVIS_QAAAVI"]
[Tue Sep 01 06:42:55.406339 2026] [:error] [pid 28500:tid 140353197754112] [client 20.48.179.39:10261] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-includes/blocks/audio/"] [unique_id "apa6PzQYUm0S3Gh9Jn-uPQAAAZY"]
[Tue Sep 01 06:42:55.610849 2026] [:error] [pid 11529:tid 140353435567872] [client 20.48.179.39:10278] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-temp.php"] [unique_id "apa6Py580fjDz1VV6ydRxAAAAcI"]
[Tue Sep 01 06:42:55.816767 2026] [:error] [pid 6089:tid 140353357215488] [client 20.48.179.39:10421] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-admin/js/index.php"] [unique_id "apa6P5jeM2TaVrIYSc_T8AAAAAM"]
[Tue Sep 01 06:42:56.074089 2026] [:error] [pid 11529:tid 140353340430080] [client 20.48.179.39:10263] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-includes/Requests/"] [unique_id "apa6QC580fjDz1VV6ydRxgAAAcU"]
[Tue Sep 01 06:42:56.280866 2026] [:error] [pid 6089:tid 140353206146816] [client 20.48.179.39:11085] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-content/admin.php"] [unique_id "apa6QJjeM2TaVrIYSc_T8QAAABU"]
[Tue Sep 01 06:43:03.171930 2026] [:error] [pid 6411:tid 140353290073856] [client 20.48.179.39:11092] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-content/themes/index.php"] [unique_id "apa6R6-5XxGfLhlq8xmBagAAAMs"]
[Tue Sep 01 06:43:03.373603 2026] [:error] [pid 6089:tid 140353239717632] [client 20.48.179.39:10302] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/av.php"] [unique_id "apa6R5jeM2TaVrIYSc_UBgAAABE"]
[Tue Sep 01 06:43:03.594489 2026] [:error] [pid 28194:tid 140353206146816] [client 20.48.179.39:10252] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-content/themes/index.php"] [unique_id "apa6Rwdz-EN0cDNAEVITCAAAAVU"]
[Tue Sep 01 06:43:03.811242 2026] [:error] [pid 11529:tid 140353264895744] [client 20.48.179.39:10640] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-blog.php"] [unique_id "apa6Ry580fjDz1VV6ydRzAAAAc4"]
[Tue Sep 01 06:43:04.023743 2026] [:error] [pid 28194:tid 140353214539520] [client 20.48.179.39:10268] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-includes/js/jquery/"] [unique_id "apa6SAdz-EN0cDNAEVITCQAAAVQ"]
[Tue Sep 01 06:43:04.237118 2026] [:error] [pid 9194:tid 140353452353280] [client 20.48.179.39:10246] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/cgi-bin/index.php"] [unique_id "apa6SIdqWCmIAB5WEG9UmwAAAQA"]
[Tue Sep 01 06:43:04.441259 2026] [:error] [pid 6091:tid 140353298466560] [client 20.48.179.39:10370] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-includes/l10n/"] [unique_id "apa6SMkVYOXruxV21N7-bwAAAIo"]
[Tue Sep 01 06:43:04.678547 2026] [:error] [pid 6089:tid 140353281681152] [client 20.48.179.39:11084] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-manager.php"] [unique_id "apa6SJjeM2TaVrIYSc_UDAAAAAw"]
[Tue Sep 01 06:43:04.884983 2026] [:error] [pid 6089:tid 140353264895744] [client 20.48.179.39:11110] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "apa6SJjeM2TaVrIYSc_UDgAAAA4"]
[Tue Sep 01 06:43:05.087690 2026] [:error] [pid 6089:tid 140353273288448] [client 20.48.179.39:10267] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/cgi-bin/admin.php"] [unique_id "apa6SZjeM2TaVrIYSc_UEAAAAA0"]
[Tue Sep 01 06:43:05.296703 2026] [:error] [pid 9194:tid 140353435567872] [client 20.48.179.39:10374] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-content/"] [unique_id "apa6SYdqWCmIAB5WEG9UnAAAAQI"]
[Tue Sep 01 06:43:05.501470 2026] [:error] [pid 6411:tid 140353248110336] [client 20.48.179.39:10289] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-admin/css/colors/blue/"] [unique_id "apa6Sa-5XxGfLhlq8xmBbwAAANA"]
[Tue Sep 01 06:43:05.762475 2026] [:error] [pid 9194:tid 140353273288448] [client 20.48.179.39:11109] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-includes/block-bindings/"] [unique_id "apa6SYdqWCmIAB5WEG9UnQAAAQ0"]
[Tue Sep 01 06:43:05.970978 2026] [:error] [pid 6411:tid 140353281681152] [client 20.48.179.39:11118] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-includes/assets/"] [unique_id "apa6Sa-5XxGfLhlq8xmBcwAAAMw"]
[Tue Sep 01 06:43:06.173015 2026] [:error] [pid 9194:tid 140353189361408] [client 20.48.179.39:10631] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "apa6SodqWCmIAB5WEG9UoAAAARc"]
[Tue Sep 01 06:43:06.378434 2026] [:error] [pid 28194:tid 140353323644672] [client 20.48.179.39:10371] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-admin/network/plugins.php"] [unique_id "apa6Sgdz-EN0cDNAEVITDAAAAUc"]
[Tue Sep 01 06:43:06.580149 2026] [:error] [pid 28194:tid 140353264895744] [client 20.48.179.39:11123] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-admin/maint/index.php"] [unique_id "apa6Sgdz-EN0cDNAEVITDQAAAU4"]
[Tue Sep 01 06:43:06.841141 2026] [:error] [pid 6091:tid 140353443960576] [client 20.48.179.39:10295] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-includes/blocks/post-comments-form/"] [unique_id "apa6SskVYOXruxV21N7-cAAAAIE"]
[Tue Sep 01 06:43:07.043485 2026] [:error] [pid 6091:tid 140353281681152] [client 20.48.179.39:10424] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/qazwsx.php"] [unique_id "apa6S8kVYOXruxV21N7-cQAAAIw"]
[Tue Sep 01 06:43:07.246971 2026] [:error] [pid 28194:tid 140353222932224] [client 20.48.179.39:10413] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/cae2.2.php"] [unique_id "apa6Swdz-EN0cDNAEVITDgAAAVM"]
[Tue Sep 01 06:43:07.453342 2026] [:error] [pid 6091:tid 140353315251968] [client 20.48.179.39:11093] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/b8.php"] [unique_id "apa6S8kVYOXruxV21N7-dAAAAIg"]
[Tue Sep 01 06:43:07.662278 2026] [:error] [pid 28194:tid 140353189361408] [client 20.48.179.39:11088] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/xs.php"] [unique_id "apa6Swdz-EN0cDNAEVITEAAAAVc"]
[Tue Sep 01 06:43:07.923894 2026] [:error] [pid 28194:tid 140353206146816] [client 20.48.179.39:11129] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-content/uploads/"] [unique_id "apa6Swdz-EN0cDNAEVITEgAAAVU"]
[Tue Sep 01 06:43:08.133026 2026] [:error] [pid 6089:tid 140353222932224] [client 20.48.179.39:11089] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp_blog_footer.php"] [unique_id "apa6TJjeM2TaVrIYSc_UFgAAABM"]
[Tue Sep 01 06:43:08.339831 2026] [:error] [pid 28500:tid 140353340430080] [client 20.48.179.39:10641] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/billzgs.php"] [unique_id "apa6TDQYUm0S3Gh9Jn-uSAAAAYU"]
[Tue Sep 01 06:43:08.542320 2026] [:error] [pid 6090:tid 140353443960576] [client 20.48.179.39:11079] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/ded.php"] [unique_id "apa6TLPf1VxWhFqgvWvZTQAAAEE"]
[Tue Sep 01 06:43:08.744686 2026] [:error] [pid 6090:tid 140353222932224] [client 20.48.179.39:11074] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/CAE-2.5.php"] [unique_id "apa6TLPf1VxWhFqgvWvZTgAAAFM"]
[Tue Sep 01 06:43:08.991509 2026] [:error] [pid 28194:tid 140353315251968] [client 20.48.179.39:11097] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/0.php"] [unique_id "apa6TAdz-EN0cDNAEVITEwAAAUg"]
[Tue Sep 01 06:43:09.202974 2026] [:error] [pid 6089:tid 140353323644672] [client 20.48.179.39:11108] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/v4on3fxtoo5z5cq0yCdefault.php"] [unique_id "apa6TZjeM2TaVrIYSc_UGAAAAAc"]
[Tue Sep 01 06:43:09.411225 2026] [:error] [pid 6411:tid 140353197754112] [client 20.48.179.39:10282] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/8xmlr9ommwdy3ro8dCdefault.php"] [unique_id "apa6Ta-5XxGfLhlq8xmBdgAAANY"]
[Tue Sep 01 06:43:09.613137 2026] [:error] [pid 9194:tid 140353214539520] [client 20.48.179.39:10271] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/fms.php"] [unique_id "apa6TYdqWCmIAB5WEG9UogAAARQ"]
[Tue Sep 01 06:43:09.822123 2026] [:error] [pid 11529:tid 140353180968704] [client 20.48.179.39:11081] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/0day.php"] [unique_id "apa6TS580fjDz1VV6ydR3gAAAdg"]
[Tue Sep 01 06:43:10.064127 2026] [:error] [pid 6089:tid 140353206146816] [client 20.48.179.39:11096] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/das.php"] [unique_id "apa6TpjeM2TaVrIYSc_UGQAAABU"]
[Tue Sep 01 09:20:39.404959 2026] [:error] [pid 6089:tid 140353239717632] [client 43.157.53.115:34972] [client 43.157.53.115] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||menabern.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "menabern.com"] [uri "/"] [unique_id "apbfN5jeM2TaVrIYSc8K8gAAABE"]
[Tue Sep 01 09:39:58.532967 2026] [:error] [pid 6090:tid 140353189361408] [client 122.51.236.174:52584] [client 122.51.236.174] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.menabern.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.menabern.com"] [uri "/"] [unique_id "apbjvrPf1VxWhFqgvWv59gAAAFc"]
[Tue Sep 01 10:03:21.355678 2026] [:error] [pid 6411:tid 140353348822784] [client 195.178.110.137:5138] [client 195.178.110.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/.env"] [unique_id "apbpOa-5XxGfLhlq8xmwwwAAAMQ"]
[Tue Sep 01 10:03:21.881732 2026] [:error] [pid 6089:tid 140353435567872] [client 195.178.110.137:5140] [client 195.178.110.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/.env.local"] [unique_id "apbpOZjeM2TaVrIYSc8QfQAAAAI"]
[Tue Sep 01 10:03:22.327872 2026] [:error] [pid 6411:tid 140353340430080] [client 195.178.110.137:17220] [client 195.178.110.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/.env"] [unique_id "apbpOq-5XxGfLhlq8xmwxQAAAMU"]
[Tue Sep 01 10:03:22.713954 2026] [:error] [pid 11529:tid 140353214539520] [client 195.178.110.137:5148] [client 195.178.110.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/.env.production"] [unique_id "apbpOi580fjDz1VV6yd2AQAAAdQ"]
[Tue Sep 01 10:03:23.142292 2026] [:error] [pid 29615:tid 140353357215488] [client 195.178.110.137:17234] [client 195.178.110.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/.env.local"] [unique_id "apbpO51PBa8fnDJM-t7CRAAAAgM"]
[Tue Sep 01 10:03:23.591025 2026] [:error] [pid 6090:tid 140353231324928] [client 195.178.110.137:5194] [client 195.178.110.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/.env.dev"] [unique_id "apbpO7Pf1VxWhFqgvWv_pwAAAFI"]
[Tue Sep 01 10:03:24.095197 2026] [:error] [pid 6090:tid 140353180968704] [client 195.178.110.137:17250] [client 195.178.110.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/.env.production"] [unique_id "apbpPLPf1VxWhFqgvWv_qAAAAFg"]
[Tue Sep 01 10:03:24.505714 2026] [:error] [pid 28500:tid 140353273288448] [client 195.178.110.137:5204] [client 195.178.110.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/.env.bak"] [unique_id "apbpPDQYUm0S3Gh9Jn_rkwAAAY0"]
[Tue Sep 01 10:03:24.634156 2026] [:error] [pid 6089:tid 140353231324928] [client 195.178.110.137:17262] [client 195.178.110.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/.env.dev"] [unique_id "apbpPJjeM2TaVrIYSc8QfgAAABI"]
[Tue Sep 01 10:03:25.353937 2026] [:error] [pid 11529:tid 140353323644672] [client 195.178.110.137:5234] [client 195.178.110.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/.env.old"] [unique_id "apbpPS580fjDz1VV6yd2AgAAAcc"]
[Tue Sep 01 10:03:25.518824 2026] [:error] [pid 11529:tid 140353298466560] [client 195.178.110.137:17270] [client 195.178.110.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/.env.bak"] [unique_id "apbpPS580fjDz1VV6yd2AwAAAco"]
[Tue Sep 01 10:03:26.249818 2026] [:error] [pid 6089:tid 140353273288448] [client 195.178.110.137:23264] [client 195.178.110.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/.env.save"] [unique_id "apbpPpjeM2TaVrIYSc8QfwAAAA0"]
[Tue Sep 01 10:03:26.921467 2026] [:error] [pid 6089:tid 140353239717632] [client 195.178.110.137:62576] [client 195.178.110.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/.env.old"] [unique_id "apbpPpjeM2TaVrIYSc8QgAAAABE"]
[Tue Sep 01 10:03:27.149572 2026] [:error] [pid 6089:tid 140353222932224] [client 195.178.110.137:23274] [client 195.178.110.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/.env.backup"] [unique_id "apbpP5jeM2TaVrIYSc8QgQAAABM"]
[Tue Sep 01 10:03:27.997556 2026] [:error] [pid 6089:tid 140353452353280] [client 195.178.110.137:62584] [client 195.178.110.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/.env.save"] [unique_id "apbpP5jeM2TaVrIYSc8QggAAAAA"]
[Tue Sep 01 10:03:29.017898 2026] [:error] [pid 11529:tid 140353256503040] [client 195.178.110.137:62592] [client 195.178.110.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/.env.backup"] [unique_id "apbpQS580fjDz1VV6yd2CAAAAc8"]
[Tue Sep 01 10:12:07.361301 2026] [:error] [pid 6089:tid 140353298466560] [client 49.51.141.76:32990] [client 49.51.141.76] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.menabern.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.menabern.com"] [uri "/"] [unique_id "apbrR5jeM2TaVrIYSc8TegAAAAo"]
[Tue Sep 01 11:25:06.817566 2026] [:error] [pid 28500:tid 140353452353280] [client 195.178.110.137:9016] [client 195.178.110.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env"] [unique_id "apb8YjQYUm0S3Gh9Jn8FMQAAAYA"]
[Tue Sep 01 11:25:06.844543 2026] [:error] [pid 28500:tid 140353340430080] [client 195.178.110.137:13954] [client 195.178.110.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env"] [unique_id "apb8YjQYUm0S3Gh9Jn8FMgAAAYU"]
[Tue Sep 01 11:25:07.282999 2026] [:error] [pid 6411:tid 140353231324928] [client 195.178.110.137:9018] [client 195.178.110.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env.local"] [unique_id "apb8Y6-5XxGfLhlq8xnCgQAAANI"]
[Tue Sep 01 11:25:07.328097 2026] [:error] [pid 28194:tid 140353256503040] [client 195.178.110.137:13962] [client 195.178.110.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env.local"] [unique_id "apb8Ywdz-EN0cDNAEVJHpQAAAU8"]
[Tue Sep 01 11:25:07.732461 2026] [:error] [pid 6089:tid 140353315251968] [client 195.178.110.137:13970] [client 195.178.110.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env.production"] [unique_id "apb8Y5jeM2TaVrIYSc8segAAAAg"]
[Tue Sep 01 11:25:08.077182 2026] [:error] [pid 29615:tid 140353298466560] [client 195.178.110.137:9030] [client 195.178.110.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env.production"] [unique_id "apb8ZJ1PBa8fnDJM-t7OUgAAAgo"]
[Tue Sep 01 11:25:08.492916 2026] [:error] [pid 11529:tid 140353315251968] [client 195.178.110.137:9046] [client 195.178.110.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env.dev"] [unique_id "apb8ZC580fjDz1VV6yeA6AAAAcg"]
[Tue Sep 01 11:25:08.632168 2026] [:error] [pid 6411:tid 140353290073856] [client 195.178.110.137:13986] [client 195.178.110.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env.dev"] [unique_id "apb8ZK-5XxGfLhlq8xnCggAAAMs"]
[Tue Sep 01 11:25:08.905007 2026] [:error] [pid 6089:tid 140353239717632] [client 195.178.110.137:9058] [client 195.178.110.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env.bak"] [unique_id "apb8ZJjeM2TaVrIYSc8sfAAAABE"]
[Tue Sep 01 11:25:09.310370 2026] [:error] [pid 6090:tid 140353197754112] [client 195.178.110.137:9060] [client 195.178.110.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env.old"] [unique_id "apb8ZbPf1VxWhFqgvWsLXwAAAFY"]
[Tue Sep 01 11:25:09.434862 2026] [:error] [pid 28500:tid 140353206146816] [client 195.178.110.137:14002] [client 195.178.110.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env.bak"] [unique_id "apb8ZTQYUm0S3Gh9Jn8FMwAAAZU"]
[Tue Sep 01 11:25:10.192405 2026] [:error] [pid 11529:tid 140353290073856] [client 195.178.110.137:9066] [client 195.178.110.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env.save"] [unique_id "apb8Zi580fjDz1VV6yeA6QAAAcs"]
[Tue Sep 01 11:25:10.367755 2026] [:error] [pid 29615:tid 140353256503040] [client 195.178.110.137:14018] [client 195.178.110.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env.old"] [unique_id "apb8Zp1PBa8fnDJM-t7OUwAAAg8"]
[Tue Sep 01 11:25:11.058359 2026] [:error] [pid 6411:tid 140353435567872] [client 195.178.110.137:9076] [client 195.178.110.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env.backup"] [unique_id "apb8Z6-5XxGfLhlq8xnChAAAAMI"]
[Tue Sep 01 11:25:11.218537 2026] [:error] [pid 6411:tid 140353256503040] [client 195.178.110.137:14028] [client 195.178.110.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env.save"] [unique_id "apb8Z6-5XxGfLhlq8xnChQAAAM8"]
[Tue Sep 01 11:25:12.267117 2026] [:error] [pid 11529:tid 140353180968704] [client 195.178.110.137:14038] [client 195.178.110.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env.backup"] [unique_id "apb8aC580fjDz1VV6yeA6gAAAdg"]
[Tue Sep 01 11:51:04.840588 2026] [proxy_fcgi:error] [pid 11529:tid 140353340430080] [client 158.23.184.117:60728] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 11:51:04.981368 2026] [proxy_fcgi:error] [pid 11529:tid 140353281681152] [client 158.23.184.117:60728] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 11:51:05.123682 2026] [proxy_fcgi:error] [pid 11529:tid 140353348822784] [client 158.23.184.117:60728] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 11:51:05.402312 2026] [proxy_fcgi:error] [pid 11529:tid 140353306859264] [client 158.23.184.117:60728] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 11:51:05.681754 2026] [proxy_fcgi:error] [pid 11529:tid 140353443960576] [client 158.23.184.117:60728] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 11:51:06.657950 2026] [proxy_fcgi:error] [pid 11529:tid 140353248110336] [client 158.23.184.117:60728] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 11:51:07.358466 2026] [proxy_fcgi:error] [pid 11529:tid 140353256503040] [client 158.23.184.117:60728] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 11:51:07.916795 2026] [proxy_fcgi:error] [pid 11529:tid 140353306859264] [client 158.23.184.117:60728] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 11:51:08.056026 2026] [proxy_fcgi:error] [pid 11529:tid 140353443960576] [client 158.23.184.117:60728] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 11:51:08.335539 2026] [:error] [pid 11529:tid 140353197754112] [client 158.23.184.117:60728] [client 158.23.184.117] ModSecurity: Warning. Operator GT matched 25 at IP:scan_404_count. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "11"] [id "9000204"] [msg "Scanner detected - blocking IP 1h"] [tag "scanner-detect"] [hostname "menabern.com"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "apcCfC580fjDz1VV6yeHDAAAAdY"]
[Tue Sep 01 11:51:08.471168 2026] [:error] [pid 11529:tid 140353180968704] [client 158.23.184.117:60728] [client 158.23.184.117] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-content/themes/twentytwentyfive/functions.php"] [unique_id "apcCfC580fjDz1VV6yeHDgAAAdg"]
[Tue Sep 01 11:51:09.023200 2026] [:error] [pid 6411:tid 140353332037376] [client 158.23.184.117:60492] [client 158.23.184.117] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-admin/wp-admins.php"] [unique_id "apcCfa-5XxGfLhlq8xnHdgAAAMY"]
[Tue Sep 01 11:51:09.571880 2026] [:error] [pid 6089:tid 140353189361408] [client 158.23.184.117:60732] [client 158.23.184.117] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-admin/user/profile.php"] [unique_id "apcCfZjeM2TaVrIYSc80YQAAABc"]
[Tue Sep 01 11:51:10.124266 2026] [:error] [pid 6089:tid 140353264895744] [client 158.23.184.117:60729] [client 158.23.184.117] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/admin/admin.php"] [unique_id "apcCfpjeM2TaVrIYSc80YwAAAA4"]
[Tue Sep 01 11:51:10.675127 2026] [:error] [pid 6411:tid 140353231324928] [client 158.23.184.117:60675] [client 158.23.184.117] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-content/languages/plugins/admin.php"] [unique_id "apcCfq-5XxGfLhlq8xnHdwAAANI"]
[Tue Sep 01 11:51:11.224023 2026] [:error] [pid 28500:tid 140353189361408] [client 158.23.184.117:60487] [client 158.23.184.117] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/storage/"] [unique_id "apcCfzQYUm0S3Gh9Jn8KEgAAAZc"]
[Tue Sep 01 11:51:11.775398 2026] [:error] [pid 11529:tid 140353239717632] [client 158.23.184.117:60494] [client 158.23.184.117] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/user.php"] [unique_id "apcCfy580fjDz1VV6yeHFwAAAdE"]
[Tue Sep 01 11:51:12.325612 2026] [:error] [pid 28500:tid 140353290073856] [client 158.23.184.117:60515] [client 158.23.184.117] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-admin/css/colors/midnight/"] [unique_id "apcCgDQYUm0S3Gh9Jn8KEwAAAYs"]
[Tue Sep 01 11:51:12.875912 2026] [:error] [pid 11529:tid 140353189361408] [client 158.23.184.117:60673] [client 158.23.184.117] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/public.php"] [unique_id "apcCgC580fjDz1VV6yeHGwAAAdc"]
[Tue Sep 01 11:51:13.430327 2026] [:error] [pid 6091:tid 140353452353280] [client 158.23.184.117:60520] [client 158.23.184.117] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-includes/images/media/"] [unique_id "apcCgckVYOXruxV21N4kzAAAAIA"]
[Tue Sep 01 11:51:13.982248 2026] [:error] [pid 6090:tid 140353348822784] [client 158.23.184.117:60682] [client 158.23.184.117] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/colors.php"] [unique_id "apcCgbPf1VxWhFqgvWsPwQAAAEQ"]
[Tue Sep 01 11:51:14.535107 2026] [:error] [pid 6411:tid 140353452353280] [client 158.23.184.117:60723] [client 158.23.184.117] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-include.php"] [unique_id "apcCgq-5XxGfLhlq8xnHeAAAAMA"]
[Tue Sep 01 11:51:15.086807 2026] [:error] [pid 6090:tid 140353298466560] [client 158.23.184.117:60691] [client 158.23.184.117] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-admin/checker.php"] [unique_id "apcCg7Pf1VxWhFqgvWsPxAAAAEo"]
[Tue Sep 01 11:51:15.635998 2026] [:error] [pid 6090:tid 140353214539520] [client 158.23.184.117:60484] [client 158.23.184.117] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-admin/css/colors/coffee/"] [unique_id "apcCg7Pf1VxWhFqgvWsPxgAAAFQ"]
[Tue Sep 01 11:51:16.187314 2026] [:error] [pid 28500:tid 140353248110336] [client 158.23.184.117:60498] [client 158.23.184.117] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-logs.php"] [unique_id "apcChDQYUm0S3Gh9Jn8KHAAAAZA"]
[Tue Sep 01 11:51:16.738386 2026] [:error] [pid 6089:tid 140353273288448] [client 158.23.184.117:60697] [client 158.23.184.117] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-content/themes/file.php"] [unique_id "apcChJjeM2TaVrIYSc80aQAAAA0"]
[Tue Sep 01 11:51:17.290202 2026] [:error] [pid 28194:tid 140353206146816] [client 158.23.184.117:60488] [client 158.23.184.117] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/.well-known/rk2.php"] [unique_id "apcChQdz-EN0cDNAEVJLbAAAAVU"]
[Tue Sep 01 11:51:17.838463 2026] [:error] [pid 11529:tid 140353452353280] [client 158.23.184.117:60731] [client 158.23.184.117] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/gecko-new.php"] [unique_id "apcChS580fjDz1VV6yeHJQAAAcA"]
[Tue Sep 01 11:51:18.388990 2026] [:error] [pid 6090:tid 140353197754112] [client 158.23.184.117:60726] [client 158.23.184.117] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-admin/health.php"] [unique_id "apcChrPf1VxWhFqgvWsPyAAAAFY"]
[Tue Sep 01 11:51:18.946510 2026] [:error] [pid 9194:tid 140353264895744] [client 158.23.184.117:60499] [client 158.23.184.117] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/inc.php"] [unique_id "apcChodqWCmIAB5WEG-DKwAAAQ4"]
[Tue Sep 01 11:51:19.495854 2026] [:error] [pid 6090:tid 140353435567872] [client 158.23.184.117:15245] [client 158.23.184.117] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/s.php"] [unique_id "apcCh7Pf1VxWhFqgvWsPyQAAAEI"]
[Tue Sep 01 11:51:20.055062 2026] [:error] [pid 28500:tid 140353231324928] [client 158.23.184.117:60711] [client 158.23.184.117] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/uploads/index.php"] [unique_id "apcCiDQYUm0S3Gh9Jn8KIgAAAZI"]
[Tue Sep 01 11:51:20.602419 2026] [:error] [pid 11529:tid 140353443960576] [client 158.23.184.117:60496] [client 158.23.184.117] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/shop.php"] [unique_id "apcCiC580fjDz1VV6yeHKwAAAcE"]
[Tue Sep 01 11:51:21.152258 2026] [:error] [pid 6090:tid 140353306859264] [client 158.23.184.117:60518] [client 158.23.184.117] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/data.php"] [unique_id "apcCibPf1VxWhFqgvWsPzAAAAEk"]
[Tue Sep 01 11:51:21.703528 2026] [:error] [pid 6089:tid 140353323644672] [client 158.23.184.117:60703] [client 158.23.184.117] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-admin/task.php"] [unique_id "apcCiZjeM2TaVrIYSc80bAAAAAc"]
[Tue Sep 01 11:51:22.258286 2026] [:error] [pid 11529:tid 140353256503040] [client 158.23.184.117:60696] [client 158.23.184.117] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/radio.php"] [unique_id "apcCii580fjDz1VV6yeHNAAAAc8"]
[Tue Sep 01 11:51:22.821202 2026] [:error] [pid 29615:tid 140353222932224] [client 158.23.184.117:60674] [client 158.23.184.117] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/admin.php"] [unique_id "apcCip1PBa8fnDJM-t7Q7QAAAhM"]
[Tue Sep 01 11:51:23.374087 2026] [:error] [pid 11529:tid 140353306859264] [client 158.23.184.117:60486] [client 158.23.184.117] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-includes/header.php"] [unique_id "apcCiy580fjDz1VV6yeHNQAAAck"]
[Tue Sep 01 11:51:23.922973 2026] [:error] [pid 9194:tid 140353248110336] [client 158.23.184.117:60534] [client 158.23.184.117] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-content/languages/chosen.php"] [unique_id "apcCi4dqWCmIAB5WEG-DMAAAARA"]
[Tue Sep 01 11:51:24.470555 2026] [:error] [pid 6090:tid 140353239717632] [client 158.23.184.117:60531] [client 158.23.184.117] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/.bod/.ll/"] [unique_id "apcCjLPf1VxWhFqgvWsP0QAAAFE"]
[Tue Sep 01 11:51:25.019104 2026] [:error] [pid 6089:tid 140353298466560] [client 158.23.184.117:60698] [client 158.23.184.117] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-admin.php"] [unique_id "apcCjZjeM2TaVrIYSc80bQAAAAo"]
[Tue Sep 01 12:03:23.478353 2026] [proxy_fcgi:error] [pid 6089:tid 140353214539520] [client 52.139.44.162:37839] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 12:03:23.585662 2026] [proxy_fcgi:error] [pid 6089:tid 140353189361408] [client 52.139.44.162:37839] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 12:03:23.690962 2026] [proxy_fcgi:error] [pid 6089:tid 140353264895744] [client 52.139.44.162:37839] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 12:03:23.795851 2026] [proxy_fcgi:error] [pid 6089:tid 140353306859264] [client 52.139.44.162:37839] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 12:03:23.900223 2026] [proxy_fcgi:error] [pid 6089:tid 140353332037376] [client 52.139.44.162:37839] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 12:03:24.005605 2026] [proxy_fcgi:error] [pid 6089:tid 140353443960576] [client 52.139.44.162:37839] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 12:03:24.110737 2026] [proxy_fcgi:error] [pid 6089:tid 140353298466560] [client 52.139.44.162:37839] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 12:03:24.216782 2026] [proxy_fcgi:error] [pid 6089:tid 140353340430080] [client 52.139.44.162:37839] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 12:03:24.322127 2026] [proxy_fcgi:error] [pid 6089:tid 140353248110336] [client 52.139.44.162:37839] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 12:03:24.427100 2026] [proxy_fcgi:error] [pid 6089:tid 140353435567872] [client 52.139.44.162:37839] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 12:03:24.532412 2026] [proxy_fcgi:error] [pid 6089:tid 140353323644672] [client 52.139.44.162:37839] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 12:03:24.636765 2026] [proxy_fcgi:error] [pid 6089:tid 140353290073856] [client 52.139.44.162:37839] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 12:03:24.742285 2026] [proxy_fcgi:error] [pid 6089:tid 140353281681152] [client 52.139.44.162:37839] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 12:03:24.847056 2026] [proxy_fcgi:error] [pid 6089:tid 140353315251968] [client 52.139.44.162:37839] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 12:03:24.958796 2026] [proxy_fcgi:error] [pid 6089:tid 140353256503040] [client 52.139.44.162:37839] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 12:03:25.064339 2026] [proxy_fcgi:error] [pid 6089:tid 140353206146816] [client 52.139.44.162:37839] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 12:03:25.170771 2026] [proxy_fcgi:error] [pid 6089:tid 140353214539520] [client 52.139.44.162:37839] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 12:03:25.276656 2026] [proxy_fcgi:error] [pid 6089:tid 140353348822784] [client 52.139.44.162:37839] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 12:03:25.380753 2026] [proxy_fcgi:error] [pid 6089:tid 140353452353280] [client 52.139.44.162:37839] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 12:03:25.484916 2026] [proxy_fcgi:error] [pid 6089:tid 140353197754112] [client 52.139.44.162:37839] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 12:03:25.590388 2026] [proxy_fcgi:error] [pid 6089:tid 140353189361408] [client 52.139.44.162:37839] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 12:03:25.696744 2026] [proxy_fcgi:error] [pid 6089:tid 140353357215488] [client 52.139.44.162:37839] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 12:03:25.803977 2026] [proxy_fcgi:error] [pid 6089:tid 140353306859264] [client 52.139.44.162:37839] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 12:03:25.909466 2026] [proxy_fcgi:error] [pid 6089:tid 140353443960576] [client 52.139.44.162:37839] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 12:03:26.014739 2026] [proxy_fcgi:error] [pid 6089:tid 140353239717632] [client 52.139.44.162:37839] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 12:03:26.014865 2026] [:error] [pid 6089:tid 140353239717632] [client 52.139.44.162:37839] [client 52.139.44.162] ModSecurity: Warning. Operator GT matched 25 at IP:scan_404_count. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "11"] [id "9000204"] [msg "Scanner detected - blocking IP 1h"] [tag "scanner-detect"] [hostname "www.menabern.com"] [uri "/b8.php"] [unique_id "apcFXpjeM2TaVrIYSc82fgAAABE"]
[Tue Sep 01 12:03:26.115288 2026] [:error] [pid 6089:tid 140353298466560] [client 52.139.44.162:37839] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/file9.php"] [unique_id "apcFXpjeM2TaVrIYSc82fwAAAAo"]
[Tue Sep 01 12:03:26.317579 2026] [:error] [pid 29615:tid 140353248110336] [client 52.139.44.162:37475] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/file8.php"] [unique_id "apcFXp1PBa8fnDJM-t7SIAAAAhA"]
[Tue Sep 01 12:03:26.522666 2026] [:error] [pid 29615:tid 140353189361408] [client 52.139.44.162:37886] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/file6.php"] [unique_id "apcFXp1PBa8fnDJM-t7SIgAAAhc"]
[Tue Sep 01 12:03:26.727169 2026] [:error] [pid 29615:tid 140353298466560] [client 52.139.44.162:37460] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/file4.php"] [unique_id "apcFXp1PBa8fnDJM-t7SIwAAAgo"]
[Tue Sep 01 12:03:26.930351 2026] [:error] [pid 11529:tid 140353197754112] [client 52.139.44.162:37879] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/media.php"] [unique_id "apcFXi580fjDz1VV6yeKWQAAAdY"]
[Tue Sep 01 12:03:27.128556 2026] [:error] [pid 6091:tid 140353443960576] [client 52.139.44.162:37850] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/adminfuns.php"] [unique_id "apcFX8kVYOXruxV21N4logAAAIE"]
[Tue Sep 01 12:03:27.328849 2026] [:error] [pid 9194:tid 140353214539520] [client 52.139.44.162:37831] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/classwithtostring.php"] [unique_id "apcFX4dqWCmIAB5WEG-EAgAAARQ"]
[Tue Sep 01 12:03:27.528945 2026] [:error] [pid 6090:tid 140353273288448] [client 52.139.44.162:37500] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/3PJcpMFsD8B.php"] [unique_id "apcFX7Pf1VxWhFqgvWsQzAAAAE0"]
[Tue Sep 01 12:03:27.744284 2026] [:error] [pid 28500:tid 140353281681152] [client 52.139.44.162:37842] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/4PJcpMFsD8B.php"] [unique_id "apcFXzQYUm0S3Gh9Jn8L3QAAAYw"]
[Tue Sep 01 12:03:27.946267 2026] [:error] [pid 6090:tid 140353239717632] [client 52.139.44.162:37441] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/wsd.php"] [unique_id "apcFX7Pf1VxWhFqgvWsQzgAAAFE"]
[Tue Sep 01 12:03:28.150211 2026] [:error] [pid 28500:tid 140353298466560] [client 52.139.44.162:37878] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/bulet.php"] [unique_id "apcFYDQYUm0S3Gh9Jn8L3gAAAYo"]
[Tue Sep 01 12:03:28.367510 2026] [:error] [pid 6089:tid 140353323644672] [client 52.139.44.162:37862] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/av.php"] [unique_id "apcFYJjeM2TaVrIYSc82gQAAAAc"]
[Tue Sep 01 12:03:28.571210 2026] [:error] [pid 6089:tid 140353315251968] [client 52.139.44.162:37828] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/images.php"] [unique_id "apcFYJjeM2TaVrIYSc82ggAAAAg"]
[Tue Sep 01 12:03:28.770885 2026] [:error] [pid 6411:tid 140353315251968] [client 52.139.44.162:37459] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/ops.php"] [unique_id "apcFYK-5XxGfLhlq8xnI6QAAAMg"]
[Tue Sep 01 12:03:28.970834 2026] [:error] [pid 29615:tid 140353239717632] [client 52.139.44.162:37495] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/BDKR28WP.php"] [unique_id "apcFYJ1PBa8fnDJM-t7SJAAAAhE"]
[Tue Sep 01 12:03:29.175931 2026] [:error] [pid 29615:tid 140353323644672] [client 52.139.44.162:37856] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/k.php"] [unique_id "apcFYZ1PBa8fnDJM-t7SJQAAAgc"]
[Tue Sep 01 12:03:29.377451 2026] [:error] [pid 11529:tid 140353306859264] [client 52.139.44.162:37483] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/dex.php"] [unique_id "apcFYS580fjDz1VV6yeKXgAAAck"]
[Tue Sep 01 12:03:29.577509 2026] [:error] [pid 11529:tid 140353348822784] [client 52.139.44.162:36946] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/img.php"] [unique_id "apcFYS580fjDz1VV6yeKXwAAAcQ"]
[Tue Sep 01 12:03:29.784253 2026] [:error] [pid 28194:tid 140353231324928] [client 52.139.44.162:37874] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/222.php"] [unique_id "apcFYQdz-EN0cDNAEVJMdAAAAVI"]
[Tue Sep 01 12:03:29.986385 2026] [:error] [pid 11529:tid 140353357215488] [client 52.139.44.162:37456] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/key.php"] [unique_id "apcFYS580fjDz1VV6yeKYAAAAcM"]
[Tue Sep 01 12:03:30.190495 2026] [:error] [pid 11529:tid 140353231324928] [client 52.139.44.162:37865] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/chosen.php"] [unique_id "apcFYi580fjDz1VV6yeKYQAAAdI"]
[Tue Sep 01 12:03:30.404995 2026] [:error] [pid 11529:tid 140353281681152] [client 52.139.44.162:37446] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/file1221.php"] [unique_id "apcFYi580fjDz1VV6yeKYwAAAcw"]
[Tue Sep 01 12:03:30.615524 2026] [:error] [pid 11529:tid 140353239717632] [client 52.139.44.162:37852] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/nox.php"] [unique_id "apcFYi580fjDz1VV6yeKZAAAAdE"]
[Tue Sep 01 12:03:30.814720 2026] [:error] [pid 29615:tid 140353290073856] [client 52.139.44.162:37485] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/1.php"] [unique_id "apcFYp1PBa8fnDJM-t7SJgAAAgs"]
[Tue Sep 01 12:03:31.014812 2026] [:error] [pid 6089:tid 140353348822784] [client 52.139.44.162:37478] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/m.php"] [unique_id "apcFY5jeM2TaVrIYSc82hAAAAAQ"]
[Tue Sep 01 12:03:31.217845 2026] [:error] [pid 28194:tid 140353357215488] [client 52.139.44.162:37443] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/fling.php"] [unique_id "apcFYwdz-EN0cDNAEVJMdgAAAUM"]
[Tue Sep 01 12:03:31.424817 2026] [:error] [pid 11529:tid 140353256503040] [client 52.139.44.162:37847] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/btyuio.php"] [unique_id "apcFYy580fjDz1VV6yeKZgAAAc8"]
[Tue Sep 01 12:03:31.626780 2026] [:error] [pid 6089:tid 140353189361408] [client 52.139.44.162:37500] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/dehnl.php"] [unique_id "apcFY5jeM2TaVrIYSc82hQAAABc"]
[Tue Sep 01 12:03:31.825598 2026] [:error] [pid 6089:tid 140353264895744] [client 52.139.44.162:37213] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/zoo1.php"] [unique_id "apcFY5jeM2TaVrIYSc82hgAAAA4"]
[Tue Sep 01 12:03:32.024709 2026] [:error] [pid 6411:tid 140353298466560] [client 52.139.44.162:37830] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/radio.php"] [unique_id "apcFZK-5XxGfLhlq8xnI6gAAAMo"]
[Tue Sep 01 12:03:32.225779 2026] [:error] [pid 11529:tid 140353273288448] [client 52.139.44.162:37881] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/one.php"] [unique_id "apcFZC580fjDz1VV6yeKaQAAAc0"]
[Tue Sep 01 12:03:32.432253 2026] [:error] [pid 11529:tid 140353222932224] [client 52.139.44.162:36941] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/504.php"] [unique_id "apcFZC580fjDz1VV6yeKagAAAdM"]
[Tue Sep 01 12:03:32.644332 2026] [:error] [pid 11529:tid 140353435567872] [client 52.139.44.162:37826] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/ano.php"] [unique_id "apcFZC580fjDz1VV6yeKawAAAcI"]
[Tue Sep 01 12:03:32.845774 2026] [:error] [pid 29615:tid 140353315251968] [client 52.139.44.162:37486] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/mac.php"] [unique_id "apcFZJ1PBa8fnDJM-t7SJwAAAgg"]
[Tue Sep 01 12:03:33.047435 2026] [:error] [pid 29615:tid 140353231324928] [client 52.139.44.162:37834] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/simple.php"] [unique_id "apcFZZ1PBa8fnDJM-t7SKAAAAhI"]
[Tue Sep 01 12:03:33.248013 2026] [:error] [pid 11529:tid 140353357215488] [client 52.139.44.162:37480] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/sallu.php"] [unique_id "apcFZS580fjDz1VV6yeKbQAAAcM"]
[Tue Sep 01 12:03:33.451368 2026] [:error] [pid 6091:tid 140353264895744] [client 52.139.44.162:37488] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/biufile.php"] [unique_id "apcFZckVYOXruxV21N4lpAAAAI4"]
[Tue Sep 01 12:03:33.651888 2026] [:error] [pid 29615:tid 140353206146816] [client 52.139.44.162:36936] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/blacks.php"] [unique_id "apcFZZ1PBa8fnDJM-t7SKQAAAhU"]
[Tue Sep 01 12:03:33.857219 2026] [:error] [pid 11529:tid 140353290073856] [client 52.139.44.162:37450] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/wp.php"] [unique_id "apcFZS580fjDz1VV6yeKbgAAAcs"]
[Tue Sep 01 12:03:34.058867 2026] [:error] [pid 6411:tid 140353340430080] [client 52.139.44.162:37824] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/wander.php"] [unique_id "apcFZq-5XxGfLhlq8xnI6wAAAMU"]
[Tue Sep 01 12:03:34.262476 2026] [:error] [pid 11529:tid 140353239717632] [client 52.139.44.162:37493] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/abcd.php"] [unique_id "apcFZi580fjDz1VV6yeKbwAAAdE"]
[Tue Sep 01 12:03:34.465162 2026] [:error] [pid 6089:tid 140353273288448] [client 52.139.44.162:37445] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/nofile.php"] [unique_id "apcFZpjeM2TaVrIYSc82iQAAAA0"]
[Tue Sep 01 12:03:34.670605 2026] [:error] [pid 6411:tid 140353189361408] [client 52.139.44.162:37457] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/run.php"] [unique_id "apcFZq-5XxGfLhlq8xnI7QAAANc"]
[Tue Sep 01 12:03:34.871767 2026] [:error] [pid 6089:tid 140353180968704] [client 52.139.44.162:37470] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/new.php"] [unique_id "apcFZpjeM2TaVrIYSc82igAAABg"]
[Tue Sep 01 12:03:35.075223 2026] [:error] [pid 6089:tid 140353248110336] [client 52.139.44.162:37884] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/vpn.php"] [unique_id "apcFZ5jeM2TaVrIYSc82iwAAABA"]
[Tue Sep 01 12:03:35.278552 2026] [:error] [pid 11529:tid 140353452353280] [client 52.139.44.162:37859] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/goods.php"] [unique_id "apcFZy580fjDz1VV6yeKcAAAAcA"]
[Tue Sep 01 12:03:35.482047 2026] [:error] [pid 6411:tid 140353273288448] [client 52.139.44.162:37476] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/alfa.php"] [unique_id "apcFZ6-5XxGfLhlq8xnI8AAAAM0"]
[Tue Sep 01 12:03:35.689713 2026] [:error] [pid 11529:tid 140353340430080] [client 52.139.44.162:37877] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/133.php"] [unique_id "apcFZy580fjDz1VV6yeKcQAAAcU"]
[Tue Sep 01 12:03:35.893374 2026] [:error] [pid 6090:tid 140353315251968] [client 52.139.44.162:36931] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/sym.php"] [unique_id "apcFZ7Pf1VxWhFqgvWsQ0gAAAEg"]
[Tue Sep 01 12:03:36.093408 2026] [:error] [pid 28500:tid 140353435567872] [client 52.139.44.162:36958] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/8.php"] [unique_id "apcFaDQYUm0S3Gh9Jn8L4AAAAYI"]
[Tue Sep 01 12:03:36.293126 2026] [:error] [pid 11529:tid 140353189361408] [client 52.139.44.162:37452] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/ws55.php"] [unique_id "apcFaC580fjDz1VV6yeKcgAAAdc"]
[Tue Sep 01 12:03:36.490575 2026] [:error] [pid 28500:tid 140353348822784] [client 52.139.44.162:37849] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/indo.php"] [unique_id "apcFaDQYUm0S3Gh9Jn8L4QAAAYQ"]
[Tue Sep 01 12:03:36.695286 2026] [:error] [pid 6090:tid 140353189361408] [client 52.139.44.162:37477] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/wnnjpsby.php"] [unique_id "apcFaLPf1VxWhFqgvWsQ0wAAAFc"]
[Tue Sep 01 12:03:36.894965 2026] [:error] [pid 6089:tid 140353281681152] [client 52.139.44.162:37873] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/info.php/new.php"] [unique_id "apcFaJjeM2TaVrIYSc82jgAAAAw"]
[Tue Sep 01 12:03:37.093887 2026] [:error] [pid 6089:tid 140353206146816] [client 52.139.44.162:37462] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/wp-content/uploads/"] [unique_id "apcFaZjeM2TaVrIYSc82jwAAABU"]
[Tue Sep 01 12:03:37.292658 2026] [:error] [pid 11529:tid 140353348822784] [client 52.139.44.162:37845] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/w.php"] [unique_id "apcFaS580fjDz1VV6yeKdQAAAcQ"]
[Tue Sep 01 12:03:37.497895 2026] [:error] [pid 6411:tid 140353222932224] [client 52.139.44.162:37497] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/dk.php"] [unique_id "apcFaa-5XxGfLhlq8xnI8QAAANM"]
[Tue Sep 01 12:03:37.706562 2026] [:error] [pid 6089:tid 140353357215488] [client 52.139.44.162:36947] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/xc.php"] [unique_id "apcFaZjeM2TaVrIYSc82kQAAAAM"]
[Tue Sep 01 12:03:37.907167 2026] [:error] [pid 11529:tid 140353443960576] [client 52.139.44.162:36952] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/dev.php"] [unique_id "apcFaS580fjDz1VV6yeKdwAAAcE"]
[Tue Sep 01 12:03:38.111192 2026] [:error] [pid 6089:tid 140353231324928] [client 52.139.44.162:37858] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/wp_blog_footer.php"] [unique_id "apcFapjeM2TaVrIYSc82kwAAABI"]
[Tue Sep 01 12:03:38.314421 2026] [:error] [pid 28500:tid 140353340430080] [client 52.139.44.162:37871] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/wefile.php"] [unique_id "apcFajQYUm0S3Gh9Jn8L4gAAAYU"]
[Tue Sep 01 12:03:38.519932 2026] [:error] [pid 6090:tid 140353222932224] [client 52.139.44.162:36971] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/wp-load.php"] [unique_id "apcFarPf1VxWhFqgvWsQ1AAAAFM"]
[Tue Sep 01 12:03:38.733108 2026] [:error] [pid 6089:tid 140353340430080] [client 52.139.44.162:37458] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/robot.php"] [unique_id "apcFapjeM2TaVrIYSc82lAAAAAU"]
[Tue Sep 01 12:03:38.935187 2026] [:error] [pid 11529:tid 140353197754112] [client 52.139.44.162:37840] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/sss.php"] [unique_id "apcFai580fjDz1VV6yeKeAAAAdY"]
[Tue Sep 01 12:03:39.136649 2026] [:error] [pid 11529:tid 140353256503040] [client 52.139.44.162:36948] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/xmini4.php"] [unique_id "apcFay580fjDz1VV6yeKeQAAAc8"]
[Tue Sep 01 12:03:39.346678 2026] [:error] [pid 11529:tid 140353264895744] [client 52.139.44.162:37851] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/gulu.php"] [unique_id "apcFay580fjDz1VV6yeKegAAAc4"]
[Tue Sep 01 12:03:39.550657 2026] [:error] [pid 28500:tid 140353206146816] [client 52.139.44.162:37451] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/replace.php"] [unique_id "apcFazQYUm0S3Gh9Jn8L4wAAAZU"]
[Tue Sep 01 12:03:39.754062 2026] [:error] [pid 28500:tid 140353256503040] [client 52.139.44.162:37502] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/c4.php"] [unique_id "apcFazQYUm0S3Gh9Jn8L5AAAAY8"]
[Tue Sep 01 12:03:39.954092 2026] [:error] [pid 28194:tid 140353180968704] [client 52.139.44.162:37442] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/rxr.php"] [unique_id "apcFawdz-EN0cDNAEVJMfAAAAVg"]
[Tue Sep 01 12:03:40.158762 2026] [:error] [pid 11529:tid 140353189361408] [client 52.139.44.162:37188] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/reviall.php"] [unique_id "apcFbC580fjDz1VV6yeKewAAAdc"]
[Tue Sep 01 12:03:40.363340 2026] [:error] [pid 6089:tid 140353290073856] [client 52.139.44.162:37440] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/os.php"] [unique_id "apcFbJjeM2TaVrIYSc82lQAAAAs"]
[Tue Sep 01 12:03:40.583597 2026] [:error] [pid 6091:tid 140353180968704] [client 52.139.44.162:37867] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/44.php"] [unique_id "apcFbMkVYOXruxV21N4lpQAAAJg"]
[Tue Sep 01 12:03:40.785830 2026] [:error] [pid 6091:tid 140353348822784] [client 52.139.44.162:36990] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/ant.php"] [unique_id "apcFbMkVYOXruxV21N4lpgAAAIQ"]
[Tue Sep 01 12:03:41.000035 2026] [:error] [pid 6091:tid 140353315251968] [client 52.139.44.162:37472] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/mari.php"] [unique_id "apcFbMkVYOXruxV21N4lpwAAAIg"]
[Tue Sep 01 12:03:41.202392 2026] [:error] [pid 28500:tid 140353248110336] [client 52.139.44.162:37854] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/bp.php"] [unique_id "apcFbTQYUm0S3Gh9Jn8L5QAAAZA"]
[Tue Sep 01 12:03:41.405473 2026] [:error] [pid 28194:tid 140353323644672] [client 52.139.44.162:37217] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/file61.php"] [unique_id "apcFbQdz-EN0cDNAEVJMfQAAAUc"]
[Tue Sep 01 12:03:41.608521 2026] [:error] [pid 9194:tid 140353340430080] [client 52.139.44.162:36991] [client 52.139.44.162] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/file59.php"] [unique_id "apcFbYdqWCmIAB5WEG-EBQAAAQU"]
[Tue Sep 01 12:18:51.980332 2026] [authz_core:error] [pid 28500:tid 140353214539520] [client 91.199.118.57:51080] AH01630: client denied by server configuration: /home/menabern/public_html/xmlrpc.php
[Tue Sep 01 13:23:32.358035 2026] [proxy_fcgi:error] [pid 6411:tid 140353197754112] [client 51.107.1.72:63818] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 13:24:50.960971 2026] [proxy_fcgi:error] [pid 11529:tid 140353315251968] [client 20.220.204.93:34748] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 13:24:51.067194 2026] [proxy_fcgi:error] [pid 11529:tid 140353332037376] [client 20.220.204.93:34748] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 13:24:51.171800 2026] [proxy_fcgi:error] [pid 11529:tid 140353290073856] [client 20.220.204.93:34748] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 13:24:51.302132 2026] [proxy_fcgi:error] [pid 11529:tid 140353264895744] [client 20.220.204.93:34748] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 13:24:51.409337 2026] [proxy_fcgi:error] [pid 11529:tid 140353281681152] [client 20.220.204.93:34748] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 13:24:51.515088 2026] [proxy_fcgi:error] [pid 11529:tid 140353452353280] [client 20.220.204.93:34748] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 13:24:51.620672 2026] [proxy_fcgi:error] [pid 11529:tid 140353256503040] [client 20.220.204.93:34748] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 13:24:51.799162 2026] [proxy_fcgi:error] [pid 11529:tid 140353323644672] [client 20.220.204.93:34748] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 13:24:51.931818 2026] [proxy_fcgi:error] [pid 11529:tid 140353357215488] [client 20.220.204.93:34748] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 13:24:52.037775 2026] [proxy_fcgi:error] [pid 11529:tid 140353348822784] [client 20.220.204.93:34748] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 13:24:52.157719 2026] [proxy_fcgi:error] [pid 11529:tid 140353222932224] [client 20.220.204.93:34748] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 13:24:52.332173 2026] [proxy_fcgi:error] [pid 11529:tid 140353306859264] [client 20.220.204.93:34748] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 13:24:52.437339 2026] [proxy_fcgi:error] [pid 11529:tid 140353189361408] [client 20.220.204.93:34748] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 13:24:52.546755 2026] [proxy_fcgi:error] [pid 11529:tid 140353315251968] [client 20.220.204.93:34748] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 13:24:52.665122 2026] [proxy_fcgi:error] [pid 11529:tid 140353273288448] [client 20.220.204.93:34748] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 13:24:52.805835 2026] [proxy_fcgi:error] [pid 11529:tid 140353231324928] [client 20.220.204.93:34748] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 13:24:52.933127 2026] [proxy_fcgi:error] [pid 11529:tid 140353290073856] [client 20.220.204.93:34748] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 13:24:53.094215 2026] [proxy_fcgi:error] [pid 11529:tid 140353264895744] [client 20.220.204.93:34748] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 13:24:53.199828 2026] [proxy_fcgi:error] [pid 11529:tid 140353281681152] [client 20.220.204.93:34748] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 13:24:53.305902 2026] [proxy_fcgi:error] [pid 11529:tid 140353452353280] [client 20.220.204.93:34748] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 13:24:53.411430 2026] [proxy_fcgi:error] [pid 11529:tid 140353256503040] [client 20.220.204.93:34748] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 13:25:01.515785 2026] [proxy_fcgi:error] [pid 11529:tid 140353298466560] [client 20.220.204.93:34748] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 13:25:01.621592 2026] [proxy_fcgi:error] [pid 11529:tid 140353306859264] [client 20.220.204.93:34748] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 13:25:01.726196 2026] [proxy_fcgi:error] [pid 11529:tid 140353222932224] [client 20.220.204.93:34748] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 13:25:01.835327 2026] [proxy_fcgi:error] [pid 11529:tid 140353315251968] [client 20.220.204.93:34748] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 13:25:01.835446 2026] [:error] [pid 11529:tid 140353315251968] [client 20.220.204.93:34748] [client 20.220.204.93] ModSecurity: Warning. Operator GT matched 25 at IP:scan_404_count. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "11"] [id "9000204"] [msg "Scanner detected - blocking IP 1h"] [tag "scanner-detect"] [hostname "menabern.com"] [uri "/000.php"] [unique_id "apcYfS580fjDz1VV6yen8QAAAcg"]
[Tue Sep 01 13:25:01.938505 2026] [:error] [pid 11529:tid 140353273288448] [client 20.220.204.93:34748] [client 20.220.204.93] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/29.php"] [unique_id "apcYfS580fjDz1VV6yen8gAAAc0"]
[Tue Sep 01 13:25:03.915563 2026] [:error] [pid 11529:tid 140353452353280] [client 20.220.204.93:25855] [client 20.220.204.93] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/faiy.php"] [unique_id "apcYfy580fjDz1VV6yen9AAAAcA"]
[Tue Sep 01 13:25:04.679217 2026] [:error] [pid 29615:tid 140353452353280] [client 20.220.204.93:25928] [client 20.220.204.93] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/ho.php"] [unique_id "apcYgJ1PBa8fnDJM-t7aqwAAAgA"]
[Tue Sep 01 13:25:06.195534 2026] [:error] [pid 11529:tid 140353180968704] [client 20.220.204.93:34749] [client 20.220.204.93] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/e219b53abbindex.php"] [unique_id "apcYgi580fjDz1VV6yen9QAAAdg"]
[Tue Sep 01 13:25:10.785527 2026] [:error] [pid 28194:tid 140353348822784] [client 20.220.204.93:25968] [client 20.220.204.93] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/XrdbXydefault.php"] [unique_id "apcYhgdz-EN0cDNAEVJWKwAAAUQ"]
[Tue Sep 01 13:25:12.191151 2026] [:error] [pid 28500:tid 140353298466560] [client 20.220.204.93:48421] [client 20.220.204.93] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/82.php"] [unique_id "apcYiDQYUm0S3Gh9Jn8ccQAAAYo"]
[Tue Sep 01 13:25:14.831481 2026] [:error] [pid 6411:tid 140353189361408] [client 20.220.204.93:25841] [client 20.220.204.93] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/20.php"] [unique_id "apcYiq-5XxGfLhlq8xna4QAAANc"]
[Tue Sep 01 13:25:15.339216 2026] [:error] [pid 6411:tid 140353332037376] [client 20.220.204.93:34726] [client 20.220.204.93] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/a65.php"] [unique_id "apcYi6-5XxGfLhlq8xna4gAAAMY"]
[Tue Sep 01 13:25:15.909167 2026] [:error] [pid 9194:tid 140353273288448] [client 20.220.204.93:25925] [client 20.220.204.93] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/ilex.php"] [unique_id "apcYi4dqWCmIAB5WEG-L9QAAAQ0"]
[Tue Sep 01 13:25:16.730156 2026] [:error] [pid 29615:tid 140353256503040] [client 20.220.204.93:17598] [client 20.220.204.93] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/pqfpcelx.php"] [unique_id "apcYjJ1PBa8fnDJM-t7asgAAAg8"]
[Tue Sep 01 13:25:17.140291 2026] [:error] [pid 9194:tid 140353443960576] [client 20.220.204.93:17546] [client 20.220.204.93] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/f35.update.php"] [unique_id "apcYjYdqWCmIAB5WEG-L9wAAAQE"]
[Tue Sep 01 13:25:17.485779 2026] [:error] [pid 28194:tid 140353281681152] [client 20.220.204.93:17582] [client 20.220.204.93] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/zoo1.php"] [unique_id "apcYjQdz-EN0cDNAEVJWLgAAAUw"]
[Tue Sep 01 13:25:17.991763 2026] [:error] [pid 11529:tid 140353340430080] [client 20.220.204.93:62747] [client 20.220.204.93] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/ot.php"] [unique_id "apcYjS580fjDz1VV6yen-wAAAcU"]
[Tue Sep 01 13:25:18.274975 2026] [:error] [pid 11529:tid 140353332037376] [client 20.220.204.93:62774] [client 20.220.204.93] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/edorxrr.php"] [unique_id "apcYji580fjDz1VV6yen_AAAAcY"]
[Tue Sep 01 13:25:18.501012 2026] [:error] [pid 6091:tid 140353452353280] [client 20.220.204.93:48396] [client 20.220.204.93] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/zoo2.php"] [unique_id "apcYjskVYOXruxV21N4w7QAAAIA"]
[Tue Sep 01 13:25:18.747873 2026] [:error] [pid 28194:tid 140353315251968] [client 20.220.204.93:25794] [client 20.220.204.93] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/hywzd.php"] [unique_id "apcYjgdz-EN0cDNAEVJWLwAAAUg"]
[Tue Sep 01 13:25:19.029556 2026] [:error] [pid 6091:tid 140353256503040] [client 20.220.204.93:34688] [client 20.220.204.93] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/simple.php"] [unique_id "apcYj8kVYOXruxV21N4w7gAAAI8"]
[Tue Sep 01 13:25:19.469295 2026] [:error] [pid 9194:tid 140353264895744] [client 20.220.204.93:25811] [client 20.220.204.93] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/acf1ced8aec2.php"] [unique_id "apcYj4dqWCmIAB5WEG-L-AAAAQ4"]
[Tue Sep 01 13:25:28.513563 2026] [:error] [pid 11529:tid 140353315251968] [client 20.220.204.93:25967] [client 20.220.204.93] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-trackback.php"] [unique_id "apcYmC580fjDz1VV6yeoBAAAAcg"]
[Tue Sep 01 13:25:28.895710 2026] [:error] [pid 28500:tid 140353443960576] [client 20.220.204.93:17540] [client 20.220.204.93] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/coffe.php"] [unique_id "apcYmDQYUm0S3Gh9Jn8cdgAAAYE"]
[Tue Sep 01 13:25:29.851431 2026] [:error] [pid 11529:tid 140353264895744] [client 20.220.204.93:25823] [client 20.220.204.93] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/goods.php"] [unique_id "apcYmS580fjDz1VV6yeoCQAAAc4"]
[Tue Sep 01 13:25:31.484811 2026] [:error] [pid 28500:tid 140353231324928] [client 20.220.204.93:62753] [client 20.220.204.93] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/asax.php"] [unique_id "apcYmzQYUm0S3Gh9Jn8cegAAAZI"]
[Tue Sep 01 13:25:33.926754 2026] [:error] [pid 28194:tid 140353256503040] [client 20.220.204.93:34743] [client 20.220.204.93] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/cjhnp.php"] [unique_id "apcYnQdz-EN0cDNAEVJWOAAAAU8"]
[Tue Sep 01 13:25:34.209114 2026] [:error] [pid 28194:tid 140353323644672] [client 20.220.204.93:25956] [client 20.220.204.93] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/jlex.php"] [unique_id "apcYngdz-EN0cDNAEVJWOQAAAUc"]
[Tue Sep 01 13:25:34.463180 2026] [:error] [pid 6089:tid 140353248110336] [client 20.220.204.93:34719] [client 20.220.204.93] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/kerang.php"] [unique_id "apcYnpjeM2TaVrIYSc9LLwAAABA"]
[Tue Sep 01 13:25:34.840333 2026] [:error] [pid 6090:tid 140353281681152] [client 20.220.204.93:34709] [client 20.220.204.93] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/local.php"] [unique_id "apcYnrPf1VxWhFqgvWsdqAAAAEw"]
[Tue Sep 01 13:25:35.391700 2026] [:error] [pid 6089:tid 140353348822784] [client 20.220.204.93:25944] [client 20.220.204.93] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/kbqhb.php"] [unique_id "apcYn5jeM2TaVrIYSc9LMAAAAAQ"]
[Tue Sep 01 13:45:05.706859 2026] [:error] [pid 28500:tid 140353206146816] [client 136.108.15.119:3164] [client 136.108.15.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env"] [unique_id "apcdMTQYUm0S3Gh9Jn8gJgAAAZU"]
[Tue Sep 01 14:09:38.659055 2026] [authz_core:error] [pid 9194:tid 140353256503040] [client 192.145.125.92:49398] AH01630: client denied by server configuration: /home/menabern/public_html/xmlrpc.php
[Tue Sep 01 14:31:08.614491 2026] [:error] [pid 6411:tid 140353357215488] [client 43.134.38.171:46866] [client 43.134.38.171] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||menabern.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "menabern.com"] [uri "/"] [unique_id "apcn_K-5XxGfLhlq8xn7DgAAAMM"]
[Tue Sep 01 14:52:27.538106 2026] [:error] [pid 6411:tid 140353298466560] [client 129.211.172.249:34410] [client 129.211.172.249] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||menabern.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "menabern.com"] [uri "/"] [unique_id "apcs-6-5XxGfLhlq8xkFWgAAAMo"]
[Tue Sep 01 15:20:04.966027 2026] [proxy_fcgi:error] [pid 6090:tid 140353206146816] [client 20.220.227.7:61136] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 15:20:05.070088 2026] [proxy_fcgi:error] [pid 6090:tid 140353264895744] [client 20.220.227.7:61136] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 15:20:05.195688 2026] [proxy_fcgi:error] [pid 6090:tid 140353435567872] [client 20.220.227.7:61136] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 15:20:05.303264 2026] [proxy_fcgi:error] [pid 6090:tid 140353197754112] [client 20.220.227.7:61136] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 15:20:05.419805 2026] [proxy_fcgi:error] [pid 6090:tid 140353248110336] [client 20.220.227.7:61136] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 15:20:05.526559 2026] [proxy_fcgi:error] [pid 6090:tid 140353214539520] [client 20.220.227.7:61136] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 15:20:05.632008 2026] [proxy_fcgi:error] [pid 6090:tid 140353443960576] [client 20.220.227.7:61136] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 15:20:05.737752 2026] [proxy_fcgi:error] [pid 6090:tid 140353256503040] [client 20.220.227.7:61136] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 15:20:05.842733 2026] [proxy_fcgi:error] [pid 6090:tid 140353239717632] [client 20.220.227.7:61136] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 15:20:05.947372 2026] [proxy_fcgi:error] [pid 6090:tid 140353281681152] [client 20.220.227.7:61136] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 15:20:06.051425 2026] [proxy_fcgi:error] [pid 6090:tid 140353452353280] [client 20.220.227.7:61136] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 15:20:06.158241 2026] [proxy_fcgi:error] [pid 6090:tid 140353332037376] [client 20.220.227.7:61136] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 15:20:06.265769 2026] [proxy_fcgi:error] [pid 6090:tid 140353222932224] [client 20.220.227.7:61136] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 15:20:06.373567 2026] [proxy_fcgi:error] [pid 6090:tid 140353180968704] [client 20.220.227.7:61136] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 15:20:06.485103 2026] [proxy_fcgi:error] [pid 6090:tid 140353298466560] [client 20.220.227.7:61136] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 15:20:06.592482 2026] [proxy_fcgi:error] [pid 6090:tid 140353231324928] [client 20.220.227.7:61136] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 15:20:06.698446 2026] [proxy_fcgi:error] [pid 6090:tid 140353348822784] [client 20.220.227.7:61136] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 15:20:06.802768 2026] [proxy_fcgi:error] [pid 6090:tid 140353306859264] [client 20.220.227.7:61136] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 15:20:06.909817 2026] [proxy_fcgi:error] [pid 6090:tid 140353189361408] [client 20.220.227.7:61136] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 15:20:07.019251 2026] [proxy_fcgi:error] [pid 6090:tid 140353357215488] [client 20.220.227.7:61136] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 15:20:07.129130 2026] [proxy_fcgi:error] [pid 6090:tid 140353273288448] [client 20.220.227.7:61136] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 15:20:07.234297 2026] [proxy_fcgi:error] [pid 6090:tid 140353315251968] [client 20.220.227.7:61136] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 15:20:07.343567 2026] [proxy_fcgi:error] [pid 6090:tid 140353323644672] [client 20.220.227.7:61136] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 15:20:07.448721 2026] [proxy_fcgi:error] [pid 6090:tid 140353290073856] [client 20.220.227.7:61136] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 15:20:07.555820 2026] [proxy_fcgi:error] [pid 6090:tid 140353340430080] [client 20.220.227.7:61136] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 15:20:07.555992 2026] [:error] [pid 6090:tid 140353340430080] [client 20.220.227.7:61136] [client 20.220.227.7] ModSecurity: Warning. Operator GT matched 25 at IP:scan_404_count. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "11"] [id "9000204"] [msg "Scanner detected - blocking IP 1h"] [tag "scanner-detect"] [hostname "menabern.com"] [uri "/small.php"] [unique_id "apczd7Pf1VxWhFqgvWsyWQAAAEU"]
[Tue Sep 01 15:20:07.661905 2026] [:error] [pid 6090:tid 140353206146816] [client 20.220.227.7:61136] [client 20.220.227.7] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/about/goods.php"] [unique_id "apczd7Pf1VxWhFqgvWsyWgAAAFU"]
[Tue Sep 01 15:20:07.870394 2026] [:error] [pid 11529:tid 140353357215488] [client 20.220.227.7:61080] [client 20.220.227.7] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/congeree.php"] [unique_id "apczdy580fjDz1VV6yfPxAAAAcM"]
[Tue Sep 01 15:20:08.078314 2026] [:error] [pid 6411:tid 140353180968704] [client 20.220.227.7:57776] [client 20.220.227.7] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/666666.php"] [unique_id "apczeK-5XxGfLhlq8xkR6QAAANg"]
[Tue Sep 01 15:20:08.313684 2026] [:error] [pid 6091:tid 140353290073856] [client 20.220.227.7:61165] [client 20.220.227.7] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/navbar.php"] [unique_id "apczeMkVYOXruxV21N4_BAAAAIs"]
[Tue Sep 01 15:20:08.574092 2026] [:error] [pid 29615:tid 140353452353280] [client 20.220.227.7:57755] [client 20.220.227.7] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/lala.php"] [unique_id "apczeJ1PBa8fnDJM-t7sYgAAAgA"]
[Tue Sep 01 15:20:08.776398 2026] [:error] [pid 6091:tid 140353340430080] [client 20.220.227.7:57713] [client 20.220.227.7] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/css.php"] [unique_id "apczeMkVYOXruxV21N4_BQAAAIU"]
[Tue Sep 01 15:20:08.987816 2026] [:error] [pid 6089:tid 140353222932224] [client 20.220.227.7:57763] [client 20.220.227.7] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/plss3.php"] [unique_id "apczeJjeM2TaVrIYSc9bjAAAABM"]
[Tue Sep 01 15:20:09.214098 2026] [:error] [pid 28500:tid 140353306859264] [client 20.220.227.7:61106] [client 20.220.227.7] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/phina.php"] [unique_id "apczeTQYUm0S3Gh9Jn847wAAAYk"]
[Tue Sep 01 15:20:09.468504 2026] [:error] [pid 6089:tid 140353214539520] [client 20.220.227.7:59655] [client 20.220.227.7] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/87.php"] [unique_id "apczeZjeM2TaVrIYSc9bjQAAABQ"]
[Tue Sep 01 15:20:09.681710 2026] [:error] [pid 11529:tid 140353443960576] [client 20.220.227.7:61060] [client 20.220.227.7] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/hosty.php"] [unique_id "apczeS580fjDz1VV6yfPyQAAAcE"]
[Tue Sep 01 15:20:09.890236 2026] [:error] [pid 9194:tid 140353273288448] [client 20.220.227.7:57780] [client 20.220.227.7] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/phpinfo01.php"] [unique_id "apczeYdqWCmIAB5WEG-b7wAAAQ0"]
[Tue Sep 01 15:20:10.103929 2026] [:error] [pid 6411:tid 140353298466560] [client 20.220.227.7:59425] [client 20.220.227.7] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/kedi.php"] [unique_id "apczeq-5XxGfLhlq8xkR7AAAAMo"]
[Tue Sep 01 15:20:10.308667 2026] [:error] [pid 6091:tid 140353248110336] [client 20.220.227.7:59434] [client 20.220.227.7] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/adminer-4.7.6-en.php"] [unique_id "apczeskVYOXruxV21N4_BgAAAJA"]
[Tue Sep 01 15:20:10.536423 2026] [:error] [pid 11529:tid 140353298466560] [client 20.220.227.7:59709] [client 20.220.227.7] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/doc.php"] [unique_id "apczei580fjDz1VV6yfPzAAAAco"]
[Tue Sep 01 15:20:10.739140 2026] [:error] [pid 6090:tid 140353197754112] [client 20.220.227.7:59688] [client 20.220.227.7] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/file21.php"] [unique_id "apczerPf1VxWhFqgvWsyWwAAAFY"]
[Tue Sep 01 15:20:10.953084 2026] [:error] [pid 28500:tid 140353231324928] [client 20.220.227.7:57664] [client 20.220.227.7] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/register.php"] [unique_id "apczejQYUm0S3Gh9Jn84-AAAAZI"]
[Tue Sep 01 15:20:11.155989 2026] [:error] [pid 6411:tid 140353197754112] [client 20.220.227.7:61101] [client 20.220.227.7] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/atex1.php"] [unique_id "apcze6-5XxGfLhlq8xkR7gAAANY"]
[Tue Sep 01 15:20:11.365246 2026] [:error] [pid 6411:tid 140353340430080] [client 20.220.227.7:57762] [client 20.220.227.7] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/oc460l3x.php"] [unique_id "apcze6-5XxGfLhlq8xkR7wAAAMU"]
[Tue Sep 01 15:20:11.607457 2026] [:error] [pid 28194:tid 140353264895744] [client 20.220.227.7:61084] [client 20.220.227.7] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/lm15.php"] [unique_id "apczewdz-EN0cDNAEVJlnQAAAU4"]
[Tue Sep 01 15:20:11.811839 2026] [:error] [pid 28194:tid 140353180968704] [client 20.220.227.7:61113] [client 20.220.227.7] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/drykl.php"] [unique_id "apczewdz-EN0cDNAEVJlngAAAVg"]
[Tue Sep 01 15:20:12.040362 2026] [:error] [pid 6090:tid 140353214539520] [client 20.220.227.7:57778] [client 20.220.227.7] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/fns.php"] [unique_id "apczfLPf1VxWhFqgvWsyXAAAAFQ"]
[Tue Sep 01 15:20:12.251693 2026] [:error] [pid 6411:tid 140353435567872] [client 20.220.227.7:59435] [client 20.220.227.7] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/333.php"] [unique_id "apczfK-5XxGfLhlq8xkR8QAAAMI"]
[Tue Sep 01 15:20:12.467760 2026] [:error] [pid 28500:tid 140353306859264] [client 20.220.227.7:57783] [client 20.220.227.7] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/phpi.php"] [unique_id "apczfDQYUm0S3Gh9Jn85AwAAAYk"]
[Tue Sep 01 15:20:12.694413 2026] [:error] [pid 6411:tid 140353222932224] [client 20.220.227.7:57791] [client 20.220.227.7] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/25.php"] [unique_id "apczfK-5XxGfLhlq8xkR8gAAANM"]
[Tue Sep 01 15:20:12.911213 2026] [:error] [pid 28194:tid 140353298466560] [client 20.220.227.7:57490] [client 20.220.227.7] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/bengi.php"] [unique_id "apczfAdz-EN0cDNAEVJlnwAAAUo"]
[Tue Sep 01 15:20:13.121451 2026] [:error] [pid 6091:tid 140353189361408] [client 20.220.227.7:61070] [client 20.220.227.7] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/server-info.php"] [unique_id "apczfckVYOXruxV21N4_BwAAAJc"]
[Tue Sep 01 15:20:13.329087 2026] [:error] [pid 6091:tid 140353231324928] [client 20.220.227.7:61128] [client 20.220.227.7] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/nlnub.php"] [unique_id "apczfckVYOXruxV21N4_CAAAAJI"]
[Tue Sep 01 15:20:13.578580 2026] [:error] [pid 28500:tid 140353348822784] [client 20.220.227.7:59394] [client 20.220.227.7] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/124.php"] [unique_id "apczfTQYUm0S3Gh9Jn85BgAAAYQ"]
[Tue Sep 01 15:20:13.826879 2026] [:error] [pid 6090:tid 140353239717632] [client 20.220.227.7:61061] [client 20.220.227.7] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/gnmlc.php"] [unique_id "apczfbPf1VxWhFqgvWsyXQAAAFE"]
[Tue Sep 01 15:20:14.048823 2026] [:error] [pid 6090:tid 140353452353280] [client 20.220.227.7:55902] [client 20.220.227.7] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/png.php"] [unique_id "apczfrPf1VxWhFqgvWsyXgAAAEA"]
[Tue Sep 01 15:20:14.263261 2026] [:error] [pid 11529:tid 140353239717632] [client 20.220.227.7:61059] [client 20.220.227.7] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/error_log.php"] [unique_id "apczfi580fjDz1VV6yfP1gAAAdE"]
[Tue Sep 01 15:20:14.503086 2026] [:error] [pid 28500:tid 140353214539520] [client 20.220.227.7:61172] [client 20.220.227.7] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/saml.php"] [unique_id "apczfjQYUm0S3Gh9Jn85CQAAAZQ"]
[Tue Sep 01 15:20:14.732331 2026] [:error] [pid 11529:tid 140353256503040] [client 20.220.227.7:59427] [client 20.220.227.7] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/cp2.php"] [unique_id "apczfi580fjDz1VV6yfP2AAAAc8"]
[Tue Sep 01 15:20:14.963201 2026] [:error] [pid 11529:tid 140353206146816] [client 20.220.227.7:61085] [client 20.220.227.7] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/ms-edit.php"] [unique_id "apczfi580fjDz1VV6yfP2gAAAdU"]
[Tue Sep 01 15:20:15.199862 2026] [:error] [pid 6411:tid 140353273288448] [client 20.220.227.7:57687] [client 20.220.227.7] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/test1.php"] [unique_id "apczf6-5XxGfLhlq8xkR9QAAAM0"]
[Tue Sep 01 15:20:15.410226 2026] [:error] [pid 28500:tid 140353256503040] [client 20.220.227.7:57702] [client 20.220.227.7] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/fraro.php"] [unique_id "apczfzQYUm0S3Gh9Jn85DAAAAY8"]
[Tue Sep 01 15:20:15.641772 2026] [:error] [pid 6089:tid 140353264895744] [client 20.220.227.7:61147] [client 20.220.227.7] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/otuz1.php"] [unique_id "apczf5jeM2TaVrIYSc9bjwAAAA4"]
[Tue Sep 01 15:20:15.901092 2026] [:error] [pid 11529:tid 140353189361408] [client 20.220.227.7:59671] [client 20.220.227.7] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/4563.php"] [unique_id "apczfy580fjDz1VV6yfP3QAAAdc"]
[Tue Sep 01 15:20:16.118259 2026] [:error] [pid 11529:tid 140353340430080] [client 20.220.227.7:61150] [client 20.220.227.7] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/adminfus.php"] [unique_id "apczgC580fjDz1VV6yfP3gAAAcU"]
[Tue Sep 01 15:20:16.329977 2026] [:error] [pid 11529:tid 140353180968704] [client 20.220.227.7:59694] [client 20.220.227.7] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/sale.php"] [unique_id "apczgC580fjDz1VV6yfP4AAAAdg"]
[Tue Sep 01 15:20:16.535951 2026] [:error] [pid 29615:tid 140353273288448] [client 20.220.227.7:57696] [client 20.220.227.7] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/mcebraed.php"] [unique_id "apczgJ1PBa8fnDJM-t7sZgAAAg0"]
[Tue Sep 01 15:20:16.746942 2026] [:error] [pid 6089:tid 140353256503040] [client 20.220.227.7:61179] [client 20.220.227.7] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/retu11.PhP"] [unique_id "apczgJjeM2TaVrIYSc9bkAAAAA8"]
[Tue Sep 01 15:20:16.955029 2026] [:error] [pid 28500:tid 140353315251968] [client 20.220.227.7:57666] [client 20.220.227.7] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/w.php"] [unique_id "apczgDQYUm0S3Gh9Jn85DgAAAYg"]
[Tue Sep 01 15:20:17.214190 2026] [:error] [pid 6411:tid 140353281681152] [client 20.220.227.7:57686] [client 20.220.227.7] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/paypal.php"] [unique_id "apczga-5XxGfLhlq8xkR-QAAAMw"]
[Tue Sep 01 15:20:17.437591 2026] [:error] [pid 11529:tid 140353435567872] [client 20.220.227.7:57684] [client 20.220.227.7] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/man.php"] [unique_id "apczgS580fjDz1VV6yfP4wAAAcI"]
[Tue Sep 01 15:20:17.739996 2026] [:error] [pid 28500:tid 140353332037376] [client 20.220.227.7:59407] [client 20.220.227.7] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/conf.php"] [unique_id "apczgTQYUm0S3Gh9Jn85DwAAAYY"]
[Tue Sep 01 15:20:17.999083 2026] [:error] [pid 11529:tid 140353443960576] [client 20.220.227.7:59417] [client 20.220.227.7] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/db.php"] [unique_id "apczgS580fjDz1VV6yfP5QAAAcE"]
[Tue Sep 01 15:20:18.255888 2026] [:error] [pid 6411:tid 140353332037376] [client 20.220.227.7:57230] [client 20.220.227.7] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/ffile.php"] [unique_id "apczgq-5XxGfLhlq8xkR-wAAAMY"]
[Tue Sep 01 15:20:18.497292 2026] [:error] [pid 6411:tid 140353290073856] [client 20.220.227.7:57766] [client 20.220.227.7] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/ff123.php"] [unique_id "apczgq-5XxGfLhlq8xkR_AAAAMs"]
[Tue Sep 01 15:20:18.742010 2026] [:error] [pid 6411:tid 140353248110336] [client 20.220.227.7:57781] [client 20.220.227.7] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/a.php"] [unique_id "apczgq-5XxGfLhlq8xkR_QAAANA"]
[Tue Sep 01 15:20:18.956062 2026] [:error] [pid 9194:tid 140353222932224] [client 20.220.227.7:57756] [client 20.220.227.7] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/acces.php"] [unique_id "apczgodqWCmIAB5WEG-b8AAAARM"]
[Tue Sep 01 15:20:19.191016 2026] [:error] [pid 6411:tid 140353256503040] [client 20.220.227.7:57712] [client 20.220.227.7] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/Sanskrit.php"] [unique_id "apczg6-5XxGfLhlq8xkR_gAAAM8"]
[Tue Sep 01 15:20:19.413133 2026] [:error] [pid 6090:tid 140353231324928] [client 20.220.227.7:55895] [client 20.220.227.7] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/133.php"] [unique_id "apczg7Pf1VxWhFqgvWsyYQAAAFI"]
[Tue Sep 01 15:20:19.696289 2026] [:error] [pid 29615:tid 140353222932224] [client 20.220.227.7:61136] [client 20.220.227.7] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/reune.php"] [unique_id "apczg51PBa8fnDJM-t7saAAAAhM"]
[Tue Sep 01 15:20:19.943102 2026] [:error] [pid 6090:tid 140353189361408] [client 20.220.227.7:59405] [client 20.220.227.7] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/pol.php"] [unique_id "apczg7Pf1VxWhFqgvWsyYgAAAFc"]
[Tue Sep 01 15:20:20.180887 2026] [:error] [pid 29615:tid 140353332037376] [client 20.220.227.7:57676] [client 20.220.227.7] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/phpinfo2.php"] [unique_id "apczhJ1PBa8fnDJM-t7saQAAAgY"]
[Tue Sep 01 15:20:20.435774 2026] [:error] [pid 6089:tid 140353452353280] [client 20.220.227.7:57735] [client 20.220.227.7] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/BDKR28WP.php"] [unique_id "apczhJjeM2TaVrIYSc9bkQAAAAA"]
[Tue Sep 01 15:20:20.676124 2026] [:error] [pid 6411:tid 140353189361408] [client 20.220.227.7:57703] [client 20.220.227.7] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/jlex.php"] [unique_id "apczhK-5XxGfLhlq8xkR_wAAANc"]
[Tue Sep 01 15:20:20.921138 2026] [:error] [pid 6089:tid 140353239717632] [client 20.220.227.7:59403] [client 20.220.227.7] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/v.php"] [unique_id "apczhJjeM2TaVrIYSc9bkgAAABE"]
[Tue Sep 01 15:20:21.229973 2026] [:error] [pid 6411:tid 140353264895744] [client 20.220.227.7:57741] [client 20.220.227.7] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/dejavu.php"] [unique_id "apczha-5XxGfLhlq8xkSAAAAAM4"]
[Tue Sep 01 15:20:21.452948 2026] [:error] [pid 11529:tid 140353231324928] [client 20.220.227.7:59655] [client 20.220.227.7] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/ey5.php"] [unique_id "apczhS580fjDz1VV6yfP8AAAAdI"]
[Tue Sep 01 15:20:21.693046 2026] [:error] [pid 6411:tid 140353197754112] [client 20.220.227.7:61073] [client 20.220.227.7] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/app.php"] [unique_id "apczha-5XxGfLhlq8xkSAQAAANY"]
[Tue Sep 01 15:20:21.917059 2026] [:error] [pid 6411:tid 140353340430080] [client 20.220.227.7:57710] [client 20.220.227.7] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/shell.php"] [unique_id "apczha-5XxGfLhlq8xkSAgAAAMU"]
[Tue Sep 01 15:20:22.160786 2026] [:error] [pid 6411:tid 140353231324928] [client 20.220.227.7:59653] [client 20.220.227.7] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/aa.php"] [unique_id "apczhq-5XxGfLhlq8xkSAwAAANI"]
[Tue Sep 01 15:20:22.414786 2026] [:error] [pid 28194:tid 140353231324928] [client 20.220.227.7:61093] [client 20.220.227.7] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/diidi.php"] [unique_id "apczhgdz-EN0cDNAEVJloAAAAVI"]
[Tue Sep 01 15:20:22.628066 2026] [:error] [pid 6411:tid 140353239717632] [client 20.220.227.7:59666] [client 20.220.227.7] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/php.php"] [unique_id "apczhq-5XxGfLhlq8xkSBAAAANE"]
[Tue Sep 01 15:20:22.839250 2026] [:error] [pid 28194:tid 140353315251968] [client 20.220.227.7:61160] [client 20.220.227.7] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/browse.php"] [unique_id "apczhgdz-EN0cDNAEVJloQAAAUg"]
[Tue Sep 01 15:20:23.065745 2026] [:error] [pid 6090:tid 140353340430080] [client 20.220.227.7:57690] [client 20.220.227.7] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/pepe.php"] [unique_id "apczh7Pf1VxWhFqgvWsyZAAAAEU"]
[Tue Sep 01 15:20:23.328663 2026] [:error] [pid 6090:tid 140353248110336] [client 20.220.227.7:61158] [client 20.220.227.7] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/babu.php"] [unique_id "apczh7Pf1VxWhFqgvWsyZwAAAFA"]
[Tue Sep 01 15:20:23.583557 2026] [:error] [pid 11529:tid 140353239717632] [client 20.220.227.7:61182] [client 20.220.227.7] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/b.php"] [unique_id "apczhy580fjDz1VV6yfP9wAAAdE"]
[Tue Sep 01 15:20:23.795783 2026] [:error] [pid 11529:tid 140353315251968] [client 20.220.227.7:55769] [client 20.220.227.7] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/d2.php"] [unique_id "apczhy580fjDz1VV6yfP-QAAAcg"]
[Tue Sep 01 15:20:24.024745 2026] [:error] [pid 6091:tid 140353180968704] [client 20.220.227.7:59418] [client 20.220.227.7] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/makeasmtp.php"] [unique_id "apcziMkVYOXruxV21N4_CQAAAJg"]
[Tue Sep 01 15:20:24.281935 2026] [:error] [pid 6411:tid 140353273288448] [client 20.220.227.7:61170] [client 20.220.227.7] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/d12.php"] [unique_id "apcziK-5XxGfLhlq8xkSCQAAAM0"]
[Tue Sep 01 15:20:24.529948 2026] [:error] [pid 6411:tid 140353197754112] [client 20.220.227.7:59424] [client 20.220.227.7] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/palsy.php"] [unique_id "apcziK-5XxGfLhlq8xkSCgAAANY"]
[Tue Sep 01 15:20:24.791893 2026] [:error] [pid 6411:tid 140353340430080] [client 20.220.227.7:57786] [client 20.220.227.7] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/Njima.php"] [unique_id "apcziK-5XxGfLhlq8xkSCwAAAMU"]
[Tue Sep 01 15:20:25.124578 2026] [:error] [pid 11529:tid 140353231324928] [client 20.220.227.7:61135] [client 20.220.227.7] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/ms-users.php"] [unique_id "apcziS580fjDz1VV6yfQAAAAAdI"]
[Tue Sep 01 15:20:25.354881 2026] [:error] [pid 6411:tid 140353231324928] [client 20.220.227.7:57774] [client 20.220.227.7] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/7.php"] [unique_id "apczia-5XxGfLhlq8xkSDAAAANI"]
[Tue Sep 01 15:20:25.575129 2026] [:error] [pid 28194:tid 140353206146816] [client 20.220.227.7:61169] [client 20.220.227.7] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/file25.php"] [unique_id "apcziQdz-EN0cDNAEVJlogAAAVU"]
[Tue Sep 01 15:20:25.793962 2026] [:error] [pid 29615:tid 140353315251968] [client 20.220.227.7:57730] [client 20.220.227.7] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/geju.php"] [unique_id "apcziZ1PBa8fnDJM-t7sbAAAAgg"]
[Tue Sep 01 15:20:26.007359 2026] [:error] [pid 6411:tid 140353239717632] [client 20.220.227.7:59436] [client 20.220.227.7] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/mailchimp.php"] [unique_id "apcziq-5XxGfLhlq8xkSDQAAANE"]
[Tue Sep 01 15:20:26.221444 2026] [:error] [pid 6411:tid 140353332037376] [client 20.220.227.7:61181] [client 20.220.227.7] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/bnm.php"] [unique_id "apcziq-5XxGfLhlq8xkSDgAAAMY"]
[Tue Sep 01 15:20:26.473525 2026] [:error] [pid 6089:tid 140353281681152] [client 20.220.227.7:55921] [client 20.220.227.7] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/indo.php"] [unique_id "apczipjeM2TaVrIYSc9blQAAAAw"]
[Tue Sep 01 15:20:26.677282 2026] [:error] [pid 28500:tid 140353206146816] [client 20.220.227.7:61090] [client 20.220.227.7] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/faq.php"] [unique_id "apczijQYUm0S3Gh9Jn85EgAAAZU"]
[Tue Sep 01 15:20:26.963997 2026] [:error] [pid 6411:tid 140353248110336] [client 20.220.227.7:55774] [client 20.220.227.7] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/gecko-new.php"] [unique_id "apcziq-5XxGfLhlq8xkSDwAAANA"]
[Tue Sep 01 15:20:27.207284 2026] [:error] [pid 29615:tid 140353281681152] [client 20.220.227.7:55903] [client 20.220.227.7] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/1.php"] [unique_id "apczi51PBa8fnDJM-t7sbgAAAgw"]
[Tue Sep 01 15:20:27.446282 2026] [:error] [pid 6411:tid 140353452353280] [client 20.220.227.7:61168] [client 20.220.227.7] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/lx.php"] [unique_id "apczi6-5XxGfLhlq8xkSEQAAAMA"]
[Tue Sep 01 15:20:27.653540 2026] [:error] [pid 29615:tid 140353306859264] [client 20.220.227.7:59448] [client 20.220.227.7] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/payment.php"] [unique_id "apczi51PBa8fnDJM-t7sbwAAAgk"]
[Tue Sep 01 15:20:27.892383 2026] [:error] [pid 6411:tid 140353273288448] [client 20.220.227.7:61137] [client 20.220.227.7] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/hanna1337.php"] [unique_id "apczi6-5XxGfLhlq8xkSFAAAAM0"]
[Tue Sep 01 15:20:28.096365 2026] [:error] [pid 6089:tid 140353443960576] [client 20.220.227.7:61091] [client 20.220.227.7] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/cu.php"] [unique_id "apczjJjeM2TaVrIYSc9blgAAAAE"]
[Tue Sep 01 15:20:28.300568 2026] [:error] [pid 6411:tid 140353231324928] [client 20.220.227.7:61140] [client 20.220.227.7] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/gk.php"] [unique_id "apczjK-5XxGfLhlq8xkSFgAAANI"]
[Tue Sep 01 15:20:28.531515 2026] [:error] [pid 6411:tid 140353435567872] [client 20.220.227.7:59689] [client 20.220.227.7] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/site2.php"] [unique_id "apczjK-5XxGfLhlq8xkSGAAAAMI"]
[Tue Sep 01 15:20:28.731956 2026] [:error] [pid 6411:tid 140353348822784] [client 20.220.227.7:59649] [client 20.220.227.7] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/ecvvhlei.php"] [unique_id "apczjK-5XxGfLhlq8xkSGQAAAMQ"]
[Tue Sep 01 15:20:28.951830 2026] [:error] [pid 28194:tid 140353452353280] [client 20.220.227.7:57675] [client 20.220.227.7] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/reop3.php"] [unique_id "apczjAdz-EN0cDNAEVJlowAAAUA"]
[Tue Sep 01 15:20:29.176177 2026] [:error] [pid 6411:tid 140353357215488] [client 20.220.227.7:57672] [client 20.220.227.7] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/special.php"] [unique_id "apczja-5XxGfLhlq8xkSGwAAAMM"]
[Tue Sep 01 15:20:29.384566 2026] [:error] [pid 29615:tid 140353222932224] [client 20.220.227.7:61120] [client 20.220.227.7] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/arig.php"] [unique_id "apczjZ1PBa8fnDJM-t7scQAAAhM"]
[Tue Sep 01 15:20:29.597023 2026] [:error] [pid 6091:tid 140353332037376] [client 20.220.227.7:59420] [client 20.220.227.7] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/phprelease.php"] [unique_id "apczjckVYOXruxV21N4_DAAAAIY"]
[Tue Sep 01 15:20:29.799822 2026] [:error] [pid 28500:tid 140353340430080] [client 20.220.227.7:61171] [client 20.220.227.7] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/SDsadqwrf.php"] [unique_id "apczjTQYUm0S3Gh9Jn85FAAAAYU"]
[Tue Sep 01 15:20:30.010402 2026] [:error] [pid 29615:tid 140353435567872] [client 20.220.227.7:57688] [client 20.220.227.7] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/acp.php"] [unique_id "apczjp1PBa8fnDJM-t7scgAAAgI"]
[Tue Sep 01 15:20:30.218877 2026] [:error] [pid 6090:tid 140353452353280] [client 20.220.227.7:55927] [client 20.220.227.7] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/aafewc0k.php"] [unique_id "apczjrPf1VxWhFqgvWsyaAAAAEA"]
[Tue Sep 01 15:20:30.468291 2026] [:error] [pid 28500:tid 140353248110336] [client 20.220.227.7:57715] [client 20.220.227.7] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/berlin.php"] [unique_id "apczjjQYUm0S3Gh9Jn85FQAAAZA"]
[Tue Sep 01 15:20:30.680506 2026] [:error] [pid 6089:tid 140353180968704] [client 20.220.227.7:61110] [client 20.220.227.7] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/9.php"] [unique_id "apczjpjeM2TaVrIYSc9bmQAAABg"]
[Tue Sep 01 15:20:30.886904 2026] [:error] [pid 6091:tid 140353315251968] [client 20.220.227.7:59431] [client 20.220.227.7] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/3.php"] [unique_id "apczjskVYOXruxV21N4_DQAAAIg"]
[Tue Sep 01 15:27:24.200721 2026] [proxy_fcgi:error] [pid 6411:tid 140353443960576] [client 20.48.179.39:61794] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 15:27:24.304380 2026] [proxy_fcgi:error] [pid 6411:tid 140353239717632] [client 20.48.179.39:61794] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 15:27:24.406738 2026] [proxy_fcgi:error] [pid 6411:tid 140353435567872] [client 20.48.179.39:61794] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 15:27:24.509951 2026] [proxy_fcgi:error] [pid 6411:tid 140353281681152] [client 20.48.179.39:61794] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 15:27:24.615093 2026] [proxy_fcgi:error] [pid 6411:tid 140353323644672] [client 20.48.179.39:61794] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 15:27:24.718761 2026] [proxy_fcgi:error] [pid 6411:tid 140353248110336] [client 20.48.179.39:61794] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 15:27:24.821945 2026] [proxy_fcgi:error] [pid 6411:tid 140353306859264] [client 20.48.179.39:61794] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 15:27:24.924820 2026] [proxy_fcgi:error] [pid 6411:tid 140353206146816] [client 20.48.179.39:61794] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 15:27:25.027021 2026] [proxy_fcgi:error] [pid 6411:tid 140353357215488] [client 20.48.179.39:61794] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 15:27:25.130365 2026] [proxy_fcgi:error] [pid 6411:tid 140353273288448] [client 20.48.179.39:61794] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 15:27:25.234354 2026] [proxy_fcgi:error] [pid 6411:tid 140353340430080] [client 20.48.179.39:61794] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 15:27:25.338094 2026] [proxy_fcgi:error] [pid 6411:tid 140353348822784] [client 20.48.179.39:61794] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 15:27:25.441527 2026] [proxy_fcgi:error] [pid 6411:tid 140353443960576] [client 20.48.179.39:61794] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 15:27:25.544953 2026] [proxy_fcgi:error] [pid 6411:tid 140353231324928] [client 20.48.179.39:61794] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 15:27:25.647584 2026] [proxy_fcgi:error] [pid 6411:tid 140353435567872] [client 20.48.179.39:61794] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 15:27:25.746921 2026] [:error] [pid 6411:tid 140353281681152] [client 20.48.179.39:61794] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?i)(^|/)(\\\\.env($|[/?])|\\\\.git/|aw\\\\.php$|adminfuns\\\\.php$|xmrlpc\\\\.php$|unzipper\\\\.php$|alfa\\\\.php$|alfanew\\\\.php$)" at REQUEST_URI. [file "/usr/local/apache/conf.d/zzz-security-hardening.conf"] [line "26"] [id "110001"] [msg "CWP-Hardening: Scanner/webshell probe blocked"] [hostname "menabern.com"] [uri "/adminfuns.php"] [unique_id "apc1La-5XxGfLhlq8xkVhQAAAMw"]
[Tue Sep 01 15:27:25.959383 2026] [proxy_fcgi:error] [pid 9194:tid 140353290073856] [client 20.48.179.39:61766] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 15:27:26.064573 2026] [proxy_fcgi:error] [pid 9194:tid 140353273288448] [client 20.48.179.39:61766] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 15:27:26.169464 2026] [proxy_fcgi:error] [pid 9194:tid 140353332037376] [client 20.48.179.39:61766] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 15:27:26.273954 2026] [proxy_fcgi:error] [pid 9194:tid 140353239717632] [client 20.48.179.39:61766] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 15:27:26.379912 2026] [proxy_fcgi:error] [pid 9194:tid 140353180968704] [client 20.48.179.39:61766] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 15:27:26.486843 2026] [proxy_fcgi:error] [pid 9194:tid 140353298466560] [client 20.48.179.39:61766] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 15:27:26.591326 2026] [proxy_fcgi:error] [pid 9194:tid 140353214539520] [client 20.48.179.39:61766] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 15:27:26.697113 2026] [proxy_fcgi:error] [pid 9194:tid 140353197754112] [client 20.48.179.39:61766] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 15:27:26.802572 2026] [proxy_fcgi:error] [pid 9194:tid 140353452353280] [client 20.48.179.39:61766] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 15:27:26.907289 2026] [proxy_fcgi:error] [pid 9194:tid 140353357215488] [client 20.48.179.39:61766] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 15:27:26.907411 2026] [:error] [pid 9194:tid 140353357215488] [client 20.48.179.39:61766] [client 20.48.179.39] ModSecurity: Warning. Operator GT matched 25 at IP:scan_404_count. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "11"] [id "9000204"] [msg "Scanner detected - blocking IP 1h"] [tag "scanner-detect"] [hostname "menabern.com"] [uri "/reop3.php"] [unique_id "apc1LodqWCmIAB5WEG-cuwAAAQM"]
[Tue Sep 01 15:27:27.007675 2026] [:error] [pid 9194:tid 140353256503040] [client 20.48.179.39:61766] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/2d7433/index.php"] [unique_id "apc1L4dqWCmIAB5WEG-cvAAAAQ8"]
[Tue Sep 01 15:27:27.208598 2026] [:error] [pid 6411:tid 140353273288448] [client 20.48.179.39:61731] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/classwithtostring.php"] [unique_id "apc1L6-5XxGfLhlq8xkVigAAAM0"]
[Tue Sep 01 15:27:27.413051 2026] [:error] [pid 6089:tid 140353180968704] [client 20.48.179.39:61696] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/simple.php"] [unique_id "apc1L5jeM2TaVrIYSc9chAAAABg"]
[Tue Sep 01 15:27:27.617455 2026] [:error] [pid 11529:tid 140353206146816] [client 20.48.179.39:61730] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-admin/css/colors/modern/"] [unique_id "apc1Ly580fjDz1VV6yfSDAAAAdU"]
[Tue Sep 01 15:27:27.817128 2026] [:error] [pid 6090:tid 140353248110336] [client 20.48.179.39:61763] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "apc1L7Pf1VxWhFqgvWsz1QAAAFA"]
[Tue Sep 01 15:27:28.020082 2026] [:error] [pid 6090:tid 140353206146816] [client 20.48.179.39:61796] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/goods.php"] [unique_id "apc1MLPf1VxWhFqgvWsz1gAAAFU"]
[Tue Sep 01 15:27:28.221894 2026] [:error] [pid 6091:tid 140353222932224] [client 20.48.179.39:61783] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/btx25.php"] [unique_id "apc1MMkVYOXruxV21N4_7gAAAJM"]
[Tue Sep 01 15:27:28.425658 2026] [:error] [pid 6411:tid 140353256503040] [client 20.48.179.39:61697] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/radio.php"] [unique_id "apc1MK-5XxGfLhlq8xkVjgAAAM8"]
[Tue Sep 01 15:27:28.627228 2026] [:error] [pid 6091:tid 140353332037376] [client 20.48.179.39:61769] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/dex.php"] [unique_id "apc1MMkVYOXruxV21N4_7wAAAIY"]
[Tue Sep 01 15:27:28.827011 2026] [:error] [pid 11529:tid 140353323644672] [client 20.48.179.39:61706] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/replace.php"] [unique_id "apc1MC580fjDz1VV6yfSEgAAAcc"]
[Tue Sep 01 15:27:37.890094 2026] [:error] [pid 6411:tid 140353340430080] [client 20.48.179.39:61803] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/gulu.php"] [unique_id "apc1Oa-5XxGfLhlq8xkVtQAAAMU"]
[Tue Sep 01 15:27:38.097152 2026] [:error] [pid 6411:tid 140353222932224] [client 20.48.179.39:61800] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/v.php"] [unique_id "apc1Oq-5XxGfLhlq8xkVtgAAANM"]
[Tue Sep 01 15:27:38.301147 2026] [:error] [pid 11529:tid 140353264895744] [client 20.48.179.39:61773] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/ioxi-o.php"] [unique_id "apc1Oi580fjDz1VV6yfSKgAAAc4"]
[Tue Sep 01 15:27:46.743453 2026] [:error] [pid 28500:tid 140353239717632] [client 20.48.179.39:61792] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/file.php"] [unique_id "apc1QjQYUm0S3Gh9Jn87VAAAAZE"]
[Tue Sep 01 15:27:46.947232 2026] [:error] [pid 28500:tid 140353231324928] [client 20.48.179.39:61765] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/bless.php"] [unique_id "apc1QjQYUm0S3Gh9Jn87VgAAAZI"]
[Tue Sep 01 15:27:47.152071 2026] [:error] [pid 6090:tid 140353340430080] [client 20.48.179.39:61781] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/file32.php"] [unique_id "apc1Q7Pf1VxWhFqgvWsz5QAAAEU"]
[Tue Sep 01 15:27:47.352589 2026] [:error] [pid 11529:tid 140353231324928] [client 20.48.179.39:61736] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/class20.php"] [unique_id "apc1Qy580fjDz1VV6yfSLwAAAdI"]
[Tue Sep 01 15:27:47.555560 2026] [:error] [pid 28194:tid 140353264895744] [client 20.48.179.39:61721] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wso.php"] [unique_id "apc1Qwdz-EN0cDNAEVJmMQAAAU4"]
[Tue Sep 01 15:27:47.755198 2026] [:error] [pid 6090:tid 140353435567872] [client 20.48.179.39:61736] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/blurbs.php"] [unique_id "apc1Q7Pf1VxWhFqgvWsz5gAAAEI"]
[Tue Sep 01 15:27:47.956562 2026] [:error] [pid 6089:tid 140353315251968] [client 20.48.179.39:61771] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/av.php"] [unique_id "apc1Q5jeM2TaVrIYSc9ciwAAAAg"]
[Tue Sep 01 15:27:48.156673 2026] [:error] [pid 9194:tid 140353239717632] [client 20.48.179.39:61764] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/abcd.php"] [unique_id "apc1RIdqWCmIAB5WEG-cxAAAARE"]
[Tue Sep 01 15:27:48.358319 2026] [:error] [pid 9194:tid 140353298466560] [client 20.48.179.39:61782] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-includes/pomo/xxx.php"] [unique_id "apc1RIdqWCmIAB5WEG-cxQAAAQo"]
[Tue Sep 01 15:27:48.560734 2026] [:error] [pid 28194:tid 140353180968704] [client 20.48.179.39:61723] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/cong.php"] [unique_id "apc1RAdz-EN0cDNAEVJmMwAAAVg"]
[Tue Sep 01 15:27:48.764747 2026] [:error] [pid 28500:tid 140353332037376] [client 20.48.179.39:61768] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/file61.php"] [unique_id "apc1RDQYUm0S3Gh9Jn87WQAAAYY"]
[Tue Sep 01 15:27:48.973352 2026] [:error] [pid 6411:tid 140353197754112] [client 20.48.179.39:61817] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/file59.php"] [unique_id "apc1RK-5XxGfLhlq8xkVwwAAANY"]
[Tue Sep 01 15:27:49.174978 2026] [:error] [pid 6411:tid 140353357215488] [client 20.48.179.39:61778] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/test2.php"] [unique_id "apc1Ra-5XxGfLhlq8xkVxAAAAMM"]
[Tue Sep 01 15:27:49.378200 2026] [:error] [pid 6089:tid 140353357215488] [client 20.48.179.39:61785] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/test01.php"] [unique_id "apc1RZjeM2TaVrIYSc9cjQAAAAM"]
[Tue Sep 01 15:27:49.583102 2026] [:error] [pid 11529:tid 140353214539520] [client 20.48.179.39:61767] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/file31.php"] [unique_id "apc1RS580fjDz1VV6yfSMQAAAdQ"]
[Tue Sep 01 15:27:49.784183 2026] [:error] [pid 6091:tid 140353206146816] [client 20.48.179.39:61712] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/v4on3fxtoo5z5cq0yCdefault.php"] [unique_id "apc1RckVYOXruxV21N4__gAAAJU"]
[Tue Sep 01 15:27:49.988108 2026] [:error] [pid 6089:tid 140353323644672] [client 20.48.179.39:61746] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/8xmlr9ommwdy3ro8dCdefault.php"] [unique_id "apc1RZjeM2TaVrIYSc9cjgAAAAc"]
[Tue Sep 01 15:27:50.188085 2026] [:error] [pid 6090:tid 140353222932224] [client 20.48.179.39:61817] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/file2.php"] [unique_id "apc1RrPf1VxWhFqgvWsz6AAAAFM"]
[Tue Sep 01 15:27:50.393360 2026] [:error] [pid 6411:tid 140353435567872] [client 20.48.179.39:61804] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/ai.php"] [unique_id "apc1Rq-5XxGfLhlq8xkVyQAAAMI"]
[Tue Sep 01 15:27:50.599271 2026] [:error] [pid 28500:tid 140353222932224] [client 20.48.179.39:61704] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/133.php"] [unique_id "apc1RjQYUm0S3Gh9Jn87XAAAAZM"]
[Tue Sep 01 15:27:50.800234 2026] [:error] [pid 11529:tid 140353435567872] [client 20.48.179.39:61703] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/b8.php"] [unique_id "apc1Ri580fjDz1VV6yfSNAAAAcI"]
[Tue Sep 01 15:27:51.001412 2026] [:error] [pid 11529:tid 140353264895744] [client 20.48.179.39:56652] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/adminimagess.php"] [unique_id "apc1Ry580fjDz1VV6yfSNwAAAc4"]
[Tue Sep 01 15:27:51.207465 2026] [:error] [pid 11529:tid 140353206146816] [client 20.48.179.39:61707] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/xx.php"] [unique_id "apc1Ry580fjDz1VV6yfSOAAAAdU"]
[Tue Sep 01 15:27:51.414233 2026] [:error] [pid 11529:tid 140353281681152] [client 20.48.179.39:61762] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/222.php"] [unique_id "apc1Ry580fjDz1VV6yfSOgAAAcw"]
[Tue Sep 01 15:27:51.622927 2026] [:error] [pid 6411:tid 140353323644672] [client 20.48.179.39:61710] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/8.php"] [unique_id "apc1R6-5XxGfLhlq8xkVzAAAAMc"]
[Tue Sep 01 15:27:51.825596 2026] [:error] [pid 6090:tid 140353315251968] [client 20.48.179.39:61789] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/simple.php"] [unique_id "apc1R7Pf1VxWhFqgvWsz6QAAAEg"]
[Tue Sep 01 15:27:52.048186 2026] [:error] [pid 6090:tid 140353248110336] [client 20.48.179.39:61713] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/file5.php"] [unique_id "apc1SLPf1VxWhFqgvWsz6gAAAFA"]
[Tue Sep 01 15:27:52.251697 2026] [:error] [pid 6411:tid 140353298466560] [client 20.48.179.39:61698] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/kir.php"] [unique_id "apc1SK-5XxGfLhlq8xkV0AAAAMo"]
[Tue Sep 01 15:27:52.462171 2026] [:error] [pid 6411:tid 140353452353280] [client 20.48.179.39:61702] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/new.php"] [unique_id "apc1SK-5XxGfLhlq8xkV0gAAAMA"]
[Tue Sep 01 15:27:52.665186 2026] [:error] [pid 6090:tid 140353239717632] [client 20.48.179.39:61701] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/155.php"] [unique_id "apc1SLPf1VxWhFqgvWsz6wAAAFE"]
[Tue Sep 01 15:27:52.868434 2026] [:error] [pid 11529:tid 140353443960576] [client 20.48.179.39:61761] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-content/index.php"] [unique_id "apc1SC580fjDz1VV6yfSPAAAAcE"]
[Tue Sep 01 15:27:53.073455 2026] [:error] [pid 6091:tid 140353452353280] [client 20.48.179.39:61802] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "apc1SckVYOXruxV21N5AAAAAAIA"]
[Tue Sep 01 15:27:53.293155 2026] [:error] [pid 28500:tid 140353239717632] [client 20.48.179.39:61718] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-admin/css/"] [unique_id "apc1STQYUm0S3Gh9Jn87XwAAAZE"]
[Tue Sep 01 15:27:53.496891 2026] [:error] [pid 28500:tid 140353214539520] [client 20.48.179.39:61700] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-includes/blocks/details/"] [unique_id "apc1STQYUm0S3Gh9Jn87YAAAAZQ"]
[Tue Sep 01 15:27:53.699139 2026] [:error] [pid 6091:tid 140353248110336] [client 20.48.179.39:61725] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-includes/blocks/audio/"] [unique_id "apc1SckVYOXruxV21N5AAQAAAJA"]
[Tue Sep 01 15:27:53.901335 2026] [:error] [pid 9194:tid 140353264895744] [client 20.48.179.39:61755] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-temp.php"] [unique_id "apc1SYdqWCmIAB5WEG-cyAAAAQ4"]
[Tue Sep 01 15:27:54.115145 2026] [:error] [pid 9194:tid 140353435567872] [client 20.48.179.39:61809] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-admin/js/index.php"] [unique_id "apc1SodqWCmIAB5WEG-cyQAAAQI"]
[Tue Sep 01 15:27:54.317209 2026] [:error] [pid 6089:tid 140353231324928] [client 20.48.179.39:61714] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-includes/Requests/"] [unique_id "apc1SpjeM2TaVrIYSc9ckAAAABI"]
[Tue Sep 01 15:27:54.525195 2026] [:error] [pid 11529:tid 140353239717632] [client 20.48.179.39:61770] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-content/admin.php"] [unique_id "apc1Si580fjDz1VV6yfSPgAAAdE"]
[Tue Sep 01 15:27:54.727367 2026] [:error] [pid 6411:tid 140353323644672] [client 20.48.179.39:61795] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-content/themes/index.php"] [unique_id "apc1Sq-5XxGfLhlq8xkV6AAAAMc"]
[Tue Sep 01 15:27:54.926719 2026] [:error] [pid 6411:tid 140353231324928] [client 20.48.179.39:61708] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-content/themes/index.php"] [unique_id "apc1Sq-5XxGfLhlq8xkV6gAAANI"]
[Tue Sep 01 15:27:55.127410 2026] [:error] [pid 28194:tid 140353189361408] [client 20.48.179.39:61805] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-blog.php"] [unique_id "apc1Swdz-EN0cDNAEVJmNwAAAVc"]
[Tue Sep 01 15:27:55.373774 2026] [:error] [pid 6411:tid 140353189361408] [client 20.48.179.39:61742] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-includes/js/jquery/"] [unique_id "apc1S6-5XxGfLhlq8xkV7AAAANc"]
[Tue Sep 01 15:27:55.583590 2026] [:error] [pid 6090:tid 140353264895744] [client 20.48.179.39:61823] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/cgi-bin/index.php"] [unique_id "apc1S7Pf1VxWhFqgvWsz7wAAAE4"]
[Tue Sep 01 15:27:55.793275 2026] [:error] [pid 6091:tid 140353435567872] [client 20.48.179.39:61779] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-includes/l10n/"] [unique_id "apc1S8kVYOXruxV21N5AAwAAAII"]
[Tue Sep 01 15:27:55.998730 2026] [:error] [pid 6091:tid 140353256503040] [client 20.48.179.39:61820] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-manager.php"] [unique_id "apc1S8kVYOXruxV21N5ABAAAAI8"]
[Tue Sep 01 15:27:56.203356 2026] [:error] [pid 6091:tid 140353306859264] [client 20.48.179.39:61732] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "apc1TMkVYOXruxV21N5ABQAAAIk"]
[Tue Sep 01 15:27:56.419817 2026] [:error] [pid 6090:tid 140353214539520] [client 20.48.179.39:61814] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/cgi-bin/admin.php"] [unique_id "apc1TLPf1VxWhFqgvWsz8QAAAFQ"]
[Tue Sep 01 15:27:56.644604 2026] [:error] [pid 6411:tid 140353443960576] [client 20.48.179.39:61729] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-content/"] [unique_id "apc1TK-5XxGfLhlq8xkV9gAAAME"]
[Tue Sep 01 15:27:56.853424 2026] [:error] [pid 28500:tid 140353332037376] [client 20.48.179.39:61728] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-admin/css/colors/blue/"] [unique_id "apc1TDQYUm0S3Gh9Jn87YgAAAYY"]
[Tue Sep 01 15:27:57.054273 2026] [:error] [pid 28500:tid 140353298466560] [client 20.48.179.39:56645] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-includes/block-bindings/"] [unique_id "apc1TTQYUm0S3Gh9Jn87YwAAAYo"]
[Tue Sep 01 15:27:57.262352 2026] [:error] [pid 6411:tid 140353273288448] [client 20.48.179.39:56658] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-includes/assets/"] [unique_id "apc1Ta-5XxGfLhlq8xkV-QAAAM0"]
[Tue Sep 01 15:27:57.525361 2026] [:error] [pid 6091:tid 140353197754112] [client 20.48.179.39:56640] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-admin/network/plugins.php"] [unique_id "apc1TckVYOXruxV21N5ABgAAAJY"]
[Tue Sep 01 15:27:57.732105 2026] [:error] [pid 6089:tid 140353290073856] [client 20.48.179.39:61753] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-admin/maint/index.php"] [unique_id "apc1TZjeM2TaVrIYSc9ckQAAAAs"]
[Tue Sep 01 15:27:57.942846 2026] [:error] [pid 6411:tid 140353281681152] [client 20.48.179.39:61816] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-includes/blocks/post-comments-form/"] [unique_id "apc1Ta-5XxGfLhlq8xkWAQAAAMw"]
[Tue Sep 01 15:27:58.153724 2026] [:error] [pid 11529:tid 140353348822784] [client 20.48.179.39:61815] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/qazwsx.php"] [unique_id "apc1Ti580fjDz1VV6yfSRQAAAcQ"]
[Tue Sep 01 15:27:58.410176 2026] [:error] [pid 6411:tid 140353264895744] [client 20.48.179.39:61780] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/elp.php"] [unique_id "apc1Tq-5XxGfLhlq8xkWBgAAAM4"]
[Tue Sep 01 15:27:58.620619 2026] [:error] [pid 28500:tid 140353222932224] [client 20.48.179.39:61821] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-content/uploads/"] [unique_id "apc1TjQYUm0S3Gh9Jn87ZQAAAZM"]
[Tue Sep 01 15:27:58.828987 2026] [:error] [pid 11529:tid 140353306859264] [client 20.48.179.39:61819] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-comments-post.php"] [unique_id "apc1Ti580fjDz1VV6yfSRgAAAck"]
[Tue Sep 01 15:27:59.035365 2026] [:error] [pid 6411:tid 140353348822784] [client 20.48.179.39:61738] [client 20.48.179.39] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/kgblegacy.php"] [unique_id "apc1T6-5XxGfLhlq8xkWDAAAAMQ"]
[Tue Sep 01 15:34:56.787568 2026] [authz_core:error] [pid 6411:tid 140353214539520] [client 91.199.118.57:59166] AH01630: client denied by server configuration: /home/menabern/public_html/xmlrpc.php
[Tue Sep 01 16:10:39.957894 2026] [:error] [pid 6091:tid 140353256503040] [client 43.157.188.74:40016] [client 43.157.188.74] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.menabern.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.menabern.com"] [uri "/"] [unique_id "apc_T8kVYOXruxV21N5D2QAAAI8"]
[Tue Sep 01 18:06:18.122829 2026] [proxy_fcgi:error] [pid 6411:tid 140353348822784] [client 4.205.62.107:14660] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 18:06:18.231151 2026] [proxy_fcgi:error] [pid 6411:tid 140353256503040] [client 4.205.62.107:14660] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 18:06:18.416179 2026] [proxy_fcgi:error] [pid 6411:tid 140353248110336] [client 4.205.62.107:14660] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 18:06:18.563098 2026] [proxy_fcgi:error] [pid 6411:tid 140353323644672] [client 4.205.62.107:14660] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 18:06:18.672273 2026] [proxy_fcgi:error] [pid 6411:tid 140353306859264] [client 4.205.62.107:14660] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 18:06:18.795959 2026] [proxy_fcgi:error] [pid 6411:tid 140353273288448] [client 4.205.62.107:14660] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 18:06:18.904192 2026] [proxy_fcgi:error] [pid 6411:tid 140353332037376] [client 4.205.62.107:14660] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 18:06:19.010789 2026] [proxy_fcgi:error] [pid 6411:tid 140353315251968] [client 4.205.62.107:14660] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 18:06:19.116078 2026] [proxy_fcgi:error] [pid 6411:tid 140353222932224] [client 4.205.62.107:14660] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 18:06:19.222093 2026] [proxy_fcgi:error] [pid 6411:tid 140353281681152] [client 4.205.62.107:14660] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 18:06:19.334355 2026] [proxy_fcgi:error] [pid 6411:tid 140353239717632] [client 4.205.62.107:14660] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 18:06:19.461238 2026] [proxy_fcgi:error] [pid 6411:tid 140353452353280] [client 4.205.62.107:14660] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 18:06:19.568917 2026] [proxy_fcgi:error] [pid 6411:tid 140353443960576] [client 4.205.62.107:14660] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 18:06:19.676150 2026] [proxy_fcgi:error] [pid 6411:tid 140353206146816] [client 4.205.62.107:14660] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 18:06:19.807148 2026] [proxy_fcgi:error] [pid 6411:tid 140353290073856] [client 4.205.62.107:14660] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 18:06:19.914527 2026] [proxy_fcgi:error] [pid 6411:tid 140353435567872] [client 4.205.62.107:14660] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 18:06:20.021469 2026] [proxy_fcgi:error] [pid 6411:tid 140353197754112] [client 4.205.62.107:14660] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 18:06:20.137212 2026] [proxy_fcgi:error] [pid 6411:tid 140353298466560] [client 4.205.62.107:14660] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 18:06:20.244903 2026] [proxy_fcgi:error] [pid 6411:tid 140353214539520] [client 4.205.62.107:14660] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 18:06:20.520979 2026] [proxy_fcgi:error] [pid 6411:tid 140353180968704] [client 4.205.62.107:14660] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 18:06:20.709823 2026] [proxy_fcgi:error] [pid 6411:tid 140353231324928] [client 4.205.62.107:14660] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 18:06:20.901120 2026] [proxy_fcgi:error] [pid 6411:tid 140353357215488] [client 4.205.62.107:14660] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 18:06:21.116612 2026] [proxy_fcgi:error] [pid 6411:tid 140353256503040] [client 4.205.62.107:14660] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 18:06:21.116755 2026] [:error] [pid 6411:tid 140353256503040] [client 4.205.62.107:14660] [client 4.205.62.107] ModSecurity: Warning. Operator GT matched 25 at IP:scan_404_count. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "11"] [id "9000204"] [msg "Scanner detected - blocking IP 1h"] [tag "scanner-detect"] [hostname "www.menabern.com"] [uri "/06.php"] [unique_id "apdaba-5XxGfLhlq8xlVtgAAAM8"]
[Tue Sep 01 18:06:21.219472 2026] [:error] [pid 6411:tid 140353248110336] [client 4.205.62.107:14660] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/aws_config.php"] [unique_id "apdaba-5XxGfLhlq8xlVtwAAANA"]
[Tue Sep 01 18:06:22.463752 2026] [:error] [pid 11529:tid 140353189361408] [client 4.205.62.107:14689] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/phina.php"] [unique_id "apdabi580fjDz1VV6yf8FAAAAdc"]
[Tue Sep 01 18:06:23.691534 2026] [:error] [pid 11529:tid 140353298466560] [client 4.205.62.107:14681] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/66.php"] [unique_id "apdaby580fjDz1VV6yf8FQAAAco"]
[Tue Sep 01 18:06:25.404087 2026] [:error] [pid 29615:tid 140353264895744] [client 4.205.62.107:14713] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/localconf.php"] [unique_id "apdacZ1PBa8fnDJM-t4CHgAAAg4"]
[Tue Sep 01 18:06:26.689894 2026] [:error] [pid 11529:tid 140353435567872] [client 4.205.62.107:14708] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/cli_bootstrap.php"] [unique_id "apdaci580fjDz1VV6yf8FgAAAcI"]
[Tue Sep 01 18:06:27.925360 2026] [:error] [pid 9194:tid 140353281681152] [client 4.205.62.107:14658] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/dialog.php"] [unique_id "apdac4dqWCmIAB5WEG-yXgAAAQw"]
[Tue Sep 01 18:06:29.158901 2026] [:error] [pid 11529:tid 140353315251968] [client 4.205.62.107:14922] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "apdadS580fjDz1VV6yf8GgAAAcg"]
[Tue Sep 01 18:06:30.379847 2026] [:error] [pid 29615:tid 140353315251968] [client 4.205.62.107:14694] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/error_log.php"] [unique_id "apdadp1PBa8fnDJM-t4CJAAAAgg"]
[Tue Sep 01 18:06:31.816885 2026] [:error] [pid 6411:tid 140353443960576] [client 4.205.62.107:14932] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/bengi.php"] [unique_id "apdad6-5XxGfLhlq8xlVvAAAAME"]
[Tue Sep 01 18:06:33.120553 2026] [:error] [pid 29615:tid 140353273288448] [client 4.205.62.107:14683] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/a1vx.php"] [unique_id "apdaeZ1PBa8fnDJM-t4CKAAAAg0"]
[Tue Sep 01 18:06:34.522828 2026] [:error] [pid 6090:tid 140353281681152] [client 4.205.62.107:14935] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/konfig.php"] [unique_id "apdaerPf1VxWhFqgvWtN0AAAAEw"]
[Tue Sep 01 18:06:35.804759 2026] [:error] [pid 11529:tid 140353264895744] [client 4.205.62.107:14940] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/xqq.php"] [unique_id "apdaey580fjDz1VV6yf8IAAAAc4"]
[Tue Sep 01 18:06:37.074917 2026] [:error] [pid 11529:tid 140353306859264] [client 4.205.62.107:14663] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/aws-credentials.php"] [unique_id "apdafS580fjDz1VV6yf8IwAAAck"]
[Tue Sep 01 18:06:38.489575 2026] [:error] [pid 11529:tid 140353315251968] [client 4.205.62.107:14914] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/wpver.php"] [unique_id "apdafi580fjDz1VV6yf8JQAAAcg"]
[Tue Sep 01 18:06:39.706561 2026] [:error] [pid 9194:tid 140353239717632] [client 4.205.62.107:14691] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/admin.php"] [unique_id "apdaf4dqWCmIAB5WEG-yYwAAARE"]
[Tue Sep 01 18:06:40.931962 2026] [:error] [pid 28500:tid 140353206146816] [client 4.205.62.107:14665] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/paths.php"] [unique_id "apdagDQYUm0S3Gh9Jn9dHgAAAZU"]
[Tue Sep 01 18:06:42.158187 2026] [:error] [pid 6411:tid 140353248110336] [client 4.205.62.107:14942] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/wp-konfig.backup.php"] [unique_id "apdagq-5XxGfLhlq8xlVwQAAANA"]
[Tue Sep 01 18:06:44.604345 2026] [:error] [pid 28194:tid 140353206146816] [client 4.205.62.107:14918] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/motu.php"] [unique_id "apdahAdz-EN0cDNAEVJ3_wAAAVU"]
[Tue Sep 01 18:06:45.905929 2026] [:error] [pid 29615:tid 140353332037376] [client 4.205.62.107:14924] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/var/www/wallet/index.php"] [unique_id "apdahZ1PBa8fnDJM-t4CMQAAAgY"]
[Tue Sep 01 18:06:47.122940 2026] [:error] [pid 28500:tid 140353306859264] [client 4.205.62.107:14716] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/xza.php"] [unique_id "apdahzQYUm0S3Gh9Jn9dHwAAAYk"]
[Tue Sep 01 18:06:48.376189 2026] [:error] [pid 6411:tid 140353281681152] [client 4.205.62.107:14693] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/doc.php"] [unique_id "apdaiK-5XxGfLhlq8xlV1AAAAMw"]
[Tue Sep 01 18:06:49.667478 2026] [:error] [pid 28500:tid 140353189361408] [client 4.205.62.107:14933] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/cu.php"] [unique_id "apdaiTQYUm0S3Gh9Jn9dIAAAAZc"]
[Tue Sep 01 18:06:52.327971 2026] [:error] [pid 6089:tid 140353435567872] [client 4.205.62.107:14719] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/groceries/index.php"] [unique_id "apdajJjeM2TaVrIYSc9tPQAAAAI"]
[Tue Sep 01 18:06:53.721158 2026] [:error] [pid 28500:tid 140353214539520] [client 4.205.62.107:14929] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/wp-config.backup.php"] [unique_id "apdajTQYUm0S3Gh9Jn9dIwAAAZQ"]
[Tue Sep 01 18:06:54.978102 2026] [:error] [pid 6411:tid 140353452353280] [client 4.205.62.107:14664] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/app.default.php"] [unique_id "apdajq-5XxGfLhlq8xlV3gAAAMA"]
[Tue Sep 01 18:06:56.191836 2026] [:error] [pid 28500:tid 140353340430080] [client 4.205.62.107:14971] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/database.php"] [unique_id "apdakDQYUm0S3Gh9Jn9dJAAAAYU"]
[Tue Sep 01 18:06:57.480244 2026] [:error] [pid 6090:tid 140353357215488] [client 4.205.62.107:14668] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/wp-blog.php"] [unique_id "apdakbPf1VxWhFqgvWtN2gAAAEM"]
[Tue Sep 01 18:06:58.846539 2026] [:error] [pid 6089:tid 140353290073856] [client 4.205.62.107:14718] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/apikeys.php"] [unique_id "apdakpjeM2TaVrIYSc9tPwAAAAs"]
[Tue Sep 01 18:07:00.113952 2026] [:error] [pid 11529:tid 140353435567872] [client 4.205.62.107:14925] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/wp-class.php"] [unique_id "apdalC580fjDz1VV6yf8OAAAAcI"]
[Tue Sep 01 18:07:01.333028 2026] [:error] [pid 11529:tid 140353248110336] [client 4.205.62.107:14669] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/infos.php"] [unique_id "apdalS580fjDz1VV6yf8OQAAAdA"]
[Tue Sep 01 18:07:02.634441 2026] [:error] [pid 28500:tid 140353435567872] [client 4.205.62.107:14700] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/nw.php"] [unique_id "apdaljQYUm0S3Gh9Jn9dJwAAAYI"]
[Tue Sep 01 18:07:03.932903 2026] [:error] [pid 6411:tid 140353443960576] [client 4.205.62.107:14692] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/ebahvhhh.php"] [unique_id "apdal6-5XxGfLhlq8xlV6QAAAME"]
[Tue Sep 01 18:07:05.187020 2026] [:error] [pid 11529:tid 140353290073856] [client 4.205.62.107:15173] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/cp2.php"] [unique_id "apdamS580fjDz1VV6yf8PQAAAcs"]
[Tue Sep 01 18:07:06.410333 2026] [:error] [pid 28194:tid 140353214539520] [client 4.205.62.107:14702] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/agg.php"] [unique_id "apdamgdz-EN0cDNAEVJ4BAAAAVQ"]
[Tue Sep 01 18:07:07.623136 2026] [:error] [pid 11529:tid 140353435567872] [client 4.205.62.107:14941] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/fucku.php"] [unique_id "apdamy580fjDz1VV6yf8QgAAAcI"]
[Tue Sep 01 18:07:08.933698 2026] [:error] [pid 6090:tid 140353340430080] [client 4.205.62.107:14915] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/dd.php"] [unique_id "apdanLPf1VxWhFqgvWtN4gAAAEU"]
[Tue Sep 01 18:07:10.153760 2026] [:error] [pid 6411:tid 140353290073856] [client 4.205.62.107:14675] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/environment.php"] [unique_id "apdanq-5XxGfLhlq8xlV9gAAAMs"]
[Tue Sep 01 18:07:11.448222 2026] [:error] [pid 29615:tid 140353435567872] [client 4.205.62.107:15213] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/aws_auth.php"] [unique_id "apdan51PBa8fnDJM-t4CQgAAAgI"]
[Tue Sep 01 18:07:12.688214 2026] [:error] [pid 6411:tid 140353443960576] [client 4.205.62.107:14662] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/koiy.php"] [unique_id "apdaoK-5XxGfLhlq8xlWAQAAAME"]
[Tue Sep 01 18:07:13.900230 2026] [:error] [pid 6090:tid 140353298466560] [client 4.205.62.107:14667] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/userfuns.php"] [unique_id "apdaobPf1VxWhFqgvWtN6AAAAEo"]
[Tue Sep 01 18:07:15.189249 2026] [:error] [pid 6091:tid 140353264895744] [client 4.205.62.107:14951] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/register.php"] [unique_id "apdao8kVYOXruxV21N5RTAAAAI4"]
[Tue Sep 01 18:07:16.444088 2026] [:error] [pid 6090:tid 140353189361408] [client 4.205.62.107:15203] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/autogooey.php"] [unique_id "apdapLPf1VxWhFqgvWtN6wAAAFc"]
[Tue Sep 01 18:07:17.742412 2026] [:error] [pid 11529:tid 140353197754112] [client 4.205.62.107:14955] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/oc460l3x.php"] [unique_id "apdapS580fjDz1VV6yf8SQAAAdY"]
[Tue Sep 01 18:07:18.962421 2026] [:error] [pid 6411:tid 140353273288448] [client 4.205.62.107:14938] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/log.php"] [unique_id "apdapq-5XxGfLhlq8xlWJwAAAM0"]
[Tue Sep 01 18:07:20.179700 2026] [:error] [pid 6411:tid 140353298466560] [client 4.205.62.107:14923] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/wp-konfig.php"] [unique_id "apdaqK-5XxGfLhlq8xlWKwAAAMo"]
[Tue Sep 01 18:07:21.533895 2026] [:error] [pid 29615:tid 140353435567872] [client 4.205.62.107:14682] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/hochladen.form.php"] [unique_id "apdaqZ1PBa8fnDJM-t4CUgAAAgI"]
[Tue Sep 01 18:07:22.866770 2026] [:error] [pid 28500:tid 140353231324928] [client 4.205.62.107:14936] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/87.php"] [unique_id "apdaqjQYUm0S3Gh9Jn9dMgAAAZI"]
[Tue Sep 01 18:07:31.238094 2026] [:error] [pid 6411:tid 140353239717632] [client 4.205.62.107:14707] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/wp-tem.php"] [unique_id "apdas6-5XxGfLhlq8xlWkAAAANE"]
[Tue Sep 01 18:07:32.508444 2026] [:error] [pid 6411:tid 140353248110336] [client 4.205.62.107:14949] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/app/Models/Hrm/Employee.php"] [unique_id "apdatK-5XxGfLhlq8xlWoQAAANA"]
[Tue Sep 01 18:07:33.725567 2026] [:error] [pid 11529:tid 140353298466560] [client 4.205.62.107:14921] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/zaza.php"] [unique_id "apdatS580fjDz1VV6yf8dwAAAco"]
[Tue Sep 01 18:07:34.927872 2026] [:error] [pid 9194:tid 140353281681152] [client 4.205.62.107:15170] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/php_info.php"] [unique_id "apdatodqWCmIAB5WEG-yeQAAAQw"]
[Tue Sep 01 18:07:36.275267 2026] [:error] [pid 6411:tid 140353298466560] [client 4.205.62.107:14931] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/g3.php"] [unique_id "apdauK-5XxGfLhlq8xlWugAAAMo"]
[Tue Sep 01 18:07:37.511222 2026] [:error] [pid 6090:tid 140353340430080] [client 4.205.62.107:14939] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/zz.php"] [unique_id "apdaubPf1VxWhFqgvWtOGQAAAEU"]
[Tue Sep 01 18:07:39.930949 2026] [:error] [pid 11529:tid 140353239717632] [client 4.205.62.107:14960] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/xa.php"] [unique_id "apdauy580fjDz1VV6yf8ngAAAdE"]
[Tue Sep 01 18:07:41.136686 2026] [:error] [pid 6411:tid 140353315251968] [client 4.205.62.107:14920] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/ms-edit.php"] [unique_id "apdava-5XxGfLhlq8xlWzQAAAMg"]
[Tue Sep 01 18:07:42.385076 2026] [:error] [pid 6090:tid 140353256503040] [client 4.205.62.107:14919] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/saml.php"] [unique_id "apdavrPf1VxWhFqgvWtOHAAAAE8"]
[Tue Sep 01 18:07:43.614417 2026] [:error] [pid 28194:tid 140353340430080] [client 4.205.62.107:14710] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/aws_credentials.php"] [unique_id "apdavwdz-EN0cDNAEVJ4bQAAAUU"]
[Tue Sep 01 18:07:44.867953 2026] [:error] [pid 9194:tid 140353323644672] [client 4.205.62.107:14695] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/app/Helpers/bladeHelpers.php"] [unique_id "apdawIdqWCmIAB5WEG-yegAAAQc"]
[Tue Sep 01 18:07:55.441888 2026] [:error] [pid 6091:tid 140353231324928] [client 4.205.62.107:14709] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/lmfi2.php"] [unique_id "apday8kVYOXruxV21N5RVQAAAJI"]
[Tue Sep 01 18:07:56.700558 2026] [:error] [pid 6089:tid 140353264895744] [client 4.205.62.107:14714] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/snq.php"] [unique_id "apdazJjeM2TaVrIYSc9tUQAAAA4"]
[Tue Sep 01 18:07:57.910922 2026] [:error] [pid 28500:tid 140353214539520] [client 4.205.62.107:14956] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/gjm.php"] [unique_id "apdazTQYUm0S3Gh9Jn9dSAAAAZQ"]
[Tue Sep 01 18:07:59.213220 2026] [:error] [pid 6089:tid 140353315251968] [client 4.205.62.107:14712] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/fraro.php"] [unique_id "apdaz5jeM2TaVrIYSc9tUgAAAAg"]
[Tue Sep 01 18:08:00.441848 2026] [:error] [pid 9194:tid 140353298466560] [client 4.205.62.107:15205] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/hiquido.com/index.php"] [unique_id "apda0IdqWCmIAB5WEG-yfgAAAQo"]
[Tue Sep 01 18:08:01.794546 2026] [:error] [pid 6091:tid 140353323644672] [client 4.205.62.107:14967] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/xp.php"] [unique_id "apda0ckVYOXruxV21N5RWAAAAIc"]
[Tue Sep 01 18:08:03.225996 2026] [:error] [pid 11529:tid 140353264895744] [client 4.205.62.107:14688] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/tax.php"] [unique_id "apda0y580fjDz1VV6yf9IAAAAc4"]
[Tue Sep 01 18:08:04.617279 2026] [:error] [pid 29615:tid 140353323644672] [client 4.205.62.107:14926] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/ms-edit.php"] [unique_id "apda1J1PBa8fnDJM-t4ClAAAAgc"]
[Tue Sep 01 18:08:05.912247 2026] [:error] [pid 29615:tid 140353231324928] [client 4.205.62.107:14945] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/fm.php"] [unique_id "apda1Z1PBa8fnDJM-t4ClQAAAhI"]
[Tue Sep 01 18:08:07.150802 2026] [:error] [pid 29615:tid 140353248110336] [client 4.205.62.107:14937] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/ws62.php"] [unique_id "apda151PBa8fnDJM-t4ClwAAAhA"]
[Tue Sep 01 18:08:08.423718 2026] [:error] [pid 28500:tid 140353231324928] [client 4.205.62.107:14699] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/fun.php"] [unique_id "apda2DQYUm0S3Gh9Jn9dSwAAAZI"]
[Tue Sep 01 18:08:09.646046 2026] [:error] [pid 28500:tid 140353443960576] [client 4.205.62.107:14698] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/sdsa.php"] [unique_id "apda2TQYUm0S3Gh9Jn9dTAAAAYE"]
[Tue Sep 01 18:08:10.931911 2026] [:error] [pid 6090:tid 140353206146816] [client 4.205.62.107:14677] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/05.php"] [unique_id "apda2rPf1VxWhFqgvWtOUwAAAFU"]
[Tue Sep 01 18:08:12.220880 2026] [:error] [pid 9194:tid 140353348822784] [client 4.205.62.107:14670] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/pouhg.php"] [unique_id "apda3IdqWCmIAB5WEG-ygQAAAQQ"]
[Tue Sep 01 18:08:13.975868 2026] [:error] [pid 11529:tid 140353256503040] [client 4.205.62.107:14671] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/txets.php"] [unique_id "apda3S580fjDz1VV6yf9JAAAAc8"]
[Tue Sep 01 18:08:15.227598 2026] [:error] [pid 28194:tid 140353256503040] [client 4.205.62.107:15195] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/333.php"] [unique_id "apda3wdz-EN0cDNAEVJ4dAAAAU8"]
[Tue Sep 01 18:08:16.629830 2026] [:error] [pid 6411:tid 140353239717632] [client 4.205.62.107:14943] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/packed.php"] [unique_id "apda4K-5XxGfLhlq8xlXUAAAANE"]
[Tue Sep 01 18:08:18.089933 2026] [:error] [pid 6089:tid 140353256503040] [client 4.205.62.107:14961] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/mga.php"] [unique_id "apda4pjeM2TaVrIYSc9tWQAAAA8"]
[Tue Sep 01 18:08:19.308020 2026] [:error] [pid 9194:tid 140353315251968] [client 4.205.62.107:15189] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/api.php"] [unique_id "apda44dqWCmIAB5WEG-yggAAAQg"]
[Tue Sep 01 18:08:20.516995 2026] [:error] [pid 28500:tid 140353180968704] [client 4.205.62.107:14656] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/classsmtps.php"] [unique_id "apda5DQYUm0S3Gh9Jn9dTgAAAZg"]
[Tue Sep 01 18:08:21.765307 2026] [:error] [pid 9194:tid 140353189361408] [client 4.205.62.107:14676] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/xve22.php"] [unique_id "apda5YdqWCmIAB5WEG-ygwAAARc"]
[Tue Sep 01 18:08:22.995110 2026] [:error] [pid 6089:tid 140353180968704] [client 4.205.62.107:14974] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/php-info.php"] [unique_id "apda5pjeM2TaVrIYSc9tWwAAABg"]
[Tue Sep 01 18:08:24.357842 2026] [:error] [pid 6090:tid 140353357215488] [client 4.205.62.107:15179] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/sale.php"] [unique_id "apda6LPf1VxWhFqgvWtOYQAAAEM"]
[Tue Sep 01 18:08:25.720871 2026] [:error] [pid 28500:tid 140353315251968] [client 4.205.62.107:14934] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/fns.php"] [unique_id "apda6TQYUm0S3Gh9Jn9dTwAAAYg"]
[Tue Sep 01 18:08:27.058160 2026] [:error] [pid 11529:tid 140353222932224] [client 4.205.62.107:14946] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/koiy.php"] [unique_id "apda6y580fjDz1VV6yf9KAAAAdM"]
[Tue Sep 01 18:08:28.517347 2026] [:error] [pid 9194:tid 140353206146816] [client 4.205.62.107:14964] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/aww.php"] [unique_id "apda7IdqWCmIAB5WEG-yhwAAARU"]
[Tue Sep 01 18:08:29.837542 2026] [:error] [pid 6411:tid 140353323644672] [client 4.205.62.107:14917] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/requirements.php"] [unique_id "apda7a-5XxGfLhlq8xlXVgAAAMc"]
[Tue Sep 01 18:08:33.124452 2026] [:error] [pid 6411:tid 140353435567872] [client 4.205.62.107:14709] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/retu11.PhP"] [unique_id "apda8a-5XxGfLhlq8xlXXAAAAMI"]
[Tue Sep 01 18:08:34.335151 2026] [:error] [pid 28194:tid 140353340430080] [client 4.205.62.107:15178] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/guk.php"] [unique_id "apda8gdz-EN0cDNAEVJ4dgAAAUU"]
[Tue Sep 01 18:08:35.671720 2026] [:error] [pid 11529:tid 140353306859264] [client 4.205.62.107:14715] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/linusadmin-phpinfo.php"] [unique_id "apda8y580fjDz1VV6yf9KwAAAck"]
[Tue Sep 01 18:08:36.880985 2026] [:error] [pid 11529:tid 140353348822784] [client 4.205.62.107:14697] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/ws61.php"] [unique_id "apda9C580fjDz1VV6yf9LAAAAcQ"]
[Tue Sep 01 18:08:38.256296 2026] [:error] [pid 6090:tid 140353435567872] [client 4.205.62.107:14701] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/test.php"] [unique_id "apda9rPf1VxWhFqgvWtObgAAAEI"]
[Tue Sep 01 18:08:39.523520 2026] [:error] [pid 11529:tid 140353315251968] [client 4.205.62.107:14704] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/aws_settings.php"] [unique_id "apda9y580fjDz1VV6yf9MAAAAcg"]
[Tue Sep 01 18:08:40.757972 2026] [:error] [pid 6089:tid 140353306859264] [client 4.205.62.107:14706] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/brc.php"] [unique_id "apda-JjeM2TaVrIYSc9tXQAAAAk"]
[Tue Sep 01 18:08:42.024234 2026] [:error] [pid 9194:tid 140353348822784] [client 4.205.62.107:14947] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/asdf.php"] [unique_id "apda-odqWCmIAB5WEG-yiAAAAQQ"]
[Tue Sep 01 18:08:43.229094 2026] [:error] [pid 6089:tid 140353332037376] [client 4.205.62.107:14711] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/avim.php"] [unique_id "apda-5jeM2TaVrIYSc9tXwAAAAY"]
[Tue Sep 01 18:08:44.548483 2026] [:error] [pid 6411:tid 140353256503040] [client 4.205.62.107:15201] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/old_phpinfo.php"] [unique_id "apda_K-5XxGfLhlq8xlXYwAAAM8"]
[Tue Sep 01 18:08:45.766943 2026] [:error] [pid 6090:tid 140353197754112] [client 4.205.62.107:14288] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/adminfus.php"] [unique_id "apda_bPf1VxWhFqgvWtOdAAAAFY"]
[Tue Sep 01 18:08:46.974541 2026] [:error] [pid 28500:tid 140353239717632] [client 4.205.62.107:14913] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/session.php"] [unique_id "apda_jQYUm0S3Gh9Jn9dUwAAAZE"]
[Tue Sep 01 18:08:48.331886 2026] [:error] [pid 28500:tid 140353248110336] [client 4.205.62.107:14966] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/otuz1.php"] [unique_id "apdbADQYUm0S3Gh9Jn9dVQAAAZA"]
[Tue Sep 01 18:08:49.551208 2026] [:error] [pid 29615:tid 140353357215488] [client 4.205.62.107:14958] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/time.php"] [unique_id "apdbAZ1PBa8fnDJM-t4CvQAAAgM"]
[Tue Sep 01 18:08:50.762184 2026] [:error] [pid 6090:tid 140353189361408] [client 4.205.62.107:15210] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/adminer-4.7.6-en.php"] [unique_id "apdbArPf1VxWhFqgvWtOeQAAAFc"]
[Tue Sep 01 18:08:52.000456 2026] [:error] [pid 6091:tid 140353206146816] [client 4.205.62.107:14659] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/ah25.php"] [unique_id "apdbA8kVYOXruxV21N5RZwAAAJU"]
[Tue Sep 01 18:08:53.242762 2026] [:error] [pid 29615:tid 140353332037376] [client 4.205.62.107:15181] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/ccou.php"] [unique_id "apdbBZ1PBa8fnDJM-t4CvwAAAgY"]
[Tue Sep 01 18:08:54.513437 2026] [:error] [pid 6090:tid 140353443960576] [client 4.205.62.107:15215] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/xin1.php"] [unique_id "apdbBrPf1VxWhFqgvWtOfAAAAEE"]
[Tue Sep 01 18:08:55.811134 2026] [:error] [pid 28500:tid 140353256503040] [client 4.205.62.107:14666] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/xmy.php"] [unique_id "apdbBzQYUm0S3Gh9Jn9dWAAAAY8"]
[Tue Sep 01 18:08:57.153472 2026] [:error] [pid 6411:tid 140353435567872] [client 4.205.62.107:15192] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/phpi.php"] [unique_id "apdbCa-5XxGfLhlq8xlXagAAAMI"]
[Tue Sep 01 18:09:07.474082 2026] [:error] [pid 9194:tid 140353281681152] [client 4.205.62.107:15196] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/hosty.php"] [unique_id "apdbE4dqWCmIAB5WEG-yigAAAQw"]
[Tue Sep 01 18:09:08.709344 2026] [:error] [pid 6411:tid 140353443960576] [client 4.205.62.107:15194] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/atex1.php"] [unique_id "apdbFK-5XxGfLhlq8xlXcgAAAME"]
[Tue Sep 01 18:09:09.964194 2026] [:error] [pid 11529:tid 140353298466560] [client 4.205.62.107:14680] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/mcebraed.php"] [unique_id "apdbFS580fjDz1VV6yf9OAAAAco"]
[Tue Sep 01 18:09:11.263547 2026] [:error] [pid 28500:tid 140353222932224] [client 4.205.62.107:15185] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/php-details.php"] [unique_id "apdbFzQYUm0S3Gh9Jn9dXgAAAZM"]
[Tue Sep 01 18:09:12.553050 2026] [:error] [pid 11529:tid 140353357215488] [client 4.205.62.107:14969] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/grsiuk.php"] [unique_id "apdbGC580fjDz1VV6yf9OQAAAcM"]
[Tue Sep 01 18:09:15.030858 2026] [:error] [pid 11529:tid 140353231324928] [client 4.205.62.107:15169] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/config_dev.php"] [unique_id "apdbGy580fjDz1VV6yf9OwAAAdI"]
[Tue Sep 01 18:09:16.244252 2026] [:error] [pid 6090:tid 140353332037376] [client 4.205.62.107:14944] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/vx.php"] [unique_id "apdbHLPf1VxWhFqgvWtOkQAAAEY"]
[Tue Sep 01 18:09:17.508069 2026] [:error] [pid 6411:tid 140353206146816] [client 4.205.62.107:15208] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/lala.php"] [unique_id "apdbHa-5XxGfLhlq8xlXfAAAANU"]
[Tue Sep 01 18:09:18.837049 2026] [:error] [pid 6089:tid 140353452353280] [client 4.205.62.107:15190] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/pinfo.php"] [unique_id "apdbHpjeM2TaVrIYSc9tYwAAAAA"]
[Tue Sep 01 18:09:31.292890 2026] [:error] [pid 6411:tid 140353231324928] [client 4.205.62.107:14975] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/edit.php"] [unique_id "apdbK6-5XxGfLhlq8xlXhgAAANI"]
[Tue Sep 01 18:09:34.671762 2026] [:error] [pid 28500:tid 140353323644672] [client 4.205.62.107:15188] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/debuggen.php"] [unique_id "apdbLjQYUm0S3Gh9Jn9dcgAAAYc"]
[Tue Sep 01 18:09:37.856768 2026] [:error] [pid 11529:tid 140353290073856] [client 4.205.62.107:15197] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/wp-act.php"] [unique_id "apdbMS580fjDz1VV6yf9RAAAAcs"]
[Tue Sep 01 18:09:39.150752 2026] [:error] [pid 6091:tid 140353348822784] [client 4.205.62.107:15180] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/chosen.php"] [unique_id "apdbM8kVYOXruxV21N5RbwAAAIQ"]
[Tue Sep 01 18:09:40.373142 2026] [:error] [pid 6091:tid 140353452353280] [client 4.205.62.107:14679] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/public/wp-blog.php"] [unique_id "apdbNMkVYOXruxV21N5RcAAAAIA"]
[Tue Sep 01 18:09:41.704970 2026] [:error] [pid 6090:tid 140353214539520] [client 4.205.62.107:14672] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/queue.php"] [unique_id "apdbNbPf1VxWhFqgvWtOnwAAAFQ"]
[Tue Sep 01 18:09:43.183549 2026] [:error] [pid 28500:tid 140353256503040] [client 4.205.62.107:14959] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/admin-ajax.php"] [unique_id "apdbNzQYUm0S3Gh9Jn9ddgAAAY8"]
[Tue Sep 01 18:09:44.415443 2026] [:error] [pid 11529:tid 140353281681152] [client 4.205.62.107:15202] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/btx25.php"] [unique_id "apdbOC580fjDz1VV6yf9RwAAAcw"]
[Tue Sep 01 18:09:45.624717 2026] [:error] [pid 6411:tid 140353248110336] [client 4.205.62.107:14973] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/goods.php"] [unique_id "apdbOa-5XxGfLhlq8xlXkAAAANA"]
[Tue Sep 01 18:09:46.891240 2026] [:error] [pid 28500:tid 140353281681152] [client 4.205.62.107:14686] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/umgebung.php"] [unique_id "apdbOjQYUm0S3Gh9Jn9dewAAAYw"]
[Tue Sep 01 18:09:48.106940 2026] [:error] [pid 6411:tid 140353206146816] [client 4.205.62.107:14928] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/124.php"] [unique_id "apdbPK-5XxGfLhlq8xlXmQAAANU"]
[Tue Sep 01 18:09:49.387975 2026] [:error] [pid 6411:tid 140353222932224] [client 4.205.62.107:14678] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/file59.php"] [unique_id "apdbPa-5XxGfLhlq8xlXngAAANM"]
[Tue Sep 01 18:09:50.595179 2026] [:error] [pid 28194:tid 140353281681152] [client 4.205.62.107:15199] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/thui.php"] [unique_id "apdbPgdz-EN0cDNAEVJ4ggAAAUw"]
[Tue Sep 01 18:09:51.861862 2026] [:error] [pid 28194:tid 140353435567872] [client 4.205.62.107:14328] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/server-info.php"] [unique_id "apdbPwdz-EN0cDNAEVJ4gwAAAUI"]
[Tue Sep 01 18:09:53.070991 2026] [:error] [pid 11529:tid 140353264895744] [client 4.205.62.107:15224] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/ws79.php"] [unique_id "apdbQS580fjDz1VV6yf9SwAAAc4"]
[Tue Sep 01 18:09:54.280223 2026] [:error] [pid 6089:tid 140353323644672] [client 4.205.62.107:14953] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/routes.php"] [unique_id "apdbQpjeM2TaVrIYSc9tcgAAAAc"]
[Tue Sep 01 18:09:55.497799 2026] [:error] [pid 28500:tid 140353298466560] [client 4.205.62.107:14948] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/public/rip.php.php"] [unique_id "apdbQzQYUm0S3Gh9Jn9diQAAAYo"]
[Tue Sep 01 18:09:56.722915 2026] [:error] [pid 6089:tid 140353214539520] [client 4.205.62.107:14927] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/wsws.php"] [unique_id "apdbRJjeM2TaVrIYSc9tdAAAABQ"]
[Tue Sep 01 18:09:58.026935 2026] [:error] [pid 6411:tid 140353180968704] [client 4.205.62.107:14313] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/nlnub.php"] [unique_id "apdbRq-5XxGfLhlq8xlXpgAAANg"]
[Tue Sep 01 18:09:59.417762 2026] [:error] [pid 28194:tid 140353298466560] [client 4.205.62.107:15198] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/sys.php"] [unique_id "apdbRwdz-EN0cDNAEVJ4hwAAAUo"]
[Tue Sep 01 18:10:00.624208 2026] [:error] [pid 9194:tid 140353222932224] [client 4.205.62.107:15187] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/sadd.php"] [unique_id "apdbSIdqWCmIAB5WEG-ymAAAARM"]
[Tue Sep 01 18:10:01.830309 2026] [:error] [pid 11529:tid 140353256503040] [client 4.205.62.107:15209] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/cloud.php"] [unique_id "apdbSS580fjDz1VV6yf9UQAAAc8"]
[Tue Sep 01 18:10:03.386776 2026] [:error] [pid 11529:tid 140353273288448] [client 4.205.62.107:14912] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/wp-info.php"] [unique_id "apdbSy580fjDz1VV6yf9VQAAAc0"]
[Tue Sep 01 18:10:04.607589 2026] [:error] [pid 11529:tid 140353189361408] [client 4.205.62.107:15191] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/upload.form.php"] [unique_id "apdbTC580fjDz1VV6yf9VgAAAdc"]
[Tue Sep 01 18:10:05.933269 2026] [:error] [pid 28500:tid 140353348822784] [client 4.205.62.107:14968] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/png.php"] [unique_id "apdbTTQYUm0S3Gh9Jn9dkwAAAYQ"]
[Tue Sep 01 18:10:07.183358 2026] [:error] [pid 11529:tid 140353323644672] [client 4.205.62.107:14952] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/configuration.php"] [unique_id "apdbTy580fjDz1VV6yf9WgAAAcc"]
[Tue Sep 01 18:10:08.475807 2026] [:error] [pid 29615:tid 140353281681152] [client 4.205.62.107:14696] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/25.php"] [unique_id "apdbUJ1PBa8fnDJM-t4DOAAAAgw"]
[Tue Sep 01 18:10:09.694141 2026] [:error] [pid 28194:tid 140353340430080] [client 4.205.62.107:14950] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/pass4.php"] [unique_id "apdbUQdz-EN0cDNAEVJ4igAAAUU"]
[Tue Sep 01 18:10:10.919019 2026] [:error] [pid 6411:tid 140353340430080] [client 4.205.62.107:14705] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/public/vx.php"] [unique_id "apdbUq-5XxGfLhlq8xlXugAAAMU"]
[Tue Sep 01 18:10:12.146196 2026] [:error] [pid 29615:tid 140353180968704] [client 4.205.62.107:15230] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/olfclass.php"] [unique_id "apdbVJ1PBa8fnDJM-t4DPgAAAhg"]
[Tue Sep 01 18:10:13.454997 2026] [:error] [pid 6089:tid 140353332037376] [client 4.205.62.107:14281] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/test1.php"] [unique_id "apdbVZjeM2TaVrIYSc9tfgAAAAY"]
[Tue Sep 01 18:10:14.703529 2026] [:error] [pid 11529:tid 140353323644672] [client 4.205.62.107:14690] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/drykl.php"] [unique_id "apdbVi580fjDz1VV6yf9YgAAAcc"]
[Tue Sep 01 18:10:15.966191 2026] [:error] [pid 6411:tid 140353340430080] [client 4.205.62.107:15207] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/ty.php"] [unique_id "apdbV6-5XxGfLhlq8xlXvgAAAMU"]
[Tue Sep 01 18:10:17.830787 2026] [:error] [pid 9194:tid 140353315251968] [client 4.205.62.107:14309] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/myfile.php"] [unique_id "apdbWYdqWCmIAB5WEG-ymwAAAQg"]
[Tue Sep 01 18:10:19.102963 2026] [:error] [pid 29615:tid 140353231324928] [client 4.205.62.107:15201] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/fff.php"] [unique_id "apdbW51PBa8fnDJM-t4DYwAAAhI"]
[Tue Sep 01 18:10:20.454585 2026] [:error] [pid 11529:tid 140353340430080] [client 4.205.62.107:14703] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/bootstrap.php"] [unique_id "apdbXC580fjDz1VV6yf9aAAAAcU"]
[Tue Sep 01 18:10:21.664050 2026] [:error] [pid 6411:tid 140353323644672] [client 4.205.62.107:14658] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/server_info.php"] [unique_id "apdbXa-5XxGfLhlq8xlXwAAAAMc"]
[Tue Sep 01 18:10:22.927687 2026] [:error] [pid 6089:tid 140353273288448] [client 4.205.62.107:14316] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/X57.php"] [unique_id "apdbXpjeM2TaVrIYSc9tfwAAAA0"]
[Tue Sep 01 18:10:24.272463 2026] [:error] [pid 11529:tid 140353248110336] [client 4.205.62.107:15182] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/temp.php"] [unique_id "apdbYC580fjDz1VV6yf9bgAAAdA"]
[Tue Sep 01 18:10:25.592397 2026] [:error] [pid 28194:tid 140353273288448] [client 4.205.62.107:14957] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/aws.php"] [unique_id "apdbYQdz-EN0cDNAEVJ4kgAAAU0"]
[Tue Sep 01 18:10:26.855892 2026] [:error] [pid 6411:tid 140353214539520] [client 4.205.62.107:14661] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/services.php"] [unique_id "apdbYq-5XxGfLhlq8xlXyAAAANQ"]
[Tue Sep 01 18:10:28.073219 2026] [:error] [pid 28500:tid 140353256503040] [client 4.205.62.107:15183] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/radio.php"] [unique_id "apdbZDQYUm0S3Gh9Jn9dogAAAY8"]
[Tue Sep 01 18:10:29.444680 2026] [:error] [pid 6090:tid 140353231324928] [client 4.205.62.107:14657] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/fleen.php"] [unique_id "apdbZbPf1VxWhFqgvWtOsQAAAFI"]
[Tue Sep 01 18:10:30.842974 2026] [:error] [pid 6411:tid 140353273288448] [client 4.205.62.107:14684] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/file21.php"] [unique_id "apdbZq-5XxGfLhlq8xlXygAAAM0"]
[Tue Sep 01 18:10:32.179160 2026] [:error] [pid 9194:tid 140353340430080] [client 4.205.62.107:14963] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/f35.php"] [unique_id "apdbaIdqWCmIAB5WEG-ynwAAAQU"]
[Tue Sep 01 18:10:33.411875 2026] [:error] [pid 11529:tid 140353435567872] [client 4.205.62.107:15217] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/paypal.php"] [unique_id "apdbaS580fjDz1VV6yf9fQAAAcI"]
[Tue Sep 01 18:10:34.641308 2026] [:error] [pid 28194:tid 140353264895744] [client 4.205.62.107:14708] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/wp-access.php"] [unique_id "apdbagdz-EN0cDNAEVJ4lAAAAU4"]
[Tue Sep 01 18:10:35.953674 2026] [:error] [pid 28500:tid 140353281681152] [client 4.205.62.107:14717] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/cxc.php"] [unique_id "apdbazQYUm0S3Gh9Jn9dpgAAAYw"]
[Tue Sep 01 18:10:37.417991 2026] [:error] [pid 11529:tid 140353306859264] [client 4.205.62.107:15171] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/xda.php"] [unique_id "apdbbS580fjDz1VV6yf9gwAAAck"]
[Tue Sep 01 18:10:38.703467 2026] [:error] [pid 6089:tid 140353189361408] [client 4.205.62.107:14922] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/aws_secret_config.php"] [unique_id "apdbbpjeM2TaVrIYSc9tgAAAABc"]
[Tue Sep 01 18:10:39.919922 2026] [:error] [pid 6411:tid 140353332037376] [client 4.205.62.107:15184] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/public/bnn_.php.php"] [unique_id "apdbb6-5XxGfLhlq8xlXzgAAAMY"]
[Tue Sep 01 18:10:41.134762 2026] [:error] [pid 11529:tid 140353443960576] [client 4.205.62.107:15177] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/application.config.php"] [unique_id "apdbcS580fjDz1VV6yf9hwAAAcE"]
[Tue Sep 01 18:10:42.401693 2026] [:error] [pid 28500:tid 140353239717632] [client 4.205.62.107:14673] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/oiko6u.php"] [unique_id "apdbcjQYUm0S3Gh9Jn9dqgAAAZE"]
[Tue Sep 01 18:10:43.635312 2026] [:error] [pid 6411:tid 140353290073856] [client 4.205.62.107:14290] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/app_local.php"] [unique_id "apdbc6-5XxGfLhlq8xlX0QAAAMs"]
[Tue Sep 01 18:10:44.887121 2026] [:error] [pid 9194:tid 140353306859264] [client 4.205.62.107:14940] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/erty.php"] [unique_id "apdbdIdqWCmIAB5WEG-yoQAAAQk"]
[Tue Sep 01 18:10:46.172462 2026] [:error] [pid 28500:tid 140353332037376] [client 4.205.62.107:14303] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/aws_keys.php"] [unique_id "apdbdjQYUm0S3Gh9Jn9dswAAAYY"]
[Tue Sep 01 18:10:47.744047 2026] [:error] [pid 6089:tid 140353435567872] [client 4.205.62.107:15212] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/filesystems.php"] [unique_id "apdbd5jeM2TaVrIYSc9tgwAAAAI"]
[Tue Sep 01 18:10:49.056216 2026] [:error] [pid 28194:tid 140353332037376] [client 4.205.62.107:14295] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/bigdump.php"] [unique_id "apdbeQdz-EN0cDNAEVJ4mgAAAUY"]
[Tue Sep 01 18:10:50.306338 2026] [:error] [pid 11529:tid 140353231324928] [client 4.205.62.107:14297] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/gnmlc.php"] [unique_id "apdbei580fjDz1VV6yf9kwAAAdI"]
[Tue Sep 01 18:10:51.523333 2026] [:error] [pid 6411:tid 140353231324928] [client 4.205.62.107:14306] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/mamzi.php"] [unique_id "apdbe6-5XxGfLhlq8xlX1QAAANI"]
[Tue Sep 01 18:10:52.784543 2026] [:error] [pid 6089:tid 140353357215488] [client 4.205.62.107:14630] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/wp-includes/js/tinymce/themes/inlite"] [unique_id "apdbfJjeM2TaVrIYSc9thQAAAAM"]
[Tue Sep 01 18:10:54.509820 2026] [:error] [pid 11529:tid 140353248110336] [client 4.205.62.107:15225] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/nzv.php"] [unique_id "apdbfi580fjDz1VV6yf9lwAAAdA"]
[Tue Sep 01 18:10:55.725420 2026] [:error] [pid 11529:tid 140353357215488] [client 4.205.62.107:15176] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/4563.php"] [unique_id "apdbfy580fjDz1VV6yf9mgAAAcM"]
[Tue Sep 01 18:10:57.613346 2026] [:error] [pid 6411:tid 140353248110336] [client 4.205.62.107:14610] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/debug.php"] [unique_id "apdbga-5XxGfLhlq8xlX2gAAANA"]
[Tue Sep 01 18:10:59.159443 2026] [:error] [pid 6411:tid 140353290073856] [client 4.205.62.107:14693] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/lm15.php"] [unique_id "apdbg6-5XxGfLhlq8xlX3QAAAMs"]
[Tue Sep 01 18:11:00.406709 2026] [:error] [pid 6411:tid 140353315251968] [client 4.205.62.107:14330] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/cache-compat.php"] [unique_id "apdbhK-5XxGfLhlq8xlX3wAAAMg"]
[Tue Sep 01 18:11:01.627682 2026] [:error] [pid 28500:tid 140353298466560] [client 4.205.62.107:14689] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/app_dev.php"] [unique_id "apdbhTQYUm0S3Gh9Jn9duAAAAYo"]
[Tue Sep 01 18:11:02.892977 2026] [:error] [pid 6411:tid 140353231324928] [client 4.205.62.107:14933] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/plss3.php"] [unique_id "apdbhq-5XxGfLhlq8xlX4QAAANI"]
[Tue Sep 01 18:11:04.152858 2026] [:error] [pid 9194:tid 140353315251968] [client 4.205.62.107:14282] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/gecko-litespeed.php"] [unique_id "apdbiIdqWCmIAB5WEG-ypgAAAQg"]
[Tue Sep 01 18:11:05.381686 2026] [:error] [pid 6091:tid 140353435567872] [client 4.205.62.107:14918] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/env.php"] [unique_id "apdbickVYOXruxV21N5R4QAAAII"]
[Tue Sep 01 18:11:06.621229 2026] [:error] [pid 6411:tid 140353332037376] [client 4.205.62.107:14954] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/8.php"] [unique_id "apdbiq-5XxGfLhlq8xlX4wAAAMY"]
[Tue Sep 01 18:11:07.844496 2026] [:error] [pid 6090:tid 140353435567872] [client 4.205.62.107:15216] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/thui.php"] [unique_id "apdbi7Pf1VxWhFqgvWtOxAAAAEI"]
[Tue Sep 01 18:11:09.053814 2026] [:error] [pid 6090:tid 140353348822784] [client 4.205.62.107:14924] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/public/mah.php.php"] [unique_id "apdbjbPf1VxWhFqgvWtOxgAAAEQ"]
[Tue Sep 01 18:11:10.583453 2026] [:error] [pid 28500:tid 140353206146816] [client 4.205.62.107:14294] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/kedi.php"] [unique_id "apdbjjQYUm0S3Gh9Jn9dugAAAZU"]
[Tue Sep 01 18:11:11.835122 2026] [:error] [pid 11529:tid 140353323644672] [client 4.205.62.107:14287] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/u88.php"] [unique_id "apdbjy580fjDz1VV6yf9qgAAAcc"]
[Tue Sep 01 18:11:13.062039 2026] [:error] [pid 6090:tid 140353298466560] [client 4.205.62.107:14681] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/rum.or.php"] [unique_id "apdbkbPf1VxWhFqgvWtOygAAAEo"]
[Tue Sep 01 18:11:14.503595 2026] [:error] [pid 6091:tid 140353248110336] [client 4.205.62.107:15752] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/phpsysinfo.php"] [unique_id "apdbkskVYOXruxV21N5R5QAAAJA"]
[Tue Sep 01 18:11:15.704489 2026] [:error] [pid 6411:tid 140353435567872] [client 4.205.62.107:14304] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/wdf.php"] [unique_id "apdbk6-5XxGfLhlq8xlX5AAAAMI"]
[Tue Sep 01 18:11:16.968443 2026] [:error] [pid 9194:tid 140353189361408] [client 4.205.62.107:14965] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/maxro.php"] [unique_id "apdblIdqWCmIAB5WEG-yqQAAARc"]
[Tue Sep 01 18:11:18.583497 2026] [:error] [pid 6411:tid 140353452353280] [client 4.205.62.107:14276] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/loxi-o.php"] [unique_id "apdblq-5XxGfLhlq8xlX5wAAAMA"]
[Tue Sep 01 18:11:19.831928 2026] [:error] [pid 28194:tid 140353180968704] [client 4.205.62.107:14687] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/rpk.php"] [unique_id "apdblwdz-EN0cDNAEVJ4qAAAAVg"]
[Tue Sep 01 18:11:21.093344 2026] [:error] [pid 6411:tid 140353231324928] [client 4.205.62.107:15206] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/sgd.php"] [unique_id "apdbma-5XxGfLhlq8xlX7AAAANI"]
[Tue Sep 01 18:11:22.749411 2026] [:error] [pid 29615:tid 140353180968704] [client 4.205.62.107:14633] [client 4.205.62.107] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/tinyfilemanager.php"] [unique_id "apdbmp1PBa8fnDJM-t4DjwAAAhg"]
[Tue Sep 01 18:51:02.456200 2026] [proxy_fcgi:error] [pid 6411:tid 140353189361408] [client 20.220.211.172:16648] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 18:51:02.561357 2026] [proxy_fcgi:error] [pid 6411:tid 140353315251968] [client 20.220.211.172:16648] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 18:51:02.664404 2026] [proxy_fcgi:error] [pid 6411:tid 140353323644672] [client 20.220.211.172:16648] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 18:51:02.769812 2026] [proxy_fcgi:error] [pid 6411:tid 140353197754112] [client 20.220.211.172:16648] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 18:51:02.873194 2026] [proxy_fcgi:error] [pid 6411:tid 140353206146816] [client 20.220.211.172:16648] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 18:51:02.975963 2026] [proxy_fcgi:error] [pid 6411:tid 140353290073856] [client 20.220.211.172:16648] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 18:51:03.081577 2026] [proxy_fcgi:error] [pid 6411:tid 140353222932224] [client 20.220.211.172:16648] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 18:51:03.186009 2026] [proxy_fcgi:error] [pid 6411:tid 140353281681152] [client 20.220.211.172:16648] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 18:51:03.289841 2026] [proxy_fcgi:error] [pid 6411:tid 140353357215488] [client 20.220.211.172:16648] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 18:51:03.399202 2026] [proxy_fcgi:error] [pid 6411:tid 140353306859264] [client 20.220.211.172:16648] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 18:51:03.504401 2026] [proxy_fcgi:error] [pid 6411:tid 140353273288448] [client 20.220.211.172:16648] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 18:51:03.608848 2026] [proxy_fcgi:error] [pid 6411:tid 140353443960576] [client 20.220.211.172:16648] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 18:51:03.712270 2026] [proxy_fcgi:error] [pid 6411:tid 140353264895744] [client 20.220.211.172:16648] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 18:51:03.817256 2026] [proxy_fcgi:error] [pid 6411:tid 140353239717632] [client 20.220.211.172:16648] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 18:51:03.933245 2026] [proxy_fcgi:error] [pid 6411:tid 140353452353280] [client 20.220.211.172:16648] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 18:51:04.038299 2026] [proxy_fcgi:error] [pid 6411:tid 140353332037376] [client 20.220.211.172:16648] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 18:51:04.142748 2026] [proxy_fcgi:error] [pid 6411:tid 140353298466560] [client 20.220.211.172:16648] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 18:51:04.248478 2026] [proxy_fcgi:error] [pid 6411:tid 140353435567872] [client 20.220.211.172:16648] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 18:51:04.355923 2026] [proxy_fcgi:error] [pid 6411:tid 140353256503040] [client 20.220.211.172:16648] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 18:51:04.461143 2026] [proxy_fcgi:error] [pid 6411:tid 140353340430080] [client 20.220.211.172:16648] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 18:51:04.566677 2026] [proxy_fcgi:error] [pid 6411:tid 140353315251968] [client 20.220.211.172:16648] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 18:51:04.670664 2026] [proxy_fcgi:error] [pid 6411:tid 140353323644672] [client 20.220.211.172:16648] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 18:51:04.775306 2026] [proxy_fcgi:error] [pid 6411:tid 140353180968704] [client 20.220.211.172:16648] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 18:51:04.880241 2026] [proxy_fcgi:error] [pid 6411:tid 140353222932224] [client 20.220.211.172:16648] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 18:51:04.983916 2026] [proxy_fcgi:error] [pid 6411:tid 140353231324928] [client 20.220.211.172:16648] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 18:51:04.984047 2026] [:error] [pid 6411:tid 140353231324928] [client 20.220.211.172:16648] [client 20.220.211.172] ModSecurity: Warning. Operator GT matched 25 at IP:scan_404_count. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "11"] [id "9000204"] [msg "Scanner detected - blocking IP 1h"] [tag "scanner-detect"] [hostname "www.menabern.com"] [uri "/h02ugyh.php"] [unique_id "apdk6K-5XxGfLhlq8xlnPgAAANI"]
[Tue Sep 01 18:51:05.084156 2026] [:error] [pid 6411:tid 140353348822784] [client 20.220.211.172:16648] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/155.php"] [unique_id "apdk6a-5XxGfLhlq8xlnPwAAAMQ"]
[Tue Sep 01 18:51:05.286804 2026] [:error] [pid 6411:tid 140353273288448] [client 20.220.211.172:16686] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/ops.php"] [unique_id "apdk6a-5XxGfLhlq8xlnQAAAAM0"]
[Tue Sep 01 18:51:05.496960 2026] [:error] [pid 29615:tid 140353348822784] [client 20.220.211.172:16655] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/mac.php"] [unique_id "apdk6Z1PBa8fnDJM-t4IZwAAAgQ"]
[Tue Sep 01 18:51:05.702125 2026] [:error] [pid 28500:tid 140353332037376] [client 20.220.211.172:16691] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/makeasmtp.php"] [unique_id "apdk6TQYUm0S3Gh9Jn9mcQAAAYY"]
[Tue Sep 01 18:51:05.906069 2026] [:error] [pid 6091:tid 140353214539520] [client 20.220.211.172:16672] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/pucci.php"] [unique_id "apdk6ckVYOXruxV21N5W7QAAAJQ"]
[Tue Sep 01 18:51:06.116289 2026] [:error] [pid 11529:tid 140353214539520] [client 20.220.211.172:16286] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/puc.php"] [unique_id "apdk6i580fjDz1VV6ycGtwAAAdQ"]
[Tue Sep 01 18:51:06.319281 2026] [:error] [pid 28500:tid 140353256503040] [client 20.220.211.172:16260] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/8.php"] [unique_id "apdk6jQYUm0S3Gh9Jn9mcgAAAY8"]
[Tue Sep 01 18:51:06.524630 2026] [:error] [pid 6411:tid 140353332037376] [client 20.220.211.172:16259] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/1.php"] [unique_id "apdk6q-5XxGfLhlq8xlnQQAAAMY"]
[Tue Sep 01 18:51:06.726966 2026] [:error] [pid 6089:tid 140353306859264] [client 20.220.211.172:16661] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/admin.php"] [unique_id "apdk6pjeM2TaVrIYSc9yrgAAAAk"]
[Tue Sep 01 18:51:06.934554 2026] [:error] [pid 28500:tid 140353206146816] [client 20.220.211.172:16133] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/edit.php"] [unique_id "apdk6jQYUm0S3Gh9Jn9mdAAAAZU"]
[Tue Sep 01 18:51:07.137406 2026] [:error] [pid 29615:tid 140353222932224] [client 20.220.211.172:16688] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/inputs.php"] [unique_id "apdk651PBa8fnDJM-t4IaAAAAhM"]
[Tue Sep 01 18:51:07.347421 2026] [:error] [pid 9194:tid 140353264895744] [client 20.220.211.172:16646] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/av.php"] [unique_id "apdk64dqWCmIAB5WEG-4XQAAAQ4"]
[Tue Sep 01 18:51:07.565561 2026] [:error] [pid 28500:tid 140353452353280] [client 20.220.211.172:16651] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/classwithtostring.php"] [unique_id "apdk6zQYUm0S3Gh9Jn9mdwAAAYA"]
[Tue Sep 01 18:51:07.767993 2026] [:error] [pid 28500:tid 140353214539520] [client 20.220.211.172:16665] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/adminfuns.php"] [unique_id "apdk6zQYUm0S3Gh9Jn9meQAAAZQ"]
[Tue Sep 01 18:51:07.970392 2026] [:error] [pid 6091:tid 140353452353280] [client 20.220.211.172:16269] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/ms-edit.php"] [unique_id "apdk68kVYOXruxV21N5W7wAAAIA"]
[Tue Sep 01 18:51:08.174318 2026] [:error] [pid 29615:tid 140353452353280] [client 20.220.211.172:16649] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/222.php"] [unique_id "apdk7J1PBa8fnDJM-t4IaQAAAgA"]
[Tue Sep 01 18:51:08.384516 2026] [:error] [pid 28194:tid 140353340430080] [client 20.220.211.172:16689] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/BDKR28WP.php"] [unique_id "apdk7Adz-EN0cDNAEVJ9FAAAAUU"]
[Tue Sep 01 18:51:08.600603 2026] [:error] [pid 9194:tid 140353306859264] [client 20.220.211.172:16660] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/wp.php"] [unique_id "apdk7IdqWCmIAB5WEG-4XgAAAQk"]
[Tue Sep 01 18:51:08.805950 2026] [:error] [pid 6411:tid 140353340430080] [client 20.220.211.172:16268] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/abcd.php"] [unique_id "apdk7K-5XxGfLhlq8xlnRAAAAMU"]
[Tue Sep 01 18:51:09.010769 2026] [:error] [pid 6091:tid 140353264895744] [client 20.220.211.172:16267] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/simple.php"] [unique_id "apdk7ckVYOXruxV21N5W8AAAAI4"]
[Tue Sep 01 18:51:09.218838 2026] [:error] [pid 6411:tid 140353197754112] [client 20.220.211.172:16692] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/chosen.php"] [unique_id "apdk7a-5XxGfLhlq8xlnRQAAANY"]
[Tue Sep 01 18:51:09.442615 2026] [:error] [pid 6089:tid 140353248110336] [client 20.220.211.172:16683] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/als.php"] [unique_id "apdk7ZjeM2TaVrIYSc9ysAAAABA"]
[Tue Sep 01 18:51:09.656535 2026] [:error] [pid 6411:tid 140353348822784] [client 20.220.211.172:16256] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/nox.php"] [unique_id "apdk7a-5XxGfLhlq8xlnSgAAAMQ"]
[Tue Sep 01 18:51:09.865541 2026] [:error] [pid 11529:tid 140353323644672] [client 20.220.211.172:16275] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/file59.php"] [unique_id "apdk7S580fjDz1VV6ycGwAAAAcc"]
[Tue Sep 01 18:51:10.084561 2026] [:error] [pid 11529:tid 140353231324928] [client 20.220.211.172:16700] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/admin.php"] [unique_id "apdk7i580fjDz1VV6ycGwQAAAdI"]
[Tue Sep 01 18:51:10.302236 2026] [:error] [pid 6090:tid 140353264895744] [client 20.220.211.172:16685] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/xamp.php"] [unique_id "apdk7rPf1VxWhFqgvWtUMwAAAE4"]
[Tue Sep 01 18:51:10.504803 2026] [:error] [pid 28194:tid 140353239717632] [client 20.220.211.172:16642] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/bless.php"] [unique_id "apdk7gdz-EN0cDNAEVJ9FwAAAVE"]
[Tue Sep 01 18:51:10.713860 2026] [:error] [pid 6091:tid 140353435567872] [client 20.220.211.172:16314] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/f35.php"] [unique_id "apdk7skVYOXruxV21N5W8QAAAII"]
[Tue Sep 01 18:51:10.918999 2026] [:error] [pid 6089:tid 140353290073856] [client 20.220.211.172:16662] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/aaa.php"] [unique_id "apdk7pjeM2TaVrIYSc9ysQAAAAs"]
[Tue Sep 01 18:51:11.125600 2026] [:error] [pid 11529:tid 140353214539520] [client 20.220.211.172:16182] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/gecko.php"] [unique_id "apdk7y580fjDz1VV6ycGwwAAAdQ"]
[Tue Sep 01 18:51:11.344160 2026] [:error] [pid 11529:tid 140353340430080] [client 20.220.211.172:16702] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/xiugai.php"] [unique_id "apdk7y580fjDz1VV6ycGxAAAAcU"]
[Tue Sep 01 18:51:11.555777 2026] [:error] [pid 6411:tid 140353239717632] [client 20.220.211.172:16654] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/adminner.php"] [unique_id "apdk76-5XxGfLhlq8xlnTwAAANE"]
[Tue Sep 01 18:51:11.765427 2026] [:error] [pid 28500:tid 140353348822784] [client 20.220.211.172:16141] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/file1221.php"] [unique_id "apdk7zQYUm0S3Gh9Jn9megAAAYQ"]
[Tue Sep 01 18:51:11.969206 2026] [:error] [pid 6411:tid 140353256503040] [client 20.220.211.172:16270] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/inx.php"] [unique_id "apdk76-5XxGfLhlq8xlnUAAAAM8"]
[Tue Sep 01 18:51:12.169627 2026] [:error] [pid 6411:tid 140353452353280] [client 20.220.211.172:16695] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/reviall.php"] [unique_id "apdk8K-5XxGfLhlq8xlnUQAAAMA"]
[Tue Sep 01 18:51:12.376250 2026] [:error] [pid 9194:tid 140353189361408] [client 20.220.211.172:16687] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/11.php"] [unique_id "apdk8IdqWCmIAB5WEG-4XwAAARc"]
[Tue Sep 01 18:51:12.583921 2026] [:error] [pid 6411:tid 140353315251968] [client 20.220.211.172:16673] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/File.php"] [unique_id "apdk8K-5XxGfLhlq8xlnUgAAAMg"]
[Tue Sep 01 18:51:12.799547 2026] [:error] [pid 6411:tid 140353323644672] [client 20.220.211.172:16274] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/fi22.php"] [unique_id "apdk8K-5XxGfLhlq8xlnUwAAAMc"]
[Tue Sep 01 18:51:13.009466 2026] [:error] [pid 6090:tid 140353222932224] [client 20.220.211.172:16671] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/3PJcpMFsD8B.php"] [unique_id "apdk8bPf1VxWhFqgvWtUNAAAAFM"]
[Tue Sep 01 18:51:13.211856 2026] [:error] [pid 11529:tid 140353180968704] [client 20.220.211.172:16680] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/a3ampzmbipnkpxeqhqpsanCdefault.php"] [unique_id "apdk8S580fjDz1VV6ycGxgAAAdg"]
[Tue Sep 01 18:51:13.424721 2026] [:error] [pid 6090:tid 140353443960576] [client 20.220.211.172:16284] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/4PJcpMFsD8B.php"] [unique_id "apdk8bPf1VxWhFqgvWtUNQAAAEE"]
[Tue Sep 01 18:51:13.641553 2026] [:error] [pid 6411:tid 140353222932224] [client 20.220.211.172:16318] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/i99z7zzbwtpteujvv6s8hiCdefault.php"] [unique_id "apdk8a-5XxGfLhlq8xlnVQAAANM"]
[Tue Sep 01 18:51:13.850581 2026] [:error] [pid 28500:tid 140353197754112] [client 20.220.211.172:16313] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/gwaih1gfzp5vuwr04Cdefault.php"] [unique_id "apdk8TQYUm0S3Gh9Jn9mewAAAZY"]
[Tue Sep 01 18:51:14.062513 2026] [:error] [pid 6091:tid 140353231324928] [client 20.220.211.172:16666] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/1wvekeybd9it2di2vyipgr6Cdefault.php"] [unique_id "apdk8skVYOXruxV21N5W9QAAAJI"]
[Tue Sep 01 18:51:14.264489 2026] [:error] [pid 6091:tid 140353348822784] [client 20.220.211.172:16299] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/media.php"] [unique_id "apdk8skVYOXruxV21N5W9wAAAIQ"]
[Tue Sep 01 18:51:14.480499 2026] [:error] [pid 6411:tid 140353231324928] [client 20.220.211.172:16266] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/inso.php"] [unique_id "apdk8q-5XxGfLhlq8xlnVgAAANI"]
[Tue Sep 01 18:51:14.689705 2026] [:error] [pid 11529:tid 140353281681152] [client 20.220.211.172:16285] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/shiny.php"] [unique_id "apdk8i580fjDz1VV6ycGyAAAAcw"]
[Tue Sep 01 18:51:14.893602 2026] [:error] [pid 11529:tid 140353452353280] [client 20.220.211.172:16289] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/403dd.php"] [unique_id "apdk8i580fjDz1VV6ycGyQAAAcA"]
[Tue Sep 01 18:51:15.091806 2026] [:error] [pid 6091:tid 140353189361408] [client 20.220.211.172:16147] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/baba.php"] [unique_id "apdk88kVYOXruxV21N5W-QAAAJc"]
[Tue Sep 01 18:51:15.297335 2026] [:error] [pid 6411:tid 140353443960576] [client 20.220.211.172:16130] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/site.php"] [unique_id "apdk86-5XxGfLhlq8xlnWAAAAME"]
[Tue Sep 01 18:51:15.498727 2026] [:error] [pid 6411:tid 140353298466560] [client 20.220.211.172:16699] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/cabs.php"] [unique_id "apdk86-5XxGfLhlq8xlnWgAAAMo"]
[Tue Sep 01 18:51:15.729648 2026] [:error] [pid 28500:tid 140353298466560] [client 20.220.211.172:16301] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/insc.php"] [unique_id "apdk8zQYUm0S3Gh9Jn9mfAAAAYo"]
[Tue Sep 01 18:51:15.945695 2026] [:error] [pid 6411:tid 140353256503040] [client 20.220.211.172:16281] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/file.php"] [unique_id "apdk86-5XxGfLhlq8xlnXAAAAM8"]
[Tue Sep 01 18:51:16.146072 2026] [:error] [pid 11529:tid 140353231324928] [client 20.220.211.172:16334] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/dex.php"] [unique_id "apdk9C580fjDz1VV6ycGygAAAdI"]
[Tue Sep 01 18:51:16.348412 2026] [:error] [pid 6411:tid 140353315251968] [client 20.220.211.172:16271] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/key.php"] [unique_id "apdk9K-5XxGfLhlq8xlnXgAAAMg"]
[Tue Sep 01 18:51:16.565133 2026] [:error] [pid 6411:tid 140353323644672] [client 20.220.211.172:16283] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/kir.php"] [unique_id "apdk9K-5XxGfLhlq8xlnXwAAAMc"]
[Tue Sep 01 18:51:16.768331 2026] [:error] [pid 6411:tid 140353231324928] [client 20.220.211.172:16282] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/nofile.php"] [unique_id "apdk9K-5XxGfLhlq8xlnYwAAANI"]
[Tue Sep 01 18:51:16.975746 2026] [:error] [pid 6090:tid 140353206146816] [client 20.220.211.172:16291] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/fling.php"] [unique_id "apdk9LPf1VxWhFqgvWtUOAAAAFU"]
[Tue Sep 01 18:51:17.178963 2026] [:error] [pid 6090:tid 140353256503040] [client 20.220.211.172:16273] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/btyuio.php"] [unique_id "apdk9bPf1VxWhFqgvWtUOQAAAE8"]
[Tue Sep 01 18:51:17.384774 2026] [:error] [pid 6090:tid 140353281681152] [client 20.220.211.172:16311] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/00zip.php"] [unique_id "apdk9bPf1VxWhFqgvWtUOgAAAEw"]
[Tue Sep 01 18:51:17.585661 2026] [:error] [pid 11529:tid 140353197754112] [client 20.220.211.172:16658] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/silver.php"] [unique_id "apdk9S580fjDz1VV6ycGywAAAdY"]
[Tue Sep 01 18:51:17.793503 2026] [:error] [pid 6411:tid 140353298466560] [client 20.220.211.172:16663] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/wp-mails.php"] [unique_id "apdk9a-5XxGfLhlq8xlnZQAAAMo"]
[Tue Sep 01 18:51:17.999815 2026] [:error] [pid 28500:tid 140353273288448] [client 20.220.211.172:16279] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/sm.php"] [unique_id "apdk9TQYUm0S3Gh9Jn9mfQAAAY0"]
[Tue Sep 01 18:51:18.202970 2026] [:error] [pid 6411:tid 140353189361408] [client 20.220.211.172:16265] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/araso.php"] [unique_id "apdk9q-5XxGfLhlq8xlnZgAAANc"]
[Tue Sep 01 18:51:18.407073 2026] [:error] [pid 6411:tid 140353214539520] [client 20.220.211.172:16257] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/a.php"] [unique_id "apdk9q-5XxGfLhlq8xlnaAAAANQ"]
[Tue Sep 01 18:51:18.616391 2026] [:error] [pid 6411:tid 140353231324928] [client 20.220.211.172:16272] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/sb.php"] [unique_id "apdk9q-5XxGfLhlq8xlnaQAAANI"]
[Tue Sep 01 18:51:18.818125 2026] [:error] [pid 29615:tid 140353323644672] [client 20.220.211.172:16300] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/in.php"] [unique_id "apdk9p1PBa8fnDJM-t4IbQAAAgc"]
[Tue Sep 01 18:51:19.043598 2026] [:error] [pid 29615:tid 140353306859264] [client 20.220.211.172:16149] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/xnm-apc.php"] [unique_id "apdk951PBa8fnDJM-t4IbwAAAgk"]
[Tue Sep 01 18:51:19.254070 2026] [:error] [pid 29615:tid 140353357215488] [client 20.220.211.172:16135] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/adminimagess.php"] [unique_id "apdk951PBa8fnDJM-t4IcAAAAgM"]
[Tue Sep 01 18:51:19.458428 2026] [:error] [pid 6411:tid 140353290073856] [client 20.220.211.172:16318] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/wp-content/index.php"] [unique_id "apdk96-5XxGfLhlq8xlnawAAAMs"]
[Tue Sep 01 18:51:19.661402 2026] [:error] [pid 29615:tid 140353332037376] [client 20.220.211.172:16277] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "apdk951PBa8fnDJM-t4IcQAAAgY"]
[Tue Sep 01 18:51:19.880312 2026] [:error] [pid 6089:tid 140353443960576] [client 20.220.211.172:16322] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/wp-admin/css/"] [unique_id "apdk95jeM2TaVrIYSc9ytQAAAAE"]
[Tue Sep 01 18:51:20.102960 2026] [:error] [pid 11529:tid 140353206146816] [client 20.220.211.172:16276] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/wp-admin/css/colors/modern/"] [unique_id "apdk-C580fjDz1VV6ycGzwAAAdU"]
[Tue Sep 01 18:51:20.304542 2026] [:error] [pid 11529:tid 140353298466560] [client 20.220.211.172:16293] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/wp-includes/blocks/details/"] [unique_id "apdk-C580fjDz1VV6ycG0AAAAco"]
[Tue Sep 01 18:51:20.507759 2026] [:error] [pid 6411:tid 140353206146816] [client 20.220.211.172:16656] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/wp-includes/blocks/audio/"] [unique_id "apdk-K-5XxGfLhlq8xlnbAAAANU"]
[Tue Sep 01 18:51:20.712455 2026] [:error] [pid 11529:tid 140353256503040] [client 20.220.211.172:16146] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/wp-temp.php"] [unique_id "apdk-C580fjDz1VV6ycG0gAAAc8"]
[Tue Sep 01 18:51:20.917430 2026] [:error] [pid 6411:tid 140353306859264] [client 20.220.211.172:16161] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/wp-admin/js/index.php"] [unique_id "apdk-K-5XxGfLhlq8xlnbQAAAMk"]
[Tue Sep 01 18:51:21.120116 2026] [:error] [pid 11529:tid 140353290073856] [client 20.220.211.172:16653] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/wp-includes/Requests/"] [unique_id "apdk-S580fjDz1VV6ycG1AAAAcs"]
[Tue Sep 01 18:51:21.321621 2026] [:error] [pid 11529:tid 140353452353280] [client 20.220.211.172:16180] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/wp-content/admin.php"] [unique_id "apdk-S580fjDz1VV6ycG1QAAAcA"]
[Tue Sep 01 18:51:21.523976 2026] [:error] [pid 28500:tid 140353214539520] [client 20.220.211.172:16179] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/wp-content/themes/index.php"] [unique_id "apdk-TQYUm0S3Gh9Jn9mfgAAAZQ"]
[Tue Sep 01 18:51:21.728806 2026] [:error] [pid 6091:tid 140353357215488] [client 20.220.211.172:16676] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/av.php"] [unique_id "apdk-ckVYOXruxV21N5W-wAAAIM"]
[Tue Sep 01 18:51:21.949476 2026] [:error] [pid 6411:tid 140353332037376] [client 20.220.211.172:16690] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/wp-content/themes/index.php"] [unique_id "apdk-a-5XxGfLhlq8xlnbgAAAMY"]
[Tue Sep 01 18:51:22.153471 2026] [:error] [pid 6090:tid 140353239717632] [client 20.220.211.172:16693] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/wp-blog.php"] [unique_id "apdk-rPf1VxWhFqgvWtUPgAAAFE"]
[Tue Sep 01 18:51:22.355533 2026] [:error] [pid 6411:tid 140353315251968] [client 20.220.211.172:16643] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/wp-includes/js/jquery/"] [unique_id "apdk-q-5XxGfLhlq8xlnbwAAAMg"]
[Tue Sep 01 18:51:22.556334 2026] [:error] [pid 6411:tid 140353222932224] [client 20.220.211.172:16261] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/cgi-bin/index.php"] [unique_id "apdk-q-5XxGfLhlq8xlncAAAANM"]
[Tue Sep 01 18:51:30.297496 2026] [:error] [pid 6090:tid 140353323644672] [client 20.220.211.172:16678] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/wp-includes/l10n/"] [unique_id "apdlArPf1VxWhFqgvWtUQQAAAEc"]
[Tue Sep 01 18:51:30.497247 2026] [:error] [pid 6090:tid 140353206146816] [client 20.220.211.172:16177] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/wp-manager.php"] [unique_id "apdlArPf1VxWhFqgvWtUQgAAAFU"]
[Tue Sep 01 18:51:30.697590 2026] [:error] [pid 6411:tid 140353214539520] [client 20.220.211.172:16287] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "apdlAq-5XxGfLhlq8xlneQAAANQ"]
[Tue Sep 01 18:51:30.931130 2026] [:error] [pid 6089:tid 140353256503040] [client 20.220.211.172:16659] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/cgi-bin/admin.php"] [unique_id "apdlApjeM2TaVrIYSc9yuAAAAA8"]
[Tue Sep 01 18:51:31.137170 2026] [:error] [pid 6411:tid 140353348822784] [client 20.220.211.172:16305] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/wp-content/"] [unique_id "apdlA6-5XxGfLhlq8xlnewAAAMQ"]
[Tue Sep 01 18:51:31.343562 2026] [:error] [pid 9194:tid 140353315251968] [client 20.220.211.172:16696] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/wp-admin/css/colors/blue/"] [unique_id "apdlA4dqWCmIAB5WEG-4ZQAAAQg"]
[Tue Sep 01 18:51:31.548246 2026] [:error] [pid 29615:tid 140353348822784] [client 20.220.211.172:16347] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/wp-includes/block-bindings/"] [unique_id "apdlA51PBa8fnDJM-t4IegAAAgQ"]
[Tue Sep 01 18:51:31.758357 2026] [:error] [pid 11529:tid 140353231324928] [client 20.220.211.172:15939] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/wp-includes/assets/"] [unique_id "apdlAy580fjDz1VV6ycG4QAAAdI"]
[Tue Sep 01 18:51:31.965867 2026] [:error] [pid 29615:tid 140353332037376] [client 20.220.211.172:16144] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "apdlA51PBa8fnDJM-t4IewAAAgY"]
[Tue Sep 01 18:51:32.167561 2026] [:error] [pid 6089:tid 140353248110336] [client 20.220.211.172:16698] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/wp-admin/network/plugins.php"] [unique_id "apdlBJjeM2TaVrIYSc9yuQAAABA"]
[Tue Sep 01 18:51:32.373418 2026] [:error] [pid 6089:tid 140353435567872] [client 20.220.211.172:16303] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/wp-admin/maint/index.php"] [unique_id "apdlBJjeM2TaVrIYSc9yugAAAAI"]
[Tue Sep 01 18:51:32.577301 2026] [:error] [pid 28194:tid 140353340430080] [client 20.220.211.172:16669] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/wp-includes/blocks/post-comments-form/"] [unique_id "apdlBAdz-EN0cDNAEVJ9HgAAAUU"]
[Tue Sep 01 18:51:32.787814 2026] [:error] [pid 9194:tid 140353264895744] [client 20.220.211.172:16278] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/qazwsx.php"] [unique_id "apdlBIdqWCmIAB5WEG-4ZwAAAQ4"]
[Tue Sep 01 18:51:32.991620 2026] [:error] [pid 28500:tid 140353357215488] [client 20.220.211.172:16694] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/cae2.2.php"] [unique_id "apdlBDQYUm0S3Gh9Jn9mhQAAAYM"]
[Tue Sep 01 18:51:33.198886 2026] [:error] [pid 6091:tid 140353298466560] [client 20.220.211.172:16302] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/b8.php"] [unique_id "apdlBckVYOXruxV21N5XAAAAAIo"]
[Tue Sep 01 18:51:33.404938 2026] [:error] [pid 6411:tid 140353273288448] [client 20.220.211.172:16181] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/xs.php"] [unique_id "apdlBa-5XxGfLhlq8xlnfAAAAM0"]
[Tue Sep 01 18:51:33.605923 2026] [:error] [pid 9194:tid 140353306859264] [client 20.220.211.172:16307] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/wp-content/uploads/"] [unique_id "apdlBYdqWCmIAB5WEG-4aAAAAQk"]
[Tue Sep 01 18:51:33.805793 2026] [:error] [pid 29615:tid 140353248110336] [client 20.220.211.172:16262] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/wp_blog_footer.php"] [unique_id "apdlBZ1PBa8fnDJM-t4IfgAAAhA"]
[Tue Sep 01 18:51:34.010170 2026] [:error] [pid 9194:tid 140353189361408] [client 20.220.211.172:16187] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/billzgs.php"] [unique_id "apdlBodqWCmIAB5WEG-4aQAAARc"]
[Tue Sep 01 18:51:34.214852 2026] [:error] [pid 9194:tid 140353290073856] [client 20.220.211.172:16174] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/ded.php"] [unique_id "apdlBodqWCmIAB5WEG-4agAAAQs"]
[Tue Sep 01 18:51:34.420540 2026] [:error] [pid 6090:tid 140353452353280] [client 20.220.211.172:16294] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/CAE-2.5.php"] [unique_id "apdlBrPf1VxWhFqgvWtURQAAAEA"]
[Tue Sep 01 18:51:34.625196 2026] [:error] [pid 28194:tid 140353239717632] [client 20.220.211.172:16290] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/0.php"] [unique_id "apdlBgdz-EN0cDNAEVJ9HwAAAVE"]
[Tue Sep 01 18:51:34.840663 2026] [:error] [pid 6411:tid 140353239717632] [client 20.220.211.172:16292] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/v4on3fxtoo5z5cq0yCdefault.php"] [unique_id "apdlBq-5XxGfLhlq8xlnfQAAANE"]
[Tue Sep 01 18:51:35.051295 2026] [:error] [pid 28194:tid 140353248110336] [client 20.220.211.172:16173] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/8xmlr9ommwdy3ro8dCdefault.php"] [unique_id "apdlBwdz-EN0cDNAEVJ9IAAAAVA"]
[Tue Sep 01 18:51:35.263808 2026] [:error] [pid 28500:tid 140353264895744] [client 20.220.211.172:16154] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/fms.php"] [unique_id "apdlBzQYUm0S3Gh9Jn9miAAAAY4"]
[Tue Sep 01 18:51:35.471410 2026] [:error] [pid 6411:tid 140353306859264] [client 20.220.211.172:16131] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/0day.php"] [unique_id "apdlB6-5XxGfLhlq8xlnfgAAAMk"]
[Tue Sep 01 18:51:35.676083 2026] [:error] [pid 6411:tid 140353298466560] [client 20.220.211.172:16167] [client 20.220.211.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/das.php"] [unique_id "apdlB6-5XxGfLhlq8xlnfwAAAMo"]
[Tue Sep 01 19:55:36.288047 2026] [:error] [pid 11529:tid 140353248110336] [client 43.155.140.157:50624] [client 43.155.140.157] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||menabern.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "menabern.com"] [uri "/"] [unique_id "apd0CC580fjDz1VV6ycUDwAAAdA"]
[Tue Sep 01 20:00:54.525046 2026] [:error] [pid 6089:tid 140353197754112] [client 175.178.110.121:44578] [client 175.178.110.121] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.menabern.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.menabern.com"] [uri "/"] [unique_id "apd1RpjeM2TaVrIYSc966QAAABY"]
[Tue Sep 01 20:56:08.901728 2026] [:error] [pid 28500:tid 140353189361408] [client 43.153.123.4:35442] [client 43.153.123.4] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.menabern.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.menabern.com"] [uri "/"] [unique_id "apeCODQYUm0S3Gh9Jn94ZQAAAZc"]
[Tue Sep 01 22:37:29.353504 2026] [proxy_fcgi:error] [pid 6091:tid 140353323644672] [client 159.203.231.58:45810] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 23:02:38.059158 2026] [proxy_fcgi:error] [pid 28500:tid 140353222932224] [client 193.84.108.250:38924] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 23:59:33.292278 2026] [:error] [pid 29615:tid 140353248110336] [client 43.153.135.208:43390] [client 43.153.135.208] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||menabern.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "menabern.com"] [uri "/"] [unique_id "apetNZ1PBa8fnDJM-t4mgAAAAhA"]
[Wed Sep 02 00:54:46.896491 2026] [proxy_fcgi:error] [pid 9194:tid 140353189361408] [client 216.73.160.198:25299] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 00:57:08.886328 2026] [:error] [pid 29615:tid 140353443960576] [client 101.33.81.73:48090] [client 101.33.81.73] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.menabern.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.menabern.com"] [uri "/"] [unique_id "ape6tJ1PBa8fnDJM-t4sBQAAAgE"]
[Wed Sep 02 01:24:03.005284 2026] [:error] [pid 28194:tid 140353435567872] [client 129.211.172.249:55982] [client 129.211.172.249] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||menabern.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "menabern.com"] [uri "/"] [unique_id "apfBAwdz-EN0cDNAEVLLHwAAAUI"]
[Wed Sep 02 02:43:10.916245 2026] [proxy_fcgi:error] [pid 29615:tid 140353315251968] [client 20.104.18.15:59875] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 02:43:11.017226 2026] [:error] [pid 29615:tid 140353323644672] [client 20.104.18.15:59875] [client 20.104.18.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?i)(^|/)(\\\\.env($|[/?])|\\\\.git/|aw\\\\.php$|adminfuns\\\\.php$|xmrlpc\\\\.php$|unzipper\\\\.php$|alfa\\\\.php$|alfanew\\\\.php$)" at REQUEST_URI. [file "/usr/local/apache/conf.d/zzz-security-hardening.conf"] [line "26"] [id "110001"] [msg "CWP-Hardening: Scanner/webshell probe blocked"] [hostname "menabern.com"] [uri "/adminfuns.php"] [unique_id "apfTj51PBa8fnDJM-t49qwAAAgc"]
[Wed Sep 02 02:43:11.222927 2026] [proxy_fcgi:error] [pid 6089:tid 140353189361408] [client 20.104.18.15:65102] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 02:43:11.327446 2026] [proxy_fcgi:error] [pid 6089:tid 140353281681152] [client 20.104.18.15:65102] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 02:43:11.432572 2026] [proxy_fcgi:error] [pid 6089:tid 140353306859264] [client 20.104.18.15:65102] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 02:43:11.536894 2026] [proxy_fcgi:error] [pid 6089:tid 140353452353280] [client 20.104.18.15:65102] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 02:43:11.644318 2026] [proxy_fcgi:error] [pid 6089:tid 140353206146816] [client 20.104.18.15:65102] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 02:43:11.751325 2026] [proxy_fcgi:error] [pid 6089:tid 140353298466560] [client 20.104.18.15:65102] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 02:43:11.857004 2026] [proxy_fcgi:error] [pid 6089:tid 140353443960576] [client 20.104.18.15:65102] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 02:43:11.961999 2026] [proxy_fcgi:error] [pid 6089:tid 140353435567872] [client 20.104.18.15:65102] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 02:43:12.066081 2026] [proxy_fcgi:error] [pid 6089:tid 140353357215488] [client 20.104.18.15:65102] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 02:43:12.170831 2026] [proxy_fcgi:error] [pid 6089:tid 140353323644672] [client 20.104.18.15:65102] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 02:43:12.275851 2026] [proxy_fcgi:error] [pid 6089:tid 140353256503040] [client 20.104.18.15:65102] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 02:43:12.384079 2026] [proxy_fcgi:error] [pid 6089:tid 140353248110336] [client 20.104.18.15:65102] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 02:43:12.490107 2026] [proxy_fcgi:error] [pid 6089:tid 140353290073856] [client 20.104.18.15:65102] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 02:43:12.597961 2026] [proxy_fcgi:error] [pid 6089:tid 140353315251968] [client 20.104.18.15:65102] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 02:43:12.704169 2026] [proxy_fcgi:error] [pid 6089:tid 140353348822784] [client 20.104.18.15:65102] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 02:43:12.810050 2026] [proxy_fcgi:error] [pid 6089:tid 140353340430080] [client 20.104.18.15:65102] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 02:43:12.915544 2026] [proxy_fcgi:error] [pid 6089:tid 140353214539520] [client 20.104.18.15:65102] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 02:43:13.020466 2026] [proxy_fcgi:error] [pid 6089:tid 140353273288448] [client 20.104.18.15:65102] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 02:43:13.128245 2026] [proxy_fcgi:error] [pid 6089:tid 140353180968704] [client 20.104.18.15:65102] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 02:43:13.234263 2026] [proxy_fcgi:error] [pid 6089:tid 140353332037376] [client 20.104.18.15:65102] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 02:43:13.339388 2026] [proxy_fcgi:error] [pid 6089:tid 140353222932224] [client 20.104.18.15:65102] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 02:43:13.445524 2026] [proxy_fcgi:error] [pid 6089:tid 140353197754112] [client 20.104.18.15:65102] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 02:43:13.550684 2026] [proxy_fcgi:error] [pid 6089:tid 140353231324928] [client 20.104.18.15:65102] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 02:43:13.656006 2026] [proxy_fcgi:error] [pid 6089:tid 140353239717632] [client 20.104.18.15:65102] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 02:43:13.656169 2026] [:error] [pid 6089:tid 140353239717632] [client 20.104.18.15:65102] [client 20.104.18.15] ModSecurity: Warning. Operator GT matched 25 at IP:scan_404_count. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "11"] [id "9000204"] [msg "Scanner detected - blocking IP 1h"] [tag "scanner-detect"] [hostname "menabern.com"] [uri "/inso.php"] [unique_id "apfTkZjeM2TaVrIYSc-7aQAAABE"]
[Wed Sep 02 02:43:13.756611 2026] [:error] [pid 6089:tid 140353264895744] [client 20.104.18.15:65102] [client 20.104.18.15] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/puc.php"] [unique_id "apfTkZjeM2TaVrIYSc-7agAAAA4"]
[Wed Sep 02 02:43:13.962362 2026] [:error] [pid 6090:tid 140353222932224] [client 20.104.18.15:59855] [client 20.104.18.15] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/19.php"] [unique_id "apfTkbPf1VxWhFqgvWuBrAAAAFM"]
[Wed Sep 02 02:43:14.164712 2026] [:error] [pid 29615:tid 140353180968704] [client 20.104.18.15:59874] [client 20.104.18.15] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/b8.php"] [unique_id "apfTkp1PBa8fnDJM-t49rAAAAhg"]
[Wed Sep 02 02:43:14.366617 2026] [:error] [pid 29615:tid 140353214539520] [client 20.104.18.15:59849] [client 20.104.18.15] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/133.php"] [unique_id "apfTkp1PBa8fnDJM-t49rQAAAhQ"]
[Wed Sep 02 02:43:14.570204 2026] [:error] [pid 29730:tid 140353348822784] [client 20.104.18.15:59880] [client 20.104.18.15] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/1xmomo.php"] [unique_id "apfTkkKKsXadAWpiFbtNpAAAAkQ"]
[Wed Sep 02 02:43:14.772465 2026] [:error] [pid 28194:tid 140353273288448] [client 20.104.18.15:59890] [client 20.104.18.15] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/mosty.php"] [unique_id "apfTkgdz-EN0cDNAEVLTEQAAAU0"]
[Wed Sep 02 02:43:14.974730 2026] [:error] [pid 6090:tid 140353435567872] [client 20.104.18.15:59869] [client 20.104.18.15] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/blurbs.php"] [unique_id "apfTkrPf1VxWhFqgvWuBrQAAAEI"]
[Wed Sep 02 02:43:15.175478 2026] [:error] [pid 6090:tid 140353357215488] [client 20.104.18.15:59883] [client 20.104.18.15] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/h.php"] [unique_id "apfTk7Pf1VxWhFqgvWuBrgAAAEM"]
[Wed Sep 02 02:43:15.377184 2026] [:error] [pid 11529:tid 140353281681152] [client 20.104.18.15:41702] [client 20.104.18.15] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/ano.php"] [unique_id "apfTky580fjDz1VV6yc-7wAAAcw"]
[Wed Sep 02 02:43:15.579618 2026] [:error] [pid 29615:tid 140353435567872] [client 20.104.18.15:59882] [client 20.104.18.15] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/ai.php"] [unique_id "apfTk51PBa8fnDJM-t49rgAAAgI"]
[Wed Sep 02 02:43:15.780471 2026] [:error] [pid 29615:tid 140353222932224] [client 20.104.18.15:59899] [client 20.104.18.15] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/sf.php"] [unique_id "apfTk51PBa8fnDJM-t49rwAAAhM"]
[Wed Sep 02 02:43:15.979602 2026] [:error] [pid 28500:tid 140353180968704] [client 20.104.18.15:65100] [client 20.104.18.15] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/xx.php"] [unique_id "apfTkzQYUm0S3Gh9Jn-kEwAAAZg"]
[Wed Sep 02 02:43:16.181364 2026] [:error] [pid 6089:tid 140353452353280] [client 20.104.18.15:59885] [client 20.104.18.15] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/uwu.php"] [unique_id "apfTlJjeM2TaVrIYSc-7bAAAAAA"]
[Wed Sep 02 02:43:16.381222 2026] [:error] [pid 11529:tid 140353222932224] [client 20.104.18.15:59873] [client 20.104.18.15] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/signon.php"] [unique_id "apfTlC580fjDz1VV6yc-8AAAAdM"]
[Wed Sep 02 02:43:16.584363 2026] [:error] [pid 6089:tid 140353298466560] [client 20.104.18.15:59845] [client 20.104.18.15] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/file61.php"] [unique_id "apfTlJjeM2TaVrIYSc-7bQAAAAo"]
[Wed Sep 02 02:43:16.787883 2026] [:error] [pid 6090:tid 140353248110336] [client 20.104.18.15:65114] [client 20.104.18.15] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/copypaths.php"] [unique_id "apfTlLPf1VxWhFqgvWuBrwAAAFA"]
[Wed Sep 02 02:43:16.990262 2026] [:error] [pid 28500:tid 140353206146816] [client 20.104.18.15:65095] [client 20.104.18.15] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/bless6.php"] [unique_id "apfTlDQYUm0S3Gh9Jn-kFAAAAZU"]
[Wed Sep 02 02:43:17.192714 2026] [:error] [pid 29615:tid 140353357215488] [client 20.104.18.15:59857] [client 20.104.18.15] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/special.php"] [unique_id "apfTlZ1PBa8fnDJM-t49sAAAAgM"]
[Wed Sep 02 02:43:17.392905 2026] [:error] [pid 6411:tid 140353357215488] [client 20.104.18.15:65107] [client 20.104.18.15] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/fz.php"] [unique_id "apfTla-5XxGfLhlq8xmWdAAAAMM"]
[Wed Sep 02 02:43:17.593904 2026] [:error] [pid 9194:tid 140353256503040] [client 20.104.18.15:59879] [client 20.104.18.15] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/clque.php"] [unique_id "apfTlYdqWCmIAB5WEG_w1gAAAQ8"]
[Wed Sep 02 02:43:17.796191 2026] [:error] [pid 6090:tid 140353323644672] [client 20.104.18.15:65125] [client 20.104.18.15] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/nano.php"] [unique_id "apfTlbPf1VxWhFqgvWuBsAAAAEc"]
[Wed Sep 02 02:43:17.999610 2026] [:error] [pid 6089:tid 140353323644672] [client 20.104.18.15:59903] [client 20.104.18.15] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/.mopj.php"] [unique_id "apfTlZjeM2TaVrIYSc-7bgAAAAc"]
[Wed Sep 02 02:43:18.202402 2026] [:error] [pid 29615:tid 140353197754112] [client 20.104.18.15:59887] [client 20.104.18.15] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/bengi.php"] [unique_id "apfTlp1PBa8fnDJM-t49sgAAAhY"]
[Wed Sep 02 02:43:18.403897 2026] [:error] [pid 9194:tid 140353306859264] [client 20.104.18.15:65118] [client 20.104.18.15] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/file2.php"] [unique_id "apfTlodqWCmIAB5WEG_w2AAAAQk"]
[Wed Sep 02 02:43:18.604161 2026] [:error] [pid 9194:tid 140353281681152] [client 20.104.18.15:41731] [client 20.104.18.15] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/gm.php"] [unique_id "apfTlodqWCmIAB5WEG_w2QAAAQw"]
[Wed Sep 02 02:43:18.804703 2026] [:error] [pid 28500:tid 140353231324928] [client 20.104.18.15:41678] [client 20.104.18.15] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/ws55.php"] [unique_id "apfTljQYUm0S3Gh9Jn-kFQAAAZI"]
[Wed Sep 02 02:43:19.005147 2026] [:error] [pid 9194:tid 140353197754112] [client 20.104.18.15:65096] [client 20.104.18.15] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/m.php"] [unique_id "apfTl4dqWCmIAB5WEG_w2wAAARY"]
[Wed Sep 02 02:43:19.206903 2026] [:error] [pid 9194:tid 140353323644672] [client 20.104.18.15:65108] [client 20.104.18.15] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/33.php"] [unique_id "apfTl4dqWCmIAB5WEG_w3QAAAQc"]
[Wed Sep 02 02:43:19.409784 2026] [:error] [pid 6091:tid 140353273288448] [client 20.104.18.15:59894] [client 20.104.18.15] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/packed.php"] [unique_id "apfTl8kVYOXruxV21N6b8gAAAI0"]
[Wed Sep 02 02:43:19.609731 2026] [:error] [pid 9194:tid 140353452353280] [client 20.104.18.15:59895] [client 20.104.18.15] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-content/uploads/"] [unique_id "apfTl4dqWCmIAB5WEG_w3gAAAQA"]
[Wed Sep 02 02:43:19.810197 2026] [:error] [pid 28500:tid 140353290073856] [client 20.104.18.15:59864] [client 20.104.18.15] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/w.php"] [unique_id "apfTlzQYUm0S3Gh9Jn-kFwAAAYs"]
[Wed Sep 02 02:43:20.012083 2026] [:error] [pid 11529:tid 140353452353280] [client 20.104.18.15:65117] [client 20.104.18.15] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/ccc.php"] [unique_id "apfTmC580fjDz1VV6yc-8gAAAcA"]
[Wed Sep 02 02:43:20.212288 2026] [:error] [pid 29615:tid 140353281681152] [client 20.104.18.15:59887] [client 20.104.18.15] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/file15.php"] [unique_id "apfTmJ1PBa8fnDJM-t49swAAAgw"]
[Wed Sep 02 02:43:20.412670 2026] [:error] [pid 28500:tid 140353214539520] [client 20.104.18.15:59853] [client 20.104.18.15] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/jp.php"] [unique_id "apfTmDQYUm0S3Gh9Jn-kGAAAAZQ"]
[Wed Sep 02 02:43:20.620763 2026] [:error] [pid 28500:tid 140353306859264] [client 20.104.18.15:65088] [client 20.104.18.15] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/f35.php"] [unique_id "apfTmDQYUm0S3Gh9Jn-kGQAAAYk"]
[Wed Sep 02 02:43:20.819482 2026] [:error] [pid 6090:tid 140353315251968] [client 20.104.18.15:65113] [client 20.104.18.15] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/shiny.php"] [unique_id "apfTmLPf1VxWhFqgvWuBswAAAEg"]
[Wed Sep 02 02:43:21.027526 2026] [:error] [pid 6091:tid 140353357215488] [client 20.104.18.15:59844] [client 20.104.18.15] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/images.php"] [unique_id "apfTmckVYOXruxV21N6b8wAAAIM"]
[Wed Sep 02 02:43:21.231007 2026] [:error] [pid 6090:tid 140353264895744] [client 20.104.18.15:59897] [client 20.104.18.15] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/82.php"] [unique_id "apfTmbPf1VxWhFqgvWuBtAAAAE4"]
[Wed Sep 02 02:43:21.432796 2026] [:error] [pid 11529:tid 140353323644672] [client 20.104.18.15:59856] [client 20.104.18.15] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/files.php/new.php"] [unique_id "apfTmS580fjDz1VV6yc-8wAAAcc"]
[Wed Sep 02 02:43:21.633508 2026] [:error] [pid 6090:tid 140353340430080] [client 20.104.18.15:65104] [client 20.104.18.15] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/mghnhykio.php/new.php"] [unique_id "apfTmbPf1VxWhFqgvWuBtQAAAEU"]
[Wed Sep 02 02:43:21.836690 2026] [:error] [pid 9194:tid 140353256503040] [client 20.104.18.15:59861] [client 20.104.18.15] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/admin.php/nope.php"] [unique_id "apfTmYdqWCmIAB5WEG_w3wAAAQ8"]
[Wed Sep 02 02:43:22.037694 2026] [:error] [pid 28194:tid 140353340430080] [client 20.104.18.15:59850] [client 20.104.18.15] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/lib.php/new.php"] [unique_id "apfTmgdz-EN0cDNAEVLTFAAAAUU"]
[Wed Sep 02 02:43:22.238282 2026] [:error] [pid 6090:tid 140353443960576] [client 20.104.18.15:59858] [client 20.104.18.15] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/info.php/new.php"] [unique_id "apfTmrPf1VxWhFqgvWuBtgAAAEE"]
[Wed Sep 02 02:43:22.439468 2026] [:error] [pid 6090:tid 140353206146816] [client 20.104.18.15:59877] [client 20.104.18.15] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/db.php/new.php"] [unique_id "apfTmrPf1VxWhFqgvWuBtwAAAFU"]
[Wed Sep 02 02:43:22.644028 2026] [:error] [pid 28500:tid 140353315251968] [client 20.104.18.15:65110] [client 20.104.18.15] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/kuda.php"] [unique_id "apfTmjQYUm0S3Gh9Jn-kGgAAAYg"]
[Wed Sep 02 02:43:22.849776 2026] [:error] [pid 28500:tid 140353357215488] [client 20.104.18.15:65091] [client 20.104.18.15] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/sure.php"] [unique_id "apfTmjQYUm0S3Gh9Jn-kGwAAAYM"]
[Wed Sep 02 02:43:23.051693 2026] [:error] [pid 9194:tid 140353206146816] [client 20.104.18.15:65134] [client 20.104.18.15] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/gray.php"] [unique_id "apfTm4dqWCmIAB5WEG_w4AAAARU"]
[Wed Sep 02 02:43:23.256291 2026] [:error] [pid 29730:tid 140353357215488] [client 20.104.18.15:65093] [client 20.104.18.15] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/puki.php"] [unique_id "apfTm0KKsXadAWpiFbtNqAAAAkM"]
[Wed Sep 02 02:43:23.457777 2026] [:error] [pid 28500:tid 140353435567872] [client 20.104.18.15:65136] [client 20.104.18.15] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/sonic.php"] [unique_id "apfTmzQYUm0S3Gh9Jn-kHAAAAYI"]
[Wed Sep 02 02:43:23.658802 2026] [:error] [pid 28500:tid 140353256503040] [client 20.104.18.15:59863] [client 20.104.18.15] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/pop.php"] [unique_id "apfTmzQYUm0S3Gh9Jn-kHQAAAY8"]
[Wed Sep 02 02:43:23.862809 2026] [:error] [pid 28500:tid 140353197754112] [client 20.104.18.15:59893] [client 20.104.18.15] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/503.php"] [unique_id "apfTmzQYUm0S3Gh9Jn-kHgAAAZY"]
[Wed Sep 02 02:43:24.064902 2026] [:error] [pid 28500:tid 140353206146816] [client 20.104.18.15:59896] [client 20.104.18.15] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/fxp.php"] [unique_id "apfTnDQYUm0S3Gh9Jn-kHwAAAZU"]
[Wed Sep 02 02:43:24.267301 2026] [:error] [pid 28500:tid 140353231324928] [client 20.104.18.15:59847] [client 20.104.18.15] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/vv.php"] [unique_id "apfTnDQYUm0S3Gh9Jn-kIAAAAZI"]
[Wed Sep 02 02:43:24.468537 2026] [:error] [pid 11529:tid 140353264895744] [client 20.104.18.15:59871] [client 20.104.18.15] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/bossu.php"] [unique_id "apfTnC580fjDz1VV6yc-9AAAAc4"]
[Wed Sep 02 02:43:24.668385 2026] [:error] [pid 9194:tid 140353435567872] [client 20.104.18.15:65128] [client 20.104.18.15] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/504.php"] [unique_id "apfTnIdqWCmIAB5WEG_w4QAAAQI"]
[Wed Sep 02 02:43:24.878766 2026] [:error] [pid 6090:tid 140353222932224] [client 20.104.18.15:59840] [client 20.104.18.15] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/nice.php"] [unique_id "apfTnLPf1VxWhFqgvWuBuAAAAFM"]
[Wed Sep 02 02:43:25.080001 2026] [:error] [pid 6091:tid 140353239717632] [client 20.104.18.15:41705] [client 20.104.18.15] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/beence.php"] [unique_id "apfTnckVYOXruxV21N6b9gAAAJE"]
[Wed Sep 02 02:43:25.281116 2026] [:error] [pid 28194:tid 140353239717632] [client 20.104.18.15:65131] [client 20.104.18.15] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/222.php"] [unique_id "apfTnQdz-EN0cDNAEVLTFQAAAVE"]
[Wed Sep 02 02:43:25.481525 2026] [:error] [pid 29730:tid 140353452353280] [client 20.104.18.15:65145] [client 20.104.18.15] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/ops.php"] [unique_id "apfTnUKKsXadAWpiFbtNqQAAAkA"]
[Wed Sep 02 02:43:25.683051 2026] [:error] [pid 9194:tid 140353189361408] [client 20.104.18.15:41666] [client 20.104.18.15] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/4PJcpMFsD8B.php"] [unique_id "apfTnYdqWCmIAB5WEG_w4gAAARc"]
[Wed Sep 02 02:43:25.891238 2026] [:error] [pid 29615:tid 140353452353280] [client 20.104.18.15:65116] [client 20.104.18.15] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/3PJcpMFsD8B.php"] [unique_id "apfTnZ1PBa8fnDJM-t49tAAAAgA"]
[Wed Sep 02 02:43:26.093930 2026] [:error] [pid 6091:tid 140353443960576] [client 20.104.18.15:59884] [client 20.104.18.15] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/f.php"] [unique_id "apfTnskVYOXruxV21N6b-AAAAIE"]
[Wed Sep 02 02:43:26.296179 2026] [:error] [pid 28500:tid 140353214539520] [client 20.104.18.15:65106] [client 20.104.18.15] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/1dfcd2d08f.php"] [unique_id "apfTnjQYUm0S3Gh9Jn-kIQAAAZQ"]
[Wed Sep 02 03:04:57.834126 2026] [proxy_fcgi:error] [pid 29615:tid 140353357215488] [client 52.162.202.106:50209] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 03:04:59.909226 2026] [proxy_fcgi:error] [pid 29615:tid 140353248110336] [client 52.162.202.106:64021] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 03:05:11.644389 2026] [proxy_fcgi:error] [pid 29615:tid 140353248110336] [client 52.162.202.106:57896] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 03:05:13.944209 2026] [proxy_fcgi:error] [pid 9194:tid 140353323644672] [client 52.162.202.106:53010] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 03:05:18.155504 2026] [proxy_fcgi:error] [pid 6091:tid 140353357215488] [client 52.162.202.106:62389] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 03:05:22.186225 2026] [proxy_fcgi:error] [pid 9194:tid 140353189361408] [client 52.162.202.106:51954] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 03:05:26.180148 2026] [proxy_fcgi:error] [pid 6090:tid 140353231324928] [client 52.162.202.106:54812] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 03:05:28.200086 2026] [proxy_fcgi:error] [pid 28194:tid 140353231324928] [client 52.162.202.106:63717] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 03:05:33.181803 2026] [proxy_fcgi:error] [pid 6091:tid 140353264895744] [client 52.162.202.106:50049] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 03:05:45.175700 2026] [proxy_fcgi:error] [pid 28194:tid 140353248110336] [client 52.162.202.106:55664] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 03:05:45.175838 2026] [:error] [pid 28194:tid 140353248110336] [client 52.162.202.106:55664] [client 52.162.202.106] ModSecurity: Warning. Operator GT matched 25 at IP:scan_404_count. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "11"] [id "9000204"] [msg "Scanner detected - blocking IP 1h"] [tag "scanner-detect"] [hostname "menabern.com"] [uri "/file.php"] [unique_id "apfY2Qdz-EN0cDNAEVLUaQAAAVA"]
[Wed Sep 02 03:05:47.175984 2026] [:error] [pid 9194:tid 140353222932224] [client 52.162.202.106:60668] [client 52.162.202.106] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "apfY24dqWCmIAB5WEG_1eAAAARM"]
[Wed Sep 02 03:05:49.084925 2026] [:error] [pid 6411:tid 140353435567872] [client 52.162.202.106:57459] [client 52.162.202.106] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-content/plugins/fix/wp.php"] [unique_id "apfY3a-5XxGfLhlq8xmX5gAAAMI"]
[Wed Sep 02 03:05:51.044847 2026] [:error] [pid 9194:tid 140353281681152] [client 52.162.202.106:55817] [client 52.162.202.106] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/ioxi-o.php"] [unique_id "apfY34dqWCmIAB5WEG_1fQAAAQw"]
[Wed Sep 02 03:05:53.001225 2026] [:error] [pid 6091:tid 140353435567872] [client 52.162.202.106:53965] [client 52.162.202.106] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/txets.php"] [unique_id "apfY4ckVYOXruxV21N6cfAAAAII"]
[Wed Sep 02 03:05:55.074520 2026] [:error] [pid 29730:tid 140353256503040] [client 52.162.202.106:50008] [client 52.162.202.106] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-content/themes/txets.php"] [unique_id "apfY40KKsXadAWpiFbtP1AAAAk8"]
[Wed Sep 02 03:05:57.142160 2026] [:error] [pid 6089:tid 140353306859264] [client 52.162.202.106:57627] [client 52.162.202.106] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-admin/txets.php"] [unique_id "apfY5ZjeM2TaVrIYSc-84wAAAAk"]
[Wed Sep 02 03:05:59.189551 2026] [:error] [pid 6091:tid 140353214539520] [client 52.162.202.106:58640] [client 52.162.202.106] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-includes/txets.php"] [unique_id "apfY58kVYOXruxV21N6cfQAAAJQ"]
[Wed Sep 02 03:06:02.356935 2026] [:error] [pid 29730:tid 140353340430080] [client 52.162.202.106:49929] [client 52.162.202.106] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/goods.php"] [unique_id "apfY6kKKsXadAWpiFbtP2gAAAkU"]
[Wed Sep 02 03:06:05.730443 2026] [:error] [pid 29730:tid 140353214539520] [client 52.162.202.106:50338] [client 52.162.202.106] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-editor.php"] [unique_id "apfY7UKKsXadAWpiFbtP4gAAAlQ"]
[Wed Sep 02 03:06:08.170370 2026] [:error] [pid 6089:tid 140353435567872] [client 52.162.202.106:50736] [client 52.162.202.106] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/lufix.php"] [unique_id "apfY8JjeM2TaVrIYSc-85gAAAAI"]
[Wed Sep 02 03:06:10.102325 2026] [:error] [pid 28194:tid 140353348822784] [client 52.162.202.106:60049] [client 52.162.202.106] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/style.php"] [unique_id "apfY8gdz-EN0cDNAEVLUgQAAAUQ"]
[Wed Sep 02 03:51:22.178137 2026] [proxy_fcgi:error] [pid 13062:tid 140628000192256] [client 62.60.130.215:58798] AH01071: Got error 'Primary script unknown', referer: https://wordpress.org/
[Wed Sep 02 03:51:22.629230 2026] [proxy_fcgi:error] [pid 13378:tid 140628084119296] [client 62.60.130.215:49375] AH01071: Got error 'Primary script unknown', referer: https://wordpress.org/
[Wed Sep 02 04:03:18.336848 2026] [:error] [pid 13378:tid 140627975014144] [client 43.131.253.14:52358] [client 43.131.253.14] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||menabern.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "menabern.com"] [uri "/"] [unique_id "apfmVhZ2kcN90LY1LU_pvwAAARY"]
[Wed Sep 02 04:36:47.613243 2026] [proxy_fcgi:error] [pid 24762:tid 140627991799552] [client 20.48.250.41:61232] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 04:36:47.740979 2026] [proxy_fcgi:error] [pid 24762:tid 140627966621440] [client 20.48.250.41:61232] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 04:36:47.859984 2026] [proxy_fcgi:error] [pid 24762:tid 140628016977664] [client 20.48.250.41:61232] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 04:36:48.184358 2026] [proxy_fcgi:error] [pid 24762:tid 140627958228736] [client 20.48.250.41:61232] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 04:36:48.286387 2026] [proxy_fcgi:error] [pid 24762:tid 140628210685696] [client 20.48.250.41:61232] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 04:36:48.388425 2026] [proxy_fcgi:error] [pid 24762:tid 140627975014144] [client 20.48.250.41:61232] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 04:36:48.490313 2026] [proxy_fcgi:error] [pid 24762:tid 140628185507584] [client 20.48.250.41:61232] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 04:36:48.715735 2026] [proxy_fcgi:error] [pid 24762:tid 140628092512000] [client 20.48.250.41:61232] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 04:36:48.823479 2026] [proxy_fcgi:error] [pid 24762:tid 140628193900288] [client 20.48.250.41:61232] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 04:36:48.927892 2026] [proxy_fcgi:error] [pid 24762:tid 140628219078400] [client 20.48.250.41:61232] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 04:36:49.030285 2026] [proxy_fcgi:error] [pid 24762:tid 140628177114880] [client 20.48.250.41:61232] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 04:36:49.259391 2026] [proxy_fcgi:error] [pid 24762:tid 140628042155776] [client 20.48.250.41:61232] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 04:36:49.362114 2026] [proxy_fcgi:error] [pid 24762:tid 140628100904704] [client 20.48.250.41:61232] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 04:36:49.474548 2026] [proxy_fcgi:error] [pid 24762:tid 140628050548480] [client 20.48.250.41:61232] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 04:36:49.718648 2026] [proxy_fcgi:error] [pid 24762:tid 140627983406848] [client 20.48.250.41:61232] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 04:36:49.826378 2026] [proxy_fcgi:error] [pid 24762:tid 140628202292992] [client 20.48.250.41:61232] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 04:36:49.929335 2026] [proxy_fcgi:error] [pid 24762:tid 140627958228736] [client 20.48.250.41:61232] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 04:36:50.134140 2026] [proxy_fcgi:error] [pid 24762:tid 140628185507584] [client 20.48.250.41:61232] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 04:36:50.236508 2026] [:error] [pid 24762:tid 140628058941184] [client 20.48.250.41:61232] [client 20.48.250.41] ModSecurity: Warning. Operator GT matched 25 at IP:scan_404_count. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "11"] [id "9000204"] [msg "Scanner detected - blocking IP 1h"] [tag "scanner-detect"] [hostname "menabern.com"] [uri "/wp-content/aws.php"] [unique_id "apfuMkvOhgfvInIzUv8oegAAAAw"]
[Wed Sep 02 04:36:50.335063 2026] [:error] [pid 24762:tid 140628092512000] [client 20.48.250.41:61232] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/info_php.php"] [unique_id "apfuMkvOhgfvInIzUv8oewAAAAg"]
[Wed Sep 02 04:36:51.570865 2026] [:error] [pid 13378:tid 140628058941184] [client 20.48.250.41:61187] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/error.php"] [unique_id "apfuMxZ2kcN90LY1LU_1ngAAAQw"]
[Wed Sep 02 04:36:52.792570 2026] [:error] [pid 13378:tid 140628042155776] [client 20.48.250.41:61190] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/sallu.php"] [unique_id "apfuNBZ2kcN90LY1LU_1oAAAAQ4"]
[Wed Sep 02 04:36:54.007141 2026] [:error] [pid 24762:tid 140628042155776] [client 20.48.250.41:60482] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/xa.php"] [unique_id "apfuNkvOhgfvInIzUv8ofwAAAA4"]
[Wed Sep 02 04:36:55.204030 2026] [:error] [pid 24762:tid 140628050548480] [client 20.48.250.41:61229] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/palsy.php"] [unique_id "apfuN0vOhgfvInIzUv8ogQAAAA0"]
[Wed Sep 02 04:36:56.412013 2026] [:error] [pid 13065:tid 140628075726592] [client 20.48.250.41:61216] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/bgymj.php"] [unique_id "apfuOMLa7rlBbtzQAsjt8AAAAMo"]
[Wed Sep 02 04:36:57.644771 2026] [:error] [pid 13378:tid 140628008584960] [client 20.48.250.41:61257] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/tx79.php"] [unique_id "apfuORZ2kcN90LY1LU_1owAAARI"]
[Wed Sep 02 04:36:58.867586 2026] [:error] [pid 13378:tid 140628050548480] [client 20.48.250.41:61199] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/an7.php"] [unique_id "apfuOhZ2kcN90LY1LU_1pQAAAQ0"]
[Wed Sep 02 04:37:00.087182 2026] [:error] [pid 24762:tid 140628185507584] [client 20.48.250.41:61193] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "apfuPEvOhgfvInIzUv8ohwAAAAU"]
[Wed Sep 02 04:37:01.297625 2026] [:error] [pid 13064:tid 140628219078400] [client 20.48.250.41:61227] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/4563.php"] [unique_id "apfuPWO4FfejT6BQfS4gRwAAAIE"]
[Wed Sep 02 04:37:02.524393 2026] [:error] [pid 24762:tid 140628219078400] [client 20.48.250.41:61281] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/about/function.php"] [unique_id "apfuPkvOhgfvInIzUv8oigAAAAE"]
[Wed Sep 02 04:37:03.729029 2026] [:error] [pid 13378:tid 140627958228736] [client 20.48.250.41:61200] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/hmcyt.php"] [unique_id "apfuPxZ2kcN90LY1LU_1qwAAARg"]
[Wed Sep 02 04:37:04.932028 2026] [:error] [pid 13378:tid 140628042155776] [client 20.48.250.41:61262] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/tithings.php"] [unique_id "apfuQBZ2kcN90LY1LU_1rQAAAQ4"]
[Wed Sep 02 04:37:06.153583 2026] [:error] [pid 24762:tid 140628100904704] [client 20.48.250.41:61212] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/ccc.php"] [unique_id "apfuQkvOhgfvInIzUv8ojwAAAAc"]
[Wed Sep 02 04:37:07.354988 2026] [:error] [pid 24762:tid 140627966621440] [client 20.48.250.41:60505] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/gg.php"] [unique_id "apfuQ0vOhgfvInIzUv8okwAAABc"]
[Wed Sep 02 04:37:08.563090 2026] [:error] [pid 13378:tid 140628185507584] [client 20.48.250.41:61202] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/nucqsqeg.php"] [unique_id "apfuRBZ2kcN90LY1LU_1rwAAAQU"]
[Wed Sep 02 04:37:09.774902 2026] [:error] [pid 24762:tid 140628067333888] [client 20.48.250.41:61259] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "apfuRUvOhgfvInIzUv8omQAAAAs"]
[Wed Sep 02 04:37:10.988312 2026] [:error] [pid 13065:tid 140628227471104] [client 20.48.250.41:61253] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/d12.php"] [unique_id "apfuRsLa7rlBbtzQAsjt8QAAAMA"]
[Wed Sep 02 04:37:12.218275 2026] [:error] [pid 13378:tid 140628050548480] [client 20.48.250.41:61286] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/erty.php"] [unique_id "apfuSBZ2kcN90LY1LU_1sAAAAQ0"]
[Wed Sep 02 04:37:13.422228 2026] [:error] [pid 13064:tid 140628210685696] [client 20.48.250.41:61234] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-admin/includes/about.php"] [unique_id "apfuSWO4FfejT6BQfS4gSwAAAII"]
[Wed Sep 02 04:37:14.636706 2026] [:error] [pid 24762:tid 140628075726592] [client 20.48.250.41:61306] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/BDKR28WP.php"] [unique_id "apfuSkvOhgfvInIzUv8ooQAAAAo"]
[Wed Sep 02 04:37:15.858843 2026] [:error] [pid 13378:tid 140628210685696] [client 20.48.250.41:61274] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/otuz1.php"] [unique_id "apfuSxZ2kcN90LY1LU_1swAAAQI"]
[Wed Sep 02 04:37:17.059687 2026] [:error] [pid 13064:tid 140627958228736] [client 20.48.250.41:61184] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/kdrex.php"] [unique_id "apfuTWO4FfejT6BQfS4gTgAAAJg"]
[Wed Sep 02 04:37:26.343784 2026] [:error] [pid 13378:tid 140628075726592] [client 20.48.250.41:61236] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/ar/mgsl.php"] [unique_id "apfuVhZ2kcN90LY1LU_1uAAAAQo"]
[Wed Sep 02 04:37:27.551154 2026] [:error] [pid 24762:tid 140627983406848] [client 20.48.250.41:61224] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/re.php"] [unique_id "apfuV0vOhgfvInIzUv8ouAAAABU"]
[Wed Sep 02 04:37:28.799406 2026] [:error] [pid 13065:tid 140628084119296] [client 20.48.250.41:61204] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/cilus.php"] [unique_id "apfuWMLa7rlBbtzQAsjt9gAAAMk"]
[Wed Sep 02 04:37:30.015702 2026] [:error] [pid 13062:tid 140628185507584] [client 20.48.250.41:61261] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/nguoj.php"] [unique_id "apfuWs83Jzm6fcsTqfE0AQAAAEU"]
[Wed Sep 02 04:37:31.237178 2026] [:error] [pid 13378:tid 140628092512000] [client 20.48.250.41:60498] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/file59.php"] [unique_id "apfuWxZ2kcN90LY1LU_1uQAAAQg"]
[Wed Sep 02 04:37:32.448030 2026] [:error] [pid 13065:tid 140628075726592] [client 20.48.250.41:60511] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/edd.php"] [unique_id "apfuXMLa7rlBbtzQAsjt9wAAAMo"]
[Wed Sep 02 04:37:33.664364 2026] [:error] [pid 13062:tid 140628210685696] [client 20.48.250.41:61271] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-content/ioxi-o.php"] [unique_id "apfuXc83Jzm6fcsTqfE0BAAAAEI"]
[Wed Sep 02 04:37:34.889559 2026] [:error] [pid 24762:tid 140628092512000] [client 20.48.250.41:61282] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/g7y.php"] [unique_id "apfuXkvOhgfvInIzUv8oxgAAAAg"]
[Wed Sep 02 04:37:36.114310 2026] [:error] [pid 24762:tid 140628193900288] [client 20.48.250.41:61258] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/users.php"] [unique_id "apfuYEvOhgfvInIzUv8oyQAAAAQ"]
[Wed Sep 02 04:37:37.328439 2026] [:error] [pid 13378:tid 140628219078400] [client 20.48.250.41:61219] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/xwx1.php"] [unique_id "apfuYRZ2kcN90LY1LU_1ugAAAQE"]
[Wed Sep 02 04:37:38.539708 2026] [:error] [pid 13378:tid 140628210685696] [client 20.48.250.41:61188] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wlex.php"] [unique_id "apfuYhZ2kcN90LY1LU_1uwAAAQI"]
[Wed Sep 02 04:37:39.757268 2026] [:error] [pid 13378:tid 140628177114880] [client 20.48.250.41:61264] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/adminfuns.php"] [unique_id "apfuYxZ2kcN90LY1LU_1vAAAAQY"]
[Wed Sep 02 04:37:40.991925 2026] [:error] [pid 24762:tid 140628058941184] [client 20.48.250.41:60490] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/css/index.php"] [unique_id "apfuZEvOhgfvInIzUv8o0QAAAAw"]
[Wed Sep 02 04:37:42.188490 2026] [:error] [pid 13378:tid 140627975014144] [client 20.48.250.41:60514] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/av.php"] [unique_id "apfuZhZ2kcN90LY1LU_1vwAAARY"]
[Wed Sep 02 04:37:43.414225 2026] [:error] [pid 13065:tid 140628058941184] [client 20.48.250.41:61196] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp9.php"] [unique_id "apfuZ8La7rlBbtzQAsjt-gAAAMw"]
[Wed Sep 02 04:37:44.640779 2026] [:error] [pid 13064:tid 140628016977664] [client 20.48.250.41:61214] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-user.php"] [unique_id "apfuaGO4FfejT6BQfS4gWAAAAJE"]
[Wed Sep 02 04:37:45.851525 2026] [:error] [pid 13378:tid 140628050548480] [client 20.48.250.41:61205] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/pac.php"] [unique_id "apfuaRZ2kcN90LY1LU_13AAAAQ0"]
[Wed Sep 02 04:37:47.068660 2026] [:error] [pid 13065:tid 140628193900288] [client 20.48.250.41:61287] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-sid.php"] [unique_id "apfua8La7rlBbtzQAsjt_AAAAMQ"]
[Wed Sep 02 04:37:48.297014 2026] [:error] [pid 13062:tid 140628050548480] [client 20.48.250.41:61245] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/cu.php"] [unique_id "apfubM83Jzm6fcsTqfE0DgAAAE0"]
[Wed Sep 02 04:37:49.519019 2026] [:error] [pid 13065:tid 140628202292992] [client 20.48.250.41:61248] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/file9.php"] [unique_id "apfubcLa7rlBbtzQAsjt_gAAAMM"]
[Wed Sep 02 04:37:50.749947 2026] [:error] [pid 24762:tid 140628185507584] [client 20.48.250.41:60503] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/glmiiqmk.php"] [unique_id "apfubkvOhgfvInIzUv8o5AAAAAU"]
[Wed Sep 02 04:37:51.967353 2026] [:error] [pid 24762:tid 140628008584960] [client 20.48.250.41:61231] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-admin/images/wp-signup.php"] [unique_id "apfub0vOhgfvInIzUv8o6AAAABI"]
[Wed Sep 02 04:37:53.166781 2026] [:error] [pid 13378:tid 140627991799552] [client 20.48.250.41:61305] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/nw.php"] [unique_id "apfucRZ2kcN90LY1LU_2GQAAARQ"]
[Wed Sep 02 04:37:54.384212 2026] [:error] [pid 13378:tid 140628177114880] [client 20.48.250.41:61201] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/ios.php"] [unique_id "apfuchZ2kcN90LY1LU_2IQAAAQY"]
[Wed Sep 02 04:37:55.589064 2026] [:error] [pid 13064:tid 140628185507584] [client 20.48.250.41:61222] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-trackback.php"] [unique_id "apfuc2O4FfejT6BQfS4gYAAAAIU"]
[Wed Sep 02 04:37:56.788244 2026] [:error] [pid 13064:tid 140628219078400] [client 20.48.250.41:61239] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/info.php.swp"] [unique_id "apfudGO4FfejT6BQfS4gYgAAAIE"]
[Wed Sep 02 04:37:58.001102 2026] [:error] [pid 13064:tid 140628092512000] [client 20.48.250.41:61233] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/jp.php"] [unique_id "apfudmO4FfejT6BQfS4gZQAAAIg"]
[Wed Sep 02 04:37:59.219220 2026] [:error] [pid 13378:tid 140628067333888] [client 20.48.250.41:61244] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/tx78.php"] [unique_id "apfudxZ2kcN90LY1LU_2MgAAAQs"]
[Wed Sep 02 04:38:00.429289 2026] [:error] [pid 13378:tid 140628058941184] [client 20.48.250.41:60504] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/iqb.php"] [unique_id "apfueBZ2kcN90LY1LU_2NAAAAQw"]
[Wed Sep 02 04:38:01.634755 2026] [:error] [pid 13378:tid 140628092512000] [client 20.48.250.41:61221] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/admin-footer.php"] [unique_id "apfueRZ2kcN90LY1LU_2NgAAAQg"]
[Wed Sep 02 04:38:02.845192 2026] [:error] [pid 13064:tid 140627991799552] [client 20.48.250.41:61311] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/assets/images/images.php"] [unique_id "apfuemO4FfejT6BQfS4gaQAAAJQ"]
[Wed Sep 02 04:38:04.063621 2026] [:error] [pid 13064:tid 140628185507584] [client 20.48.250.41:60540] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/app.php"] [unique_id "apfufGO4FfejT6BQfS4gagAAAIU"]
[Wed Sep 02 04:38:05.268892 2026] [:error] [pid 13064:tid 140627983406848] [client 20.48.250.41:60425] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-home.php"] [unique_id "apfufWO4FfejT6BQfS4gawAAAJU"]
[Wed Sep 02 04:38:06.497528 2026] [:error] [pid 13062:tid 140628227471104] [client 20.48.250.41:61290] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/dfre.php"] [unique_id "apfufs83Jzm6fcsTqfE0GAAAAEA"]
[Wed Sep 02 04:38:07.718715 2026] [:error] [pid 24762:tid 140628193900288] [client 20.48.250.41:61267] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-content/akc.php"] [unique_id "apfuf0vOhgfvInIzUv8pGwAAAAQ"]
[Wed Sep 02 04:38:08.937961 2026] [:error] [pid 13065:tid 140628219078400] [client 20.48.250.41:60543] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/ultradybbuks.php"] [unique_id "apfugMLa7rlBbtzQAsjuDAAAAME"]
[Wed Sep 02 04:38:10.140207 2026] [:error] [pid 24762:tid 140628227471104] [client 20.48.250.41:61263] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/hel.php"] [unique_id "apfugkvOhgfvInIzUv8pHwAAAAA"]
[Wed Sep 02 04:38:11.385696 2026] [:error] [pid 24762:tid 140628100904704] [client 20.48.250.41:61226] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/num.php"] [unique_id "apfug0vOhgfvInIzUv8pJQAAAAc"]
[Wed Sep 02 04:38:12.625270 2026] [:error] [pid 13064:tid 140628219078400] [client 20.48.250.41:60526] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/ortasekerli1.php"] [unique_id "apfuhGO4FfejT6BQfS4gbAAAAIE"]
[Wed Sep 02 04:38:13.833624 2026] [:error] [pid 24762:tid 140628177114880] [client 20.48.250.41:61295] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/ww3.php"] [unique_id "apfuhUvOhgfvInIzUv8pLwAAAAY"]
[Wed Sep 02 04:38:15.038020 2026] [:error] [pid 13378:tid 140628000192256] [client 20.48.250.41:61285] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/laudq.php"] [unique_id "apfuhxZ2kcN90LY1LU_2PQAAARM"]
[Wed Sep 02 04:38:16.273388 2026] [:error] [pid 13065:tid 140628008584960] [client 20.48.250.41:61230] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/HPum4ZEBJRC.php"] [unique_id "apfuiMLa7rlBbtzQAsjuEQAAANI"]
[Wed Sep 02 04:38:17.490814 2026] [:error] [pid 13065:tid 140628193900288] [client 20.48.250.41:61246] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/akcc.php"] [unique_id "apfuicLa7rlBbtzQAsjuEgAAAMQ"]
[Wed Sep 02 04:38:26.337848 2026] [:error] [pid 24762:tid 140628193900288] [client 20.48.250.41:61260] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/auths.php"] [unique_id "apfukkvOhgfvInIzUv8pSgAAAAQ"]
[Wed Sep 02 04:38:27.549764 2026] [:error] [pid 24762:tid 140628100904704] [client 20.48.250.41:61215] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/ghreshttryu.php"] [unique_id "apfuk0vOhgfvInIzUv8pUAAAAAc"]
[Wed Sep 02 04:38:28.785501 2026] [:error] [pid 24762:tid 140628177114880] [client 20.48.250.41:61307] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/1.php"] [unique_id "apfulEvOhgfvInIzUv8pVgAAAAY"]
[Wed Sep 02 04:38:29.999493 2026] [:error] [pid 13064:tid 140628219078400] [client 20.48.250.41:60483] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/category.tokens.php"] [unique_id "apfulWO4FfejT6BQfS4geQAAAIE"]
[Wed Sep 02 04:38:31.216846 2026] [:error] [pid 13064:tid 140627958228736] [client 20.48.250.41:60524] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/enclas.php"] [unique_id "apful2O4FfejT6BQfS4gfAAAAJg"]
[Wed Sep 02 04:38:32.444790 2026] [:error] [pid 13378:tid 140628227471104] [client 20.48.250.41:60521] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/dev1s.php"] [unique_id "apfumBZ2kcN90LY1LU_2VAAAAQA"]
[Wed Sep 02 04:38:33.699312 2026] [:error] [pid 13378:tid 140628202292992] [client 20.48.250.41:61310] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "apfumRZ2kcN90LY1LU_2VgAAAQM"]
[Wed Sep 02 04:38:34.912390 2026] [:error] [pid 13065:tid 140628100904704] [client 20.48.250.41:61213] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/ms-edit.php"] [unique_id "apfumsLa7rlBbtzQAsjuKwAAAMc"]
[Wed Sep 02 04:38:36.135723 2026] [:error] [pid 13065:tid 140628016977664] [client 20.48.250.41:61209] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/work.php"] [unique_id "apfunMLa7rlBbtzQAsjuLAAAANE"]
[Wed Sep 02 04:38:37.350987 2026] [:error] [pid 13378:tid 140628025370368] [client 20.48.250.41:60422] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/ww1.php"] [unique_id "apfunRZ2kcN90LY1LU_2XgAAARA"]
[Wed Sep 02 04:38:38.565519 2026] [:error] [pid 13064:tid 140628092512000] [client 20.48.250.41:60510] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/mac.php"] [unique_id "apfunmO4FfejT6BQfS4ghQAAAIg"]
[Wed Sep 02 04:38:39.780608 2026] [:error] [pid 24762:tid 140628042155776] [client 20.48.250.41:61288] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/info.php~"] [unique_id "apfun0vOhgfvInIzUv8pdgAAAA4"]
[Wed Sep 02 04:38:41.008856 2026] [:error] [pid 13378:tid 140628227471104] [client 20.48.250.41:60509] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-content/goat.php"] [unique_id "apfuoRZ2kcN90LY1LU_2YAAAAQA"]
[Wed Sep 02 04:38:42.227250 2026] [:error] [pid 13064:tid 140627975014144] [client 20.48.250.41:61284] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/ws80.php"] [unique_id "apfuomO4FfejT6BQfS4gigAAAJY"]
[Wed Sep 02 04:38:43.461452 2026] [:error] [pid 24762:tid 140628227471104] [client 20.48.250.41:60532] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/classwithtostring.php"] [unique_id "apfuo0vOhgfvInIzUv8piAAAAAA"]
[Wed Sep 02 04:38:44.674987 2026] [:error] [pid 13378:tid 140627975014144] [client 20.48.250.41:61280] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/pouhg.php"] [unique_id "apfupBZ2kcN90LY1LU_2ZQAAARY"]
[Wed Sep 02 04:38:45.890976 2026] [:error] [pid 24762:tid 140628084119296] [client 20.48.250.41:61240] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/myfile.php"] [unique_id "apfupUvOhgfvInIzUv8pmQAAAAk"]
[Wed Sep 02 04:38:47.127043 2026] [:error] [pid 24762:tid 140627958228736] [client 20.48.250.41:61249] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/asa.php"] [unique_id "apfup0vOhgfvInIzUv8poQAAABg"]
[Wed Sep 02 04:38:48.347171 2026] [:error] [pid 24762:tid 140628067333888] [client 20.48.250.41:61297] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/fw.php"] [unique_id "apfuqEvOhgfvInIzUv8pqAAAAAs"]
[Wed Sep 02 04:38:49.563156 2026] [:error] [pid 13064:tid 140628067333888] [client 20.48.250.41:61299] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/ws78.php"] [unique_id "apfuqWO4FfejT6BQfS4glwAAAIs"]
[Wed Sep 02 04:38:50.779607 2026] [:error] [pid 24762:tid 140627991799552] [client 20.48.250.41:61277] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/bekle.php"] [unique_id "apfuqkvOhgfvInIzUv8prAAAABQ"]
[Wed Sep 02 04:38:51.981755 2026] [:error] [pid 13064:tid 140628033763072] [client 20.48.250.41:61243] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/z57.php"] [unique_id "apfuq2O4FfejT6BQfS4gnAAAAI8"]
[Wed Sep 02 04:38:53.215285 2026] [:error] [pid 13378:tid 140628042155776] [client 20.48.250.41:61220] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apfurRZ2kcN90LY1LU_2bgAAAQ4"]
[Wed Sep 02 04:38:54.420951 2026] [:error] [pid 24762:tid 140628075726592] [client 20.48.250.41:61273] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/miuio.php"] [unique_id "apfurkvOhgfvInIzUv8pswAAAAo"]
[Wed Sep 02 04:38:55.624293 2026] [:error] [pid 13065:tid 140628185507584] [client 20.48.250.41:61308] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/h02ugyh.php"] [unique_id "apfur8La7rlBbtzQAsjuPQAAAMU"]
[Wed Sep 02 04:38:56.837134 2026] [:error] [pid 13378:tid 140628075726592] [client 20.48.250.41:61304] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/hehe.php"] [unique_id "apfusBZ2kcN90LY1LU_2fQAAAQo"]
[Wed Sep 02 04:38:58.036621 2026] [:error] [pid 24762:tid 140628177114880] [client 20.48.250.41:60535] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/dejavu.php"] [unique_id "apfuskvOhgfvInIzUv8puAAAAAY"]
[Wed Sep 02 04:38:59.244595 2026] [:error] [pid 24762:tid 140628219078400] [client 20.48.250.41:61296] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/qaez.php56"] [unique_id "apfus0vOhgfvInIzUv8pvgAAAAE"]
[Wed Sep 02 04:39:00.473617 2026] [:error] [pid 13378:tid 140628092512000] [client 20.48.250.41:61278] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/file30.php"] [unique_id "apfutBZ2kcN90LY1LU_2hQAAAQg"]
[Wed Sep 02 04:39:01.689786 2026] [:error] [pid 24762:tid 140628025370368] [client 20.48.250.41:61208] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wso.php"] [unique_id "apfutUvOhgfvInIzUv8pxwAAABA"]
[Wed Sep 02 04:39:02.901626 2026] [:error] [pid 13065:tid 140627958228736] [client 20.48.250.41:61309] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/exhds0ucw0ju9vjgasxqCdefault.php"] [unique_id "apfutsLa7rlBbtzQAsjuRwAAANg"]
[Wed Sep 02 04:39:04.119444 2026] [:error] [pid 13065:tid 140628033763072] [client 20.48.250.41:61269] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/file.php"] [unique_id "apfuuMLa7rlBbtzQAsjuSQAAAM8"]
[Wed Sep 02 04:39:05.339104 2026] [:error] [pid 13065:tid 140628008584960] [client 20.48.250.41:61217] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/pu.php"] [unique_id "apfuucLa7rlBbtzQAsjuUAAAANI"]
[Wed Sep 02 04:39:06.547826 2026] [:error] [pid 24762:tid 140628033763072] [client 20.48.250.41:61303] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/clss.php"] [unique_id "apfuukvOhgfvInIzUv8p1QAAAA8"]
[Wed Sep 02 04:39:07.763594 2026] [:error] [pid 13064:tid 140628219078400] [client 20.48.250.41:61211] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/ws81.php"] [unique_id "apfuu2O4FfejT6BQfS4gyAAAAIE"]
[Wed Sep 02 04:39:08.980278 2026] [:error] [pid 13064:tid 140628075726592] [client 20.48.250.41:61265] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/bolt.php"] [unique_id "apfuvGO4FfejT6BQfS4gzAAAAIo"]
[Wed Sep 02 04:39:10.193297 2026] [:error] [pid 13064:tid 140628042155776] [client 20.48.250.41:61270] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/xstelth.php"] [unique_id "apfuvmO4FfejT6BQfS4g0AAAAI4"]
[Wed Sep 02 04:39:11.417359 2026] [:error] [pid 13062:tid 140628177114880] [client 20.48.250.41:60486] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/atomlib.php"] [unique_id "apfuv883Jzm6fcsTqfE0PgAAAEY"]
[Wed Sep 02 04:39:12.631527 2026] [:error] [pid 24762:tid 140628033763072] [client 20.48.250.41:60461] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/file5.php"] [unique_id "apfuwEvOhgfvInIzUv8p4AAAAA8"]
[Wed Sep 02 04:39:13.841202 2026] [:error] [pid 13062:tid 140628016977664] [client 20.48.250.41:60493] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/gm.php"] [unique_id "apfuwc83Jzm6fcsTqfE0RwAAAFE"]
[Wed Sep 02 04:39:15.062419 2026] [:error] [pid 13378:tid 140628227471104] [client 20.48.250.41:60527] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/obfuscous.php"] [unique_id "apfuwxZ2kcN90LY1LU_2mgAAAQA"]
[Wed Sep 02 04:39:16.269782 2026] [:error] [pid 24762:tid 140628100904704] [client 20.48.250.41:60457] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/tqloh.php"] [unique_id "apfuxEvOhgfvInIzUv8p5wAAAAc"]
[Wed Sep 02 04:39:17.474444 2026] [:error] [pid 13064:tid 140628075726592] [client 20.48.250.41:61207] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "apfuxWO4FfejT6BQfS4g2wAAAIo"]
[Wed Sep 02 04:39:18.692595 2026] [:error] [pid 24762:tid 140628185507584] [client 20.48.250.41:61235] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/mgsl.php"] [unique_id "apfuxkvOhgfvInIzUv8p7gAAAAU"]
[Wed Sep 02 04:39:19.916916 2026] [:error] [pid 24762:tid 140628084119296] [client 20.48.250.41:60454] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/info.php.bak"] [unique_id "apfux0vOhgfvInIzUv8p8QAAAAk"]
[Wed Sep 02 04:39:21.146863 2026] [:error] [pid 13065:tid 140628058941184] [client 20.48.250.41:61301] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/qjaqjahu.php"] [unique_id "apfuycLa7rlBbtzQAsjuXAAAAMw"]
[Wed Sep 02 04:39:22.374308 2026] [:error] [pid 24762:tid 140627966621440] [client 20.48.250.41:60516] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/go.php"] [unique_id "apfuykvOhgfvInIzUv8p-AAAABc"]
[Wed Sep 02 04:39:23.595524 2026] [:error] [pid 13065:tid 140628084119296] [client 20.48.250.41:61228] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/8.php"] [unique_id "apfuy8La7rlBbtzQAsjuZwAAAMk"]
[Wed Sep 02 04:39:24.827677 2026] [:error] [pid 13378:tid 140627991799552] [client 20.48.250.41:60417] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/codehu.php"] [unique_id "apfuzBZ2kcN90LY1LU_2wQAAARQ"]
[Wed Sep 02 04:39:26.043808 2026] [:error] [pid 13065:tid 140628100904704] [client 20.48.250.41:60531] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/docs.php"] [unique_id "apfuzsLa7rlBbtzQAsjucAAAAMc"]
[Wed Sep 02 04:39:27.267611 2026] [:error] [pid 24762:tid 140628210685696] [client 20.48.250.41:60507] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/sid3.php"] [unique_id "apfuz0vOhgfvInIzUv8qAAAAAAI"]
[Wed Sep 02 04:39:28.487477 2026] [:error] [pid 13065:tid 140627975014144] [client 20.48.250.41:61275] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/tool.php"] [unique_id "apfu0MLa7rlBbtzQAsjufAAAANY"]
[Wed Sep 02 04:39:29.709128 2026] [:error] [pid 13065:tid 140628219078400] [client 20.48.250.41:60523] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/init.php"] [unique_id "apfu0cLa7rlBbtzQAsjufgAAAME"]
[Wed Sep 02 04:39:30.937874 2026] [:error] [pid 13378:tid 140628025370368] [client 20.48.250.41:61189] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/pwyjwrfr.php"] [unique_id "apfu0hZ2kcN90LY1LU_2ywAAARA"]
[Wed Sep 02 04:39:32.166677 2026] [:error] [pid 13064:tid 140628227471104] [client 20.48.250.41:61192] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/panelx.php"] [unique_id "apfu1GO4FfejT6BQfS4g7AAAAIA"]
[Wed Sep 02 04:39:33.380834 2026] [:error] [pid 13064:tid 140628008584960] [client 20.48.250.41:60522] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/6kUgr4yGzxN.php"] [unique_id "apfu1WO4FfejT6BQfS4g8QAAAJI"]
[Wed Sep 02 04:39:34.605949 2026] [:error] [pid 13062:tid 140627958228736] [client 20.48.250.41:61294] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/k.php"] [unique_id "apfu1s83Jzm6fcsTqfE0VAAAAFg"]
[Wed Sep 02 04:39:35.840246 2026] [:error] [pid 13065:tid 140628050548480] [client 20.48.250.41:60494] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/taktak.php"] [unique_id "apfu18La7rlBbtzQAsjugwAAAM0"]
[Wed Sep 02 04:39:37.064091 2026] [:error] [pid 13378:tid 140628193900288] [client 20.48.250.41:61225] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-content/ova.php"] [unique_id "apfu2RZ2kcN90LY1LU_20AAAAQQ"]
[Wed Sep 02 04:39:38.272419 2026] [:error] [pid 13062:tid 140627983406848] [client 20.48.250.41:60481] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/abcd.php"] [unique_id "apfu2s83Jzm6fcsTqfE0VwAAAFU"]
[Wed Sep 02 04:39:39.495500 2026] [:error] [pid 13062:tid 140628008584960] [client 20.48.250.41:61251] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/ws.php"] [unique_id "apfu2883Jzm6fcsTqfE0WAAAAFI"]
[Wed Sep 02 04:39:40.717622 2026] [:error] [pid 13378:tid 140628025370368] [client 20.48.250.41:60441] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/wp-config.php"] [unique_id "apfu3BZ2kcN90LY1LU_20gAAARA"]
[Wed Sep 02 04:39:41.943033 2026] [:error] [pid 24762:tid 140628193900288] [client 20.48.250.41:60450] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/amp.php"] [unique_id "apfu3UvOhgfvInIzUv8qGQAAAAQ"]
[Wed Sep 02 04:39:43.170216 2026] [:error] [pid 13378:tid 140628067333888] [client 20.48.250.41:61291] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/NewFile.php"] [unique_id "apfu3xZ2kcN90LY1LU_21QAAAQs"]
[Wed Sep 02 04:39:44.385528 2026] [:error] [pid 24762:tid 140628202292992] [client 20.48.250.41:60520] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/panel.php"] [unique_id "apfu4EvOhgfvInIzUv8qGwAAAAM"]
[Wed Sep 02 04:39:45.587174 2026] [:error] [pid 13065:tid 140628177114880] [client 20.48.250.41:61242] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/undel.php"] [unique_id "apfu4cLa7rlBbtzQAsjujwAAAMY"]
[Wed Sep 02 04:39:46.783224 2026] [:error] [pid 24762:tid 140628210685696] [client 20.48.250.41:61186] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/fs.php"] [unique_id "apfu4kvOhgfvInIzUv8qIAAAAAI"]
[Wed Sep 02 04:39:48.011701 2026] [:error] [pid 13065:tid 140628193900288] [client 20.48.250.41:60485] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/RsR.php"] [unique_id "apfu5MLa7rlBbtzQAsjukQAAAMQ"]
[Wed Sep 02 04:39:49.274797 2026] [:error] [pid 13062:tid 140628185507584] [client 20.48.250.41:60492] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/bn.php"] [unique_id "apfu5c83Jzm6fcsTqfE0WwAAAEU"]
[Wed Sep 02 04:39:50.490073 2026] [:error] [pid 24762:tid 140627966621440] [client 20.48.250.41:61268] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/php.php"] [unique_id "apfu5kvOhgfvInIzUv8qJwAAABc"]
[Wed Sep 02 04:39:51.706985 2026] [:error] [pid 24762:tid 140627991799552] [client 20.48.250.41:60497] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-content/uploads/about.php"] [unique_id "apfu50vOhgfvInIzUv8qKwAAABQ"]
[Wed Sep 02 04:39:52.942582 2026] [:error] [pid 13065:tid 140628092512000] [client 20.48.250.41:60542] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/themes.php"] [unique_id "apfu6MLa7rlBbtzQAsjumgAAAMg"]
[Wed Sep 02 04:39:54.159752 2026] [:error] [pid 24762:tid 140628067333888] [client 20.48.250.41:60517] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/bes.php"] [unique_id "apfu6kvOhgfvInIzUv8qMQAAAAs"]
[Wed Sep 02 04:39:55.400007 2026] [:error] [pid 13064:tid 140628008584960] [client 20.48.250.41:61276] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-the.php"] [unique_id "apfu62O4FfejT6BQfS4hEAAAAJI"]
[Wed Sep 02 04:39:56.609168 2026] [:error] [pid 24762:tid 140628075726592] [client 20.48.250.41:60458] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/z60.php"] [unique_id "apfu7EvOhgfvInIzUv8qNwAAAAo"]
[Wed Sep 02 04:39:57.814624 2026] [:error] [pid 24762:tid 140628000192256] [client 20.48.250.41:60539] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/sid-file.php"] [unique_id "apfu7UvOhgfvInIzUv8qOwAAABM"]
[Wed Sep 02 04:39:59.068501 2026] [:error] [pid 13062:tid 140627958228736] [client 20.48.250.41:61289] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/xc.php"] [unique_id "apfu7883Jzm6fcsTqfE0YgAAAFg"]
[Wed Sep 02 04:40:00.280122 2026] [:error] [pid 13065:tid 140627958228736] [client 20.48.250.41:61185] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/BMjXQkgwpeb.php"] [unique_id "apfu8MLa7rlBbtzQAsjungAAANg"]
[Wed Sep 02 04:40:01.490857 2026] [:error] [pid 13062:tid 140628075726592] [client 20.48.250.41:60469] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/ox8xhkkw.php"] [unique_id "apfu8c83Jzm6fcsTqfE0aAAAAEo"]
[Wed Sep 02 04:40:02.695897 2026] [:error] [pid 24762:tid 140627975014144] [client 20.48.250.41:60506] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/option.php"] [unique_id "apfu8kvOhgfvInIzUv8qRwAAABY"]
[Wed Sep 02 04:40:03.942128 2026] [:error] [pid 24762:tid 140628219078400] [client 20.48.250.41:60499] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/file32.php"] [unique_id "apfu80vOhgfvInIzUv8qSwAAAAE"]
[Wed Sep 02 04:40:05.169560 2026] [:error] [pid 13065:tid 140627975014144] [client 20.48.250.41:60452] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/ss.php"] [unique_id "apfu9cLa7rlBbtzQAsjuoAAAANY"]
[Wed Sep 02 04:40:06.379235 2026] [:error] [pid 13065:tid 140628075726592] [client 20.48.250.41:61300] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/we.php"] [unique_id "apfu9sLa7rlBbtzQAsjuogAAAMo"]
[Wed Sep 02 04:40:07.609094 2026] [:error] [pid 13064:tid 140628219078400] [client 20.48.250.41:61198] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wefile.php"] [unique_id "apfu92O4FfejT6BQfS4hIgAAAIE"]
[Wed Sep 02 04:40:08.818154 2026] [:error] [pid 13062:tid 140628075726592] [client 20.48.250.41:60518] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/home.php"] [unique_id "apfu-M83Jzm6fcsTqfE0cAAAAEo"]
[Wed Sep 02 04:40:10.032376 2026] [:error] [pid 24762:tid 140628219078400] [client 20.48.250.41:60431] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/ff.php"] [unique_id "apfu-kvOhgfvInIzUv8qVQAAAAE"]
[Wed Sep 02 04:40:11.241504 2026] [:error] [pid 13062:tid 140628067333888] [client 20.48.250.41:60528] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/inghl.php"] [unique_id "apfu-883Jzm6fcsTqfE0cgAAAEs"]
[Wed Sep 02 04:40:12.455297 2026] [:error] [pid 13378:tid 140628177114880] [client 20.48.250.41:60525] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/4fk6.php"] [unique_id "apfu_BZ2kcN90LY1LU_29wAAAQY"]
[Wed Sep 02 04:40:14.580689 2026] [:error] [pid 24762:tid 140628042155776] [client 20.48.250.41:61223] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/raiz0.php"] [unique_id "apfu_kvOhgfvInIzUv8qWgAAAA4"]
[Wed Sep 02 04:40:15.795385 2026] [:error] [pid 13378:tid 140628092512000] [client 20.48.250.41:60453] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/case.php"] [unique_id "apfu_xZ2kcN90LY1LU_2-wAAAQg"]
[Wed Sep 02 04:40:17.032918 2026] [:error] [pid 13064:tid 140628202292992] [client 20.48.250.41:61198] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/x.php"] [unique_id "apfvAWO4FfejT6BQfS4hLwAAAIM"]
[Wed Sep 02 04:40:18.258664 2026] [:error] [pid 24762:tid 140628202292992] [client 20.48.250.41:60472] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/ce.php"] [unique_id "apfvAkvOhgfvInIzUv8qYAAAAAM"]
[Wed Sep 02 04:40:19.474763 2026] [:error] [pid 13064:tid 140628050548480] [client 20.48.250.41:60442] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/show/asa.php"] [unique_id "apfvA2O4FfejT6BQfS4hMgAAAI0"]
[Wed Sep 02 04:40:20.693310 2026] [:error] [pid 13065:tid 140628210685696] [client 20.48.250.41:60508] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/403.php"] [unique_id "apfvBMLa7rlBbtzQAsjupAAAAMI"]
[Wed Sep 02 04:40:21.912922 2026] [:error] [pid 24762:tid 140627983406848] [client 20.48.250.41:61195] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/LvCBeZWaSgQ.php"] [unique_id "apfvBUvOhgfvInIzUv8qYgAAABU"]
[Wed Sep 02 04:40:23.130552 2026] [:error] [pid 13065:tid 140627966621440] [client 20.48.250.41:61254] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/zde.php"] [unique_id "apfvB8La7rlBbtzQAsjupwAAANc"]
[Wed Sep 02 04:40:24.346120 2026] [:error] [pid 13378:tid 140627966621440] [client 20.48.250.41:60446] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-access.php"] [unique_id "apfvCBZ2kcN90LY1LU_3BQAAARc"]
[Wed Sep 02 04:40:25.555913 2026] [:error] [pid 13065:tid 140628058941184] [client 20.48.250.41:61283] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/0xby.php"] [unique_id "apfvCcLa7rlBbtzQAsjuqQAAAMw"]
[Wed Sep 02 04:40:26.777193 2026] [:error] [pid 24762:tid 140628058941184] [client 20.48.250.41:60515] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/3i8som87avh59dosfymtvCakc.php"] [unique_id "apfvCkvOhgfvInIzUv8qZAAAAAw"]
[Wed Sep 02 04:40:27.986615 2026] [:error] [pid 13062:tid 140628016977664] [client 20.48.250.41:60026] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/t.php"] [unique_id "apfvC883Jzm6fcsTqfE0cwAAAFE"]
[Wed Sep 02 04:40:29.208324 2026] [:error] [pid 13064:tid 140627966621440] [client 20.48.250.41:60424] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/jga.php"] [unique_id "apfvDWO4FfejT6BQfS4hPAAAAJc"]
[Wed Sep 02 04:40:30.420148 2026] [:error] [pid 13378:tid 140628058941184] [client 20.48.250.41:61218] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/xml.php"] [unique_id "apfvDhZ2kcN90LY1LU_3DgAAAQw"]
[Wed Sep 02 04:40:31.637525 2026] [:error] [pid 24762:tid 140627983406848] [client 20.48.250.41:61250] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/KV7EGJmhHzX.php"] [unique_id "apfvD0vOhgfvInIzUv8qbAAAABU"]
[Wed Sep 02 04:40:32.836387 2026] [:error] [pid 24762:tid 140628000192256] [client 20.48.250.41:59997] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-securitiy.php"] [unique_id "apfvEEvOhgfvInIzUv8qbQAAABM"]
[Wed Sep 02 04:40:34.064381 2026] [:error] [pid 24762:tid 140628219078400] [client 20.48.250.41:60002] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/lock360.php"] [unique_id "apfvEkvOhgfvInIzUv8qcAAAAAE"]
[Wed Sep 02 04:40:35.287997 2026] [:error] [pid 24762:tid 140628016977664] [client 20.48.250.41:60438] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/click.php"] [unique_id "apfvE0vOhgfvInIzUv8qcQAAABE"]
[Wed Sep 02 04:40:36.509456 2026] [:error] [pid 13065:tid 140628193900288] [client 20.48.250.41:60416] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/solo1.php"] [unique_id "apfvFMLa7rlBbtzQAsjusgAAAMQ"]
[Wed Sep 02 04:40:37.724712 2026] [:error] [pid 13378:tid 140628042155776] [client 20.48.250.41:61238] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/783de.php"] [unique_id "apfvFRZ2kcN90LY1LU_3IgAAAQ4"]
[Wed Sep 02 04:40:38.941560 2026] [:error] [pid 24762:tid 140628227471104] [client 20.48.250.41:60460] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/gmo.php"] [unique_id "apfvFkvOhgfvInIzUv8qdgAAAAA"]
[Wed Sep 02 04:40:40.150914 2026] [:error] [pid 24762:tid 140628000192256] [client 20.48.250.41:60013] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/lock.php"] [unique_id "apfvGEvOhgfvInIzUv8qeQAAABM"]
[Wed Sep 02 04:40:41.374304 2026] [:error] [pid 24762:tid 140627991799552] [client 20.48.250.41:60489] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-advaced.php"] [unique_id "apfvGUvOhgfvInIzUv8qfQAAABQ"]
[Wed Sep 02 04:40:42.591801 2026] [:error] [pid 13064:tid 140628177114880] [client 20.48.250.41:60423] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/mhpglaje.php"] [unique_id "apfvGmO4FfejT6BQfS4hTQAAAIY"]
[Wed Sep 02 04:40:43.793058 2026] [:error] [pid 13062:tid 140628025370368] [client 20.48.250.41:60012] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/s3FiyJ2WGCnF0p1default.php"] [unique_id "apfvG883Jzm6fcsTqfE0hQAAAFA"]
[Wed Sep 02 04:40:44.910376 2026] [:error] [pid 24762:tid 140628193900288] [client 43.133.91.48:57716] [client 43.133.91.48] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.menabern.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.menabern.com"] [uri "/"] [unique_id "apfvHEvOhgfvInIzUv8qhAAAAAQ"]
[Wed Sep 02 04:40:45.000387 2026] [:error] [pid 24762:tid 140627966621440] [client 20.48.250.41:60455] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/25.php"] [unique_id "apfvHEvOhgfvInIzUv8qhQAAABc"]
[Wed Sep 02 04:40:46.218573 2026] [:error] [pid 13064:tid 140628084119296] [client 20.48.250.41:61255] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/bo.php"] [unique_id "apfvHmO4FfejT6BQfS4hVAAAAIk"]
[Wed Sep 02 04:40:47.434846 2026] [:error] [pid 13378:tid 140627991799552] [client 20.48.250.41:60537] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/ww3.php"] [unique_id "apfvHxZ2kcN90LY1LU_3KAAAARQ"]
[Wed Sep 02 04:40:48.648277 2026] [:error] [pid 13064:tid 140628075726592] [client 20.48.250.41:60529] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wxo.php"] [unique_id "apfvIGO4FfejT6BQfS4hVwAAAIo"]
[Wed Sep 02 04:40:49.869965 2026] [:error] [pid 24762:tid 140628050548480] [client 20.48.250.41:59985] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/yapgb.php"] [unique_id "apfvIUvOhgfvInIzUv8qjAAAAA0"]
[Wed Sep 02 04:40:51.099814 2026] [:error] [pid 13378:tid 140628227471104] [client 20.48.250.41:59981] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/assacc.php"] [unique_id "apfvIxZ2kcN90LY1LU_3KwAAAQA"]
[Wed Sep 02 04:40:52.356321 2026] [:error] [pid 24762:tid 140628058941184] [client 20.48.250.41:59970] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/lp5.php"] [unique_id "apfvJEvOhgfvInIzUv8qkAAAAAw"]
[Wed Sep 02 04:40:53.572534 2026] [:error] [pid 24762:tid 140628227471104] [client 20.48.250.41:60470] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/jlex.php"] [unique_id "apfvJUvOhgfvInIzUv8qmAAAAAA"]
[Wed Sep 02 04:40:54.781979 2026] [:error] [pid 24762:tid 140628042155776] [client 20.48.250.41:60475] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/installer.php"] [unique_id "apfvJkvOhgfvInIzUv8qogAAAA4"]
[Wed Sep 02 04:40:56.024614 2026] [:error] [pid 13062:tid 140628193900288] [client 20.48.250.41:60530] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/s121ws2s.php"] [unique_id "apfvKM83Jzm6fcsTqfE0iQAAAEQ"]
[Wed Sep 02 04:40:57.239782 2026] [:error] [pid 13062:tid 140628202292992] [client 20.48.250.41:59975] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-ac.php"] [unique_id "apfvKc83Jzm6fcsTqfE0igAAAEM"]
[Wed Sep 02 04:40:58.441162 2026] [:error] [pid 13378:tid 140628202292992] [client 20.48.250.41:59969] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/qhLaGswd9DS.php"] [unique_id "apfvKhZ2kcN90LY1LU_3MQAAAQM"]
[Wed Sep 02 04:40:59.663279 2026] [:error] [pid 13378:tid 140628058941184] [client 20.48.250.41:59973] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-content/w.php"] [unique_id "apfvKxZ2kcN90LY1LU_3MgAAAQw"]
[Wed Sep 02 04:41:00.874963 2026] [:error] [pid 24762:tid 140628084119296] [client 20.48.250.41:60447] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/unrcj.php"] [unique_id "apfvLEvOhgfvInIzUv8qpgAAAAk"]
[Wed Sep 02 04:41:02.074422 2026] [:error] [pid 13065:tid 140627958228736] [client 20.48.250.41:60439] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/opts.php"] [unique_id "apfvLsLa7rlBbtzQAsjuygAAANg"]
[Wed Sep 02 04:41:03.326606 2026] [:error] [pid 24762:tid 140628058941184] [client 20.48.250.41:60419] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/6kDPjgFTmvS.php"] [unique_id "apfvL0vOhgfvInIzUv8qqQAAAAw"]
[Wed Sep 02 04:41:04.553560 2026] [:error] [pid 13062:tid 140627966621440] [client 20.48.250.41:61206] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/gos.php"] [unique_id "apfvMM83Jzm6fcsTqfE0nwAAAFc"]
[Wed Sep 02 04:41:05.817019 2026] [:error] [pid 13378:tid 140628193900288] [client 20.48.250.41:59991] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "apfvMRZ2kcN90LY1LU_3NwAAAQQ"]
[Wed Sep 02 04:41:07.038086 2026] [:error] [pid 13062:tid 140628042155776] [client 20.48.250.41:61237] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/test.php.orig"] [unique_id "apfvM883Jzm6fcsTqfE0oQAAAE4"]
[Wed Sep 02 04:41:08.247043 2026] [:error] [pid 13378:tid 140628058941184] [client 20.48.250.41:60491] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/indo.php"] [unique_id "apfvNBZ2kcN90LY1LU_3OQAAAQw"]
[Wed Sep 02 04:41:09.486418 2026] [:error] [pid 24762:tid 140628202292992] [client 20.48.250.41:60541] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/fs7.php"] [unique_id "apfvNUvOhgfvInIzUv8qrAAAAAM"]
[Wed Sep 02 04:41:10.729358 2026] [:error] [pid 24762:tid 140628084119296] [client 20.48.250.41:61266] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/network.php"] [unique_id "apfvNkvOhgfvInIzUv8qsAAAAAk"]
[Wed Sep 02 04:41:11.950610 2026] [:error] [pid 13378:tid 140628227471104] [client 20.48.250.41:61281] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/krypton.php"] [unique_id "apfvNxZ2kcN90LY1LU_3PAAAAQA"]
[Wed Sep 02 04:41:13.174463 2026] [:error] [pid 13378:tid 140627966621440] [client 20.48.250.41:60426] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/domains.php"] [unique_id "apfvORZ2kcN90LY1LU_3PgAAARc"]
[Wed Sep 02 04:41:14.407084 2026] [:error] [pid 13378:tid 140628033763072] [client 20.48.250.41:60024] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/worksec.php"] [unique_id "apfvOhZ2kcN90LY1LU_3QAAAAQ8"]
[Wed Sep 02 04:41:15.652106 2026] [:error] [pid 24762:tid 140627966621440] [client 20.48.250.41:59972] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-themes.php"] [unique_id "apfvO0vOhgfvInIzUv8qtQAAABc"]
[Wed Sep 02 04:41:16.878725 2026] [:error] [pid 13064:tid 140628202292992] [client 20.48.250.41:60482] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/bthil.php"] [unique_id "apfvPGO4FfejT6BQfS4hfQAAAIM"]
[Wed Sep 02 04:41:18.122120 2026] [:error] [pid 13378:tid 140628227471104] [client 20.48.250.41:60480] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "apfvPhZ2kcN90LY1LU_3SgAAAQA"]
[Wed Sep 02 04:41:19.331355 2026] [:error] [pid 13064:tid 140628050548480] [client 20.48.250.41:61229] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/drykl.php"] [unique_id "apfvP2O4FfejT6BQfS4hfwAAAI0"]
[Wed Sep 02 04:41:20.548586 2026] [:error] [pid 13378:tid 140628177114880] [client 20.48.250.41:60440] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/cc.php"] [unique_id "apfvQBZ2kcN90LY1LU_3TgAAAQY"]
[Wed Sep 02 04:41:21.784697 2026] [:error] [pid 13065:tid 140628227471104] [client 20.48.250.41:60519] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/24.php"] [unique_id "apfvQcLa7rlBbtzQAsjuzwAAAMA"]
[Wed Sep 02 04:41:22.999166 2026] [:error] [pid 13064:tid 140628016977664] [client 20.48.250.41:61286] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/xr.php"] [unique_id "apfvQmO4FfejT6BQfS4hgwAAAJE"]
[Wed Sep 02 04:41:24.228121 2026] [:error] [pid 13378:tid 140627975014144] [client 20.48.250.41:61302] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/byp.php"] [unique_id "apfvRBZ2kcN90LY1LU_3VAAAARY"]
[Wed Sep 02 04:41:25.479361 2026] [:error] [pid 13062:tid 140628227471104] [client 20.48.250.41:61194] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/rzki.php"] [unique_id "apfvRc83Jzm6fcsTqfE0qQAAAEA"]
[Wed Sep 02 04:41:26.698677 2026] [:error] [pid 13065:tid 140628058941184] [client 20.48.250.41:59907] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/min.php"] [unique_id "apfvRsLa7rlBbtzQAsju0gAAAMw"]
[Wed Sep 02 04:41:27.919670 2026] [:error] [pid 13065:tid 140628067333888] [client 20.48.250.41:61298] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/crgio.php"] [unique_id "apfvR8La7rlBbtzQAsju1AAAAMs"]
[Wed Sep 02 04:41:29.129015 2026] [:error] [pid 13062:tid 140627983406848] [client 20.48.250.41:60513] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/pn.php"] [unique_id "apfvSc83Jzm6fcsTqfE0qgAAAFU"]
[Wed Sep 02 04:41:30.351374 2026] [:error] [pid 24762:tid 140628177114880] [client 20.48.250.41:59988] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/xtt.php"] [unique_id "apfvSkvOhgfvInIzUv8qwwAAAAY"]
[Wed Sep 02 04:41:31.552055 2026] [:error] [pid 24762:tid 140628084119296] [client 20.48.250.41:60443] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/ls.php"] [unique_id "apfvS0vOhgfvInIzUv8qxQAAAAk"]
[Wed Sep 02 04:41:32.774017 2026] [:error] [pid 24762:tid 140628058941184] [client 20.48.250.41:60448] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wso-x569.php"] [unique_id "apfvTEvOhgfvInIzUv8qyAAAAAw"]
[Wed Sep 02 04:41:33.998591 2026] [:error] [pid 13065:tid 140628075726592] [client 20.48.250.41:61197] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-includes/Text/index.php"] [unique_id "apfvTcLa7rlBbtzQAsju1wAAAMo"]
[Wed Sep 02 04:41:35.222793 2026] [:error] [pid 13065:tid 140627983406848] [client 20.48.250.41:60449] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/vx.php"] [unique_id "apfvT8La7rlBbtzQAsju2AAAANU"]
[Wed Sep 02 04:41:36.441519 2026] [:error] [pid 13378:tid 140628050548480] [client 20.48.250.41:59986] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp5.php"] [unique_id "apfvUBZ2kcN90LY1LU_3ZAAAAQ0"]
[Wed Sep 02 04:41:37.660992 2026] [:error] [pid 13062:tid 140628000192256] [client 20.48.250.41:60420] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/11.php"] [unique_id "apfvUc83Jzm6fcsTqfE0rAAAAFM"]
[Wed Sep 02 04:41:38.907596 2026] [:error] [pid 24762:tid 140628008584960] [client 20.48.250.41:61210] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/acxx.php"] [unique_id "apfvUkvOhgfvInIzUv8q0AAAABI"]
[Wed Sep 02 04:41:40.123369 2026] [:error] [pid 13064:tid 140628025370368] [client 20.48.250.41:61190] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/disengaging.php"] [unique_id "apfvVGO4FfejT6BQfS4hiAAAAJA"]
[Wed Sep 02 04:41:41.344927 2026] [:error] [pid 13378:tid 140628067333888] [client 20.48.250.41:59998] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/xrp.php"] [unique_id "apfvVRZ2kcN90LY1LU_3aQAAAQs"]
[Wed Sep 02 04:41:42.558378 2026] [:error] [pid 13064:tid 140628000192256] [client 20.48.250.41:59996] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/ccs.php"] [unique_id "apfvVmO4FfejT6BQfS4hiQAAAJM"]
[Wed Sep 02 04:41:43.779608 2026] [:error] [pid 24762:tid 140627983406848] [client 20.48.250.41:59930] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/cord.php"] [unique_id "apfvV0vOhgfvInIzUv8q0wAAABU"]
[Wed Sep 02 04:41:44.995904 2026] [:error] [pid 24762:tid 140628219078400] [client 20.48.250.41:61236] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/02.php"] [unique_id "apfvWEvOhgfvInIzUv8q1QAAAAE"]
[Wed Sep 02 04:41:46.211311 2026] [:error] [pid 13062:tid 140628202292992] [client 20.48.250.41:61247] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/dev.php"] [unique_id "apfvWs83Jzm6fcsTqfE0rwAAAEM"]
[Wed Sep 02 04:41:47.414407 2026] [:error] [pid 13062:tid 140628084119296] [client 20.48.250.41:61293] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/z60.php"] [unique_id "apfvW883Jzm6fcsTqfE0sQAAAEk"]
[Wed Sep 02 04:41:48.643424 2026] [:error] [pid 13064:tid 140628008584960] [client 20.48.250.41:61232] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/tfm.php"] [unique_id "apfvXGO4FfejT6BQfS4hjQAAAJI"]
[Wed Sep 02 04:41:49.850551 2026] [:error] [pid 13378:tid 140627966621440] [client 20.48.250.41:59943] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/2020.php"] [unique_id "apfvXRZ2kcN90LY1LU_3cQAAARc"]
[Wed Sep 02 04:41:51.072954 2026] [:error] [pid 13065:tid 140627991799552] [client 20.48.250.41:61292] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/jdlqi.php"] [unique_id "apfvX8La7rlBbtzQAsju3AAAANQ"]
[Wed Sep 02 04:41:52.278187 2026] [:error] [pid 24762:tid 140628092512000] [client 20.48.250.41:61204] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/ws49.php"] [unique_id "apfvYEvOhgfvInIzUv8q2gAAAAg"]
[Wed Sep 02 04:41:53.514946 2026] [:error] [pid 13378:tid 140628016977664] [client 20.48.250.41:61196] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/global.php"] [unique_id "apfvYRZ2kcN90LY1LU_3dQAAARE"]
[Wed Sep 02 04:41:54.734677 2026] [:error] [pid 13062:tid 140628042155776] [client 20.48.250.41:60465] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/rp8zi.php"] [unique_id "apfvYs83Jzm6fcsTqfE0tQAAAE4"]
[Wed Sep 02 04:41:55.988023 2026] [:error] [pid 24762:tid 140628042155776] [client 20.48.250.41:60468] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/elp.php"] [unique_id "apfvY0vOhgfvInIzUv8q3gAAAA4"]
[Wed Sep 02 04:41:57.204166 2026] [:error] [pid 24762:tid 140627991799552] [client 20.48.250.41:61191] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/taff.php"] [unique_id "apfvZUvOhgfvInIzUv8q4AAAABQ"]
[Wed Sep 02 04:41:58.429229 2026] [:error] [pid 13378:tid 140628042155776] [client 20.48.250.41:61200] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/45.php"] [unique_id "apfvZhZ2kcN90LY1LU_3fwAAAQ4"]
[Wed Sep 02 04:41:59.648416 2026] [:error] [pid 13065:tid 140628016977664] [client 20.48.250.41:59999] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/4.php"] [unique_id "apfvZ8La7rlBbtzQAsju3QAAANE"]
[Wed Sep 02 04:42:00.871838 2026] [:error] [pid 13378:tid 140627958228736] [client 20.48.250.41:61271] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/sa.php7"] [unique_id "apfvaBZ2kcN90LY1LU_3gwAAARg"]
[Wed Sep 02 04:42:02.075665 2026] [:error] [pid 13064:tid 140628185507584] [client 20.48.250.41:59919] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/lzyrj.php"] [unique_id "apfvamO4FfejT6BQfS4hkgAAAIU"]
[Wed Sep 02 04:42:03.300318 2026] [:error] [pid 13065:tid 140628177114880] [client 20.48.250.41:59904] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/m.php"] [unique_id "apfva8La7rlBbtzQAsju3wAAAMY"]
[Wed Sep 02 04:42:04.511582 2026] [:error] [pid 13064:tid 140627975014144] [client 20.48.250.41:60533] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/fishmen.php"] [unique_id "apfvbGO4FfejT6BQfS4hlAAAAJY"]
[Wed Sep 02 04:42:05.731199 2026] [:error] [pid 13062:tid 140628084119296] [client 20.48.250.41:60008] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/includes/phpinfo.php"] [unique_id "apfvbc83Jzm6fcsTqfE0vQAAAEk"]
[Wed Sep 02 04:42:06.957548 2026] [:error] [pid 13378:tid 140628067333888] [client 20.48.250.41:60503] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/phrensying.php"] [unique_id "apfvbhZ2kcN90LY1LU_3iQAAAQs"]
[Wed Sep 02 04:42:08.194839 2026] [:error] [pid 24762:tid 140628016977664] [client 20.48.250.41:60003] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/chosen.php"] [unique_id "apfvcEvOhgfvInIzUv8q8wAAABE"]
[Wed Sep 02 04:42:09.440007 2026] [:error] [pid 24762:tid 140627983406848] [client 20.48.250.41:61214] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/parturiency.php"] [unique_id "apfvcUvOhgfvInIzUv8rQgAAABU"]
[Wed Sep 02 04:42:10.675129 2026] [:error] [pid 13062:tid 140628058941184] [client 20.48.250.41:61201] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/x3.php"] [unique_id "apfvcs83Jzm6fcsTqfE09wAAAEw"]
[Wed Sep 02 04:42:11.909434 2026] [:error] [pid 24762:tid 140628075726592] [client 20.48.250.41:60451] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "apfvc0vOhgfvInIzUv8rUgAAAAo"]
[Wed Sep 02 04:42:13.126078 2026] [:error] [pid 24762:tid 140628177114880] [client 20.48.250.41:61239] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/ww1.php"] [unique_id "apfvdUvOhgfvInIzUv8rVQAAAAY"]
[Wed Sep 02 04:42:14.346983 2026] [:error] [pid 13062:tid 140628219078400] [client 20.48.250.41:59964] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/gk.php"] [unique_id "apfvds83Jzm6fcsTqfE1igAAAEE"]
[Wed Sep 02 04:42:15.558348 2026] [:error] [pid 13378:tid 140628025370368] [client 20.48.250.41:61216] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/admin.php"] [unique_id "apfvdxZ2kcN90LY1LU_3kAAAARA"]
[Wed Sep 02 04:42:16.794174 2026] [:error] [pid 24762:tid 140628000192256] [client 20.48.250.41:60534] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/gecko.php"] [unique_id "apfveEvOhgfvInIzUv8rvAAAABM"]
[Wed Sep 02 04:42:18.037945 2026] [:error] [pid 13378:tid 140627958228736] [client 20.48.250.41:60016] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/cyanamids.php"] [unique_id "apfvehZ2kcN90LY1LU_3kwAAARg"]
[Wed Sep 02 04:42:19.268071 2026] [:error] [pid 24762:tid 140628210685696] [client 20.48.250.41:60425] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/assets/as.php"] [unique_id "apfve0vOhgfvInIzUv8sBAAAAAI"]
[Wed Sep 02 04:42:20.478670 2026] [:error] [pid 13062:tid 140628050548480] [client 20.48.250.41:61231] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/asciferous.php"] [unique_id "apfvfM83Jzm6fcsTqfE18wAAAE0"]
[Wed Sep 02 04:42:21.703335 2026] [:error] [pid 13062:tid 140627983406848] [client 20.48.250.41:61224] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/duplicand.php"] [unique_id "apfvfc83Jzm6fcsTqfE2EgAAAFU"]
[Wed Sep 02 04:42:22.910918 2026] [:error] [pid 13064:tid 140628008584960] [client 20.48.250.41:61212] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/55b76.php"] [unique_id "apfvfmO4FfejT6BQfS4hlgAAAJI"]
[Wed Sep 02 04:42:24.147840 2026] [:error] [pid 13065:tid 140628227471104] [client 20.48.250.41:11732] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-bugs.php"] [unique_id "apfvgMLa7rlBbtzQAsju4wAAAMA"]
[Wed Sep 02 04:42:25.381433 2026] [:error] [pid 13065:tid 140628033763072] [client 20.48.250.41:60433] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/anjay.php"] [unique_id "apfvgcLa7rlBbtzQAsju5AAAAM8"]
[Wed Sep 02 04:42:26.609968 2026] [:error] [pid 24762:tid 140627958228736] [client 20.48.250.41:60511] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/oc460l3x.php"] [unique_id "apfvgkvOhgfvInIzUv8s1wAAABg"]
[Wed Sep 02 04:42:27.832512 2026] [:error] [pid 24762:tid 140627983406848] [client 20.48.250.41:60462] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/unbefittingly.php"] [unique_id "apfvg0vOhgfvInIzUv8tJQAAABU"]
[Wed Sep 02 04:42:29.052711 2026] [:error] [pid 24762:tid 140628100904704] [client 20.48.250.41:61241] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/f.php"] [unique_id "apfvhUvOhgfvInIzUv8tcQAAAAc"]
[Wed Sep 02 04:42:30.265414 2026] [:error] [pid 13064:tid 140628210685696] [client 20.48.250.41:60434] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/bolt.php"] [unique_id "apfvhmO4FfejT6BQfS4iIQAAAII"]
[Wed Sep 02 04:42:31.493553 2026] [:error] [pid 24762:tid 140628058941184] [client 20.48.250.41:60490] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "apfvh0vOhgfvInIzUv8togAAAAw"]
[Wed Sep 02 04:42:32.713390 2026] [:error] [pid 24762:tid 140628008584960] [client 20.48.250.41:60487] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/fifi.php"] [unique_id "apfviEvOhgfvInIzUv8t7gAAABI"]
[Wed Sep 02 04:42:33.934818 2026] [:error] [pid 24762:tid 140628050548480] [client 20.48.250.41:60473] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/xxa.php"] [unique_id "apfviUvOhgfvInIzUv8uPgAAAA0"]
[Wed Sep 02 04:42:35.160388 2026] [:error] [pid 24762:tid 140628000192256] [client 20.48.250.41:59976] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/god4m.php"] [unique_id "apfvi0vOhgfvInIzUv8uigAAABM"]
[Wed Sep 02 04:42:36.372656 2026] [:error] [pid 24762:tid 140628185507584] [client 20.48.250.41:60543] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/ouh.php"] [unique_id "apfvjEvOhgfvInIzUv8u1gAAAAU"]
[Wed Sep 02 04:42:37.607903 2026] [:error] [pid 24762:tid 140628067333888] [client 20.48.250.41:61285] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/lm18.php"] [unique_id "apfvjUvOhgfvInIzUv8vJAAAAAs"]
[Wed Sep 02 04:42:38.838822 2026] [:error] [pid 24762:tid 140627958228736] [client 20.48.250.41:59918] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/.well-known/admin.php"] [unique_id "apfvjkvOhgfvInIzUv8vdQAAABg"]
[Wed Sep 02 04:42:40.058102 2026] [:error] [pid 13378:tid 140628227471104] [client 20.48.250.41:61203] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/ioxi-o.php"] [unique_id "apfvkBZ2kcN90LY1LU_33AAAAQA"]
[Wed Sep 02 04:42:41.290166 2026] [:error] [pid 13065:tid 140628202292992] [client 20.48.250.41:61259] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/an.php"] [unique_id "apfvkcLa7rlBbtzQAsju6QAAAMM"]
[Wed Sep 02 04:42:42.505391 2026] [:error] [pid 24762:tid 140628084119296] [client 20.48.250.41:61306] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/s.php"] [unique_id "apfvkkvOhgfvInIzUv8vqQAAAAk"]
[Wed Sep 02 04:42:43.717605 2026] [:error] [pid 13378:tid 140628092512000] [client 20.48.250.41:61187] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-content/themes/index.php"] [unique_id "apfvkxZ2kcN90LY1LU_4KgAAAQg"]
[Wed Sep 02 04:42:44.926884 2026] [:error] [pid 13064:tid 140628227471104] [client 20.48.250.41:60436] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/okxh.php"] [unique_id "apfvlGO4FfejT6BQfS4ihwAAAIA"]
[Wed Sep 02 04:42:46.145785 2026] [:error] [pid 13064:tid 140627966621440] [client 20.48.250.41:61295] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-admin/zoko.php"] [unique_id "apfvlmO4FfejT6BQfS4i2AAAAJc"]
[Wed Sep 02 04:42:47.372609 2026] [:error] [pid 24762:tid 140628058941184] [client 20.48.250.41:60437] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/zr.php"] [unique_id "apfvl0vOhgfvInIzUv8wEgAAAAw"]
[Wed Sep 02 04:42:48.606338 2026] [:error] [pid 13378:tid 140628050548480] [client 20.48.250.41:61256] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/irpl4xz4fmlzm4tlvvu4h1mCdefault.php"] [unique_id "apfvmBZ2kcN90LY1LU_4MAAAAQ0"]
[Wed Sep 02 04:42:49.836507 2026] [:error] [pid 13378:tid 140628219078400] [client 20.48.250.41:59983] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/pNRzcP6wtYy.php"] [unique_id "apfvmRZ2kcN90LY1LU_4MwAAAQE"]
[Wed Sep 02 04:42:51.064515 2026] [:error] [pid 24762:tid 140628185507584] [client 20.48.250.41:59905] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/edit-tags.php"] [unique_id "apfvm0vOhgfvInIzUv8wHQAAAAU"]
[Wed Sep 02 04:42:52.286414 2026] [:error] [pid 13064:tid 140628227471104] [client 20.48.250.41:61267] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/mg.php"] [unique_id "apfvnGO4FfejT6BQfS4jOgAAAIA"]
[Wed Sep 02 04:42:53.493425 2026] [:error] [pid 13064:tid 140627983406848] [client 20.48.250.41:61264] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/doti.php"] [unique_id "apfvnWO4FfejT6BQfS4jPAAAAJU"]
[Wed Sep 02 04:42:54.730695 2026] [:error] [pid 13378:tid 140628067333888] [client 20.48.250.41:61288] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/bak.php"] [unique_id "apfvnhZ2kcN90LY1LU_4QwAAAQs"]
[Wed Sep 02 04:42:55.938049 2026] [:error] [pid 13378:tid 140628067333888] [client 20.48.250.41:61253] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-png.php"] [unique_id "apfvnxZ2kcN90LY1LU_4UAAAAQs"]
[Wed Sep 02 04:42:57.151599 2026] [:error] [pid 24762:tid 140628185507584] [client 20.48.250.41:61233] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/nope.php"] [unique_id "apfvoUvOhgfvInIzUv8wdwAAAAU"]
[Wed Sep 02 04:42:58.372505 2026] [:error] [pid 13064:tid 140628058941184] [client 20.48.250.41:60418] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/gelay.php"] [unique_id "apfvomO4FfejT6BQfS4jTAAAAIw"]
[Wed Sep 02 04:42:59.588193 2026] [:error] [pid 13378:tid 140628193900288] [client 20.48.250.41:59980] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/hbyra.php"] [unique_id "apfvoxZ2kcN90LY1LU_4VwAAAQQ"]
[Wed Sep 02 04:43:00.805508 2026] [:error] [pid 24762:tid 140628067333888] [client 20.48.250.41:59910] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/33.php"] [unique_id "apfvpEvOhgfvInIzUv8wfAAAAAs"]
[Wed Sep 02 04:43:02.012616 2026] [:error] [pid 13378:tid 140628202292992] [client 20.48.250.41:60536] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-includes/IXR/admin.php"] [unique_id "apfvphZ2kcN90LY1LU_4WQAAAQM"]
[Wed Sep 02 04:43:03.216737 2026] [:error] [pid 13062:tid 140627991799552] [client 20.48.250.41:61299] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/index/fucku.php"] [unique_id "apfvp883Jzm6fcsTqfE2yAAAAFQ"]
[Wed Sep 02 04:43:04.442058 2026] [:error] [pid 24762:tid 140628202292992] [client 20.48.250.41:60501] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/fm2.php"] [unique_id "apfvqEvOhgfvInIzUv8wfgAAAAM"]
[Wed Sep 02 04:43:05.659384 2026] [:error] [pid 13062:tid 140628202292992] [client 20.48.250.41:61244] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-admin/setup-config.php"] [unique_id "apfvqc83Jzm6fcsTqfE2ywAAAEM"]
[Wed Sep 02 04:43:06.913193 2026] [:error] [pid 13064:tid 140627975014144] [client 20.48.250.41:60479] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/admin.php"] [unique_id "apfvqmO4FfejT6BQfS4jVAAAAJY"]
[Wed Sep 02 04:43:08.127473 2026] [:error] [pid 13062:tid 140627975014144] [client 20.48.250.41:60422] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/acp.php"] [unique_id "apfvrM83Jzm6fcsTqfE20gAAAFY"]
[Wed Sep 02 04:43:09.346984 2026] [:error] [pid 13378:tid 140628210685696] [client 20.48.250.41:60488] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/Contrller.php"] [unique_id "apfvrRZ2kcN90LY1LU_4YQAAAQI"]
[Wed Sep 02 04:43:10.565030 2026] [:error] [pid 13064:tid 140628210685696] [client 20.48.250.41:61252] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/autoload_classmap.php"] [unique_id "apfvrmO4FfejT6BQfS4jVwAAAII"]
[Wed Sep 02 04:43:11.787333 2026] [:error] [pid 13378:tid 140628193900288] [client 20.48.250.41:60524] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/admin-header.php"] [unique_id "apfvrxZ2kcN90LY1LU_4ZAAAAQQ"]
[Wed Sep 02 04:43:13.010241 2026] [:error] [pid 24762:tid 140628016977664] [client 20.48.250.41:61208] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/pent.php"] [unique_id "apfvsUvOhgfvInIzUv8whQAAABE"]
[Wed Sep 02 04:43:14.229904 2026] [:error] [pid 13062:tid 140628067333888] [client 20.48.250.41:61222] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/poliomyelopathy.php"] [unique_id "apfvss83Jzm6fcsTqfE20wAAAEs"]
[Wed Sep 02 04:43:15.470292 2026] [:error] [pid 13378:tid 140627983406848] [client 20.48.250.41:60421] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-admin/maint/about.php"] [unique_id "apfvsxZ2kcN90LY1LU_4ZwAAARU"]
[Wed Sep 02 04:43:16.700457 2026] [:error] [pid 24762:tid 140628202292992] [client 20.48.250.41:60009] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/pepe.php"] [unique_id "apfvtEvOhgfvInIzUv8wigAAAAM"]
[Wed Sep 02 04:43:17.917602 2026] [:error] [pid 24762:tid 140628042155776] [client 20.48.250.41:61226] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/ws66.php"] [unique_id "apfvtUvOhgfvInIzUv8wjAAAAA4"]
[Wed Sep 02 04:43:19.133102 2026] [:error] [pid 24762:tid 140628185507584] [client 20.48.250.41:61272] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/kao.php"] [unique_id "apfvt0vOhgfvInIzUv8wjgAAAAU"]
[Wed Sep 02 04:43:20.344148 2026] [:error] [pid 24762:tid 140628075726592] [client 20.48.250.41:60476] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wsd.php"] [unique_id "apfvuEvOhgfvInIzUv8wkQAAAAo"]
[Wed Sep 02 04:43:21.566912 2026] [:error] [pid 13062:tid 140628033763072] [client 20.48.250.41:60483] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/ms.php"] [unique_id "apfvuc83Jzm6fcsTqfE22gAAAE8"]
[Wed Sep 02 04:43:22.769314 2026] [:error] [pid 24762:tid 140628058941184] [client 20.48.250.41:61273] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/ws85.php"] [unique_id "apfvukvOhgfvInIzUv8wlAAAAAw"]
[Wed Sep 02 04:43:23.972129 2026] [:error] [pid 24762:tid 140628202292992] [client 20.48.250.41:59932] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/ff1.php"] [unique_id "apfvu0vOhgfvInIzUv8wlQAAAAM"]
[Wed Sep 02 04:43:25.188382 2026] [:error] [pid 24762:tid 140628084119296] [client 20.48.250.41:60031] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/areak1.php"] [unique_id "apfvvUvOhgfvInIzUv8wmgAAAAk"]
[Wed Sep 02 04:43:26.417097 2026] [:error] [pid 13378:tid 140628210685696] [client 20.48.250.41:59947] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/ssxsl.php"] [unique_id "apfvvhZ2kcN90LY1LU_4cAAAAQI"]
[Wed Sep 02 04:43:27.630933 2026] [:error] [pid 13064:tid 140627983406848] [client 20.48.250.41:61290] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-admin/includes/nav.php"] [unique_id "apfvv2O4FfejT6BQfS4jWgAAAJU"]
[Wed Sep 02 04:43:28.848286 2026] [:error] [pid 13064:tid 140628000192256] [client 20.48.250.41:60466] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/shop.php"] [unique_id "apfvwGO4FfejT6BQfS4jWwAAAJM"]
[Wed Sep 02 04:43:30.054785 2026] [:error] [pid 24762:tid 140628058941184] [client 20.48.250.41:61279] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/NWqz649FIe7.php"] [unique_id "apfvwkvOhgfvInIzUv8wogAAAAw"]
[Wed Sep 02 04:43:31.289334 2026] [:error] [pid 13065:tid 140628193900288] [client 20.48.250.41:61207] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/r79.php"] [unique_id "apfvw8La7rlBbtzQAsjv5QAAAMQ"]
[Wed Sep 02 04:43:32.511289 2026] [:error] [pid 13065:tid 140628227471104] [client 20.48.250.41:61227] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/l3gi0n.php"] [unique_id "apfvxMLa7rlBbtzQAsjv5gAAAMA"]
[Wed Sep 02 04:43:33.742579 2026] [:error] [pid 13065:tid 140628084119296] [client 20.48.250.41:61246] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wpo.php"] [unique_id "apfvxcLa7rlBbtzQAsjv5wAAAMk"]
[Wed Sep 02 04:43:34.981549 2026] [:error] [pid 13378:tid 140628210685696] [client 20.48.250.41:61211] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/lib.php"] [unique_id "apfvxhZ2kcN90LY1LU_4fQAAAQI"]
[Wed Sep 02 04:43:36.189126 2026] [:error] [pid 13378:tid 140628219078400] [client 20.48.250.41:61248] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-admin/js/index.php"] [unique_id "apfvyBZ2kcN90LY1LU_4hAAAAQE"]
[Wed Sep 02 04:43:37.412358 2026] [:error] [pid 13064:tid 140628008584960] [client 20.48.250.41:61260] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/ws67.php"] [unique_id "apfvyWO4FfejT6BQfS4jXAAAAJI"]
[Wed Sep 02 04:43:38.646854 2026] [:error] [pid 13378:tid 140627983406848] [client 20.48.250.41:61235] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/RIP.php"] [unique_id "apfvyhZ2kcN90LY1LU_4igAAARU"]
[Wed Sep 02 04:43:39.872126 2026] [:error] [pid 24762:tid 140628092512000] [client 20.48.250.41:60454] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-content/admin.php"] [unique_id "apfvy0vOhgfvInIzUv8wrQAAAAg"]
[Wed Sep 02 04:43:41.083044 2026] [:error] [pid 13062:tid 140628210685696] [client 20.48.250.41:61217] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/aduot.php"] [unique_id "apfvzc83Jzm6fcsTqfE23AAAAEI"]
[Wed Sep 02 04:43:42.299504 2026] [:error] [pid 13065:tid 140628067333888] [client 20.48.250.41:11719] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/kyami.php"] [unique_id "apfvzsLa7rlBbtzQAsjv6wAAAMs"]
[Wed Sep 02 04:43:43.520525 2026] [:error] [pid 13062:tid 140628042155776] [client 20.48.250.41:60421] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/56c53.php"] [unique_id "apfvz883Jzm6fcsTqfE23QAAAE4"]
[Wed Sep 02 04:43:44.749737 2026] [:error] [pid 13065:tid 140627975014144] [client 20.48.250.41:60510] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/rupvs.php"] [unique_id "apfv0MLa7rlBbtzQAsjv7AAAANY"]
[Wed Sep 02 04:43:45.993361 2026] [:error] [pid 13378:tid 140628100904704] [client 20.48.250.41:60521] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/logs.php"] [unique_id "apfv0RZ2kcN90LY1LU_4lgAAAQc"]
[Wed Sep 02 04:43:47.225720 2026] [:error] [pid 13378:tid 140628000192256] [client 20.48.250.41:61275] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-includes/fonts/about.php"] [unique_id "apfv0xZ2kcN90LY1LU_4mAAAARM"]
[Wed Sep 02 04:43:48.434739 2026] [:error] [pid 24762:tid 140628016977664] [client 20.48.250.41:60512] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/miru3.php"] [unique_id "apfv1EvOhgfvInIzUv8wtQAAABE"]
[Wed Sep 02 04:43:49.642809 2026] [:error] [pid 13064:tid 140628092512000] [client 20.48.250.41:61263] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/ahax.php"] [unique_id "apfv1WO4FfejT6BQfS4jZQAAAIg"]
[Wed Sep 02 04:43:50.854951 2026] [:error] [pid 13378:tid 140628227471104] [client 20.48.250.41:60531] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/mob.php"] [unique_id "apfv1hZ2kcN90LY1LU_4mwAAAQA"]
[Wed Sep 02 04:43:52.072104 2026] [:error] [pid 13065:tid 140628084119296] [client 20.48.250.41:61240] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/god.php"] [unique_id "apfv2MLa7rlBbtzQAsjv7wAAAMk"]
[Wed Sep 02 04:43:53.310072 2026] [:error] [pid 13064:tid 140628210685696] [client 20.48.250.41:61184] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/phpinfo.php.tmp"] [unique_id "apfv2WO4FfejT6BQfS4jaAAAAII"]
[Wed Sep 02 04:43:54.550413 2026] [:error] [pid 13064:tid 140627966621440] [client 20.48.250.41:59962] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/tesTyuj.php"] [unique_id "apfv2mO4FfejT6BQfS4jagAAAJc"]
[Wed Sep 02 04:43:55.779783 2026] [:error] [pid 13062:tid 140628202292992] [client 20.48.250.41:61230] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/dox.php"] [unique_id "apfv2883Jzm6fcsTqfE26AAAAEM"]
[Wed Sep 02 04:43:57.003249 2026] [:error] [pid 13062:tid 140628092512000] [client 20.48.250.41:61296] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/unbalanceable.php"] [unique_id "apfv3c83Jzm6fcsTqfE27AAAAEg"]
[Wed Sep 02 04:43:58.236784 2026] [:error] [pid 13064:tid 140628193900288] [client 20.48.250.41:60484] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/term.php"] [unique_id "apfv3mO4FfejT6BQfS4jbwAAAIQ"]
[Wed Sep 02 04:43:59.470823 2026] [:error] [pid 13064:tid 140628210685696] [client 20.48.250.41:61228] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/vbv.php"] [unique_id "apfv32O4FfejT6BQfS4jcgAAAII"]
[Wed Sep 02 04:44:00.696023 2026] [:error] [pid 13378:tid 140627983406848] [client 20.48.250.41:61280] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "apfv4BZ2kcN90LY1LU_4pAAAARU"]
[Wed Sep 02 04:44:01.911378 2026] [:error] [pid 24762:tid 140627966621440] [client 20.48.250.41:60504] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/knme.php"] [unique_id "apfv4UvOhgfvInIzUv8wugAAABc"]
[Wed Sep 02 04:44:03.142486 2026] [:error] [pid 13378:tid 140628000192256] [client 20.48.250.41:60467] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/khgdl.php"] [unique_id "apfv4xZ2kcN90LY1LU_4pQAAARM"]
[Wed Sep 02 04:44:12.076157 2026] [:error] [pid 13378:tid 140627958228736] [client 20.48.250.41:61301] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/gifclass.php"] [unique_id "apfv7BZ2kcN90LY1LU_4rgAAARg"]
[Wed Sep 02 04:44:13.303395 2026] [:error] [pid 13062:tid 140627983406848] [client 20.48.250.41:61245] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-includes/assets/index.php"] [unique_id "apfv7c83Jzm6fcsTqfE3AwAAAFU"]
[Wed Sep 02 04:44:14.515425 2026] [:error] [pid 24762:tid 140627958228736] [client 20.48.250.41:61185] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/bak.php"] [unique_id "apfv7kvOhgfvInIzUv8wwAAAABg"]
[Wed Sep 02 04:44:15.726088 2026] [:error] [pid 13062:tid 140628177114880] [client 20.48.250.41:61303] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/sx.php"] [unique_id "apfv7883Jzm6fcsTqfE3BgAAAEY"]
[Wed Sep 02 04:44:16.955687 2026] [:error] [pid 24762:tid 140627983406848] [client 20.48.250.41:61294] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/ws56.php"] [unique_id "apfv8EvOhgfvInIzUv8wwgAAABU"]
[Wed Sep 02 04:44:18.184576 2026] [:error] [pid 24762:tid 140627991799552] [client 20.48.250.41:61257] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "apfv8kvOhgfvInIzUv8wxAAAABQ"]
[Wed Sep 02 04:44:19.397407 2026] [:error] [pid 13065:tid 140628025370368] [client 20.48.250.41:60478] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/redi.php"] [unique_id "apfv88La7rlBbtzQAsjv8QAAANA"]
[Wed Sep 02 04:44:20.641273 2026] [:error] [pid 13065:tid 140628219078400] [client 20.48.250.41:61234] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/atex1.php"] [unique_id "apfv9MLa7rlBbtzQAsjv8wAAAME"]
[Wed Sep 02 04:44:21.848368 2026] [:error] [pid 13065:tid 140628210685696] [client 20.48.250.41:60520] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/newfile.php"] [unique_id "apfv9cLa7rlBbtzQAsjv9AAAAMI"]
[Wed Sep 02 04:44:23.063248 2026] [:error] [pid 13065:tid 140627975014144] [client 20.48.250.41:60506] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/ppk.php"] [unique_id "apfv98La7rlBbtzQAsjv9QAAANY"]
[Wed Sep 02 04:44:24.273499 2026] [:error] [pid 24762:tid 140628016977664] [client 20.48.250.41:60498] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/ss.php"] [unique_id "apfv-EvOhgfvInIzUv8wzQAAABE"]
[Wed Sep 02 04:44:25.497074 2026] [:error] [pid 24762:tid 140627958228736] [client 20.48.250.41:61309] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/xqq.php"] [unique_id "apfv-UvOhgfvInIzUv8wzgAAABg"]
[Wed Sep 02 04:44:26.729651 2026] [:error] [pid 24762:tid 140628067333888] [client 20.48.250.41:61284] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/ws71.php"] [unique_id "apfv-kvOhgfvInIzUv8w0QAAAAs"]
[Wed Sep 02 04:44:27.958081 2026] [:error] [pid 24762:tid 140627966621440] [client 20.48.250.41:60428] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-good.php"] [unique_id "apfv-0vOhgfvInIzUv8w1AAAABc"]
[Wed Sep 02 04:44:29.162860 2026] [:error] [pid 13378:tid 140628050548480] [client 20.48.250.41:60518] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/ww5.php"] [unique_id "apfv_RZ2kcN90LY1LU_4tgAAAQ0"]
[Wed Sep 02 04:44:30.385838 2026] [:error] [pid 24762:tid 140628084119296] [client 20.48.250.41:61202] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/inputs.php"] [unique_id "apfv_kvOhgfvInIzUv8w2QAAAAk"]
[Wed Sep 02 04:44:31.616456 2026] [:error] [pid 13065:tid 140628050548480] [client 20.48.250.41:60542] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/qV9GbcJwZgK.php"] [unique_id "apfv_8La7rlBbtzQAsjv-QAAAM0"]
[Wed Sep 02 04:44:32.846067 2026] [:error] [pid 13064:tid 140627975014144] [client 20.48.250.41:60486] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-title.php"] [unique_id "apfwAGO4FfejT6BQfS4jgAAAAJY"]
[Wed Sep 02 04:44:34.076347 2026] [:error] [pid 24762:tid 140628050548480] [client 20.48.250.41:60435] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/oxse.php"] [unique_id "apfwAkvOhgfvInIzUv8w6QAAAA0"]
[Wed Sep 02 04:44:35.287449 2026] [:error] [pid 13064:tid 140628025370368] [client 20.48.250.41:61242] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/hplfuns.php"] [unique_id "apfwA2O4FfejT6BQfS4jgQAAAJA"]
[Wed Sep 02 04:44:36.500669 2026] [:error] [pid 13378:tid 140628016977664] [client 20.48.250.41:61270] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/alfa-shell-v4.php"] [unique_id "apfwBBZ2kcN90LY1LU_4wgAAARE"]
[Wed Sep 02 04:44:37.741279 2026] [:error] [pid 13378:tid 140628227471104] [client 20.48.250.41:61199] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/lp6.php"] [unique_id "apfwBRZ2kcN90LY1LU_4wwAAAQA"]
[Wed Sep 02 04:44:38.964207 2026] [:error] [pid 13065:tid 140628000192256] [client 20.48.250.41:60472] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/install.php"] [unique_id "apfwBsLa7rlBbtzQAsjwAwAAANM"]
[Wed Sep 02 04:44:40.182240 2026] [:error] [pid 24762:tid 140628008584960] [client 20.48.250.41:61188] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/vanda.php"] [unique_id "apfwCEvOhgfvInIzUv8w8AAAABI"]
[Wed Sep 02 04:44:41.387181 2026] [:error] [pid 13065:tid 140627991799552] [client 20.48.250.41:61300] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "apfwCcLa7rlBbtzQAsjwBwAAANQ"]
[Wed Sep 02 04:44:42.627153 2026] [:error] [pid 13378:tid 140628227471104] [client 20.48.250.41:60429] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/qsntqiho.php"] [unique_id "apfwChZ2kcN90LY1LU_4yQAAAQA"]
[Wed Sep 02 04:44:43.846562 2026] [:error] [pid 24762:tid 140628075726592] [client 20.48.250.41:60416] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/erty.php"] [unique_id "apfwC0vOhgfvInIzUv8w-AAAAAo"]
[Wed Sep 02 04:44:45.088924 2026] [:error] [pid 13378:tid 140628210685696] [client 20.48.250.41:59968] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/new4.php"] [unique_id "apfwDRZ2kcN90LY1LU_4zwAAAQI"]
[Wed Sep 02 04:44:46.323511 2026] [:error] [pid 13064:tid 140628227471104] [client 20.48.250.41:59965] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/miso.php"] [unique_id "apfwDmO4FfejT6BQfS4jgwAAAIA"]
[Wed Sep 02 04:44:47.558435 2026] [:error] [pid 13065:tid 140628210685696] [client 20.48.250.41:60497] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/kaza.php"] [unique_id "apfwD8La7rlBbtzQAsjwCQAAAMI"]
[Wed Sep 02 04:44:48.778344 2026] [:error] [pid 24762:tid 140627966621440] [client 20.48.250.41:11758] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/dx.php"] [unique_id "apfwEEvOhgfvInIzUv8w-wAAABc"]
[Wed Sep 02 04:44:50.011261 2026] [:error] [pid 13062:tid 140627958228736] [client 20.48.250.41:61254] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/t.php"] [unique_id "apfwEs83Jzm6fcsTqfE3SgAAAFg"]
[Wed Sep 02 04:44:51.233808 2026] [:error] [pid 13065:tid 140628100904704] [client 20.48.250.41:61198] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/ws58.php"] [unique_id "apfwE8La7rlBbtzQAsjwCwAAAMc"]
[Wed Sep 02 04:44:52.446105 2026] [:error] [pid 13378:tid 140627966621440] [client 20.48.250.41:61289] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/php_info.php~"] [unique_id "apfwFBZ2kcN90LY1LU_43AAAARc"]
[Wed Sep 02 04:44:53.682061 2026] [:error] [pid 13378:tid 140628008584960] [client 20.48.250.41:60432] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-rss4.php"] [unique_id "apfwFRZ2kcN90LY1LU_43gAAARI"]
[Wed Sep 02 04:44:54.909416 2026] [:error] [pid 24762:tid 140628092512000] [client 20.48.250.41:61305] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/s.php"] [unique_id "apfwFkvOhgfvInIzUv8xAAAAAAg"]
[Wed Sep 02 04:44:56.114387 2026] [:error] [pid 24762:tid 140628067333888] [client 20.48.250.41:61215] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/pss.php"] [unique_id "apfwGEvOhgfvInIzUv8xBQAAAAs"]
[Wed Sep 02 04:44:57.322549 2026] [:error] [pid 24762:tid 140628058941184] [client 20.48.250.41:60502] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/s12.php"] [unique_id "apfwGUvOhgfvInIzUv8xCAAAAAw"]
[Wed Sep 02 04:44:58.532930 2026] [:error] [pid 24762:tid 140628227471104] [client 20.48.250.41:60453] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/errorfile.php"] [unique_id "apfwGkvOhgfvInIzUv8xCwAAAAA"]
[Wed Sep 02 04:44:59.741180 2026] [:error] [pid 24762:tid 140628042155776] [client 20.48.250.41:59987] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/pp.php"] [unique_id "apfwG0vOhgfvInIzUv8xFQAAAA4"]
[Wed Sep 02 04:45:00.975741 2026] [:error] [pid 13064:tid 140628185507584] [client 20.48.250.41:60525] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/public/bootstrap.php"] [unique_id "apfwHGO4FfejT6BQfS4jhQAAAIU"]
[Wed Sep 02 04:45:02.186010 2026] [:error] [pid 13065:tid 140628008584960] [client 20.48.250.41:60460] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/blurbs18.php"] [unique_id "apfwHsLa7rlBbtzQAsjwDwAAANI"]
[Wed Sep 02 04:45:03.406277 2026] [:error] [pid 13064:tid 140628177114880] [client 20.48.250.41:59916] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/av.php"] [unique_id "apfwH2O4FfejT6BQfS4jhgAAAIY"]
[Wed Sep 02 04:45:04.622241 2026] [:error] [pid 13065:tid 140628075726592] [client 20.48.250.41:60007] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/ioxi002.PhP7"] [unique_id "apfwIMLa7rlBbtzQAsjwEAAAAMo"]
[Wed Sep 02 04:45:05.832391 2026] [:error] [pid 24762:tid 140628075726592] [client 20.48.250.41:61219] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-64wscx6shd.php"] [unique_id "apfwIUvOhgfvInIzUv8xIAAAAAo"]
[Wed Sep 02 04:45:07.077904 2026] [:error] [pid 13064:tid 140627991799552] [client 20.48.250.41:60528] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "apfwI2O4FfejT6BQfS4jhwAAAJQ"]
[Wed Sep 02 04:45:08.304858 2026] [:error] [pid 24762:tid 140627966621440] [client 20.48.250.41:60494] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/callback.php"] [unique_id "apfwJEvOhgfvInIzUv8xJAAAABc"]
[Wed Sep 02 04:45:09.528058 2026] [:error] [pid 13065:tid 140628050548480] [client 20.48.250.41:61311] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-content/asasx.php"] [unique_id "apfwJcLa7rlBbtzQAsjwFAAAAM0"]
[Wed Sep 02 04:45:10.747169 2026] [:error] [pid 13064:tid 140628084119296] [client 20.48.250.41:61205] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/v.php"] [unique_id "apfwJmO4FfejT6BQfS4jigAAAIk"]
[Wed Sep 02 04:45:11.966404 2026] [:error] [pid 13064:tid 140628058941184] [client 20.48.250.41:61255] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/f8moue.php"] [unique_id "apfwJ2O4FfejT6BQfS4jiwAAAIw"]
[Wed Sep 02 04:45:13.179181 2026] [:error] [pid 13065:tid 140628042155776] [client 20.48.250.41:60447] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/index/function.php"] [unique_id "apfwKcLa7rlBbtzQAsjwFgAAAM4"]
[Wed Sep 02 04:45:14.391236 2026] [:error] [pid 13378:tid 140628227471104] [client 20.48.250.41:60458] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/motu.php"] [unique_id "apfwKhZ2kcN90LY1LU_46wAAAQA"]
[Wed Sep 02 04:45:15.590743 2026] [:error] [pid 13378:tid 140628058941184] [client 20.48.250.41:61192] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/8xg5Bv6XIUw.php"] [unique_id "apfwKxZ2kcN90LY1LU_47QAAAQw"]
[Wed Sep 02 04:45:16.795590 2026] [:error] [pid 13378:tid 140628177114880] [client 20.48.250.41:61285] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wan.php"] [unique_id "apfwLBZ2kcN90LY1LU_47gAAAQY"]
[Wed Sep 02 04:45:18.030326 2026] [:error] [pid 13064:tid 140628227471104] [client 20.48.250.41:11762] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/grsiuk.php"] [unique_id "apfwLmO4FfejT6BQfS4jjAAAAIA"]
[Wed Sep 02 04:45:19.280431 2026] [:error] [pid 13378:tid 140627958228736] [client 20.48.250.41:61274] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/abc.php"] [unique_id "apfwLxZ2kcN90LY1LU_48AAAARg"]
[Wed Sep 02 04:45:20.498029 2026] [:error] [pid 13064:tid 140628185507584] [client 20.48.250.41:60495] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/co.php"] [unique_id "apfwMGO4FfejT6BQfS4jjgAAAIU"]
[Wed Sep 02 04:45:21.731353 2026] [:error] [pid 24762:tid 140628219078400] [client 20.48.250.41:59985] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/buy.php"] [unique_id "apfwMUvOhgfvInIzUv8xNQAAAAE"]
[Wed Sep 02 04:45:22.949063 2026] [:error] [pid 13378:tid 140628008584960] [client 20.48.250.41:60005] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/gel4y.php"] [unique_id "apfwMhZ2kcN90LY1LU_48gAAARI"]
[Wed Sep 02 04:45:24.165248 2026] [:error] [pid 13378:tid 140628016977664] [client 20.48.250.41:60419] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/FSCMNvnjPX4.php"] [unique_id "apfwNBZ2kcN90LY1LU_49QAAARE"]
[Wed Sep 02 04:45:25.380971 2026] [:error] [pid 24762:tid 140628000192256] [client 20.48.250.41:60537] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/gecko-litespeed.php"] [unique_id "apfwNUvOhgfvInIzUv8xOwAAABM"]
[Wed Sep 02 04:45:26.621671 2026] [:error] [pid 13065:tid 140628193900288] [client 20.48.250.41:60463] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wteed.php"] [unique_id "apfwNsLa7rlBbtzQAsjwFwAAAMQ"]
[Wed Sep 02 04:45:27.831997 2026] [:error] [pid 13065:tid 140627958228736] [client 20.48.250.41:11718] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/test1.php"] [unique_id "apfwN8La7rlBbtzQAsjwGAAAANg"]
[Wed Sep 02 04:45:29.068239 2026] [:error] [pid 13378:tid 140628177114880] [client 20.48.250.41:61291] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/b.php"] [unique_id "apfwORZ2kcN90LY1LU_4-AAAAQY"]
[Wed Sep 02 04:45:30.317424 2026] [:error] [pid 13378:tid 140628050548480] [client 20.48.250.41:59992] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/asd.php"] [unique_id "apfwOhZ2kcN90LY1LU_4-gAAAQ0"]
[Wed Sep 02 04:45:31.536217 2026] [:error] [pid 13065:tid 140627966621440] [client 20.48.250.41:61193] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/tires.php"] [unique_id "apfwO8La7rlBbtzQAsjwGgAAANc"]
[Wed Sep 02 04:45:32.739203 2026] [:error] [pid 13378:tid 140628100904704] [client 20.48.250.41:61261] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/bnm.php"] [unique_id "apfwPBZ2kcN90LY1LU_4-wAAAQc"]
[Wed Sep 02 04:45:33.979610 2026] [:error] [pid 24762:tid 140628016977664] [client 20.48.250.41:60427] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/alf.php"] [unique_id "apfwPUvOhgfvInIzUv8xQQAAABE"]
[Wed Sep 02 04:45:35.213013 2026] [:error] [pid 13065:tid 140628177114880] [client 20.48.250.41:60491] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/pyrometry.php"] [unique_id "apfwP8La7rlBbtzQAsjwHwAAAMY"]
[Wed Sep 02 04:45:36.445326 2026] [:error] [pid 24762:tid 140628193900288] [client 20.48.250.41:61186] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/166.php"] [unique_id "apfwQEvOhgfvInIzUv8xQwAAAAQ"]
[Wed Sep 02 04:45:37.675727 2026] [:error] [pid 13064:tid 140627991799552] [client 20.48.250.41:59975] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/error_log.php"] [unique_id "apfwQWO4FfejT6BQfS4jkQAAAJQ"]
[Wed Sep 02 04:45:38.897987 2026] [:error] [pid 13378:tid 140628008584960] [client 20.48.250.41:60013] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/mpxct.php"] [unique_id "apfwQhZ2kcN90LY1LU_4_wAAARI"]
[Wed Sep 02 04:45:40.122200 2026] [:error] [pid 13065:tid 140627958228736] [client 20.48.250.41:61250] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/66.php"] [unique_id "apfwRMLa7rlBbtzQAsjwKQAAANg"]
[Wed Sep 02 04:45:41.344106 2026] [:error] [pid 13378:tid 140628202292992] [client 20.48.250.41:60431] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/public/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "apfwRRZ2kcN90LY1LU_5AAAAAQM"]
[Wed Sep 02 04:45:42.594252 2026] [:error] [pid 24762:tid 140628084119296] [client 20.48.250.41:60459] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/485.php"] [unique_id "apfwRkvOhgfvInIzUv8xRQAAAAk"]
[Wed Sep 02 04:45:43.799246 2026] [:error] [pid 13378:tid 140628227471104] [client 20.48.250.41:61243] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-content/tBEZGQz.php"] [unique_id "apfwRxZ2kcN90LY1LU_5AQAAAQA"]
[Wed Sep 02 04:45:45.012242 2026] [:error] [pid 13378:tid 140628084119296] [client 20.48.250.41:60517] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/er.php"] [unique_id "apfwSRZ2kcN90LY1LU_5AgAAAQk"]
[Wed Sep 02 04:45:46.259283 2026] [:error] [pid 13378:tid 140628177114880] [client 20.48.250.41:11739] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/byp403.php"] [unique_id "apfwShZ2kcN90LY1LU_5BAAAAQY"]
[Wed Sep 02 04:45:47.494838 2026] [:error] [pid 24762:tid 140627975014144] [client 20.48.250.41:61194] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/z123.php"] [unique_id "apfwS0vOhgfvInIzUv8xRgAAABY"]
[Wed Sep 02 04:45:48.718977 2026] [:error] [pid 24762:tid 140628016977664] [client 20.48.250.41:61237] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/0x.php"] [unique_id "apfwTEvOhgfvInIzUv8xSAAAABE"]
[Wed Sep 02 04:45:49.953296 2026] [:error] [pid 13378:tid 140628193900288] [client 20.48.250.41:61308] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-content/lock360.php"] [unique_id "apfwTRZ2kcN90LY1LU_5BgAAAQQ"]
[Wed Sep 02 04:45:51.167925 2026] [:error] [pid 13378:tid 140628000192256] [client 20.48.250.41:59977] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/fifii.php"] [unique_id "apfwTxZ2kcN90LY1LU_5CQAAARM"]
[Wed Sep 02 04:45:52.384758 2026] [:error] [pid 13064:tid 140628075726592] [client 20.48.250.41:60481] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/adminer-4.6.1-mysql.php"] [unique_id "apfwUGO4FfejT6BQfS4jlgAAAIo"]
[Wed Sep 02 04:45:53.623371 2026] [:error] [pid 24762:tid 140628219078400] [client 20.48.250.41:61249] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/oitava.php"] [unique_id "apfwUUvOhgfvInIzUv8xSwAAAAE"]
[Wed Sep 02 04:45:54.854205 2026] [:error] [pid 24762:tid 140628084119296] [client 20.48.250.41:61189] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-mail.php"] [unique_id "apfwUkvOhgfvInIzUv8xTwAAAAk"]
[Wed Sep 02 04:45:56.074703 2026] [:error] [pid 13378:tid 140628227471104] [client 20.48.250.41:61286] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-act.php"] [unique_id "apfwVBZ2kcN90LY1LU_5DQAAAQA"]
[Wed Sep 02 04:45:57.288234 2026] [:error] [pid 13378:tid 140628177114880] [client 20.48.250.41:60442] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wsr2.php"] [unique_id "apfwVRZ2kcN90LY1LU_5DwAAAQY"]
[Wed Sep 02 04:45:58.500324 2026] [:error] [pid 13062:tid 140628067333888] [client 20.48.250.41:61210] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wps.php"] [unique_id "apfwVs83Jzm6fcsTqfE3ugAAAEs"]
[Wed Sep 02 04:45:59.700815 2026] [:error] [pid 24762:tid 140627991799552] [client 20.48.250.41:61229] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-admin/maint/admin.php"] [unique_id "apfwV0vOhgfvInIzUv8xVQAAABQ"]
[Wed Sep 02 04:46:00.915310 2026] [:error] [pid 13378:tid 140628000192256] [client 20.48.250.41:60526] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/black.php"] [unique_id "apfwWBZ2kcN90LY1LU_5EAAAARM"]
[Wed Sep 02 04:46:02.149084 2026] [:error] [pid 13378:tid 140628210685696] [client 20.48.250.41:61307] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/a5e0a.php"] [unique_id "apfwWhZ2kcN90LY1LU_5EQAAAQI"]
[Wed Sep 02 04:46:03.365514 2026] [:error] [pid 24762:tid 140628185507584] [client 20.48.250.41:61276] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/book.php"] [unique_id "apfwW0vOhgfvInIzUv8xWgAAAAU"]
[Wed Sep 02 04:46:04.585027 2026] [:error] [pid 13064:tid 140628185507584] [client 20.48.250.41:60424] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-admin/fucku.php"] [unique_id "apfwXGO4FfejT6BQfS4jmQAAAIU"]
[Wed Sep 02 04:46:05.832830 2026] [:error] [pid 13065:tid 140628219078400] [client 20.48.250.41:60489] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/lv.php"] [unique_id "apfwXcLa7rlBbtzQAsjwXgAAAME"]
[Wed Sep 02 04:46:07.049092 2026] [:error] [pid 24762:tid 140628025370368] [client 20.48.250.41:60022] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/jcibmxqm.php"] [unique_id "apfwX0vOhgfvInIzUv8xXAAAABA"]
[Wed Sep 02 04:46:08.297415 2026] [:error] [pid 13065:tid 140628092512000] [client 20.48.250.41:59978] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/files/css_compare.php"] [unique_id "apfwYMLa7rlBbtzQAsjwYgAAAMg"]
[Wed Sep 02 04:46:09.521354 2026] [:error] [pid 24762:tid 140627991799552] [client 20.48.250.41:61236] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/xwpg.php"] [unique_id "apfwYUvOhgfvInIzUv8xXQAAABQ"]
[Wed Sep 02 04:46:10.736593 2026] [:error] [pid 13065:tid 140628000192256] [client 20.48.250.41:60508] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/niett.php"] [unique_id "apfwYsLa7rlBbtzQAsjwZwAAANM"]
[Wed Sep 02 04:46:11.963988 2026] [:error] [pid 13378:tid 140628193900288] [client 20.48.250.41:61223] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/sc.php"] [unique_id "apfwYxZ2kcN90LY1LU_5GwAAAQQ"]
[Wed Sep 02 04:46:13.184473 2026] [:error] [pid 24762:tid 140628092512000] [client 20.48.250.41:60538] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "apfwZUvOhgfvInIzUv8xYwAAAAg"]
[Wed Sep 02 04:46:14.389430 2026] [:error] [pid 24762:tid 140627975014144] [client 20.48.250.41:60515] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/bbn.php"] [unique_id "apfwZkvOhgfvInIzUv8xZAAAABY"]
[Wed Sep 02 04:46:15.595412 2026] [:error] [pid 13064:tid 140628075726592] [client 20.48.250.41:60426] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/info.php.backup"] [unique_id "apfwZ2O4FfejT6BQfS4joQAAAIo"]
[Wed Sep 02 04:46:16.800650 2026] [:error] [pid 24762:tid 140627983406848] [client 20.48.250.41:12224] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/farah.php"] [unique_id "apfwaEvOhgfvInIzUv8xZwAAABU"]
[Wed Sep 02 04:46:18.010055 2026] [:error] [pid 13064:tid 140628202292992] [client 20.48.250.41:61304] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/rh1.php"] [unique_id "apfwamO4FfejT6BQfS4jogAAAIM"]
[Wed Sep 02 04:46:19.230477 2026] [:error] [pid 13062:tid 140628042155776] [client 20.48.250.41:60450] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/rk2.php"] [unique_id "apfwa883Jzm6fcsTqfE3xQAAAE4"]
[Wed Sep 02 04:46:27.497449 2026] [:error] [pid 13062:tid 140628177114880] [client 20.48.250.41:60423] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/a4.php"] [unique_id "apfwc883Jzm6fcsTqfE30AAAAEY"]
[Wed Sep 02 04:46:28.759911 2026] [:error] [pid 24762:tid 140628185507584] [client 20.48.250.41:61213] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/admin/function.php"] [unique_id "apfwdEvOhgfvInIzUv8xbAAAAAU"]
[Wed Sep 02 04:46:30.005101 2026] [:error] [pid 13062:tid 140628185507584] [client 20.48.250.41:60425] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/edit.php"] [unique_id "apfwds83Jzm6fcsTqfE30wAAAEU"]
[Wed Sep 02 04:46:31.243376 2026] [:error] [pid 24762:tid 140627975014144] [client 20.48.250.41:59999] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-content/index.php"] [unique_id "apfwd0vOhgfvInIzUv8xbgAAABY"]
[Wed Sep 02 04:46:32.487681 2026] [:error] [pid 24762:tid 140627966621440] [client 20.48.250.41:60500] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "apfweEvOhgfvInIzUv8xcAAAABc"]
[Wed Sep 02 04:46:33.720975 2026] [:error] [pid 13065:tid 140628008584960] [client 20.48.250.41:61197] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/aaa.php"] [unique_id "apfwecLa7rlBbtzQAsjwiAAAANI"]
[Wed Sep 02 04:46:34.965381 2026] [:error] [pid 24762:tid 140628100904704] [client 20.48.250.41:60534] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/jjrpo.php"] [unique_id "apfwekvOhgfvInIzUv8xcgAAAAc"]
[Wed Sep 02 04:46:36.194102 2026] [:error] [pid 13064:tid 140628193900288] [client 20.48.250.41:61212] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/mail.php"] [unique_id "apfwfGO4FfejT6BQfS4jqgAAAIQ"]
[Wed Sep 02 04:46:37.397794 2026] [:error] [pid 24762:tid 140628058941184] [client 20.48.250.41:60535] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/ws77.php"] [unique_id "apfwfUvOhgfvInIzUv8xcwAAAAw"]
[Wed Sep 02 04:46:38.615255 2026] [:error] [pid 24762:tid 140628008584960] [client 20.48.250.41:61310] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/kj.php"] [unique_id "apfwfkvOhgfvInIzUv8xdAAAABI"]
[Wed Sep 02 04:46:39.835057 2026] [:error] [pid 24762:tid 140628219078400] [client 20.48.250.41:60485] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/yas.php"] [unique_id "apfwf0vOhgfvInIzUv8xdQAAAAE"]
[Wed Sep 02 04:46:41.080738 2026] [:error] [pid 13064:tid 140628067333888] [client 20.48.250.41:60473] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/w.php"] [unique_id "apfwgWO4FfejT6BQfS4jrAAAAIs"]
[Wed Sep 02 04:46:42.298499 2026] [:error] [pid 13062:tid 140628084119296] [client 20.48.250.41:60492] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/aboutc.php"] [unique_id "apfwgs83Jzm6fcsTqfE32QAAAEk"]
[Wed Sep 02 04:46:43.541372 2026] [:error] [pid 24762:tid 140628227471104] [client 20.48.250.41:61196] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/whm-cp.php"] [unique_id "apfwg0vOhgfvInIzUv8xegAAAAA"]
[Wed Sep 02 04:46:44.768740 2026] [:error] [pid 13062:tid 140627975014144] [client 20.48.250.41:61231] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wen.php"] [unique_id "apfwhM83Jzm6fcsTqfE32gAAAFY"]
[Wed Sep 02 04:46:45.978527 2026] [:error] [pid 13062:tid 140628050548480] [client 20.48.250.41:60507] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/55.php"] [unique_id "apfwhc83Jzm6fcsTqfE32wAAAE0"]
[Wed Sep 02 04:46:47.211380 2026] [:error] [pid 13064:tid 140628219078400] [client 20.48.250.41:59959] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/leaf.php"] [unique_id "apfwh2O4FfejT6BQfS4jrgAAAIE"]
[Wed Sep 02 04:46:48.439255 2026] [:error] [pid 13062:tid 140628185507584] [client 20.48.250.41:61206] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-content/plugins/edaewni/index.php"] [unique_id "apfwiM83Jzm6fcsTqfE33AAAAEU"]
[Wed Sep 02 04:46:49.667257 2026] [:error] [pid 13065:tid 140627983406848] [client 20.48.250.41:60011] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/en0.php"] [unique_id "apfwicLa7rlBbtzQAsjwpwAAANU"]
[Wed Sep 02 04:46:50.927313 2026] [proxy_fcgi:error] [pid 13065:tid 140628177114880] [client 20.48.250.41:61225] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 04:46:51.030685 2026] [proxy_fcgi:error] [pid 13065:tid 140628025370368] [client 20.48.250.41:61225] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 04:46:51.134740 2026] [proxy_fcgi:error] [pid 13065:tid 140628033763072] [client 20.48.250.41:61225] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 04:46:51.331434 2026] [proxy_fcgi:error] [pid 13065:tid 140628016977664] [client 20.48.250.41:61225] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 04:46:51.435281 2026] [proxy_fcgi:error] [pid 13065:tid 140628067333888] [client 20.48.250.41:61225] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 04:46:51.545173 2026] [proxy_fcgi:error] [pid 13065:tid 140628092512000] [client 20.48.250.41:61225] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 04:46:51.654091 2026] [proxy_fcgi:error] [pid 13065:tid 140628210685696] [client 20.48.250.41:61225] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 04:46:51.757305 2026] [:error] [pid 13065:tid 140628008584960] [client 20.48.250.41:61225] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||menabern.com|F|2"] [data ".php.old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "menabern.com"] [uri "/php_info.php.old"] [unique_id "apfwi8La7rlBbtzQAsjwswAAANI"]
[Wed Sep 02 04:46:51.862111 2026] [proxy_fcgi:error] [pid 13065:tid 140628075726592] [client 20.48.250.41:61225] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 04:46:51.966093 2026] [proxy_fcgi:error] [pid 13065:tid 140628193900288] [client 20.48.250.41:61225] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 04:46:52.173375 2026] [proxy_fcgi:error] [pid 13065:tid 140628084119296] [client 20.48.250.41:61225] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 04:46:52.277304 2026] [proxy_fcgi:error] [pid 13065:tid 140628100904704] [client 20.48.250.41:61225] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 04:46:52.380619 2026] [proxy_fcgi:error] [pid 13065:tid 140627958228736] [client 20.48.250.41:61225] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 04:46:52.483456 2026] [proxy_fcgi:error] [pid 13065:tid 140627966621440] [client 20.48.250.41:61225] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 04:46:52.587346 2026] [proxy_fcgi:error] [pid 13065:tid 140627983406848] [client 20.48.250.41:61225] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 04:46:52.691245 2026] [proxy_fcgi:error] [pid 13065:tid 140628227471104] [client 20.48.250.41:61225] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 04:46:52.919386 2026] [proxy_fcgi:error] [pid 13065:tid 140628058941184] [client 20.48.250.41:61225] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 04:46:53.044017 2026] [proxy_fcgi:error] [pid 13065:tid 140628050548480] [client 20.48.250.41:61225] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 04:46:53.148789 2026] [proxy_fcgi:error] [pid 13065:tid 140628000192256] [client 20.48.250.41:61225] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 04:46:53.255667 2026] [proxy_fcgi:error] [pid 13065:tid 140628177114880] [client 20.48.250.41:61225] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 04:46:53.474439 2026] [proxy_fcgi:error] [pid 13065:tid 140628219078400] [client 20.48.250.41:61225] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 04:46:53.590393 2026] [proxy_fcgi:error] [pid 13065:tid 140628016977664] [client 20.48.250.41:61225] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 04:46:53.714164 2026] [proxy_fcgi:error] [pid 13065:tid 140628067333888] [client 20.48.250.41:61225] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 04:46:53.819439 2026] [proxy_fcgi:error] [pid 13065:tid 140628092512000] [client 20.48.250.41:61225] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 04:46:53.819675 2026] [:error] [pid 13065:tid 140628092512000] [client 20.48.250.41:61225] [client 20.48.250.41] ModSecurity: Warning. Operator GT matched 25 at IP:scan_404_count. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "11"] [id "9000204"] [msg "Scanner detected - blocking IP 1h"] [tag "scanner-detect"] [hostname "menabern.com"] [uri "/asus.php"] [unique_id "apfwjcLa7rlBbtzQAsjwxgAAAMg"]
[Wed Sep 02 04:46:53.933801 2026] [:error] [pid 13065:tid 140628008584960] [client 20.48.250.41:61225] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/sbhu.php"] [unique_id "apfwjcLa7rlBbtzQAsjwxwAAANI"]
[Wed Sep 02 04:46:55.153389 2026] [:error] [pid 13064:tid 140627983406848] [client 20.48.250.41:59979] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wpls.php"] [unique_id "apfwj2O4FfejT6BQfS4jsAAAAJU"]
[Wed Sep 02 04:47:04.193489 2026] [:error] [pid 13378:tid 140628177114880] [client 20.48.250.41:61214] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/gfd.php"] [unique_id "apfwmBZ2kcN90LY1LU_5WQAAAQY"]
[Wed Sep 02 04:47:05.406872 2026] [:error] [pid 24762:tid 140628202292992] [client 20.48.250.41:60015] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/assets/images/accesson.php"] [unique_id "apfwmUvOhgfvInIzUv8xhwAAAAM"]
[Wed Sep 02 04:47:06.613687 2026] [:error] [pid 24762:tid 140628008584960] [client 20.48.250.41:61232] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/geger.php"] [unique_id "apfwmkvOhgfvInIzUv8xigAAABI"]
[Wed Sep 02 04:47:07.846082 2026] [:error] [pid 13064:tid 140628067333888] [client 20.48.250.41:61297] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/700.php"] [unique_id "apfwm2O4FfejT6BQfS4jtAAAAIs"]
[Wed Sep 02 04:47:09.052258 2026] [:error] [pid 13378:tid 140628000192256] [client 20.48.250.41:61247] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/1s.php"] [unique_id "apfwnRZ2kcN90LY1LU_5XQAAARM"]
[Wed Sep 02 04:47:10.260855 2026] [:error] [pid 24762:tid 140628033763072] [client 20.48.250.41:59914] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/bs5.php"] [unique_id "apfwnkvOhgfvInIzUv8xiwAAAA8"]
[Wed Sep 02 04:47:11.472667 2026] [:error] [pid 24762:tid 140628185507584] [client 20.48.250.41:60543] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/sd.php"] [unique_id "apfwn0vOhgfvInIzUv8xjQAAAAU"]
[Wed Sep 02 04:47:12.719622 2026] [:error] [pid 13378:tid 140627966621440] [client 20.48.250.41:61203] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/nhj6t74aqmkde3hgpCdefault.php"] [unique_id "apfwoBZ2kcN90LY1LU_5YAAAARc"]
[Wed Sep 02 04:47:13.935109 2026] [:error] [pid 24762:tid 140628227471104] [client 20.48.250.41:61221] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/cream3.php"] [unique_id "apfwoUvOhgfvInIzUv8xjwAAAAA"]
[Wed Sep 02 04:47:15.165958 2026] [:error] [pid 13062:tid 140628219078400] [client 20.48.250.41:61269] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/adminer-4.7.6-en.php"] [unique_id "apfwo883Jzm6fcsTqfE35AAAAEE"]
[Wed Sep 02 04:47:16.388871 2026] [:error] [pid 13378:tid 140627958228736] [client 20.48.250.41:59980] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/coenoecic.php"] [unique_id "apfwpBZ2kcN90LY1LU_5ZAAAARg"]
[Wed Sep 02 04:47:17.615885 2026] [:error] [pid 13065:tid 140628202292992] [client 20.48.250.41:61209] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-content/themes/about.php"] [unique_id "apfwpcLa7rlBbtzQAsjw0AAAAMM"]
[Wed Sep 02 04:47:18.837747 2026] [:error] [pid 13378:tid 140628084119296] [client 20.48.250.41:60446] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp.php"] [unique_id "apfwphZ2kcN90LY1LU_5aAAAAQk"]
[Wed Sep 02 04:47:20.086808 2026] [:error] [pid 13065:tid 140628185507584] [client 20.48.250.41:61253] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/kzkwq.php"] [unique_id "apfwqMLa7rlBbtzQAsjw0QAAAMU"]
[Wed Sep 02 04:47:21.309126 2026] [:error] [pid 13062:tid 140628100904704] [client 20.48.250.41:60499] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/zfile.php"] [unique_id "apfwqc83Jzm6fcsTqfE36QAAAEc"]
[Wed Sep 02 04:47:22.555819 2026] [:error] [pid 13062:tid 140628067333888] [client 20.48.250.41:60441] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/green.php"] [unique_id "apfwqs83Jzm6fcsTqfE36gAAAEs"]
[Wed Sep 02 04:47:23.770871 2026] [:error] [pid 24762:tid 140628058941184] [client 20.48.250.41:61216] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/class.php"] [unique_id "apfwq0vOhgfvInIzUv8xlAAAAAw"]
[Wed Sep 02 04:47:25.005982 2026] [:error] [pid 24762:tid 140628050548480] [client 20.48.250.41:60027] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/5b9ac.php"] [unique_id "apfwrUvOhgfvInIzUv8xlQAAAA0"]
[Wed Sep 02 04:47:26.211538 2026] [:error] [pid 13064:tid 140628042155776] [client 20.48.250.41:60430] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/rz.php"] [unique_id "apfwrmO4FfejT6BQfS4jtgAAAI4"]
[Wed Sep 02 04:47:27.429660 2026] [:error] [pid 13065:tid 140628084119296] [client 20.48.250.41:59972] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wsop.php"] [unique_id "apfwr8La7rlBbtzQAsjw0wAAAMk"]
[Wed Sep 02 04:47:28.656540 2026] [:error] [pid 13064:tid 140628025370368] [client 20.48.250.41:61226] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/php_info.php.tmp"] [unique_id "apfwsGO4FfejT6BQfS4jtwAAAJA"]
[Wed Sep 02 04:47:29.876941 2026] [:error] [pid 13378:tid 140628008584960] [client 20.48.250.41:60523] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/jbdah.php"] [unique_id "apfwsRZ2kcN90LY1LU_5cwAAARI"]
[Wed Sep 02 04:47:31.082045 2026] [:error] [pid 24762:tid 140628185507584] [client 20.48.250.41:61271] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-admin/network/plugins.php"] [unique_id "apfws0vOhgfvInIzUv8xmAAAAAU"]
[Wed Sep 02 04:47:32.321795 2026] [:error] [pid 24762:tid 140628084119296] [client 20.48.250.41:60488] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-blog.php"] [unique_id "apfwtEvOhgfvInIzUv8xmQAAAAk"]
[Wed Sep 02 04:47:33.535607 2026] [:error] [pid 24762:tid 140628227471104] [client 20.48.250.41:59981] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/144.php"] [unique_id "apfwtUvOhgfvInIzUv8xnQAAAAA"]
[Wed Sep 02 04:47:34.751019 2026] [:error] [pid 13064:tid 140628016977664] [client 20.48.250.41:60529] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/php_version.php"] [unique_id "apfwtmO4FfejT6BQfS4jugAAAJE"]
[Wed Sep 02 04:47:35.967516 2026] [:error] [pid 13064:tid 140627983406848] [client 20.48.250.41:61195] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/a.php"] [unique_id "apfwt2O4FfejT6BQfS4juwAAAJU"]
[Wed Sep 02 04:47:37.174936 2026] [:error] [pid 13378:tid 140628193900288] [client 20.48.250.41:61244] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/aGeTbFjB5Zu.php"] [unique_id "apfwuRZ2kcN90LY1LU_5fAAAAQQ"]
[Wed Sep 02 04:47:38.407301 2026] [:error] [pid 13378:tid 140628100904704] [client 20.48.250.41:61281] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/06.php"] [unique_id "apfwuhZ2kcN90LY1LU_5fwAAAQc"]
[Wed Sep 02 04:47:39.611078 2026] [:error] [pid 13378:tid 140627975014144] [client 20.48.250.41:60436] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/7.php"] [unique_id "apfwuxZ2kcN90LY1LU_5ggAAARY"]
[Wed Sep 02 04:47:40.823988 2026] [:error] [pid 13378:tid 140628025370368] [client 20.48.250.41:60001] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/admin1.php"] [unique_id "apfwvBZ2kcN90LY1LU_5hAAAARA"]
[Wed Sep 02 04:47:42.064194 2026] [:error] [pid 13064:tid 140628033763072] [client 20.48.250.41:59994] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/fi22.php"] [unique_id "apfwvmO4FfejT6BQfS4jvgAAAI8"]
[Wed Sep 02 04:47:43.280365 2026] [:error] [pid 13065:tid 140628202292992] [client 20.48.250.41:59989] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/adminfuns.php"] [unique_id "apfwv8La7rlBbtzQAsjw2wAAAMM"]
[Wed Sep 02 04:47:44.508379 2026] [:error] [pid 13062:tid 140628025370368] [client 20.48.250.41:60532] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/mudxizxnc.php"] [unique_id "apfwwM83Jzm6fcsTqfE38AAAAFA"]
[Wed Sep 02 04:47:45.735226 2026] [:error] [pid 13064:tid 140628227471104] [client 20.48.250.41:60493] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/100.php"] [unique_id "apfwwWO4FfejT6BQfS4jwQAAAIA"]
[Wed Sep 02 04:47:46.982740 2026] [:error] [pid 24762:tid 140628075726592] [client 20.48.250.41:60509] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-includes/Text/xwx1.php"] [unique_id "apfwwkvOhgfvInIzUv8xpQAAAAo"]
[Wed Sep 02 04:47:48.214539 2026] [:error] [pid 13378:tid 140628025370368] [client 20.48.250.41:60443] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/gl.php"] [unique_id "apfwxBZ2kcN90LY1LU_5qwAAARA"]
[Wed Sep 02 04:47:49.432210 2026] [:error] [pid 13062:tid 140628210685696] [client 20.48.250.41:61299] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/f35.php"] [unique_id "apfwxc83Jzm6fcsTqfE39AAAAEI"]
[Wed Sep 02 04:47:50.642877 2026] [:error] [pid 13378:tid 140628033763072] [client 20.48.250.41:60006] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/w3llscc.php"] [unique_id "apfwxhZ2kcN90LY1LU_5tAAAAQ8"]
[Wed Sep 02 04:47:51.855373 2026] [:error] [pid 13378:tid 140628202292992] [client 20.48.250.41:61224] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/fc72f.php"] [unique_id "apfwxxZ2kcN90LY1LU_5twAAAQM"]
[Wed Sep 02 04:47:53.093181 2026] [:error] [pid 13065:tid 140627991799552] [client 20.48.250.41:61279] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/momo.php"] [unique_id "apfwycLa7rlBbtzQAsjw4wAAANQ"]
[Wed Sep 02 04:47:54.345274 2026] [:error] [pid 13064:tid 140628025370368] [client 20.48.250.41:60451] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wkwk.php"] [unique_id "apfwymO4FfejT6BQfS4jxAAAAJA"]
[Wed Sep 02 04:47:55.565410 2026] [:error] [pid 24762:tid 140627991799552] [client 20.48.250.41:60541] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/seetox.php"] [unique_id "apfwy0vOhgfvInIzUv8xtQAAABQ"]
[Wed Sep 02 04:47:56.797507 2026] [:error] [pid 24762:tid 140627983406848] [client 20.48.250.41:60461] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/za2.php"] [unique_id "apfwzEvOhgfvInIzUv8xtwAAABU"]
[Wed Sep 02 04:47:58.029825 2026] [:error] [pid 24762:tid 140627966621440] [client 20.48.250.41:61265] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-blogs.php"] [unique_id "apfwzkvOhgfvInIzUv8xuQAAABc"]
[Wed Sep 02 04:47:59.236412 2026] [:error] [pid 13378:tid 140628033763072] [client 20.48.250.41:61268] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/public/vx.php"] [unique_id "apfwzxZ2kcN90LY1LU_5xAAAAQ8"]
[Wed Sep 02 04:48:00.473999 2026] [:error] [pid 24762:tid 140628219078400] [client 20.48.250.41:60468] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/ws60.php"] [unique_id "apfw0EvOhgfvInIzUv8xxQAAAAE"]
[Wed Sep 02 04:48:01.687909 2026] [:error] [pid 24762:tid 140627983406848] [client 20.48.250.41:61277] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/aghbvr.php"] [unique_id "apfw0UvOhgfvInIzUv8xygAAABU"]
[Wed Sep 02 04:48:02.920549 2026] [:error] [pid 13062:tid 140628025370368] [client 20.48.250.41:61235] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/gettest.php"] [unique_id "apfw0s83Jzm6fcsTqfE3_AAAAFA"]
[Wed Sep 02 04:48:04.144847 2026] [:error] [pid 13062:tid 140628008584960] [client 20.48.250.41:61227] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/qa.php"] [unique_id "apfw1M83Jzm6fcsTqfE4AAAAAFI"]
[Wed Sep 02 04:48:05.360784 2026] [:error] [pid 13062:tid 140628016977664] [client 20.48.250.41:59984] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/diagnostic.php"] [unique_id "apfw1c83Jzm6fcsTqfE4BQAAAFE"]
[Wed Sep 02 04:48:06.612854 2026] [:error] [pid 13378:tid 140628058941184] [client 20.48.250.41:61241] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/404.php"] [unique_id "apfw1hZ2kcN90LY1LU_5zwAAAQw"]
[Wed Sep 02 04:48:07.839357 2026] [:error] [pid 13062:tid 140628033763072] [client 20.48.250.41:60522] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/xopvne.php"] [unique_id "apfw1883Jzm6fcsTqfE4CAAAAE8"]
[Wed Sep 02 04:48:09.062874 2026] [:error] [pid 13064:tid 140628210685696] [client 20.48.250.41:11737] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/apk.php"] [unique_id "apfw2WO4FfejT6BQfS4jyAAAAII"]
[Wed Sep 02 04:48:10.288022 2026] [:error] [pid 13064:tid 140628100904704] [client 20.48.250.41:60531] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/un.php"] [unique_id "apfw2mO4FfejT6BQfS4jyQAAAIc"]
[Wed Sep 02 04:48:11.514855 2026] [:error] [pid 13065:tid 140628058941184] [client 20.48.250.41:61208] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/0.php"] [unique_id "apfw28La7rlBbtzQAsjw7QAAAMw"]
[Wed Sep 02 04:48:12.719913 2026] [:error] [pid 13065:tid 140628025370368] [client 20.48.250.41:60480] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/Angelv2.php"] [unique_id "apfw3MLa7rlBbtzQAsjw7gAAANA"]
[Wed Sep 02 04:48:13.940222 2026] [:error] [pid 13378:tid 140627983406848] [client 20.48.250.41:61240] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-blog-front.php"] [unique_id "apfw3RZ2kcN90LY1LU_51wAAARU"]
[Wed Sep 02 04:48:22.683863 2026] [:error] [pid 24762:tid 140628016977664] [client 20.48.250.41:61293] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-content/plugins/index.php"] [unique_id "apfw5kvOhgfvInIzUv8x4wAAABE"]
[Wed Sep 02 04:48:23.914761 2026] [:error] [pid 24762:tid 140628210685696] [client 20.48.250.41:61204] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/fot.php"] [unique_id "apfw50vOhgfvInIzUv8x5QAAAAI"]
[Wed Sep 02 04:48:25.141123 2026] [:error] [pid 13064:tid 140628177114880] [client 20.48.250.41:61267] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/fns.php"] [unique_id "apfw6WO4FfejT6BQfS4jzQAAAIY"]
[Wed Sep 02 04:48:26.367452 2026] [:error] [pid 13064:tid 140628042155776] [client 20.48.250.41:60483] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/X57.php"] [unique_id "apfw6mO4FfejT6BQfS4jzwAAAI4"]
[Wed Sep 02 04:48:27.597688 2026] [:error] [pid 13064:tid 140628092512000] [client 20.48.250.41:61296] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/ws75.php"] [unique_id "apfw62O4FfejT6BQfS4j0AAAAIg"]
[Wed Sep 02 04:48:28.841502 2026] [:error] [pid 24762:tid 140628219078400] [client 20.48.250.41:60479] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/ajax.php"] [unique_id "apfw7EvOhgfvInIzUv8x5wAAAAE"]
[Wed Sep 02 04:48:30.062178 2026] [:error] [pid 13065:tid 140628084119296] [client 20.48.250.41:61264] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/xxw.php"] [unique_id "apfw7sLa7rlBbtzQAsjw9QAAAMk"]
[Wed Sep 02 04:48:31.288078 2026] [:error] [pid 13062:tid 140627975014144] [client 20.48.250.41:59931] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/666.php"] [unique_id "apfw7883Jzm6fcsTqfE4DgAAAFY"]
[Wed Sep 02 04:48:32.549777 2026] [:error] [pid 24762:tid 140627991799552] [client 20.48.250.41:60536] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-content/about.php"] [unique_id "apfw8EvOhgfvInIzUv8x6gAAABQ"]
[Wed Sep 02 04:48:33.779525 2026] [:error] [pid 13378:tid 140628210685696] [client 20.48.250.41:61273] [client 20.48.250.41] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/met2.php"] [unique_id "apfw8RZ2kcN90LY1LU_56gAAAQI"]
[Wed Sep 02 04:57:56.633705 2026] [:error] [pid 24762:tid 140628210685696] [client 35.229.253.248:53196] [client 35.229.253.248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.git/config"] [unique_id "apfzJEvOhgfvInIzUv81eQAAAAI"]
[Wed Sep 02 06:30:40.738237 2026] [:error] [pid 24762:tid 140628075726592] [client 192.144.148.122:45720] [client 192.144.148.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.menabern.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.menabern.com"] [uri "/"] [unique_id "apgI4EvOhgfvInIzUv9TcgAAAAo"]
[Wed Sep 02 07:31:44.655304 2026] [:error] [pid 13378:tid 140628058941184] [client 43.160.219.206:49502] [client 43.160.219.206] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||menabern.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "menabern.com"] [uri "/"] [unique_id "apgXMBZ2kcN90LY1LU8gXgAAAQw"]
[Wed Sep 02 08:21:48.114447 2026] [:error] [pid 13064:tid 140628016977664] [client 43.166.255.102:59298] [client 43.166.255.102] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.menabern.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.menabern.com"] [uri "/"] [unique_id "apgi7GO4FfejT6BQfS5NoAAAAJE"]
[Wed Sep 02 08:46:49.292506 2026] [proxy_fcgi:error] [pid 13065:tid 140627983406848] [client 134.122.25.0:44196] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 09:30:08.768625 2026] [proxy_fcgi:error] [pid 13062:tid 140628033763072] [client 177.136.228.100:58936] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 10:19:15.856859 2026] [authz_core:error] [pid 24762:tid 140628067333888] [client 143.244.57.88:57934] AH01630: client denied by server configuration: /home/menabern/public_html/xmlrpc.php
[Wed Sep 02 11:19:38.819065 2026] [:error] [pid 4787:tid 140628042155776] [client 43.160.219.138:44986] [client 43.160.219.138] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||menabern.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "menabern.com"] [uri "/"] [unique_id "aphMmoDtrMyUDBUw4k2SMAAAAY4"]
[Wed Sep 02 12:14:49.067995 2026] [:error] [pid 26594:tid 140628008584960] [client 110.42.208.131:43130] [client 110.42.208.131] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||menabern.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "menabern.com"] [uri "/"] [unique_id "aphZiRJhrV4fM-gqM1wEywAAAVI"]
[Wed Sep 02 12:30:36.541943 2026] [:error] [pid 13062:tid 140628058941184] [client 43.128.156.124:46342] [client 43.128.156.124] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.menabern.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.menabern.com"] [uri "/"] [unique_id "aphdPM83Jzm6fcsTqfGnDwAAAEw"]
[Wed Sep 02 13:21:49.192256 2026] [proxy_fcgi:error] [pid 13062:tid 140628202292992] [client 20.104.49.130:65484] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 13:21:49.341212 2026] [proxy_fcgi:error] [pid 13062:tid 140628092512000] [client 20.104.49.130:65484] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 13:21:49.480290 2026] [proxy_fcgi:error] [pid 13062:tid 140628084119296] [client 20.104.49.130:65484] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 13:21:49.639373 2026] [proxy_fcgi:error] [pid 13062:tid 140627966621440] [client 20.104.49.130:65484] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 13:21:49.824262 2026] [proxy_fcgi:error] [pid 13062:tid 140628050548480] [client 20.104.49.130:65484] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 13:21:49.931326 2026] [proxy_fcgi:error] [pid 13062:tid 140628193900288] [client 20.104.49.130:65484] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 13:21:50.034978 2026] [proxy_fcgi:error] [pid 13062:tid 140628016977664] [client 20.104.49.130:65484] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 13:21:50.138275 2026] [proxy_fcgi:error] [pid 13062:tid 140627966621440] [client 20.104.49.130:65484] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 13:21:50.313456 2026] [proxy_fcgi:error] [pid 13062:tid 140628042155776] [client 20.104.49.130:65484] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 13:21:50.416969 2026] [proxy_fcgi:error] [pid 13062:tid 140628092512000] [client 20.104.49.130:65484] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 13:21:50.521231 2026] [proxy_fcgi:error] [pid 13062:tid 140628193900288] [client 20.104.49.130:65484] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 13:21:50.740936 2026] [proxy_fcgi:error] [pid 13062:tid 140627983406848] [client 20.104.49.130:65484] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 13:21:50.913346 2026] [proxy_fcgi:error] [pid 13062:tid 140628210685696] [client 20.104.49.130:65484] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 13:21:51.045963 2026] [proxy_fcgi:error] [pid 13062:tid 140628042155776] [client 20.104.49.130:65484] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 13:21:51.195815 2026] [proxy_fcgi:error] [pid 13062:tid 140628092512000] [client 20.104.49.130:65484] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 13:21:51.299994 2026] [proxy_fcgi:error] [pid 13062:tid 140628193900288] [client 20.104.49.130:65484] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 13:21:51.404967 2026] [proxy_fcgi:error] [pid 13062:tid 140628084119296] [client 20.104.49.130:65484] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 13:21:51.551495 2026] [proxy_fcgi:error] [pid 13062:tid 140628067333888] [client 20.104.49.130:65484] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 13:21:51.655234 2026] [proxy_fcgi:error] [pid 13062:tid 140628016977664] [client 20.104.49.130:65484] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 13:21:51.764261 2026] [proxy_fcgi:error] [pid 13062:tid 140628075726592] [client 20.104.49.130:65484] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 13:21:51.885403 2026] [proxy_fcgi:error] [pid 13062:tid 140628008584960] [client 20.104.49.130:65484] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 13:21:51.988085 2026] [proxy_fcgi:error] [pid 13062:tid 140627975014144] [client 20.104.49.130:65484] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 13:21:52.260560 2026] [proxy_fcgi:error] [pid 13062:tid 140627958228736] [client 20.104.49.130:65484] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 13:21:52.364175 2026] [proxy_fcgi:error] [pid 13062:tid 140628042155776] [client 20.104.49.130:65484] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 13:21:52.637574 2026] [proxy_fcgi:error] [pid 13062:tid 140628050548480] [client 20.104.49.130:65484] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 13:21:52.637737 2026] [:error] [pid 13062:tid 140628050548480] [client 20.104.49.130:65484] [client 20.104.49.130] ModSecurity: Warning. Operator GT matched 25 at IP:scan_404_count. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "11"] [id "9000204"] [msg "Scanner detected - blocking IP 1h"] [tag "scanner-detect"] [hostname "menabern.com"] [uri "/133.php"] [unique_id "aphpQM83Jzm6fcsTqfG5QQAAAE0"]
[Wed Sep 02 13:21:52.738701 2026] [:error] [pid 13062:tid 140628227471104] [client 20.104.49.130:65484] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/one.php"] [unique_id "aphpQM83Jzm6fcsTqfG5QgAAAEA"]
[Wed Sep 02 13:21:53.377912 2026] [:error] [pid 13062:tid 140628193900288] [client 20.104.49.130:65486] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/abcd.php"] [unique_id "aphpQc83Jzm6fcsTqfG5QwAAAEQ"]
[Wed Sep 02 13:22:41.998136 2026] [:error] [pid 13062:tid 140628092512000] [client 20.104.49.130:57607] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/load.php"] [unique_id "aphpcc83Jzm6fcsTqfG5ZQAAAEg"]
[Wed Sep 02 13:22:43.102076 2026] [:error] [pid 13065:tid 140628084119296] [client 20.104.49.130:57654] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/82.php"] [unique_id "aphpc8La7rlBbtzQAsibTQAAAMk"]
[Wed Sep 02 13:22:43.576919 2026] [:error] [pid 13378:tid 140628033763072] [client 20.104.49.130:57531] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/read.php"] [unique_id "aphpcxZ2kcN90LY1LU9sXgAAAQ8"]
[Wed Sep 02 13:22:44.742295 2026] [:error] [pid 24762:tid 140628008584960] [client 20.104.49.130:57695] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/gecko-new.php"] [unique_id "aphpdEvOhgfvInIzUv-mvAAAABI"]
[Wed Sep 02 13:22:45.417298 2026] [:error] [pid 4787:tid 140628177114880] [client 20.104.49.130:65474] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/dehnl.php"] [unique_id "aphpdYDtrMyUDBUw4k2ptAAAAYY"]
[Wed Sep 02 13:22:46.014921 2026] [:error] [pid 4787:tid 140628100904704] [client 20.104.49.130:57668] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/yawa.php"] [unique_id "aphpdoDtrMyUDBUw4k2ptgAAAYc"]
[Wed Sep 02 13:22:46.653187 2026] [:error] [pid 13062:tid 140627983406848] [client 20.104.49.130:57500] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/dex.php"] [unique_id "aphpds83Jzm6fcsTqfG5aAAAAFU"]
[Wed Sep 02 13:22:46.975479 2026] [:error] [pid 13378:tid 140628067333888] [client 20.104.49.130:65475] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/css.php"] [unique_id "aphpdhZ2kcN90LY1LU9sYQAAAQs"]
[Wed Sep 02 13:22:47.266665 2026] [:error] [pid 13378:tid 140628177114880] [client 20.104.49.130:57669] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-css.php"] [unique_id "aphpdxZ2kcN90LY1LU9sYgAAAQY"]
[Wed Sep 02 13:22:47.611030 2026] [:error] [pid 4787:tid 140627966621440] [client 20.104.49.130:65491] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/ab.php"] [unique_id "aphpd4DtrMyUDBUw4k2ptwAAAZc"]
[Wed Sep 02 13:22:47.857208 2026] [:error] [pid 20352:tid 140627966621440] [client 20.104.49.130:65481] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/well.php"] [unique_id "aphpd5053FhJIbNTB_9pRQAAAdc"]
[Wed Sep 02 13:22:48.139082 2026] [:error] [pid 4787:tid 140628058941184] [client 20.104.49.130:57494] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/forum.php"] [unique_id "aphpeIDtrMyUDBUw4k2puAAAAYw"]
[Wed Sep 02 13:22:48.398281 2026] [:error] [pid 13062:tid 140627966621440] [client 20.104.49.130:57529] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/sxxb.php"] [unique_id "aphpeM83Jzm6fcsTqfG5agAAAFc"]
[Wed Sep 02 13:22:55.339199 2026] [:error] [pid 24762:tid 140628050548480] [client 20.104.49.130:57618] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/3.php"] [unique_id "aphpf0vOhgfvInIzUv-mwAAAAA0"]
[Wed Sep 02 13:22:55.626983 2026] [:error] [pid 4787:tid 140628084119296] [client 20.104.49.130:57527] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/df.php"] [unique_id "aphpf4DtrMyUDBUw4k2pugAAAYk"]
[Wed Sep 02 13:22:55.929841 2026] [:error] [pid 24762:tid 140627966621440] [client 20.104.49.130:57726] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/xmini4.php"] [unique_id "aphpf0vOhgfvInIzUv-mwgAAABc"]
[Wed Sep 02 13:22:56.178042 2026] [:error] [pid 13062:tid 140627958228736] [client 20.104.49.130:57510] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/xwpg.php"] [unique_id "aphpgM83Jzm6fcsTqfG5dgAAAFg"]
[Wed Sep 02 13:22:56.408437 2026] [:error] [pid 13378:tid 140628084119296] [client 20.104.49.130:57693] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/kerang.php"] [unique_id "aphpgBZ2kcN90LY1LU9sbQAAAQk"]
[Wed Sep 02 13:22:56.701545 2026] [:error] [pid 4787:tid 140628025370368] [client 20.104.49.130:57643] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/berlin.php"] [unique_id "aphpgIDtrMyUDBUw4k2puwAAAZA"]
[Wed Sep 02 13:22:57.201978 2026] [:error] [pid 26594:tid 140628058941184] [client 20.104.49.130:63709] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/makeasmtp.php"] [unique_id "aphpgRJhrV4fM-gqM1wQjAAAAUw"]
[Wed Sep 02 13:22:58.181000 2026] [:error] [pid 13378:tid 140628075726592] [client 20.104.49.130:57655] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wpxml.php"] [unique_id "aphpghZ2kcN90LY1LU9scQAAAQo"]
[Wed Sep 02 13:22:58.555409 2026] [:error] [pid 13064:tid 140628185507584] [client 20.104.49.130:57658] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/ty.php"] [unique_id "aphpgmO4FfejT6BQfS6ELwAAAIU"]
[Wed Sep 02 13:22:59.117443 2026] [:error] [pid 13378:tid 140628016977664] [client 20.104.49.130:57499] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/dk.php"] [unique_id "aphpgxZ2kcN90LY1LU9sdAAAARE"]
[Wed Sep 02 13:22:59.746265 2026] [:error] [pid 13378:tid 140628092512000] [client 20.104.49.130:57663] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/txets.php"] [unique_id "aphpgxZ2kcN90LY1LU9sdgAAAQg"]
[Wed Sep 02 13:23:00.063596 2026] [:error] [pid 24762:tid 140628000192256] [client 20.104.49.130:65485] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/kj.php"] [unique_id "aphphEvOhgfvInIzUv-mxAAAABM"]
[Wed Sep 02 13:23:00.989182 2026] [:error] [pid 13065:tid 140628100904704] [client 20.104.49.130:57637] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/new.php"] [unique_id "aphphMLa7rlBbtzQAsibUAAAAMc"]
[Wed Sep 02 13:23:01.304826 2026] [:error] [pid 20352:tid 140627958228736] [client 20.104.49.130:57508] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/memberfuns.php"] [unique_id "aphphZ053FhJIbNTB_9pSQAAAdg"]
[Wed Sep 02 13:23:01.878871 2026] [:error] [pid 20352:tid 140628008584960] [client 20.104.49.130:57473] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/tiny2.php"] [unique_id "aphphZ053FhJIbNTB_9pSgAAAdI"]
[Wed Sep 02 13:23:02.627829 2026] [:error] [pid 13378:tid 140628084119296] [client 20.104.49.130:57633] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/az.php"] [unique_id "aphphhZ2kcN90LY1LU9seQAAAQk"]
[Wed Sep 02 13:23:02.973028 2026] [:error] [pid 4787:tid 140628016977664] [client 20.104.49.130:63704] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/v2.php"] [unique_id "aphphoDtrMyUDBUw4k2pvAAAAZE"]
[Wed Sep 02 13:23:03.526738 2026] [:error] [pid 13378:tid 140628100904704] [client 20.104.49.130:57626] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/js.php"] [unique_id "aphphxZ2kcN90LY1LU9sewAAAQc"]
[Wed Sep 02 13:23:03.871705 2026] [:error] [pid 4787:tid 140628177114880] [client 20.104.49.130:63625] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/red.php"] [unique_id "aphph4DtrMyUDBUw4k2pvQAAAYY"]
[Wed Sep 02 13:23:04.338581 2026] [:error] [pid 24762:tid 140627991799552] [client 20.104.49.130:57689] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/x1da.php"] [unique_id "aphpiEvOhgfvInIzUv-mxwAAABQ"]
[Wed Sep 02 13:23:04.651952 2026] [:error] [pid 13062:tid 140628219078400] [client 20.104.49.130:57600] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/1xmomo.php"] [unique_id "aphpiM83Jzm6fcsTqfG5gQAAAEE"]
[Wed Sep 02 13:23:05.109981 2026] [:error] [pid 13062:tid 140628193900288] [client 20.104.49.130:57705] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/reviall.php"] [unique_id "aphpic83Jzm6fcsTqfG5gwAAAEQ"]
[Wed Sep 02 13:23:05.341988 2026] [:error] [pid 13062:tid 140628000192256] [client 20.104.49.130:57498] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/pfm.php"] [unique_id "aphpic83Jzm6fcsTqfG5hAAAAFM"]
[Wed Sep 02 13:23:05.567096 2026] [:error] [pid 24762:tid 140628008584960] [client 20.104.49.130:57651] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/albin.php"] [unique_id "aphpiUvOhgfvInIzUv-myAAAABI"]
[Wed Sep 02 13:23:05.784342 2026] [:error] [pid 4787:tid 140628100904704] [client 20.104.49.130:63690] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-login.php"] [unique_id "aphpiYDtrMyUDBUw4k2pvwAAAYc"]
[Wed Sep 02 13:23:06.008157 2026] [:error] [pid 4787:tid 140628008584960] [client 20.104.49.130:57517] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/ohct.php"] [unique_id "aphpioDtrMyUDBUw4k2pwAAAAZI"]
[Wed Sep 02 13:23:06.289816 2026] [:error] [pid 24762:tid 140628033763072] [client 20.104.49.130:63717] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/log.php"] [unique_id "aphpikvOhgfvInIzUv-myQAAAA8"]
[Wed Sep 02 13:23:06.516817 2026] [:error] [pid 13062:tid 140628084119296] [client 20.104.49.130:57671] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/sta.php"] [unique_id "aphpis83Jzm6fcsTqfG5hgAAAEk"]
[Wed Sep 02 13:23:06.755935 2026] [:error] [pid 13062:tid 140628042155776] [client 20.104.49.130:57520] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/bdroot.php"] [unique_id "aphpis83Jzm6fcsTqfG5iQAAAE4"]
[Wed Sep 02 13:23:07.046162 2026] [:error] [pid 24762:tid 140628227471104] [client 20.104.49.130:65473] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/talkxkej.php"] [unique_id "aphpi0vOhgfvInIzUv-mygAAAAA"]
[Wed Sep 02 13:23:07.286369 2026] [:error] [pid 13062:tid 140628033763072] [client 20.104.49.130:57603] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/run.php"] [unique_id "aphpi883Jzm6fcsTqfG5jgAAAE8"]
[Wed Sep 02 13:23:07.626937 2026] [:error] [pid 24762:tid 140628050548480] [client 20.104.49.130:57479] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/srontol.php"] [unique_id "aphpi0vOhgfvInIzUv-mzQAAAA0"]
[Wed Sep 02 13:23:08.111586 2026] [:error] [pid 13065:tid 140627966621440] [client 20.104.49.130:57723] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/static.php"] [unique_id "aphpjMLa7rlBbtzQAsibVQAAANc"]
[Wed Sep 02 13:23:08.829288 2026] [:error] [pid 26594:tid 140628033763072] [client 20.104.49.130:63702] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/crgio.php"] [unique_id "aphpjBJhrV4fM-gqM1wQoAAAAU8"]
[Wed Sep 02 13:23:09.578124 2026] [:error] [pid 24762:tid 140628000192256] [client 20.104.49.130:57525] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/reop3.php"] [unique_id "aphpjUvOhgfvInIzUv-m0gAAABM"]
[Wed Sep 02 13:23:10.553311 2026] [:error] [pid 24762:tid 140628177114880] [client 20.104.49.130:65488] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/f35.update.php"] [unique_id "aphpjkvOhgfvInIzUv-m1AAAAAY"]
[Wed Sep 02 13:23:11.121733 2026] [:error] [pid 13378:tid 140627966621440] [client 20.104.49.130:57605] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/term.php"] [unique_id "aphpjxZ2kcN90LY1LU9sigAAARc"]
[Wed Sep 02 13:23:11.578343 2026] [:error] [pid 26594:tid 140627958228736] [client 20.104.49.130:57605] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/sd.php"] [unique_id "aphpjxJhrV4fM-gqM1wQpAAAAVg"]
[Wed Sep 02 13:23:11.977743 2026] [:error] [pid 26594:tid 140628000192256] [client 20.104.49.130:57679] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-blog-header.php"] [unique_id "aphpjxJhrV4fM-gqM1wQpgAAAVM"]
[Wed Sep 02 13:23:12.554425 2026] [:error] [pid 13065:tid 140628008584960] [client 20.104.49.130:57645] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/dragonshell.php"] [unique_id "aphpkMLa7rlBbtzQAsibZQAAANI"]
[Wed Sep 02 13:23:13.323430 2026] [:error] [pid 13065:tid 140628202292992] [client 20.104.49.130:57648] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-blogs.php"] [unique_id "aphpkcLa7rlBbtzQAsibZgAAAMM"]
[Wed Sep 02 13:23:14.055059 2026] [:error] [pid 4787:tid 140628075726592] [client 20.104.49.130:63738] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/worksec.php"] [unique_id "aphpkoDtrMyUDBUw4k2pxgAAAYo"]
[Wed Sep 02 13:23:14.425562 2026] [:error] [pid 20352:tid 140628202292992] [client 20.104.49.130:57680] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/browse.php"] [unique_id "aphpkp053FhJIbNTB_9pVwAAAcM"]
[Wed Sep 02 13:23:14.779286 2026] [:error] [pid 20352:tid 140628185507584] [client 20.104.49.130:57709] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/002.php"] [unique_id "aphpkp053FhJIbNTB_9pWQAAAcU"]
[Wed Sep 02 13:23:15.285331 2026] [:error] [pid 13062:tid 140628025370368] [client 20.104.49.130:57501] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/jp.php"] [unique_id "aphpk883Jzm6fcsTqfG5uAAAAFA"]
[Wed Sep 02 13:23:15.638104 2026] [:error] [pid 26594:tid 140628219078400] [client 20.104.49.130:57635] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/about.php"] [unique_id "aphpkxJhrV4fM-gqM1wQqwAAAUE"]
[Wed Sep 02 13:23:15.993531 2026] [:error] [pid 20352:tid 140628058941184] [client 20.104.49.130:57503] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/classwithtostring.php"] [unique_id "aphpk5053FhJIbNTB_9pXwAAAcw"]
[Wed Sep 02 13:23:16.346319 2026] [:error] [pid 26594:tid 140628067333888] [client 20.104.49.130:57504] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/666.php"] [unique_id "aphplBJhrV4fM-gqM1wQrAAAAUs"]
[Wed Sep 02 13:23:16.994440 2026] [:error] [pid 13378:tid 140628050548480] [client 20.104.49.130:57515] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/users.php"] [unique_id "aphplBZ2kcN90LY1LU9soAAAAQ0"]
[Wed Sep 02 13:23:17.820977 2026] [:error] [pid 26594:tid 140628016977664] [client 20.104.49.130:57660] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/echkm.php"] [unique_id "aphplRJhrV4fM-gqM1wQvgAAAVE"]
[Wed Sep 02 13:23:18.121252 2026] [:error] [pid 26594:tid 140628177114880] [client 20.104.49.130:57653] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/amax.php"] [unique_id "aphplhJhrV4fM-gqM1wQwQAAAUY"]
[Wed Sep 02 13:23:18.380790 2026] [:error] [pid 13062:tid 140628033763072] [client 20.104.49.130:63682] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/init.php"] [unique_id "aphpls83Jzm6fcsTqfG5vgAAAE8"]
[Wed Sep 02 13:23:18.663145 2026] [:error] [pid 13062:tid 140627975014144] [client 20.104.49.130:57511] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wen.php"] [unique_id "aphpls83Jzm6fcsTqfG5vwAAAFY"]
[Wed Sep 02 13:23:18.891478 2026] [:error] [pid 13064:tid 140628050548480] [client 20.104.49.130:57665] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/Jcrop.php"] [unique_id "aphplmO4FfejT6BQfS6EQAAAAI0"]
[Wed Sep 02 13:23:19.132926 2026] [:error] [pid 13064:tid 140628075726592] [client 20.104.49.130:57628] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/menu.php"] [unique_id "aphpl2O4FfejT6BQfS6EQgAAAIo"]
[Wed Sep 02 13:23:19.387822 2026] [:error] [pid 13378:tid 140628185507584] [client 20.104.49.130:57710] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aphplxZ2kcN90LY1LU9srgAAAQU"]
[Wed Sep 02 13:23:19.666474 2026] [:error] [pid 24762:tid 140628177114880] [client 20.104.49.130:65480] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/ws85.php"] [unique_id "aphpl0vOhgfvInIzUv-m7wAAAAY"]
[Wed Sep 02 13:23:19.969222 2026] [:error] [pid 13065:tid 140628202292992] [client 20.104.49.130:57721] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-the.php"] [unique_id "aphpl8La7rlBbtzQAsibdAAAAMM"]
[Wed Sep 02 13:23:20.242075 2026] [:error] [pid 24762:tid 140628025370368] [client 20.104.49.130:57720] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/155.php"] [unique_id "aphpmEvOhgfvInIzUv-m8AAAABA"]
[Wed Sep 02 13:23:20.477490 2026] [:error] [pid 13062:tid 140628025370368] [client 20.104.49.130:57493] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/fs.php"] [unique_id "aphpmM83Jzm6fcsTqfG5xAAAAFA"]
[Wed Sep 02 13:23:20.811623 2026] [:error] [pid 13378:tid 140628016977664] [client 20.104.49.130:57624] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/kgoc6awap3napxxxdCdefault.php"] [unique_id "aphpmBZ2kcN90LY1LU9ssQAAARE"]
[Wed Sep 02 13:23:21.035868 2026] [:error] [pid 13062:tid 140627958228736] [client 20.104.49.130:57724] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/ms-edit.php"] [unique_id "aphpmc83Jzm6fcsTqfG5xwAAAFg"]
[Wed Sep 02 13:23:21.303746 2026] [:error] [pid 24762:tid 140628100904704] [client 20.104.49.130:57701] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/tool.php"] [unique_id "aphpmUvOhgfvInIzUv-m8QAAAAc"]
[Wed Sep 02 13:23:21.601330 2026] [:error] [pid 24762:tid 140627958228736] [client 20.104.49.130:57502] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/abc.php"] [unique_id "aphpmUvOhgfvInIzUv-m8gAAABg"]
[Wed Sep 02 13:23:21.981429 2026] [:error] [pid 13064:tid 140627975014144] [client 20.104.49.130:57676] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/ioxi-o.php"] [unique_id "aphpmWO4FfejT6BQfS6ETwAAAJY"]
[Wed Sep 02 13:23:22.263213 2026] [:error] [pid 13064:tid 140628185507584] [client 20.104.49.130:57521] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/bthil.php"] [unique_id "aphpmmO4FfejT6BQfS6EUgAAAIU"]
[Wed Sep 02 13:23:22.562651 2026] [:error] [pid 13378:tid 140628210685696] [client 20.104.49.130:57474] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/xwx1.php"] [unique_id "aphpmhZ2kcN90LY1LU9stAAAAQI"]
[Wed Sep 02 13:23:22.784340 2026] [:error] [pid 13062:tid 140628219078400] [client 20.104.49.130:57619] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/bolt.php"] [unique_id "aphpms83Jzm6fcsTqfG5zQAAAEE"]
[Wed Sep 02 13:23:23.043243 2026] [:error] [pid 13378:tid 140628033763072] [client 20.104.49.130:57634] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/cilus.php"] [unique_id "aphpmxZ2kcN90LY1LU9stQAAAQ8"]
[Wed Sep 02 13:23:23.269830 2026] [:error] [pid 13378:tid 140627966621440] [client 20.104.49.130:63703] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/ws78.php"] [unique_id "aphpmxZ2kcN90LY1LU9stgAAARc"]
[Wed Sep 02 13:23:23.644572 2026] [:error] [pid 26594:tid 140627966621440] [client 20.104.49.130:57608] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/ws58.php"] [unique_id "aphpmxJhrV4fM-gqM1wQygAAAVc"]
[Wed Sep 02 13:23:24.020844 2026] [:error] [pid 13065:tid 140628100904704] [client 20.104.49.130:57649] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/ws45.php"] [unique_id "aphpnMLa7rlBbtzQAsibfgAAAMc"]
[Wed Sep 02 13:23:24.320151 2026] [:error] [pid 13065:tid 140627975014144] [client 20.104.49.130:57696] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/ortasekerli1.php"] [unique_id "aphpnMLa7rlBbtzQAsibfwAAANY"]
[Wed Sep 02 13:23:24.740069 2026] [:error] [pid 24762:tid 140628042155776] [client 20.104.49.130:57486] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/t.php"] [unique_id "aphpnEvOhgfvInIzUv-m9AAAAA4"]
[Wed Sep 02 13:23:25.017010 2026] [:error] [pid 4787:tid 140628000192256] [client 20.104.49.130:57670] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-good.php"] [unique_id "aphpnYDtrMyUDBUw4k2p2QAAAZM"]
[Wed Sep 02 13:23:25.276443 2026] [:error] [pid 13378:tid 140628033763072] [client 20.104.49.130:63651] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/as.php"] [unique_id "aphpnRZ2kcN90LY1LU9svgAAAQ8"]
[Wed Sep 02 13:23:25.516276 2026] [:error] [pid 24762:tid 140628193900288] [client 20.104.49.130:63645] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/mh.php"] [unique_id "aphpnUvOhgfvInIzUv-m9QAAAAQ"]
[Wed Sep 02 13:23:25.775008 2026] [:error] [pid 13065:tid 140628067333888] [client 20.104.49.130:57495] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/press.php"] [unique_id "aphpncLa7rlBbtzQAsibgwAAAMs"]
[Wed Sep 02 13:23:26.016314 2026] [:error] [pid 24762:tid 140628092512000] [client 20.104.49.130:57662] [client 20.104.49.130] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/edit.php"] [unique_id "aphpnkvOhgfvInIzUv-m9gAAAAg"]
[Wed Sep 02 16:24:19.084601 2026] [proxy_fcgi:error] [pid 3679:tid 140111563912960] [client 208.87.243.199:55326] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 17:09:06.735023 2026] [:error] [pid 902:tid 139877119145728] [client 49.233.45.47:42906] [client 49.233.45.47] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.menabern.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.menabern.com"] [uri "/"] [unique_id "apiegnD3UfRyd6VRADIPugAAAAg"]
[Wed Sep 02 17:37:33.662487 2026] [:error] [pid 1073:tid 139877240514304] [client 43.130.228.73:37464] [client 43.130.228.73] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||menabern.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "menabern.com"] [uri "/"] [unique_id "apilLVaa_Qo7NvRGH-COkwAAAUI"]
[Wed Sep 02 18:30:09.572927 2026] [:error] [pid 903:tid 139877119145728] [client 43.130.139.136:44974] [client 43.130.139.136] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.menabern.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.menabern.com"] [uri "/"] [unique_id "apixga_SfnohFj1ZkMEyiwAAAEg"]
[Wed Sep 02 20:31:40.145731 2026] [authz_core:error] [pid 902:tid 139877060396800] [client 46.19.86.160:64623] AH01630: client denied by server configuration: /home/menabern/public_html/xmlrpc.php
[Wed Sep 02 20:37:31.284212 2026] [proxy_fcgi:error] [pid 902:tid 139877232121600] [client 20.151.10.161:61018] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 20:37:31.495901 2026] [proxy_fcgi:error] [pid 902:tid 139877093967616] [client 20.151.10.161:59515] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 20:37:31.703216 2026] [proxy_fcgi:error] [pid 902:tid 139877010040576] [client 20.151.10.161:59485] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 20:37:31.916663 2026] [proxy_fcgi:error] [pid 903:tid 139877035218688] [client 20.151.10.161:59176] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 20:37:32.126543 2026] [proxy_fcgi:error] [pid 1073:tid 139877001647872] [client 20.151.10.161:62509] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 20:37:32.329759 2026] [:error] [pid 902:tid 139877110753024] [client 20.151.10.161:59153] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?i)(^|/)(\\\\.env($|[/?])|\\\\.git/|aw\\\\.php$|adminfuns\\\\.php$|xmrlpc\\\\.php$|unzipper\\\\.php$|alfa\\\\.php$|alfanew\\\\.php$)" at REQUEST_URI. [file "/usr/local/apache/conf.d/zzz-security-hardening.conf"] [line "26"] [id "110001"] [msg "CWP-Hardening: Scanner/webshell probe blocked"] [hostname "menabern.com"] [uri "/adminfuns.php"] [unique_id "apjPXHD3UfRyd6VRADJ9rwAAAAk"]
[Wed Sep 02 20:37:32.539972 2026] [proxy_fcgi:error] [pid 1149:tid 139877144323840] [client 20.151.10.161:59811] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 20:37:32.750340 2026] [proxy_fcgi:error] [pid 902:tid 139877052004096] [client 20.151.10.161:62522] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 20:37:32.958138 2026] [proxy_fcgi:error] [pid 1150:tid 139877001647872] [client 20.151.10.161:40190] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 20:37:33.162094 2026] [proxy_fcgi:error] [pid 903:tid 139877110753024] [client 20.151.10.161:59464] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 20:37:33.388502 2026] [proxy_fcgi:error] [pid 902:tid 139877010040576] [client 20.151.10.161:60847] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 20:37:33.600787 2026] [proxy_fcgi:error] [pid 904:tid 139877001647872] [client 20.151.10.161:59152] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 20:37:33.810903 2026] [proxy_fcgi:error] [pid 904:tid 139877093967616] [client 20.151.10.161:59168] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 20:37:34.016448 2026] [proxy_fcgi:error] [pid 904:tid 139877102360320] [client 20.151.10.161:59139] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 20:37:34.223904 2026] [proxy_fcgi:error] [pid 1150:tid 139877144323840] [client 20.151.10.161:59169] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 20:37:34.456120 2026] [proxy_fcgi:error] [pid 1150:tid 139877085574912] [client 20.151.10.161:62476] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 20:37:34.665938 2026] [proxy_fcgi:error] [pid 1072:tid 139877010040576] [client 20.151.10.161:60996] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 20:37:34.887065 2026] [proxy_fcgi:error] [pid 1072:tid 139876993255168] [client 20.151.10.161:62310] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 20:37:35.098205 2026] [proxy_fcgi:error] [pid 902:tid 139877144323840] [client 20.151.10.161:59171] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 20:37:35.317055 2026] [proxy_fcgi:error] [pid 1073:tid 139877026825984] [client 20.151.10.161:61036] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 20:37:35.540511 2026] [proxy_fcgi:error] [pid 1150:tid 139877068789504] [client 20.151.10.161:62485] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 20:37:35.750684 2026] [proxy_fcgi:error] [pid 902:tid 139877240514304] [client 20.151.10.161:59796] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 20:37:35.981301 2026] [proxy_fcgi:error] [pid 1150:tid 139877119145728] [client 20.151.10.161:60841] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 20:37:36.187304 2026] [proxy_fcgi:error] [pid 902:tid 139877052004096] [client 20.151.10.161:59824] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 20:37:36.422097 2026] [proxy_fcgi:error] [pid 1072:tid 139877035218688] [client 20.151.10.161:59806] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 20:37:36.648357 2026] [proxy_fcgi:error] [pid 903:tid 139876984862464] [client 20.151.10.161:59829] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 20:37:36.648490 2026] [:error] [pid 903:tid 139876984862464] [client 20.151.10.161:59829] [client 20.151.10.161] ModSecurity: Warning. Operator GT matched 25 at IP:scan_404_count. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "11"] [id "9000204"] [msg "Scanner detected - blocking IP 1h"] [tag "scanner-detect"] [hostname "menabern.com"] [uri "/radio.php"] [unique_id "apjPYK_SfnohFj1ZkMGF2gAAAFg"]
[Wed Sep 02 20:37:36.861357 2026] [:error] [pid 1150:tid 139876993255168] [client 20.151.10.161:61041] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/one.php"] [unique_id "apjPYFandIN96G83sQb8hgAAAdc"]
[Wed Sep 02 20:37:37.069782 2026] [:error] [pid 902:tid 139877232121600] [client 20.151.10.161:60837] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/ano.php"] [unique_id "apjPYXD3UfRyd6VRADJ9uwAAAAM"]
[Wed Sep 02 20:37:37.279501 2026] [:error] [pid 1024:tid 139877135931136] [client 20.151.10.161:59778] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/mac.php"] [unique_id "apjPYawUOJ55hWVbhHlxCAAAAMY"]
[Wed Sep 02 20:37:37.482471 2026] [:error] [pid 902:tid 139877093967616] [client 20.151.10.161:59462] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/simple.php"] [unique_id "apjPYXD3UfRyd6VRADJ9vAAAAAs"]
[Wed Sep 02 20:37:37.686722 2026] [:error] [pid 903:tid 139877001647872] [client 20.151.10.161:62521] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/sallu.php"] [unique_id "apjPYa_SfnohFj1ZkMGF3AAAAFY"]
[Wed Sep 02 20:37:37.893694 2026] [:error] [pid 1150:tid 139877085574912] [client 20.151.10.161:59498] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/biufile.php"] [unique_id "apjPYVandIN96G83sQb8igAAAcw"]
[Wed Sep 02 20:37:38.096990 2026] [:error] [pid 903:tid 139877026825984] [client 20.151.10.161:59468] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/blacks.php"] [unique_id "apjPYq_SfnohFj1ZkMGF3QAAAFM"]
[Wed Sep 02 20:37:38.303013 2026] [:error] [pid 1024:tid 139877240514304] [client 20.151.10.161:62285] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp.php"] [unique_id "apjPYqwUOJ55hWVbhHlxCQAAAMI"]
[Wed Sep 02 20:37:38.507912 2026] [:error] [pid 902:tid 139877248907008] [client 20.151.10.161:59504] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wander.php"] [unique_id "apjPYnD3UfRyd6VRADJ9wAAAAAE"]
[Wed Sep 02 20:37:38.713475 2026] [:error] [pid 902:tid 139877068789504] [client 20.151.10.161:59831] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/abcd.php"] [unique_id "apjPYnD3UfRyd6VRADJ9wQAAAA4"]
[Wed Sep 02 20:37:38.916458 2026] [:error] [pid 1150:tid 139876984862464] [client 20.151.10.161:61032] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/nofile.php"] [unique_id "apjPYlandIN96G83sQb8jQAAAdg"]
[Wed Sep 02 20:37:39.127899 2026] [:error] [pid 1150:tid 139877001647872] [client 20.151.10.161:60994] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/run.php"] [unique_id "apjPY1andIN96G83sQb8jgAAAdY"]
[Wed Sep 02 20:37:39.339832 2026] [:error] [pid 902:tid 139877035218688] [client 20.151.10.161:59188] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/new.php"] [unique_id "apjPY3D3UfRyd6VRADJ9wwAAABI"]
[Wed Sep 02 20:37:39.551964 2026] [:error] [pid 1073:tid 139877052004096] [client 20.151.10.161:59186] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/vpn.php"] [unique_id "apjPY1aa_Qo7NvRGH-D7RAAAAVA"]
[Wed Sep 02 20:37:39.772056 2026] [:error] [pid 1073:tid 139877110753024] [client 20.151.10.161:59491] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/goods.php"] [unique_id "apjPY1aa_Qo7NvRGH-D7RQAAAUk"]
[Wed Sep 02 20:37:39.974842 2026] [:error] [pid 1072:tid 139877240514304] [client 20.151.10.161:61005] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/alfa.php"] [unique_id "apjPY1Sr6Dum30GCXcTw6gAAAQI"]
[Wed Sep 02 20:37:40.178387 2026] [:error] [pid 1150:tid 139877248907008] [client 20.151.10.161:59138] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/133.php"] [unique_id "apjPZFandIN96G83sQb8kgAAAcE"]
[Wed Sep 02 20:37:40.388514 2026] [:error] [pid 903:tid 139877068789504] [client 20.151.10.161:60845] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/sym.php"] [unique_id "apjPZK_SfnohFj1ZkMGF3gAAAE4"]
[Wed Sep 02 20:37:40.603973 2026] [:error] [pid 1150:tid 139877144323840] [client 20.151.10.161:60842] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/indo.php"] [unique_id "apjPZFandIN96G83sQb8kwAAAcU"]
[Wed Sep 02 20:37:40.804355 2026] [:error] [pid 902:tid 139877119145728] [client 20.151.10.161:62321] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-content/uploads/"] [unique_id "apjPZHD3UfRyd6VRADJ9xQAAAAg"]
[Wed Sep 02 20:37:41.007459 2026] [:error] [pid 1024:tid 139877110753024] [client 20.151.10.161:60820] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/w.php"] [unique_id "apjPZawUOJ55hWVbhHlxCwAAAMk"]
[Wed Sep 02 20:37:41.207339 2026] [:error] [pid 1073:tid 139877232121600] [client 20.151.10.161:59827] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/dk.php"] [unique_id "apjPZVaa_Qo7NvRGH-D7RgAAAUM"]
[Wed Sep 02 20:37:41.413377 2026] [:error] [pid 1149:tid 139877152716544] [client 20.151.10.161:59193] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp_blog_footer.php"] [unique_id "apjPZe5-Dlx-kBq1C1BKogAAAYQ"]
[Wed Sep 02 20:37:41.613121 2026] [:error] [pid 1150:tid 139877026825984] [client 20.151.10.161:59509] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/robot.php"] [unique_id "apjPZVandIN96G83sQb8lAAAAdM"]
[Wed Sep 02 20:37:41.829963 2026] [:error] [pid 1150:tid 139877152716544] [client 20.151.10.161:62293] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/sss.php"] [unique_id "apjPZVandIN96G83sQb8lQAAAcQ"]
[Wed Sep 02 20:37:42.037843 2026] [:error] [pid 1024:tid 139877077182208] [client 20.151.10.161:60812] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/gulu.php"] [unique_id "apjPZqwUOJ55hWVbhHlxDAAAAM0"]
[Wed Sep 02 20:37:42.237742 2026] [:error] [pid 1150:tid 139877043611392] [client 20.151.10.161:62493] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/replace.php"] [unique_id "apjPZlandIN96G83sQb8lwAAAdE"]
[Wed Sep 02 20:37:42.440706 2026] [:error] [pid 902:tid 139877068789504] [client 20.151.10.161:62471] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/rxr.php"] [unique_id "apjPZnD3UfRyd6VRADJ9xwAAAA4"]
[Wed Sep 02 20:37:42.646431 2026] [:error] [pid 1150:tid 139877018433280] [client 20.151.10.161:61016] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/reviall.php"] [unique_id "apjPZlandIN96G83sQb8mAAAAdQ"]
[Wed Sep 02 20:37:42.864154 2026] [:error] [pid 1150:tid 139876984862464] [client 20.151.10.161:59018] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/os.php"] [unique_id "apjPZlandIN96G83sQb8mQAAAdg"]
[Wed Sep 02 20:37:43.071757 2026] [:error] [pid 1073:tid 139877035218688] [client 20.151.10.161:59499] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/44.php"] [unique_id "apjPZ1aa_Qo7NvRGH-D7SQAAAVI"]
[Wed Sep 02 20:37:43.281183 2026] [:error] [pid 1150:tid 139877102360320] [client 20.151.10.161:60833] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/file61.php"] [unique_id "apjPZ1andIN96G83sQb8mwAAAco"]
[Wed Sep 02 20:37:43.482163 2026] [:error] [pid 1024:tid 139877152716544] [client 20.151.10.161:62474] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/file59.php"] [unique_id "apjPZ6wUOJ55hWVbhHlxDQAAAMQ"]
[Wed Sep 02 20:37:43.687563 2026] [:error] [pid 1150:tid 139877093967616] [client 20.151.10.161:60844] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/ded.php"] [unique_id "apjPZ1andIN96G83sQb8nQAAAcs"]
[Wed Sep 02 20:37:43.890734 2026] [:error] [pid 902:tid 139877135931136] [client 20.151.10.161:60839] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/BDKR28Wo.php"] [unique_id "apjPZ3D3UfRyd6VRADJ9zQAAAAY"]
[Wed Sep 02 20:37:44.097223 2026] [:error] [pid 1073:tid 139877010040576] [client 20.151.10.161:60809] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/autoload_classmap.php"] [unique_id "apjPaFaa_Qo7NvRGH-D7SwAAAVU"]
[Wed Sep 02 20:37:44.300179 2026] [:error] [pid 1150:tid 139877077182208] [client 20.151.10.161:59137] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/menu.php"] [unique_id "apjPaFandIN96G83sQb8nwAAAc0"]
[Wed Sep 02 20:37:44.501470 2026] [:error] [pid 1149:tid 139877127538432] [client 20.151.10.161:59809] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/nxc.php"] [unique_id "apjPaO5-Dlx-kBq1C1BKpAAAAYc"]
[Wed Sep 02 20:37:44.715571 2026] [:error] [pid 1150:tid 139876984862464] [client 20.151.10.161:59148] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/or.php"] [unique_id "apjPaFandIN96G83sQb8ogAAAdg"]
[Wed Sep 02 20:37:44.917076 2026] [:error] [pid 1150:tid 139877135931136] [client 20.151.10.161:59147] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/das.php"] [unique_id "apjPaFandIN96G83sQb8owAAAcY"]
[Wed Sep 02 20:37:45.123183 2026] [:error] [pid 902:tid 139877102360320] [client 20.151.10.161:59172] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/kir.php"] [unique_id "apjPaXD3UfRyd6VRADJ9zwAAAAo"]
[Wed Sep 02 20:37:45.323258 2026] [:error] [pid 1150:tid 139877052004096] [client 20.151.10.161:59199] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/.well-known/nam.php"] [unique_id "apjPaVandIN96G83sQb8pAAAAdA"]
[Wed Sep 02 22:03:24.815981 2026] [:error] [pid 1150:tid 139877102360320] [client 43.166.134.114:48798] [client 43.166.134.114] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||menabern.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "menabern.com"] [uri "/"] [unique_id "apjjfFandIN96G83sQYZKwAAAco"]
[Wed Sep 02 22:12:43.465363 2026] [proxy_fcgi:error] [pid 1072:tid 139877093967616] [client 27.111.11.8:55300] AH01071: Got error 'Primary script unknown'
[Wed Sep 02 22:28:44.895456 2026] [:error] [pid 902:tid 139877102360320] [client 175.27.163.171:44330] [client 175.27.163.171] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||menabern.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "menabern.com"] [uri "/"] [unique_id "apjpbHD3UfRyd6VRADKb1wAAAAo"]
[Wed Sep 02 22:33:35.033299 2026] [authz_core:error] [pid 1024:tid 139877060396800] [client 74.7.242.54:34860] AH01630: client denied by server configuration: /home/menabern/public_html/, referer: https://seo-revealed.club
[Wed Sep 02 22:55:19.764384 2026] [:error] [pid 1024:tid 139877001647872] [client 43.157.95.239:59920] [client 43.157.95.239] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.menabern.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.menabern.com"] [uri "/"] [unique_id "apjvp6wUOJ55hWVbhHmUqgAAANY"]
[Wed Sep 02 23:34:02.954503 2026] [authz_core:error] [pid 1150:tid 139877052004096] [client 74.7.241.56:40250] AH01630: client denied by server configuration: /home/menabern/public_html/
[Thu Sep 03 02:01:05.062606 2026] [:error] [pid 1073:tid 139877010040576] [client 43.135.133.194:52384] [client 43.135.133.194] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||menabern.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "menabern.com"] [uri "/"] [unique_id "apkbMVaa_Qo7NvRGH-BMAQAAAVU"]
[Thu Sep 03 02:38:30.144117 2026] [:error] [pid 1150:tid 139877085574912] [client 49.51.50.147:38462] [client 49.51.50.147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.menabern.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.menabern.com"] [uri "/"] [unique_id "apkj9landIN96G83sQaOEQAAAcw"]
[Thu Sep 03 03:29:00.351157 2026] [:error] [pid 14356:tid 139687872083712] [client 34.35.44.172:47878] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.git/config"] [unique_id "apkvzEzbFjoHquTB_yl-pwAAABc"]
[Thu Sep 03 03:29:01.793804 2026] [:error] [pid 14356:tid 139687956010752] [client 34.35.44.172:47888] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env"] [unique_id "apkvzUzbFjoHquTB_yl-qAAAAA0"]
[Thu Sep 03 03:29:02.483587 2026] [:error] [pid 14356:tid 139688006366976] [client 34.35.44.172:47896] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env.local"] [unique_id "apkvzkzbFjoHquTB_yl-qgAAAAc"]
[Thu Sep 03 03:29:03.175772 2026] [:error] [pid 14356:tid 139687981188864] [client 34.35.44.172:47902] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env.production"] [unique_id "apkvz0zbFjoHquTB_yl-rAAAAAo"]
[Thu Sep 03 03:29:03.867277 2026] [:error] [pid 14239:tid 139687956010752] [client 34.35.44.172:47904] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env.staging"] [unique_id "apkvz9UIZMka9NNIKm8vtwAAAM0"]
[Thu Sep 03 03:29:04.644860 2026] [:error] [pid 14356:tid 139688123938560] [client 34.35.44.172:47906] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env.development"] [unique_id "apkv0EzbFjoHquTB_yl-rQAAAAE"]
[Thu Sep 03 03:29:05.345447 2026] [:error] [pid 14356:tid 139687997974272] [client 34.35.44.172:47920] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env.test"] [unique_id "apkv0UzbFjoHquTB_yl-rwAAAAg"]
[Thu Sep 03 03:29:06.032308 2026] [:error] [pid 14239:tid 139687872083712] [client 34.35.44.172:47926] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env.remote"] [unique_id "apkv0tUIZMka9NNIKm8vuAAAANc"]
[Thu Sep 03 03:29:06.727706 2026] [:error] [pid 14239:tid 139687880476416] [client 34.35.44.172:47934] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env.bak"] [unique_id "apkv0tUIZMka9NNIKm8vugAAANY"]
[Thu Sep 03 03:29:07.502270 2026] [:error] [pid 14235:tid 139687981188864] [client 34.35.44.172:47940] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env.backup"] [unique_id "apkv016rAlyCQLg_5nZuRAAAAIo"]
[Thu Sep 03 03:29:08.204834 2026] [:error] [pid 14356:tid 139687930832640] [client 34.35.44.172:47946] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env.save"] [unique_id "apkv1EzbFjoHquTB_yl-sgAAABA"]
[Thu Sep 03 03:29:08.895673 2026] [:error] [pid 14235:tid 139687956010752] [client 34.35.44.172:47952] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env.old"] [unique_id "apkv1F6rAlyCQLg_5nZuRwAAAI0"]
[Thu Sep 03 03:29:09.597669 2026] [:error] [pid 14356:tid 139688006366976] [client 34.35.44.172:47964] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env.sample"] [unique_id "apkv1UzbFjoHquTB_yl-tgAAAAc"]
[Thu Sep 03 03:29:10.293595 2026] [:error] [pid 14235:tid 139687989581568] [client 34.35.44.172:47648] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env.example"] [unique_id "apkv1l6rAlyCQLg_5nZuSAAAAIk"]
[Thu Sep 03 03:29:11.075463 2026] [:error] [pid 14231:tid 139687863691008] [client 34.35.44.172:47650] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env.dev"] [unique_id "apkv16_YbNcSuH2GNlTGxAAAAFg"]
[Thu Sep 03 03:29:11.774211 2026] [:error] [pid 14239:tid 139687888869120] [client 34.35.44.172:47656] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env.prod"] [unique_id "apkv19UIZMka9NNIKm8vvQAAANU"]
[Thu Sep 03 03:29:12.464300 2026] [:error] [pid 14235:tid 139688014759680] [client 34.35.44.172:47670] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env.stage"] [unique_id "apkv2F6rAlyCQLg_5nZuSQAAAIY"]
[Thu Sep 03 03:29:13.161556 2026] [:error] [pid 14231:tid 139687872083712] [client 34.35.44.172:47676] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env.ci"] [unique_id "apkv2a_YbNcSuH2GNlTGxgAAAFc"]
[Thu Sep 03 03:29:13.929769 2026] [:error] [pid 14356:tid 139688014759680] [client 34.35.44.172:47686] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env.docker"] [unique_id "apkv2UzbFjoHquTB_yl-uAAAAAY"]
[Thu Sep 03 03:29:14.636828 2026] [:error] [pid 14356:tid 139687914047232] [client 34.35.44.172:47688] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env.live"] [unique_id "apkv2kzbFjoHquTB_yl-ugAAABI"]
[Thu Sep 03 03:29:15.321589 2026] [:error] [pid 14235:tid 139687930832640] [client 34.35.44.172:47692] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env.preprod"] [unique_id "apkv216rAlyCQLg_5nZuTAAAAJA"]
[Thu Sep 03 03:29:16.003548 2026] [:error] [pid 14356:tid 139687989581568] [client 34.35.44.172:47700] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env.uat"] [unique_id "apkv3EzbFjoHquTB_yl-vQAAAAk"]
[Thu Sep 03 03:29:16.696831 2026] [:error] [pid 14356:tid 139687897261824] [client 34.35.44.172:47706] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env.dist"] [unique_id "apkv3EzbFjoHquTB_yl-vgAAABQ"]
[Thu Sep 03 03:29:17.416106 2026] [:error] [pid 14235:tid 139688132331264] [client 34.35.44.172:47710] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env.swp"] [unique_id "apkv3V6rAlyCQLg_5nZuTgAAAIA"]
[Thu Sep 03 03:29:18.106229 2026] [:error] [pid 14239:tid 139687997974272] [client 34.35.44.172:47726] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env~"] [unique_id "apkv3tUIZMka9NNIKm8vwAAAAMg"]
[Thu Sep 03 03:29:18.802356 2026] [:error] [pid 14356:tid 139687905654528] [client 34.35.44.172:47736] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env1"] [unique_id "apkv3kzbFjoHquTB_yl-wQAAABM"]
[Thu Sep 03 03:29:19.504551 2026] [:error] [pid 14356:tid 139687880476416] [client 34.35.44.172:47750] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env2"] [unique_id "apkv30zbFjoHquTB_yl-wgAAABY"]
[Thu Sep 03 03:29:20.196584 2026] [:error] [pid 14235:tid 139687981188864] [client 34.35.44.172:52756] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env_copy"] [unique_id "apkv4F6rAlyCQLg_5nZuTwAAAIo"]
[Thu Sep 03 03:29:20.892545 2026] [:error] [pid 14239:tid 139688123938560] [client 34.35.44.172:52760] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env.txt"] [unique_id "apkv4NUIZMka9NNIKm8vwwAAAME"]
[Thu Sep 03 03:29:21.588342 2026] [:error] [pid 14356:tid 139687981188864] [client 34.35.44.172:52772] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env.json"] [unique_id "apkv4UzbFjoHquTB_yl-xQAAAAo"]
[Thu Sep 03 03:29:22.278888 2026] [:error] [pid 14356:tid 139688132331264] [client 34.35.44.172:52780] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env.yaml"] [unique_id "apkv4kzbFjoHquTB_yl-xwAAAAA"]
[Thu Sep 03 03:29:22.971434 2026] [:error] [pid 14231:tid 139687989581568] [client 34.35.44.172:52788] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env.yml"] [unique_id "apkv4q_YbNcSuH2GNlTGygAAAEk"]
[Thu Sep 03 03:29:23.663252 2026] [:error] [pid 14235:tid 139688006366976] [client 34.35.44.172:52792] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/app/.env"] [unique_id "apkv416rAlyCQLg_5nZuVQAAAIc"]
[Thu Sep 03 03:29:24.353269 2026] [:error] [pid 14231:tid 139687981188864] [client 34.35.44.172:52806] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/apps/.env"] [unique_id "apkv5K_YbNcSuH2GNlTGywAAAEo"]
[Thu Sep 03 03:29:25.044774 2026] [:error] [pid 14239:tid 139687972796160] [client 34.35.44.172:52810] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/api/.env"] [unique_id "apkv5dUIZMka9NNIKm8vxgAAAMs"]
[Thu Sep 03 03:29:25.744341 2026] [:error] [pid 14356:tid 139688006366976] [client 34.35.44.172:52824] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/web/.env"] [unique_id "apkv5UzbFjoHquTB_yl-zQAAAAc"]
[Thu Sep 03 03:29:26.435724 2026] [:error] [pid 14239:tid 139687888869120] [client 34.35.44.172:52828] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/site/.env"] [unique_id "apkv5tUIZMka9NNIKm8vyAAAANU"]
[Thu Sep 03 03:29:27.137155 2026] [:error] [pid 14239:tid 139688023152384] [client 34.35.44.172:52844] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/public/.env"] [unique_id "apkv59UIZMka9NNIKm8vyQAAAMU"]
[Thu Sep 03 03:29:27.824785 2026] [:error] [pid 14235:tid 139687888869120] [client 34.35.44.172:52860] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/admin/.env"] [unique_id "apkv516rAlyCQLg_5nZuWAAAAJU"]
[Thu Sep 03 03:29:28.520817 2026] [:error] [pid 14356:tid 139688115545856] [client 34.35.44.172:52862] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/backend/.env"] [unique_id "apkv6EzbFjoHquTB_yl-0AAAAAI"]
[Thu Sep 03 03:29:29.213387 2026] [:error] [pid 14235:tid 139687972796160] [client 34.35.44.172:52874] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/server/.env"] [unique_id "apkv6V6rAlyCQLg_5nZuWQAAAIs"]
[Thu Sep 03 03:29:29.898150 2026] [:error] [pid 14239:tid 139688014759680] [client 34.35.44.172:36832] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/frontend/.env"] [unique_id "apkv6dUIZMka9NNIKm8vzAAAAMY"]
[Thu Sep 03 03:29:30.586475 2026] [:error] [pid 14356:tid 139687947618048] [client 34.35.44.172:36842] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/src/.env"] [unique_id "apkv6kzbFjoHquTB_yl-0wAAAA4"]
[Thu Sep 03 03:29:31.280230 2026] [:error] [pid 14239:tid 139687914047232] [client 34.35.44.172:36844] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/core/.env"] [unique_id "apkv69UIZMka9NNIKm8v0AAAANI"]
[Thu Sep 03 03:29:31.979411 2026] [:error] [pid 14356:tid 139687930832640] [client 34.35.44.172:36860] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/core/app/.env"] [unique_id "apkv60zbFjoHquTB_yl-1QAAABA"]
[Thu Sep 03 03:29:32.672538 2026] [:error] [pid 14356:tid 139687897261824] [client 34.35.44.172:36874] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/config/.env"] [unique_id "apkv7EzbFjoHquTB_yl-1gAAABQ"]
[Thu Sep 03 03:29:33.358950 2026] [:error] [pid 14356:tid 139687888869120] [client 34.35.44.172:36886] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/private/.env"] [unique_id "apkv7UzbFjoHquTB_yl-1wAAABU"]
[Thu Sep 03 03:29:34.046104 2026] [:error] [pid 14356:tid 139687905654528] [client 34.35.44.172:36896] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/application/.env"] [unique_id "apkv7kzbFjoHquTB_yl-2QAAABM"]
[Thu Sep 03 03:29:34.753144 2026] [:error] [pid 14235:tid 139687880476416] [client 34.35.44.172:36900] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/bootstrap/.env"] [unique_id "apkv7l6rAlyCQLg_5nZuXAAAAJY"]
[Thu Sep 03 03:29:35.452864 2026] [:error] [pid 14239:tid 139687905654528] [client 34.35.44.172:36904] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/database/.env"] [unique_id "apkv79UIZMka9NNIKm8v0wAAANM"]
[Thu Sep 03 03:29:36.143547 2026] [:error] [pid 14239:tid 139687888869120] [client 34.35.44.172:36908] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/storage/.env"] [unique_id "apkv8NUIZMka9NNIKm8v2AAAANU"]
[Thu Sep 03 03:29:36.831504 2026] [:error] [pid 14231:tid 139688014759680] [client 34.35.44.172:36920] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/var/www/.env"] [unique_id "apkv8K_YbNcSuH2GNlTG0QAAAEY"]
[Thu Sep 03 03:29:37.527164 2026] [:error] [pid 14231:tid 139687930832640] [client 34.35.44.172:36936] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/var/www/html/.env"] [unique_id "apkv8a_YbNcSuH2GNlTG1wAAAFA"]
[Thu Sep 03 03:29:38.221301 2026] [:error] [pid 14235:tid 139687956010752] [client 34.35.44.172:36944] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/current/.env"] [unique_id "apkv8l6rAlyCQLg_5nZuXgAAAI0"]
[Thu Sep 03 03:29:38.917192 2026] [:error] [pid 14231:tid 139687897261824] [client 34.35.44.172:36950] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/release/.env"] [unique_id "apkv8q_YbNcSuH2GNlTG2QAAAFQ"]
[Thu Sep 03 03:29:39.618617 2026] [:error] [pid 14239:tid 139688115545856] [client 34.35.44.172:36954] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/releases/.env"] [unique_id "apkv89UIZMka9NNIKm8v3wAAAMI"]
[Thu Sep 03 03:29:40.317336 2026] [:error] [pid 14356:tid 139687914047232] [client 34.35.44.172:32940] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/shared/.env"] [unique_id "apkv9EzbFjoHquTB_yl-3wAAABI"]
[Thu Sep 03 03:29:41.017335 2026] [:error] [pid 14356:tid 139687930832640] [client 34.35.44.172:32950] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/deploy/.env"] [unique_id "apkv9UzbFjoHquTB_yl-4QAAABA"]
[Thu Sep 03 03:29:41.719221 2026] [:error] [pid 14356:tid 139687939225344] [client 34.35.44.172:32960] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/build/.env"] [unique_id "apkv9UzbFjoHquTB_yl-5AAAAA8"]
[Thu Sep 03 03:29:42.411995 2026] [:error] [pid 14239:tid 139687997974272] [client 34.35.44.172:32970] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/dist/.env"] [unique_id "apkv9tUIZMka9NNIKm8v4gAAAMg"]
[Thu Sep 03 03:29:43.109666 2026] [:error] [pid 14239:tid 139687956010752] [client 34.35.44.172:32986] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/public_html/.env"] [unique_id "apkv99UIZMka9NNIKm8v5AAAAM0"]
[Thu Sep 03 03:29:43.804971 2026] [:error] [pid 14356:tid 139687981188864] [client 34.35.44.172:32988] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/htdocs/.env"] [unique_id "apkv90zbFjoHquTB_yl-5wAAAAo"]
[Thu Sep 03 03:29:44.495167 2026] [:error] [pid 14356:tid 139687922439936] [client 34.35.44.172:32992] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/www/.env"] [unique_id "apkv-EzbFjoHquTB_yl-6wAAABE"]
[Thu Sep 03 03:29:45.188215 2026] [:error] [pid 14356:tid 139687989581568] [client 34.35.44.172:32994] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/html/.env"] [unique_id "apkv-UzbFjoHquTB_yl-7QAAAAk"]
[Thu Sep 03 03:29:45.930615 2026] [:error] [pid 14231:tid 139688115545856] [client 34.35.44.172:32996] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/live/.env"] [unique_id "apkv-a_YbNcSuH2GNlTG2gAAAEI"]
[Thu Sep 03 03:29:46.628840 2026] [:error] [pid 14356:tid 139687905654528] [client 34.35.44.172:33008] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/prod/.env"] [unique_id "apkv-kzbFjoHquTB_yl-8AAAABM"]
[Thu Sep 03 03:29:47.317895 2026] [:error] [pid 14231:tid 139688023152384] [client 34.35.44.172:33012] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/dev/.env"] [unique_id "apkv-6_YbNcSuH2GNlTG3AAAAEU"]
[Thu Sep 03 03:29:48.014064 2026] [:error] [pid 14356:tid 139687880476416] [client 34.35.44.172:33028] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/staging/.env"] [unique_id "apkv_EzbFjoHquTB_yl-8QAAABY"]
[Thu Sep 03 03:29:48.710144 2026] [:error] [pid 14239:tid 139687880476416] [client 34.35.44.172:33038] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/opt/.env"] [unique_id "apkv_NUIZMka9NNIKm8v5wAAANY"]
[Thu Sep 03 03:29:49.398082 2026] [:error] [pid 14356:tid 139687981188864] [client 34.35.44.172:33040] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/laravel/.env"] [unique_id "apkv_UzbFjoHquTB_yl-9AAAAAo"]
[Thu Sep 03 03:29:50.093696 2026] [:error] [pid 14356:tid 139687947618048] [client 34.35.44.172:41810] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/symfony/.env"] [unique_id "apkv_kzbFjoHquTB_yl-9gAAAA4"]
[Thu Sep 03 03:29:50.784191 2026] [:error] [pid 14356:tid 139688132331264] [client 34.35.44.172:41826] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/wordpress/.env"] [unique_id "apkv_kzbFjoHquTB_yl-9wAAAAA"]
[Thu Sep 03 03:29:51.473585 2026] [:error] [pid 14356:tid 139688123938560] [client 34.35.44.172:41832] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/wp/.env"] [unique_id "apkv_0zbFjoHquTB_yl--gAAAAE"]
[Thu Sep 03 03:29:52.159085 2026] [:error] [pid 14356:tid 139687956010752] [client 34.35.44.172:41848] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/cms/.env"] [unique_id "apkwAEzbFjoHquTB_yl-_QAAAA0"]
[Thu Sep 03 03:29:52.846058 2026] [:error] [pid 14239:tid 139687981188864] [client 34.35.44.172:41858] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/drupal/.env"] [unique_id "apkwANUIZMka9NNIKm8v7QAAAMo"]
[Thu Sep 03 03:29:53.534853 2026] [:error] [pid 14235:tid 139688023152384] [client 34.35.44.172:41868] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/joomla/.env"] [unique_id "apkwAV6rAlyCQLg_5nZuZwAAAIU"]
[Thu Sep 03 03:29:54.223087 2026] [:error] [pid 14239:tid 139688039937792] [client 34.35.44.172:41874] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/magento/.env"] [unique_id "apkwAtUIZMka9NNIKm8v7gAAAMM"]
[Thu Sep 03 03:29:54.911886 2026] [:error] [pid 14235:tid 139687880476416] [client 34.35.44.172:41884] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/shopify/.env"] [unique_id "apkwAl6rAlyCQLg_5nZuaQAAAJY"]
[Thu Sep 03 03:29:55.605830 2026] [:error] [pid 14235:tid 139687905654528] [client 34.35.44.172:41900] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/prestashop/.env"] [unique_id "apkwA16rAlyCQLg_5nZuagAAAJM"]
[Thu Sep 03 03:29:56.297782 2026] [:error] [pid 14235:tid 139687989581568] [client 34.35.44.172:41904] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/codeigniter/.env"] [unique_id "apkwBF6rAlyCQLg_5nZubgAAAIk"]
[Thu Sep 03 03:29:56.983500 2026] [:error] [pid 14239:tid 139688123938560] [client 34.35.44.172:41910] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/cakephp/.env"] [unique_id "apkwBNUIZMka9NNIKm8v7wAAAME"]
[Thu Sep 03 03:29:57.673789 2026] [:error] [pid 14235:tid 139687914047232] [client 34.35.44.172:41924] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/zend/.env"] [unique_id "apkwBV6rAlyCQLg_5nZubwAAAJI"]
[Thu Sep 03 03:29:58.361919 2026] [:error] [pid 14235:tid 139687964403456] [client 34.35.44.172:41932] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/yii/.env"] [unique_id "apkwBl6rAlyCQLg_5nZucAAAAIw"]
[Thu Sep 03 03:29:59.110684 2026] [:error] [pid 14235:tid 139688132331264] [client 34.35.44.172:41936] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/laravel5/.env"] [unique_id "apkwB16rAlyCQLg_5nZucQAAAIA"]
[Thu Sep 03 03:29:59.811278 2026] [:error] [pid 14235:tid 139688123938560] [client 34.35.44.172:35462] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/v1/.env"] [unique_id "apkwB16rAlyCQLg_5nZudAAAAIE"]
[Thu Sep 03 03:30:00.497980 2026] [:error] [pid 14239:tid 139687880476416] [client 34.35.44.172:35466] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/v2/.env"] [unique_id "apkwCNUIZMka9NNIKm8v8AAAANY"]
[Thu Sep 03 03:30:01.184677 2026] [:error] [pid 14239:tid 139687914047232] [client 34.35.44.172:35480] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/v3/.env"] [unique_id "apkwCdUIZMka9NNIKm8v8QAAANI"]
[Thu Sep 03 03:30:01.873460 2026] [:error] [pid 14235:tid 139688115545856] [client 34.35.44.172:35488] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/api/v1/.env"] [unique_id "apkwCV6rAlyCQLg_5nZueQAAAII"]
[Thu Sep 03 03:30:02.568038 2026] [:error] [pid 14239:tid 139687981188864] [client 34.35.44.172:35494] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/api/v2/.env"] [unique_id "apkwCtUIZMka9NNIKm8v-AAAAMo"]
[Thu Sep 03 03:30:03.259005 2026] [:error] [pid 14231:tid 139687880476416] [client 34.35.44.172:35498] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/rest/.env"] [unique_id "apkwC6_YbNcSuH2GNlTG3wAAAFY"]
[Thu Sep 03 03:30:03.948373 2026] [:error] [pid 14239:tid 139687956010752] [client 34.35.44.172:35514] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/graphql/.env"] [unique_id "apkwC9UIZMka9NNIKm8v-gAAAM0"]
[Thu Sep 03 03:30:04.694578 2026] [:error] [pid 14356:tid 139687964403456] [client 34.35.44.172:35526] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/gateway/.env"] [unique_id "apkwDEzbFjoHquTB_yl_CgAAAAw"]
[Thu Sep 03 03:30:05.422564 2026] [:error] [pid 14356:tid 139688115545856] [client 34.35.44.172:35536] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/microservice/.env"] [unique_id "apkwDUzbFjoHquTB_yl_CwAAAAI"]
[Thu Sep 03 03:30:06.134231 2026] [:error] [pid 14235:tid 139687964403456] [client 34.35.44.172:35540] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/service/.env"] [unique_id "apkwDl6rAlyCQLg_5nZufAAAAIw"]
[Thu Sep 03 03:30:06.824709 2026] [:error] [pid 14356:tid 139687914047232] [client 34.35.44.172:35556] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/api/v3/.env"] [unique_id "apkwDkzbFjoHquTB_yl_DQAAABI"]
[Thu Sep 03 03:30:07.531826 2026] [:error] [pid 14231:tid 139687947618048] [client 34.35.44.172:35558] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/api/dev/.env"] [unique_id "apkwD6_YbNcSuH2GNlTG4AAAAE4"]
[Thu Sep 03 03:30:08.271208 2026] [:error] [pid 14231:tid 139687930832640] [client 34.35.44.172:35570] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/api/staging/.env"] [unique_id "apkwEK_YbNcSuH2GNlTG4gAAAFA"]
[Thu Sep 03 03:30:08.970846 2026] [:error] [pid 14231:tid 139687939225344] [client 34.35.44.172:35584] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/vendor/.env"] [unique_id "apkwEK_YbNcSuH2GNlTG4wAAAE8"]
[Thu Sep 03 03:30:09.672612 2026] [:error] [pid 14231:tid 139688006366976] [client 34.35.44.172:35598] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/lib/.env"] [unique_id "apkwEa_YbNcSuH2GNlTG5QAAAEc"]
[Thu Sep 03 03:30:10.366125 2026] [:error] [pid 14231:tid 139687956010752] [client 34.35.44.172:56874] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/resources/.env"] [unique_id "apkwEq_YbNcSuH2GNlTG5gAAAE0"]
[Thu Sep 03 03:30:11.061864 2026] [:error] [pid 14239:tid 139687989581568] [client 34.35.44.172:56884] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/assets/.env"] [unique_id "apkwE9UIZMka9NNIKm8wAQAAAMk"]
[Thu Sep 03 03:30:11.812116 2026] [:error] [pid 14356:tid 139687930832640] [client 34.35.44.172:56896] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/uploads/.env"] [unique_id "apkwE0zbFjoHquTB_yl_EgAAABA"]
[Thu Sep 03 03:30:12.526226 2026] [:error] [pid 14231:tid 139688014759680] [client 34.35.44.172:56908] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/internal/.env"] [unique_id "apkwFK_YbNcSuH2GNlTG6AAAAEY"]
[Thu Sep 03 03:30:13.211215 2026] [:error] [pid 14235:tid 139687880476416] [client 34.35.44.172:56920] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/tools/.env"] [unique_id "apkwFV6rAlyCQLg_5nZufQAAAJY"]
[Thu Sep 03 03:30:13.911848 2026] [:error] [pid 14239:tid 139687956010752] [client 34.35.44.172:56928] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/scripts/.env"] [unique_id "apkwFdUIZMka9NNIKm8wBgAAAM0"]
[Thu Sep 03 03:30:14.690038 2026] [:error] [pid 14235:tid 139687897261824] [client 34.35.44.172:56942] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/bin/.env"] [unique_id "apkwFl6rAlyCQLg_5nZufgAAAJQ"]
[Thu Sep 03 03:30:15.395178 2026] [:error] [pid 14235:tid 139688014759680] [client 34.35.44.172:56954] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/sbin/.env"] [unique_id "apkwF16rAlyCQLg_5nZufwAAAIY"]
[Thu Sep 03 03:30:16.086699 2026] [:error] [pid 14239:tid 139687922439936] [client 34.35.44.172:56958] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/local/.env"] [unique_id "apkwGNUIZMka9NNIKm8wCQAAANE"]
[Thu Sep 03 03:30:16.773955 2026] [:error] [pid 14239:tid 139687930832640] [client 34.35.44.172:56968] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/portal/.env"] [unique_id "apkwGNUIZMka9NNIKm8wDAAAANA"]
[Thu Sep 03 03:30:17.461780 2026] [:error] [pid 14356:tid 139687981188864] [client 34.35.44.172:56974] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/dashboard/.env"] [unique_id "apkwGUzbFjoHquTB_yl_FQAAAAo"]
[Thu Sep 03 03:30:18.247489 2026] [:error] [pid 14235:tid 139687981188864] [client 34.35.44.172:56986] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/panel/.env"] [unique_id "apkwGl6rAlyCQLg_5nZuggAAAIo"]
[Thu Sep 03 03:30:18.935298 2026] [:error] [pid 14239:tid 139687939225344] [client 34.35.44.172:56992] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/crm/.env"] [unique_id "apkwGtUIZMka9NNIKm8wDgAAAM8"]
[Thu Sep 03 03:30:19.628721 2026] [:error] [pid 14239:tid 139688014759680] [client 34.35.44.172:57006] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/erp/.env"] [unique_id "apkwG9UIZMka9NNIKm8wDwAAAMY"]
[Thu Sep 03 03:30:20.330599 2026] [:error] [pid 14231:tid 139687880476416] [client 34.35.44.172:52868] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/shop/.env"] [unique_id "apkwHK_YbNcSuH2GNlTG6gAAAFY"]
[Thu Sep 03 03:30:21.037533 2026] [:error] [pid 14235:tid 139688006366976] [client 34.35.44.172:52880] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/store/.env"] [unique_id "apkwHV6rAlyCQLg_5nZugwAAAIc"]
[Thu Sep 03 03:30:21.738018 2026] [:error] [pid 14235:tid 139687888869120] [client 34.35.44.172:52892] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/saas/.env"] [unique_id "apkwHV6rAlyCQLg_5nZuhQAAAJU"]
[Thu Sep 03 03:30:22.431019 2026] [:error] [pid 14239:tid 139687947618048] [client 34.35.44.172:52894] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/client/.env"] [unique_id "apkwHtUIZMka9NNIKm8wEwAAAM4"]
[Thu Sep 03 03:30:23.126240 2026] [:error] [pid 14231:tid 139687981188864] [client 34.35.44.172:52902] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/project/.env"] [unique_id "apkwH6_YbNcSuH2GNlTG7QAAAEo"]
[Thu Sep 03 03:30:23.827994 2026] [:error] [pid 14356:tid 139688031545088] [client 34.35.44.172:52912] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/admin-panel/.env"] [unique_id "apkwH0zbFjoHquTB_yl_GQAAAAQ"]
[Thu Sep 03 03:30:24.512035 2026] [:error] [pid 14356:tid 139687922439936] [client 34.35.44.172:52916] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/control-panel/.env"] [unique_id "apkwIEzbFjoHquTB_yl_GwAAABE"]
[Thu Sep 03 03:30:25.206654 2026] [:error] [pid 14235:tid 139687930832640] [client 34.35.44.172:52930] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/user-panel/.env"] [unique_id "apkwIV6rAlyCQLg_5nZuhgAAAJA"]
[Thu Sep 03 03:30:25.904073 2026] [:error] [pid 14239:tid 139687863691008] [client 34.35.44.172:52944] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/node/.env"] [unique_id "apkwIdUIZMka9NNIKm8wFgAAANg"]
[Thu Sep 03 03:30:26.588747 2026] [:error] [pid 14235:tid 139687922439936] [client 34.35.44.172:52954] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/express/.env"] [unique_id "apkwIl6rAlyCQLg_5nZuhwAAAJE"]
[Thu Sep 03 03:30:27.280274 2026] [:error] [pid 14356:tid 139687897261824] [client 34.35.44.172:52958] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/next/.env"] [unique_id "apkwI0zbFjoHquTB_yl_HQAAABQ"]
[Thu Sep 03 03:30:27.974369 2026] [:error] [pid 14356:tid 139687939225344] [client 34.35.44.172:52974] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/nuxt/.env"] [unique_id "apkwI0zbFjoHquTB_yl_HgAAAA8"]
[Thu Sep 03 03:30:28.679548 2026] [:error] [pid 14356:tid 139687930832640] [client 34.35.44.172:52976] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/nest/.env"] [unique_id "apkwJEzbFjoHquTB_yl_HwAAABA"]
[Thu Sep 03 03:30:29.370176 2026] [:error] [pid 14235:tid 139687964403456] [client 34.35.44.172:52986] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/react/.env"] [unique_id "apkwJV6rAlyCQLg_5nZuiAAAAIw"]
[Thu Sep 03 03:30:30.058265 2026] [:error] [pid 14356:tid 139688006366976] [client 34.35.44.172:47620] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/vue/.env"] [unique_id "apkwJkzbFjoHquTB_yl_IAAAAAc"]
[Thu Sep 03 03:30:30.750154 2026] [:error] [pid 14239:tid 139687888869120] [client 34.35.44.172:47636] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/angular/.env"] [unique_id "apkwJtUIZMka9NNIKm8wFwAAANU"]
[Thu Sep 03 03:30:31.440592 2026] [:error] [pid 14239:tid 139687981188864] [client 34.35.44.172:47648] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/svelte/.env"] [unique_id "apkwJ9UIZMka9NNIKm8wGQAAAMo"]
[Thu Sep 03 03:30:32.144902 2026] [:error] [pid 14356:tid 139688039937792] [client 34.35.44.172:47656] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/vite/.env"] [unique_id "apkwKEzbFjoHquTB_yl_JAAAAAM"]
[Thu Sep 03 03:30:32.847433 2026] [:error] [pid 14356:tid 139688031545088] [client 34.35.44.172:47668] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/backup/.env"] [unique_id "apkwKEzbFjoHquTB_yl_JgAAAAQ"]
[Thu Sep 03 03:30:33.532207 2026] [:error] [pid 14356:tid 139687989581568] [client 34.35.44.172:47678] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/backups/.env"] [unique_id "apkwKUzbFjoHquTB_yl_JwAAAAk"]
[Thu Sep 03 03:30:34.232156 2026] [:error] [pid 14235:tid 139687880476416] [client 34.35.44.172:47682] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/old/.env"] [unique_id "apkwKl6rAlyCQLg_5nZuiwAAAJY"]
[Thu Sep 03 03:30:34.934598 2026] [:error] [pid 14235:tid 139688014759680] [client 34.35.44.172:47698] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/tmp/.env"] [unique_id "apkwKl6rAlyCQLg_5nZujAAAAIY"]
[Thu Sep 03 03:30:35.642765 2026] [:error] [pid 14231:tid 139687863691008] [client 34.35.44.172:47706] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/temp/.env"] [unique_id "apkwK6_YbNcSuH2GNlTG8wAAAFg"]
[Thu Sep 03 03:30:36.341847 2026] [:error] [pid 14356:tid 139687905654528] [client 34.35.44.172:47720] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/lab/.env"] [unique_id "apkwLEzbFjoHquTB_yl_KgAAABM"]
[Thu Sep 03 03:30:37.032289 2026] [:error] [pid 14356:tid 139688123938560] [client 34.35.44.172:47728] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/cronlab/.env"] [unique_id "apkwLUzbFjoHquTB_yl_KwAAAAE"]
[Thu Sep 03 03:30:37.725937 2026] [:error] [pid 14356:tid 139687972796160] [client 34.35.44.172:47736] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/cron/.env"] [unique_id "apkwLUzbFjoHquTB_yl_LAAAAAs"]
[Thu Sep 03 03:30:38.466867 2026] [:error] [pid 14356:tid 139687964403456] [client 34.35.44.172:47752] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/en/.env"] [unique_id "apkwLkzbFjoHquTB_yl_LgAAAAw"]
[Thu Sep 03 03:30:39.173301 2026] [:error] [pid 14356:tid 139687880476416] [client 34.35.44.172:47764] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/administrator/.env"] [unique_id "apkwL0zbFjoHquTB_yl_LwAAABY"]
[Thu Sep 03 03:30:39.886599 2026] [:error] [pid 14239:tid 139687956010752] [client 34.35.44.172:58920] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/psnlink/.env"] [unique_id "apkwL9UIZMka9NNIKm8wHAAAAM0"]
[Thu Sep 03 03:30:40.584337 2026] [:error] [pid 14356:tid 139687872083712] [client 34.35.44.172:58924] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/exapi/.env"] [unique_id "apkwMEzbFjoHquTB_yl_MQAAABc"]
[Thu Sep 03 03:30:41.301399 2026] [:error] [pid 14235:tid 139687947618048] [client 34.35.44.172:58930] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/sitemaps/.env"] [unique_id "apkwMV6rAlyCQLg_5nZujgAAAI4"]
[Thu Sep 03 03:30:42.006944 2026] [:error] [pid 14356:tid 139687989581568] [client 34.35.44.172:58936] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env.backup1"] [unique_id "apkwMkzbFjoHquTB_yl_MgAAAAk"]
[Thu Sep 03 03:30:42.712308 2026] [:error] [pid 14235:tid 139687997974272] [client 34.35.44.172:58944] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env.backup2"] [unique_id "apkwMl6rAlyCQLg_5nZukAAAAIg"]
[Thu Sep 03 03:30:43.423250 2026] [:error] [pid 14231:tid 139687997974272] [client 34.35.44.172:58958] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/logs/.env"] [unique_id "apkwM6_YbNcSuH2GNlTG9AAAAEg"]
[Thu Sep 03 03:30:44.128703 2026] [:error] [pid 14231:tid 139687922439936] [client 34.35.44.172:58966] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/cache/.env"] [unique_id "apkwNK_YbNcSuH2GNlTG9QAAAFE"]
[Thu Sep 03 03:30:44.847125 2026] [:error] [pid 14239:tid 139688132331264] [client 34.35.44.172:58972] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/mailer/.env"] [unique_id "apkwNNUIZMka9NNIKm8wHQAAAMA"]
[Thu Sep 03 03:30:45.554137 2026] [:error] [pid 14239:tid 139687880476416] [client 34.35.44.172:58984] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/mail/.env"] [unique_id "apkwNdUIZMka9NNIKm8wHgAAANY"]
[Thu Sep 03 03:30:46.268106 2026] [:error] [pid 14356:tid 139687863691008] [client 34.35.44.172:58992] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/email/.env"] [unique_id "apkwNkzbFjoHquTB_yl_MwAAABg"]
[Thu Sep 03 03:30:47.005867 2026] [:error] [pid 14235:tid 139687914047232] [client 34.35.44.172:59002] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/smtp/.env"] [unique_id "apkwN16rAlyCQLg_5nZukwAAAJI"]
[Thu Sep 03 03:30:47.760875 2026] [:error] [pid 14356:tid 139687897261824] [client 34.35.44.172:59006] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/mailing/.env"] [unique_id "apkwN0zbFjoHquTB_yl_NAAAABQ"]
[Thu Sep 03 03:30:48.496435 2026] [:error] [pid 14239:tid 139687947618048] [client 34.35.44.172:59016] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/notifications/.env"] [unique_id "apkwONUIZMka9NNIKm8wHwAAAM4"]
[Thu Sep 03 03:30:49.206855 2026] [:error] [pid 14356:tid 139687939225344] [client 34.35.44.172:59026] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/notify/.env"] [unique_id "apkwOUzbFjoHquTB_yl_NgAAAA8"]
[Thu Sep 03 03:30:49.918781 2026] [:error] [pid 14356:tid 139687981188864] [client 34.35.44.172:49034] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/sender/.env"] [unique_id "apkwOUzbFjoHquTB_yl_OQAAAAo"]
[Thu Sep 03 03:30:50.653688 2026] [:error] [pid 14356:tid 139688023152384] [client 34.35.44.172:49044] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/campaign/.env"] [unique_id "apkwOkzbFjoHquTB_yl_OwAAAAU"]
[Thu Sep 03 03:30:51.387750 2026] [:error] [pid 14239:tid 139687914047232] [client 34.35.44.172:49056] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/newsletter/.env"] [unique_id "apkwO9UIZMka9NNIKm8wIQAAANI"]
[Thu Sep 03 03:30:52.130845 2026] [:error] [pid 14356:tid 139687872083712] [client 34.35.44.172:49068] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/ses/.env"] [unique_id "apkwPEzbFjoHquTB_yl_PAAAABc"]
[Thu Sep 03 03:30:52.854256 2026] [:error] [pid 14231:tid 139687888869120] [client 34.35.44.172:49084] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/sendgrid/.env"] [unique_id "apkwPK_YbNcSuH2GNlTG9gAAAFU"]
[Thu Sep 03 03:30:53.581963 2026] [:error] [pid 14356:tid 139687989581568] [client 34.35.44.172:49094] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/sparkpost/.env"] [unique_id "apkwPUzbFjoHquTB_yl_PQAAAAk"]
[Thu Sep 03 03:30:54.291468 2026] [:error] [pid 14239:tid 139687989581568] [client 34.35.44.172:49096] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/postmark/.env"] [unique_id "apkwPtUIZMka9NNIKm8wIwAAAMk"]
[Thu Sep 03 03:30:55.012525 2026] [:error] [pid 14356:tid 139687863691008] [client 34.35.44.172:49108] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/mailgun/.env"] [unique_id "apkwP0zbFjoHquTB_yl_PgAAABg"]
[Thu Sep 03 03:30:55.725588 2026] [:error] [pid 14356:tid 139688014759680] [client 34.35.44.172:49118] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/mandrill/.env"] [unique_id "apkwP0zbFjoHquTB_yl_QAAAAAY"]
[Thu Sep 03 03:30:56.451557 2026] [:error] [pid 14356:tid 139687939225344] [client 34.35.44.172:49120] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/mailjet/.env"] [unique_id "apkwQEzbFjoHquTB_yl_QgAAAA8"]
[Thu Sep 03 03:30:57.195150 2026] [:error] [pid 14231:tid 139687930832640] [client 34.35.44.172:49132] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/brevo/.env"] [unique_id "apkwQa_YbNcSuH2GNlTG-gAAAFA"]
[Thu Sep 03 03:30:57.907872 2026] [:error] [pid 14231:tid 139688006366976] [client 34.35.44.172:49138] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/transactional/.env"] [unique_id "apkwQa_YbNcSuH2GNlTG_gAAAEc"]
[Thu Sep 03 03:30:58.641284 2026] [:error] [pid 14356:tid 139687997974272] [client 34.35.44.172:49142] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/bulk/.env"] [unique_id "apkwQkzbFjoHquTB_yl_UwAAAAg"]
[Thu Sep 03 03:30:59.352104 2026] [:error] [pid 14239:tid 139688123938560] [client 34.35.44.172:49144] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/aws/.env"] [unique_id "apkwQ9UIZMka9NNIKm8wLwAAAME"]
[Thu Sep 03 03:31:00.060340 2026] [:error] [pid 14239:tid 139687872083712] [client 34.35.44.172:40740] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/azure/.env"] [unique_id "apkwRNUIZMka9NNIKm8wMQAAANc"]
[Thu Sep 03 03:31:00.814301 2026] [:error] [pid 14235:tid 139688031545088] [client 34.35.44.172:40750] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/gcp/.env"] [unique_id "apkwRF6rAlyCQLg_5nZungAAAIQ"]
[Thu Sep 03 03:31:01.578408 2026] [:error] [pid 14239:tid 139687897261824] [client 34.35.44.172:40754] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/cloud/.env"] [unique_id "apkwRdUIZMka9NNIKm8wNgAAANQ"]
[Thu Sep 03 03:31:02.336076 2026] [:error] [pid 14356:tid 139687888869120] [client 34.35.44.172:40756] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/infrastructure/.env"] [unique_id "apkwRkzbFjoHquTB_yl_YwAAABU"]
[Thu Sep 03 03:31:03.081091 2026] [:error] [pid 14235:tid 139687880476416] [client 34.35.44.172:40762] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/docker/.env"] [unique_id "apkwR16rAlyCQLg_5nZunwAAAJY"]
[Thu Sep 03 03:31:03.849994 2026] [:error] [pid 14239:tid 139687972796160] [client 34.35.44.172:40776] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/k8s/.env"] [unique_id "apkwR9UIZMka9NNIKm8wPgAAAMs"]
[Thu Sep 03 03:31:06.149849 2026] [:error] [pid 14239:tid 139687922439936] [client 34.35.44.172:40784] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/kubernetes/.env"] [unique_id "apkwStUIZMka9NNIKm8wSAAAANE"]
[Thu Sep 03 03:31:06.883375 2026] [:error] [pid 14356:tid 139687956010752] [client 34.35.44.172:40796] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/terraform/.env"] [unique_id "apkwSkzbFjoHquTB_yl_dwAAAA0"]
[Thu Sep 03 03:31:07.598735 2026] [:error] [pid 14356:tid 139687872083712] [client 34.35.44.172:40802] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/ansible/.env"] [unique_id "apkwS0zbFjoHquTB_yl_fAAAABc"]
[Thu Sep 03 03:31:08.370888 2026] [:error] [pid 14235:tid 139687947618048] [client 34.35.44.172:40814] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.git/.env"] [unique_id "apkwTF6rAlyCQLg_5nZuowAAAI4"]
[Thu Sep 03 03:31:09.183250 2026] [:error] [pid 14356:tid 139687880476416] [client 34.35.44.172:40826] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/ci/.env"] [unique_id "apkwTUzbFjoHquTB_yl_fQAAABY"]
[Thu Sep 03 03:31:09.909879 2026] [:error] [pid 14356:tid 139688039937792] [client 34.35.44.172:34636] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/cd/.env"] [unique_id "apkwTUzbFjoHquTB_yl_fgAAAAM"]
[Thu Sep 03 03:31:10.626283 2026] [:error] [pid 14356:tid 139687947618048] [client 34.35.44.172:34652] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/jenkins/.env"] [unique_id "apkwTkzbFjoHquTB_yl_fwAAAA4"]
[Thu Sep 03 03:31:11.355273 2026] [:error] [pid 14239:tid 139687922439936] [client 34.35.44.172:34668] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/gitlab/.env"] [unique_id "apkwT9UIZMka9NNIKm8wUwAAANE"]
[Thu Sep 03 03:31:12.065895 2026] [:error] [pid 14231:tid 139687872083712] [client 34.35.44.172:34678] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/github/.env"] [unique_id "apkwUK_YbNcSuH2GNlTHDgAAAFc"]
[Thu Sep 03 03:31:12.948380 2026] [:error] [pid 14356:tid 139687930832640] [client 34.35.44.172:34688] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/actions/.env"] [unique_id "apkwUEzbFjoHquTB_yl_hgAAABA"]
[Thu Sep 03 03:31:13.708139 2026] [:error] [pid 14235:tid 139688115545856] [client 34.35.44.172:34694] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/circleci/.env"] [unique_id "apkwUV6rAlyCQLg_5nZuqAAAAII"]
[Thu Sep 03 03:31:14.476743 2026] [:error] [pid 14356:tid 139688014759680] [client 34.35.44.172:34710] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/travis/.env"] [unique_id "apkwUkzbFjoHquTB_yl_hwAAAAY"]
[Thu Sep 03 03:31:15.257437 2026] [:error] [pid 14239:tid 139687914047232] [client 34.35.44.172:34716] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/buildkite/.env"] [unique_id "apkwU9UIZMka9NNIKm8wVwAAANI"]
[Thu Sep 03 03:31:16.167593 2026] [:error] [pid 14356:tid 139687922439936] [client 34.35.44.172:34720] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/mysql/.env"] [unique_id "apkwVEzbFjoHquTB_yl_iAAAABE"]
[Thu Sep 03 03:31:16.903066 2026] [:error] [pid 14239:tid 139687863691008] [client 34.35.44.172:34736] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/postgres/.env"] [unique_id "apkwVNUIZMka9NNIKm8wWAAAANg"]
[Thu Sep 03 03:31:17.650578 2026] [:error] [pid 14235:tid 139687930832640] [client 34.35.44.172:34748] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/mongodb/.env"] [unique_id "apkwVV6rAlyCQLg_5nZuqgAAAJA"]
[Thu Sep 03 03:31:18.360580 2026] [:error] [pid 14356:tid 139687888869120] [client 34.35.44.172:34764] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/redis/.env"] [unique_id "apkwVkzbFjoHquTB_yl_jgAAABU"]
[Thu Sep 03 03:31:19.200336 2026] [:error] [pid 14356:tid 139687914047232] [client 34.35.44.172:34766] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/elasticsearch/.env"] [unique_id "apkwV0zbFjoHquTB_yl_kAAAABI"]
[Thu Sep 03 03:31:19.955578 2026] [:error] [pid 14235:tid 139688031545088] [client 34.35.44.172:50406] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/rabbitmq/.env"] [unique_id "apkwV16rAlyCQLg_5nZuqwAAAIQ"]
[Thu Sep 03 03:31:20.722072 2026] [:error] [pid 14356:tid 139687989581568] [client 34.35.44.172:50412] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/kafka/.env"] [unique_id "apkwWEzbFjoHquTB_yl_kwAAAAk"]
[Thu Sep 03 03:31:21.489492 2026] [:error] [pid 14239:tid 139687888869120] [client 34.35.44.172:50420] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/queue/.env"] [unique_id "apkwWdUIZMka9NNIKm8wXQAAANU"]
[Thu Sep 03 03:31:22.234036 2026] [:error] [pid 14235:tid 139687880476416] [client 34.35.44.172:50424] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/worker/.env"] [unique_id "apkwWl6rAlyCQLg_5nZurAAAAJY"]
[Thu Sep 03 03:31:22.983316 2026] [:error] [pid 14356:tid 139687997974272] [client 34.35.44.172:50436] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/job/.env"] [unique_id "apkwWkzbFjoHquTB_yl_lgAAAAg"]
[Thu Sep 03 03:31:23.704590 2026] [:error] [pid 14356:tid 139688132331264] [client 34.35.44.172:50450] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/test/.env"] [unique_id "apkwW0zbFjoHquTB_yl_mAAAAAA"]
[Thu Sep 03 03:31:24.461392 2026] [:error] [pid 14235:tid 139688014759680] [client 34.35.44.172:50458] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/qa/.env"] [unique_id "apkwXF6rAlyCQLg_5nZurQAAAIY"]
[Thu Sep 03 03:31:25.183772 2026] [:error] [pid 14231:tid 139688115545856] [client 34.35.44.172:50470] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/preview/.env"] [unique_id "apkwXa_YbNcSuH2GNlTHFAAAAEI"]
[Thu Sep 03 03:31:25.914757 2026] [:error] [pid 14231:tid 139688006366976] [client 34.35.44.172:50478] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/beta/.env"] [unique_id "apkwXa_YbNcSuH2GNlTHFwAAAEc"]
[Thu Sep 03 03:31:26.664847 2026] [:error] [pid 14235:tid 139687905654528] [client 34.35.44.172:50492] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/uat/.env"] [unique_id "apkwXl6rAlyCQLg_5nZurgAAAJM"]
[Thu Sep 03 03:31:27.377461 2026] [:error] [pid 14231:tid 139688014759680] [client 34.35.44.172:50494] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/stage/.env"] [unique_id "apkwX6_YbNcSuH2GNlTHGgAAAEY"]
[Thu Sep 03 03:31:28.103266 2026] [:error] [pid 14356:tid 139687872083712] [client 34.35.44.172:50506] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/development/.env"] [unique_id "apkwYEzbFjoHquTB_yl_nAAAABc"]
[Thu Sep 03 03:31:28.805717 2026] [:error] [pid 14356:tid 139687880476416] [client 34.35.44.172:50508] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/production/.env"] [unique_id "apkwYEzbFjoHquTB_yl_nQAAABY"]
[Thu Sep 03 03:31:29.530364 2026] [:error] [pid 14239:tid 139688014759680] [client 34.35.44.172:50514] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/config/app/.env"] [unique_id "apkwYdUIZMka9NNIKm8wXgAAAMY"]
[Thu Sep 03 03:31:30.265721 2026] [proxy_fcgi:error] [pid 14356:tid 139688039937792] [client 34.35.44.172:57792] AH01071: Got error 'Primary script unknown'
[Thu Sep 03 03:31:31.011316 2026] [proxy_fcgi:error] [pid 14239:tid 139688123938560] [client 34.35.44.172:57796] AH01071: Got error 'Primary script unknown'
[Thu Sep 03 03:31:31.731074 2026] [proxy_fcgi:error] [pid 14231:tid 139687947618048] [client 34.35.44.172:57798] AH01071: Got error 'Primary script unknown'
[Thu Sep 03 03:31:32.452863 2026] [proxy_fcgi:error] [pid 14235:tid 139688115545856] [client 34.35.44.172:57806] AH01071: Got error 'Primary script unknown'
[Thu Sep 03 03:31:33.164319 2026] [proxy_fcgi:error] [pid 14356:tid 139688132331264] [client 34.35.44.172:57822] AH01071: Got error 'Primary script unknown'
[Thu Sep 03 03:31:33.872006 2026] [proxy_fcgi:error] [pid 14235:tid 139687922439936] [client 34.35.44.172:57830] AH01071: Got error 'Primary script unknown'
[Thu Sep 03 03:31:34.577236 2026] [proxy_fcgi:error] [pid 14235:tid 139687964403456] [client 34.35.44.172:57836] AH01071: Got error 'Primary script unknown'
[Thu Sep 03 03:31:36.039058 2026] [proxy_fcgi:error] [pid 14356:tid 139687872083712] [client 34.35.44.172:57860] AH01071: Got error 'Primary script unknown'
[Thu Sep 03 03:31:36.749366 2026] [proxy_fcgi:error] [pid 14231:tid 139687914047232] [client 34.35.44.172:57870] AH01071: Got error 'Primary script unknown'
[Thu Sep 03 03:31:42.570704 2026] [proxy_fcgi:error] [pid 14239:tid 139688123938560] [client 34.35.44.172:57170] AH01071: Got error 'Primary script unknown'
[Thu Sep 03 03:31:43.324324 2026] [proxy_fcgi:error] [pid 14356:tid 139688115545856] [client 34.35.44.172:57184] AH01071: Got error 'Primary script unknown'
[Thu Sep 03 03:31:44.064113 2026] [proxy_fcgi:error] [pid 14239:tid 139687972796160] [client 34.35.44.172:57200] AH01071: Got error 'Primary script unknown'
[Thu Sep 03 03:31:44.800380 2026] [proxy_fcgi:error] [pid 14356:tid 139687880476416] [client 34.35.44.172:57202] AH01071: Got error 'Primary script unknown'
[Thu Sep 03 03:31:45.510702 2026] [proxy_fcgi:error] [pid 14239:tid 139687905654528] [client 34.35.44.172:57210] AH01071: Got error 'Primary script unknown'
[Thu Sep 03 03:31:46.219442 2026] [proxy_fcgi:error] [pid 14239:tid 139688023152384] [client 34.35.44.172:57218] AH01071: Got error 'Primary script unknown'
[Thu Sep 03 03:31:48.434816 2026] [:error] [pid 14235:tid 139687939225344] [client 34.35.44.172:57256] [client 34.35.44.172] ModSecurity: Warning. Operator GT matched 25 at IP:scan_404_count. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "11"] [id "9000204"] [msg "Scanner detected - blocking IP 1h"] [tag "scanner-detect"] [hostname "menabern.com"] [uri "/webroot/index.php/_environment"] [unique_id "apkwdF6rAlyCQLg_5nZuuwAAAI8"]
[Thu Sep 03 03:31:49.184272 2026] [:error] [pid 14231:tid 139687989581568] [client 34.35.44.172:57266] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/mail/phpinfo.php"] [unique_id "apkwda_YbNcSuH2GNlTHKwAAAEk"]
[Thu Sep 03 03:31:49.941561 2026] [:error] [pid 14356:tid 139688031545088] [client 34.35.44.172:53874] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/cpanel/phpinfo.php"] [unique_id "apkwdUzbFjoHquTB_yl_wAAAAAQ"]
[Thu Sep 03 03:31:50.660119 2026] [:error] [pid 14239:tid 139688132331264] [client 34.35.44.172:53890] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/hosting/phpinfo.php"] [unique_id "apkwdtUIZMka9NNIKm8wewAAAMA"]
[Thu Sep 03 03:31:51.379304 2026] [:error] [pid 14235:tid 139688115545856] [client 34.35.44.172:53900] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/webmail/phpinfo.php"] [unique_id "apkwd16rAlyCQLg_5nZuvAAAAII"]
[Thu Sep 03 03:31:52.091293 2026] [:error] [pid 14356:tid 139687922439936] [client 34.35.44.172:53910] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/smtp/phpinfo.php"] [unique_id "apkweEzbFjoHquTB_yl_wwAAABE"]
[Thu Sep 03 03:31:52.812457 2026] [:error] [pid 14239:tid 139687930832640] [client 34.35.44.172:53922] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/phpinfo.php.bak"] [unique_id "apkweNUIZMka9NNIKm8wfgAAANA"]
[Thu Sep 03 03:31:53.545194 2026] [:error] [pid 14231:tid 139687914047232] [client 34.35.44.172:53936] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/phpinfo.php.old"] [unique_id "apkwea_YbNcSuH2GNlTHLQAAAFI"]
[Thu Sep 03 03:31:54.285912 2026] [:error] [pid 14239:tid 139688115545856] [client 34.35.44.172:53948] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/phpinfo.php~"] [unique_id "apkwetUIZMka9NNIKm8wgAAAAMI"]
[Thu Sep 03 03:31:55.031563 2026] [:error] [pid 14356:tid 139688132331264] [client 34.35.44.172:53954] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/info.php.bak"] [unique_id "apkwe0zbFjoHquTB_yl_yQAAAAA"]
[Thu Sep 03 03:31:55.761599 2026] [:error] [pid 14239:tid 139687863691008] [client 34.35.44.172:53970] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/phpinfo.php.save"] [unique_id "apkwe9UIZMka9NNIKm8whAAAANg"]
[Thu Sep 03 03:31:56.494214 2026] [:error] [pid 14235:tid 139687863691008] [client 34.35.44.172:53978] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/staging/phpinfo.php"] [unique_id "apkwfF6rAlyCQLg_5nZuvgAAAJg"]
[Thu Sep 03 03:31:57.240801 2026] [:error] [pid 14231:tid 139687863691008] [client 34.35.44.172:53990] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/beta/phpinfo.php"] [unique_id "apkwfa_YbNcSuH2GNlTHLwAAAFg"]
[Thu Sep 03 03:31:57.967384 2026] [:error] [pid 14239:tid 139687872083712] [client 34.35.44.172:54004] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/uat/phpinfo.php"] [unique_id "apkwfdUIZMka9NNIKm8wjAAAANc"]
[Thu Sep 03 03:31:58.762396 2026] [:error] [pid 14235:tid 139687914047232] [client 34.35.44.172:54012] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/qa/phpinfo.php"] [unique_id "apkwfl6rAlyCQLg_5nZuwgAAAJI"]
[Thu Sep 03 03:31:59.488908 2026] [:error] [pid 14239:tid 139687880476416] [client 34.35.44.172:54018] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/preview/phpinfo.php"] [unique_id "apkwf9UIZMka9NNIKm8wjwAAANY"]
[Thu Sep 03 03:32:00.212420 2026] [:error] [pid 14356:tid 139687981188864] [client 34.35.44.172:35366] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/www/phpinfo.php"] [unique_id "apkwgEzbFjoHquTB_yl_0QAAAAo"]
[Thu Sep 03 03:32:00.938687 2026] [:error] [pid 14239:tid 139687947618048] [client 34.35.44.172:35374] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/htdocs/phpinfo.php"] [unique_id "apkwgNUIZMka9NNIKm8wkQAAAM4"]
[Thu Sep 03 03:32:01.659873 2026] [:error] [pid 14356:tid 139688023152384] [client 34.35.44.172:35380] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/public_html/phpinfo.php"] [unique_id "apkwgUzbFjoHquTB_yl_1gAAAAU"]
[Thu Sep 03 03:32:02.381471 2026] [:error] [pid 14356:tid 139687872083712] [client 34.35.44.172:35384] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/site/phpinfo.php"] [unique_id "apkwgkzbFjoHquTB_yl_2QAAABc"]
[Thu Sep 03 03:32:03.111422 2026] [:error] [pid 14356:tid 139687947618048] [client 34.35.44.172:35386] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/docs/phpinfo.php"] [unique_id "apkwg0zbFjoHquTB_yl_2gAAAA4"]
[Thu Sep 03 03:32:03.822888 2026] [:error] [pid 14235:tid 139687872083712] [client 34.35.44.172:35388] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-admin/phpinfo.php"] [unique_id "apkwg16rAlyCQLg_5nZuxQAAAJc"]
[Thu Sep 03 03:32:04.536621 2026] [:error] [pid 14231:tid 139687880476416] [client 34.35.44.172:35402] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/administrator/phpinfo.php"] [unique_id "apkwhK_YbNcSuH2GNlTHMwAAAFY"]
[Thu Sep 03 03:32:05.239358 2026] [:error] [pid 14231:tid 139687930832640] [client 34.35.44.172:35404] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/core/phpinfo.php"] [unique_id "apkwha_YbNcSuH2GNlTHNQAAAFA"]
[Thu Sep 03 03:32:05.957559 2026] [:error] [pid 14235:tid 139688115545856] [client 34.35.44.172:35410] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/includes/phpinfo.php"] [unique_id "apkwhV6rAlyCQLg_5nZuyAAAAII"]
[Thu Sep 03 03:32:06.667079 2026] [:error] [pid 14235:tid 139687922439936] [client 34.35.44.172:35416] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/service-account.json"] [unique_id "apkwhl6rAlyCQLg_5nZuywAAAJE"]
[Thu Sep 03 03:32:07.376809 2026] [:error] [pid 14235:tid 139687914047232] [client 34.35.44.172:35418] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/sa.json"] [unique_id "apkwh16rAlyCQLg_5nZuzQAAAJI"]
[Thu Sep 03 03:32:08.112202 2026] [:error] [pid 14239:tid 139687972796160] [client 34.35.44.172:35432] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/gcp-key.json"] [unique_id "apkwiNUIZMka9NNIKm8wmwAAAMs"]
[Thu Sep 03 03:32:08.816342 2026] [:error] [pid 14231:tid 139687872083712] [client 34.35.44.172:35434] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/gcp-credentials.json"] [unique_id "apkwiK_YbNcSuH2GNlTHPgAAAFc"]
[Thu Sep 03 03:32:09.516138 2026] [:error] [pid 14235:tid 139687997974272] [client 34.35.44.172:35448] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/gcp-sa.json"] [unique_id "apkwiV6rAlyCQLg_5nZu0wAAAIg"]
[Thu Sep 03 03:32:10.235515 2026] [:error] [pid 14356:tid 139687972796160] [client 34.35.44.172:37496] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/credentials.json"] [unique_id "apkwikzbFjoHquTB_yl_6QAAAAs"]
[Thu Sep 03 03:32:10.948967 2026] [:error] [pid 14235:tid 139687863691008] [client 34.35.44.172:37506] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/google-credentials.json"] [unique_id "apkwil6rAlyCQLg_5nZu1gAAAJg"]
[Thu Sep 03 03:32:11.674155 2026] [:error] [pid 14235:tid 139687956010752] [client 34.35.44.172:37512] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/google-key.json"] [unique_id "apkwi16rAlyCQLg_5nZu2QAAAI0"]
[Thu Sep 03 03:32:12.379123 2026] [:error] [pid 14239:tid 139688132331264] [client 34.35.44.172:37518] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/.config/gcloud/application_default_credentials.json"] [unique_id "apkwjNUIZMka9NNIKm8wogAAAMA"]
[Thu Sep 03 03:32:13.085759 2026] [:error] [pid 14231:tid 139688031545088] [client 34.35.44.172:37534] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/application_default_credentials.json"] [unique_id "apkwja_YbNcSuH2GNlTHQwAAAEQ"]
[Thu Sep 03 03:32:13.779859 2026] [:error] [pid 14231:tid 139687914047232] [client 34.35.44.172:37536] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/key.json"] [unique_id "apkwja_YbNcSuH2GNlTHRgAAAFI"]
[Thu Sep 03 03:32:14.464819 2026] [:error] [pid 14239:tid 139687989581568] [client 34.35.44.172:37544] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/keyfile.json"] [unique_id "apkwjtUIZMka9NNIKm8wpwAAAMk"]
[Thu Sep 03 03:32:15.164194 2026] [:error] [pid 14239:tid 139687888869120] [client 34.35.44.172:37550] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/firebase-adminsdk.json"] [unique_id "apkwj9UIZMka9NNIKm8wqAAAANU"]
[Thu Sep 03 03:32:15.850951 2026] [:error] [pid 14235:tid 139687888869120] [client 34.35.44.172:37552] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/firebase-key.json"] [unique_id "apkwj16rAlyCQLg_5nZu3QAAAJU"]
[Thu Sep 03 03:32:16.550008 2026] [:error] [pid 14239:tid 139687930832640] [client 34.35.44.172:37562] [client 34.35.44.172] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/"] [unique_id "apkwkNUIZMka9NNIKm8wrAAAANA"]
[Thu Sep 03 03:38:10.917010 2026] [:error] [pid 14231:tid 139687863691008] [client 175.27.136.83:42842] [client 175.27.136.83] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.menabern.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.menabern.com"] [uri "/"] [unique_id "apkx8q_YbNcSuH2GNlTINQAAAFg"]
[Thu Sep 03 05:06:19.149436 2026] [proxy_fcgi:error] [pid 14356:tid 139688006366976] [client 62.60.130.240:59498] AH01071: Got error 'Primary script unknown'
[Thu Sep 03 05:06:19.276564 2026] [proxy_fcgi:error] [pid 14239:tid 139687914047232] [client 62.60.130.240:64294] AH01071: Got error 'Primary script unknown'
[Thu Sep 03 05:51:00.450905 2026] [:error] [pid 14231:tid 139687922439936] [client 43.164.131.148:47590] [client 43.164.131.148] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||menabern.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "menabern.com"] [uri "/"] [unique_id "aplRFK_YbNcSuH2GNlTY6gAAAFE"]
[Thu Sep 03 06:30:02.757860 2026] [:error] [pid 19268:tid 139687888869120] [client 43.157.38.228:50376] [client 43.157.38.228] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.menabern.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.menabern.com"] [uri "/"] [unique_id "aplaOla4SQy9g_h48HestAAAARU"]
[Thu Sep 03 07:53:37.084028 2026] [:error] [pid 19268:tid 139687863691008] [client 85.11.167.104:47936] [client 85.11.167.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.git/config"] [unique_id "aplt0Va4SQy9g_h48HfCgAAAARg"]
[Thu Sep 03 08:56:07.472234 2026] [:error] [pid 14231:tid 139687872083712] [client 111.230.233.46:33196] [client 111.230.233.46] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||menabern.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "menabern.com"] [uri "/"] [unique_id "apl8d6_YbNcSuH2GNlT5cgAAAFc"]
[Thu Sep 03 09:14:53.700426 2026] [:error] [pid 14239:tid 139687914047232] [client 203.189.153.19:59173] [client 203.189.153.19] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "apmA3dUIZMka9NNIKm-aQAAAANI"]
[Thu Sep 03 09:26:11.191256 2026] [:error] [pid 14231:tid 139687897261824] [client 43.134.100.175:57260] [client 43.134.100.175] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||menabern.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "menabern.com"] [uri "/"] [unique_id "apmDg6_YbNcSuH2GNlT-JAAAAFQ"]
[Thu Sep 03 10:17:36.159431 2026] [:error] [pid 2506:tid 139688132331264] [client 43.153.123.4:33676] [client 43.153.123.4] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.menabern.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.menabern.com"] [uri "/"] [unique_id "apmPkNdJ45FnCxw6lKMyagAAAAA"]
[Thu Sep 03 10:21:20.720323 2026] [authz_core:error] [pid 2506:tid 139688039937792] [client 82.102.18.116:45504] AH01630: client denied by server configuration: /home/menabern/public_html/xmlrpc.php
[Thu Sep 03 10:56:23.747901 2026] [:error] [pid 2507:tid 139687947618048] [client 20.151.10.161:53799] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "apmYp9aXYoLHUaOYzhudkwAAAE4"]
[Thu Sep 03 10:56:23.950856 2026] [:error] [pid 11281:tid 139687997974272] [client 20.151.10.161:62873] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/this_is_a_new_hello_world.php"] [unique_id "apmYpw2AIRRSxRqwFeD5qAAAAUg"]
[Thu Sep 03 10:56:24.162674 2026] [:error] [pid 2506:tid 139688039937792] [client 20.151.10.161:45273] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/ba.php"] [unique_id "apmYqNdJ45FnCxw6lKM6EgAAAAM"]
[Thu Sep 03 10:56:24.378599 2026] [:error] [pid 2507:tid 139688006366976] [client 20.151.10.161:53873] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/great.php"] [unique_id "apmYqNaXYoLHUaOYzhudlAAAAEc"]
[Thu Sep 03 10:56:24.592076 2026] [:error] [pid 3690:tid 139687947618048] [client 20.151.10.161:53763] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/dyt8mjxc3yofbkoriukvgjaCdefault.php"] [unique_id "apmYqBxT1kdH6yxfA3HLdQAAAQ4"]
[Thu Sep 03 10:56:24.794372 2026] [:error] [pid 2594:tid 139687930832640] [client 20.151.10.161:62908] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/robots.php"] [unique_id "apmYqLhmlkltaRvWjOrdtQAAANA"]
[Thu Sep 03 10:56:25.001963 2026] [:error] [pid 2508:tid 139687981188864] [client 20.151.10.161:45278] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/sky.php"] [unique_id "apmYqTUo_JB4TCSwEqErqwAAAIo"]
[Thu Sep 03 10:56:25.240490 2026] [:error] [pid 11281:tid 139687922439936] [client 20.151.10.161:53781] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/k.php"] [unique_id "apmYqQ2AIRRSxRqwFeD5qgAAAVE"]
[Thu Sep 03 10:56:25.451326 2026] [:error] [pid 3690:tid 139687863691008] [client 20.151.10.161:45287] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/w.php"] [unique_id "apmYqRxT1kdH6yxfA3HLdwAAARg"]
[Thu Sep 03 10:56:25.664727 2026] [:error] [pid 3690:tid 139688006366976] [client 20.151.10.161:62855] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/FWAZ.php"] [unique_id "apmYqRxT1kdH6yxfA3HLeQAAAQc"]
[Thu Sep 03 10:56:25.865529 2026] [:error] [pid 3690:tid 139687930832640] [client 20.151.10.161:62859] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/blurbs.php"] [unique_id "apmYqRxT1kdH6yxfA3HLewAAARA"]
[Thu Sep 03 10:56:26.069607 2026] [:error] [pid 11281:tid 139687972796160] [client 20.151.10.161:62756] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/ccc.php"] [unique_id "apmYqg2AIRRSxRqwFeD5rQAAAUs"]
[Thu Sep 03 10:56:26.303412 2026] [:error] [pid 11281:tid 139687964403456] [client 20.151.10.161:62773] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/images.php"] [unique_id "apmYqg2AIRRSxRqwFeD5rwAAAUw"]
[Thu Sep 03 10:56:26.513387 2026] [:error] [pid 3690:tid 139687964403456] [client 20.151.10.161:45282] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/alls.php"] [unique_id "apmYqhxT1kdH6yxfA3HLfAAAAQw"]
[Thu Sep 03 10:56:26.731134 2026] [:error] [pid 2508:tid 139687964403456] [client 20.151.10.161:45284] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/red.php"] [unique_id "apmYqjUo_JB4TCSwEqErrgAAAIw"]
[Thu Sep 03 10:56:26.933517 2026] [:error] [pid 2508:tid 139687939225344] [client 20.151.10.161:62868] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/admin.php"] [unique_id "apmYqjUo_JB4TCSwEqErrwAAAI8"]
[Thu Sep 03 10:56:27.135306 2026] [:error] [pid 2594:tid 139688031545088] [client 20.151.10.161:53765] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/file52.php"] [unique_id "apmYq7hmlkltaRvWjOrdtwAAAMQ"]
[Thu Sep 03 10:56:27.383806 2026] [:error] [pid 11281:tid 139687872083712] [client 20.151.10.161:62852] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/geck.php"] [unique_id "apmYqw2AIRRSxRqwFeD5sAAAAVc"]
[Thu Sep 03 10:56:27.588112 2026] [:error] [pid 2508:tid 139688132331264] [client 20.151.10.161:62882] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/biufile.php"] [unique_id "apmYqzUo_JB4TCSwEqErsQAAAIA"]
[Thu Sep 03 10:56:27.791913 2026] [:error] [pid 2594:tid 139687905654528] [client 20.151.10.161:62892] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/dejavu.php"] [unique_id "apmYq7hmlkltaRvWjOrduAAAANM"]
[Thu Sep 03 10:56:27.995594 2026] [:error] [pid 2507:tid 139687930832640] [client 20.151.10.161:45248] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/aaf.php"] [unique_id "apmYq9aXYoLHUaOYzhudmAAAAFA"]
[Thu Sep 03 10:56:28.202201 2026] [:error] [pid 11281:tid 139687989581568] [client 20.151.10.161:53761] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/h02ugyh.php"] [unique_id "apmYrA2AIRRSxRqwFeD5sQAAAUk"]
[Thu Sep 03 10:56:28.427701 2026] [:error] [pid 2507:tid 139687872083712] [client 20.151.10.161:53886] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/155.php"] [unique_id "apmYrNaXYoLHUaOYzhudmQAAAFc"]
[Thu Sep 03 10:56:28.638791 2026] [:error] [pid 2594:tid 139688132331264] [client 20.151.10.161:53855] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/ops.php"] [unique_id "apmYrLhmlkltaRvWjOrduQAAAMA"]
[Thu Sep 03 10:56:28.838912 2026] [:error] [pid 11281:tid 139688023152384] [client 20.151.10.161:53834] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/mac.php"] [unique_id "apmYrA2AIRRSxRqwFeD5sgAAAUU"]
[Thu Sep 03 10:56:29.041675 2026] [:error] [pid 3690:tid 139688023152384] [client 20.151.10.161:62871] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/makeasmtp.php"] [unique_id "apmYrRxT1kdH6yxfA3HLfQAAAQU"]
[Thu Sep 03 10:56:29.278025 2026] [:error] [pid 2507:tid 139688023152384] [client 20.151.10.161:62736] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/pucci.php"] [unique_id "apmYrdaXYoLHUaOYzhudmgAAAEU"]
[Thu Sep 03 10:56:29.563272 2026] [:error] [pid 2507:tid 139688123938560] [client 20.151.10.161:53826] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/puc.php"] [unique_id "apmYrdaXYoLHUaOYzhudnAAAAEE"]
[Thu Sep 03 10:56:29.768595 2026] [:error] [pid 3690:tid 139687989581568] [client 20.151.10.161:53869] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/8.php"] [unique_id "apmYrRxT1kdH6yxfA3HLfgAAAQk"]
[Thu Sep 03 10:56:29.971919 2026] [:error] [pid 3690:tid 139687905654528] [client 20.151.10.161:62769] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/1.php"] [unique_id "apmYrRxT1kdH6yxfA3HLfwAAARM"]
[Thu Sep 03 10:56:30.179087 2026] [:error] [pid 2508:tid 139687930832640] [client 20.151.10.161:62753] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/admin.php"] [unique_id "apmYrjUo_JB4TCSwEqErswAAAJA"]
[Thu Sep 03 10:56:30.380615 2026] [:error] [pid 2508:tid 139687897261824] [client 20.151.10.161:53860] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/edit.php"] [unique_id "apmYrjUo_JB4TCSwEqErtAAAAJQ"]
[Thu Sep 03 10:56:30.614160 2026] [:error] [pid 2594:tid 139687880476416] [client 20.151.10.161:53791] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/inputs.php"] [unique_id "apmYrrhmlkltaRvWjOrdugAAANY"]
[Thu Sep 03 10:56:30.818778 2026] [:error] [pid 2507:tid 139687922439936] [client 20.151.10.161:40234] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/av.php"] [unique_id "apmYrtaXYoLHUaOYzhudngAAAFE"]
[Thu Sep 03 10:56:31.020974 2026] [:error] [pid 11281:tid 139687981188864] [client 20.151.10.161:45253] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/classwithtostring.php"] [unique_id "apmYrw2AIRRSxRqwFeD5tgAAAUo"]
[Thu Sep 03 10:56:31.229006 2026] [:error] [pid 11281:tid 139687972796160] [client 20.151.10.161:45293] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/adminfuns.php"] [unique_id "apmYrw2AIRRSxRqwFeD5twAAAUs"]
[Thu Sep 03 10:56:31.436168 2026] [:error] [pid 11281:tid 139687947618048] [client 20.151.10.161:53865] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/ms-edit.php"] [unique_id "apmYrw2AIRRSxRqwFeD5uAAAAU4"]
[Thu Sep 03 10:56:31.645421 2026] [:error] [pid 11281:tid 139687897261824] [client 20.151.10.161:62884] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/222.php"] [unique_id "apmYrw2AIRRSxRqwFeD5uQAAAVQ"]
[Thu Sep 03 10:56:31.845935 2026] [:error] [pid 2594:tid 139688023152384] [client 20.151.10.161:45280] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/BDKR28WP.php"] [unique_id "apmYr7hmlkltaRvWjOrduwAAAMU"]
[Thu Sep 03 10:56:32.052370 2026] [:error] [pid 3690:tid 139688039937792] [client 20.151.10.161:62738] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp.php"] [unique_id "apmYsBxT1kdH6yxfA3HLggAAAQM"]
[Thu Sep 03 10:56:32.262675 2026] [:error] [pid 2506:tid 139688014759680] [client 20.151.10.161:45264] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/abcd.php"] [unique_id "apmYsNdJ45FnCxw6lKM6FAAAAAY"]
[Thu Sep 03 10:56:32.465594 2026] [:error] [pid 3690:tid 139687863691008] [client 20.151.10.161:53787] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/simple.php"] [unique_id "apmYsBxT1kdH6yxfA3HLgwAAARg"]
[Thu Sep 03 10:56:32.669543 2026] [:error] [pid 2507:tid 139687947618048] [client 20.151.10.161:62730] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/chosen.php"] [unique_id "apmYsNaXYoLHUaOYzhudoAAAAE4"]
[Thu Sep 03 10:56:32.891250 2026] [:error] [pid 2508:tid 139688123938560] [client 20.151.10.161:62906] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/als.php"] [unique_id "apmYsDUo_JB4TCSwEqErtgAAAIE"]
[Thu Sep 03 10:56:33.101112 2026] [:error] [pid 2594:tid 139688014759680] [client 20.151.10.161:45295] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/file65.php"] [unique_id "apmYsbhmlkltaRvWjOrdvAAAAMY"]
[Thu Sep 03 10:56:33.311141 2026] [:error] [pid 2508:tid 139688115545856] [client 20.151.10.161:62732] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/admin.php"] [unique_id "apmYsTUo_JB4TCSwEqErtwAAAII"]
[Thu Sep 03 10:56:33.514388 2026] [:error] [pid 2506:tid 139688031545088] [client 20.151.10.161:45292] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/bless.php"] [unique_id "apmYsddJ45FnCxw6lKM6FQAAAAQ"]
[Thu Sep 03 10:56:33.726076 2026] [:error] [pid 3690:tid 139687997974272] [client 20.151.10.161:62911] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/f35.php"] [unique_id "apmYsRxT1kdH6yxfA3HLhQAAAQg"]
[Thu Sep 03 10:56:33.926278 2026] [:error] [pid 2507:tid 139687964403456] [client 20.151.10.161:53860] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/aaa.php"] [unique_id "apmYsdaXYoLHUaOYzhudogAAAEw"]
[Thu Sep 03 10:56:34.129837 2026] [:error] [pid 2594:tid 139687863691008] [client 20.151.10.161:62877] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/gecko.php"] [unique_id "apmYsrhmlkltaRvWjOrdvQAAANg"]
[Thu Sep 03 10:56:34.329008 2026] [:error] [pid 11281:tid 139687922439936] [client 20.151.10.161:53766] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/xiugai.php"] [unique_id "apmYsg2AIRRSxRqwFeD5wAAAAVE"]
[Thu Sep 03 10:56:34.532031 2026] [:error] [pid 11281:tid 139687981188864] [client 20.151.10.161:62857] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/adminner.php"] [unique_id "apmYsg2AIRRSxRqwFeD5wQAAAUo"]
[Thu Sep 03 10:56:34.758626 2026] [:error] [pid 11281:tid 139687947618048] [client 20.151.10.161:45297] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/inx.php"] [unique_id "apmYsg2AIRRSxRqwFeD5wwAAAU4"]
[Thu Sep 03 10:56:34.962625 2026] [:error] [pid 2506:tid 139687880476416] [client 20.151.10.161:53762] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/11.php"] [unique_id "apmYstdJ45FnCxw6lKM6GAAAABY"]
[Thu Sep 03 10:56:35.164569 2026] [:error] [pid 2507:tid 139688031545088] [client 20.151.10.161:62776] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/File.php"] [unique_id "apmYs9aXYoLHUaOYzhudowAAAEQ"]
[Thu Sep 03 10:56:35.368746 2026] [:error] [pid 2508:tid 139688014759680] [client 20.151.10.161:62853] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/3PJcpMFsD8B.php"] [unique_id "apmYszUo_JB4TCSwEqEruQAAAIY"]
[Thu Sep 03 10:56:35.571079 2026] [:error] [pid 2508:tid 139687922439936] [client 20.151.10.161:62896] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/a3ampzmbipnkpxeqhqpsanCdefault.php"] [unique_id "apmYszUo_JB4TCSwEqErugAAAJE"]
[Thu Sep 03 10:56:35.772377 2026] [:error] [pid 2508:tid 139688006366976] [client 20.151.10.161:53852] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/4PJcpMFsD8B.php"] [unique_id "apmYszUo_JB4TCSwEqEruwAAAIc"]
[Thu Sep 03 10:56:35.981963 2026] [:error] [pid 2506:tid 139687972796160] [client 20.151.10.161:53881] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/i99z7zzbwtpteujvv6s8hiCdefault.php"] [unique_id "apmYs9dJ45FnCxw6lKM6GQAAAAs"]
[Thu Sep 03 10:56:36.183805 2026] [:error] [pid 2594:tid 139687888869120] [client 20.151.10.161:45300] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/gwaih1gfzp5vuwr04Cdefault.php"] [unique_id "apmYtLhmlkltaRvWjOrdwAAAANU"]
[Thu Sep 03 10:56:36.387683 2026] [:error] [pid 2594:tid 139688123938560] [client 20.151.10.161:53842] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/1wvekeybd9it2di2vyipgr6Cdefault.php"] [unique_id "apmYtLhmlkltaRvWjOrdwgAAAME"]
[Thu Sep 03 10:56:36.610358 2026] [:error] [pid 11281:tid 139687872083712] [client 20.151.10.161:45286] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/media.php"] [unique_id "apmYtA2AIRRSxRqwFeD5xgAAAVc"]
[Thu Sep 03 10:56:36.853656 2026] [:error] [pid 11281:tid 139687939225344] [client 20.151.10.161:45193] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/inso.php"] [unique_id "apmYtA2AIRRSxRqwFeD5yAAAAU8"]
[Thu Sep 03 10:56:37.154760 2026] [:error] [pid 2508:tid 139687989581568] [client 20.151.10.161:40280] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/shiny.php"] [unique_id "apmYtTUo_JB4TCSwEqErvQAAAIk"]
[Thu Sep 03 10:56:37.359325 2026] [:error] [pid 11281:tid 139688031545088] [client 20.151.10.161:39506] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/403dd.php"] [unique_id "apmYtQ2AIRRSxRqwFeD5yQAAAUQ"]
[Thu Sep 03 10:56:37.568598 2026] [:error] [pid 3690:tid 139687972796160] [client 20.151.10.161:62771] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/baba.php"] [unique_id "apmYtRxT1kdH6yxfA3HLhgAAAQs"]
[Thu Sep 03 10:56:37.771025 2026] [:error] [pid 11281:tid 139687997974272] [client 20.151.10.161:53770] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/site.php"] [unique_id "apmYtQ2AIRRSxRqwFeD5ywAAAUg"]
[Thu Sep 03 10:56:38.031597 2026] [:error] [pid 2594:tid 139688039937792] [client 20.151.10.161:62734] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/cabs.php"] [unique_id "apmYtrhmlkltaRvWjOrdxAAAAMM"]
[Thu Sep 03 10:56:38.237906 2026] [:error] [pid 11281:tid 139687947618048] [client 20.151.10.161:62777] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/insc.php"] [unique_id "apmYtg2AIRRSxRqwFeD5zwAAAU4"]
[Thu Sep 03 10:56:38.469598 2026] [:error] [pid 2594:tid 139687872083712] [client 20.151.10.161:45269] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/file.php"] [unique_id "apmYtrhmlkltaRvWjOrdxQAAANc"]
[Thu Sep 03 10:56:38.683940 2026] [:error] [pid 3690:tid 139687888869120] [client 20.151.10.161:53846] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/dex.php"] [unique_id "apmYthxT1kdH6yxfA3HLiQAAARU"]
[Thu Sep 03 10:56:38.883915 2026] [:error] [pid 3690:tid 139687914047232] [client 20.151.10.161:45212] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/key.php"] [unique_id "apmYthxT1kdH6yxfA3HLigAAARI"]
[Thu Sep 03 10:56:39.102547 2026] [:error] [pid 11281:tid 139687880476416] [client 20.151.10.161:53883] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/kir.php"] [unique_id "apmYtw2AIRRSxRqwFeD50QAAAVY"]
[Thu Sep 03 10:56:39.306269 2026] [:error] [pid 3690:tid 139687905654528] [client 20.151.10.161:45252] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/nofile.php"] [unique_id "apmYtxxT1kdH6yxfA3HLjAAAARM"]
[Thu Sep 03 10:56:39.513502 2026] [:error] [pid 3690:tid 139688039937792] [client 20.151.10.161:53819] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/fling.php"] [unique_id "apmYtxxT1kdH6yxfA3HLjQAAAQM"]
[Thu Sep 03 10:56:39.715563 2026] [:error] [pid 3690:tid 139688115545856] [client 20.151.10.161:62903] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/btyuio.php"] [unique_id "apmYtxxT1kdH6yxfA3HLjgAAAQI"]
[Thu Sep 03 10:56:39.921773 2026] [:error] [pid 2507:tid 139687888869120] [client 20.151.10.161:53818] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/or.php"] [unique_id "apmYt9aXYoLHUaOYzhudqQAAAFU"]
[Thu Sep 03 10:56:40.128894 2026] [:error] [pid 11281:tid 139687989581568] [client 20.151.10.161:53838] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/mails.php"] [unique_id "apmYuA2AIRRSxRqwFeD50wAAAUk"]
[Thu Sep 03 10:56:40.381776 2026] [:error] [pid 2506:tid 139687922439936] [client 20.151.10.161:53849] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/sm.php"] [unique_id "apmYuNdJ45FnCxw6lKM6HAAAABE"]
[Thu Sep 03 10:56:40.587998 2026] [:error] [pid 2594:tid 139687914047232] [client 20.151.10.161:45296] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/araso.php"] [unique_id "apmYuLhmlkltaRvWjOrdxwAAANI"]
[Thu Sep 03 10:56:40.790361 2026] [:error] [pid 2508:tid 139687863691008] [client 20.151.10.161:53821] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/a.php"] [unique_id "apmYuDUo_JB4TCSwEqErvwAAAJg"]
[Thu Sep 03 10:56:40.991705 2026] [:error] [pid 11281:tid 139688123938560] [client 20.151.10.161:53788] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/sb.php"] [unique_id "apmYuA2AIRRSxRqwFeD51AAAAUE"]
[Thu Sep 03 10:56:41.201857 2026] [:error] [pid 11281:tid 139688039937792] [client 20.151.10.161:53887] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-content/index.php"] [unique_id "apmYuQ2AIRRSxRqwFeD51QAAAUM"]
[Thu Sep 03 10:56:41.407162 2026] [:error] [pid 2506:tid 139688132331264] [client 20.151.10.161:53831] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "apmYuddJ45FnCxw6lKM6HQAAAAA"]
[Thu Sep 03 10:56:41.643069 2026] [:error] [pid 11281:tid 139687997974272] [client 20.151.10.161:53783] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-admin/css/"] [unique_id "apmYuQ2AIRRSxRqwFeD51gAAAUg"]
[Thu Sep 03 10:56:41.850392 2026] [:error] [pid 2507:tid 139687939225344] [client 20.151.10.161:45281] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-admin/css/colors/modern/"] [unique_id "apmYudaXYoLHUaOYzhudqgAAAE8"]
[Thu Sep 03 10:56:42.059688 2026] [:error] [pid 11281:tid 139687905654528] [client 20.151.10.161:62767] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-includes/blocks/details/"] [unique_id "apmYug2AIRRSxRqwFeD51wAAAVM"]
[Thu Sep 03 10:56:42.294880 2026] [:error] [pid 11281:tid 139687947618048] [client 20.151.10.161:62902] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-includes/blocks/audio/"] [unique_id "apmYug2AIRRSxRqwFeD52QAAAU4"]
[Thu Sep 03 10:56:42.498665 2026] [:error] [pid 3690:tid 139688014759680] [client 20.151.10.161:62723] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-temp.php"] [unique_id "apmYuhxT1kdH6yxfA3HLkAAAAQY"]
[Thu Sep 03 10:56:42.709600 2026] [:error] [pid 2594:tid 139687981188864] [client 20.151.10.161:53783] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-admin/js/index.php"] [unique_id "apmYurhmlkltaRvWjOrdyQAAAMo"]
[Thu Sep 03 10:56:42.915751 2026] [:error] [pid 2594:tid 139687897261824] [client 20.151.10.161:53832] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-includes/Requests/"] [unique_id "apmYurhmlkltaRvWjOrdygAAANQ"]
[Thu Sep 03 10:56:43.121600 2026] [:error] [pid 3690:tid 139687872083712] [client 20.151.10.161:53772] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-content/admin.php"] [unique_id "apmYuxxT1kdH6yxfA3HLkgAAARc"]
[Thu Sep 03 10:56:43.344577 2026] [:error] [pid 11281:tid 139688006366976] [client 20.151.10.161:45277] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-content/themes/index.php"] [unique_id "apmYuw2AIRRSxRqwFeD52gAAAUc"]
[Thu Sep 03 10:56:43.552091 2026] [:error] [pid 2506:tid 139688123938560] [client 20.151.10.161:62731] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/av.php"] [unique_id "apmYu9dJ45FnCxw6lKM6HgAAAAE"]
[Thu Sep 03 10:56:43.755842 2026] [:error] [pid 3690:tid 139687930832640] [client 20.151.10.161:40252] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-content/themes/index.php"] [unique_id "apmYuxxT1kdH6yxfA3HLkwAAARA"]
[Thu Sep 03 10:56:43.959212 2026] [:error] [pid 2594:tid 139688123938560] [client 20.151.10.161:53868] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-goods.php"] [unique_id "apmYu7hmlkltaRvWjOrdzAAAAME"]
[Thu Sep 03 10:56:44.164722 2026] [:error] [pid 2508:tid 139687914047232] [client 20.151.10.161:62899] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-includes/js/jquery/"] [unique_id "apmYvDUo_JB4TCSwEqErwAAAAJI"]
[Thu Sep 03 10:56:44.380761 2026] [:error] [pid 2507:tid 139687997974272] [client 20.151.10.161:62741] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/cgi-bin/index.php"] [unique_id "apmYvNaXYoLHUaOYzhudrAAAAEg"]
[Thu Sep 03 10:56:44.592750 2026] [:error] [pid 3690:tid 139687905654528] [client 20.151.10.161:53806] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-includes/l10n/"] [unique_id "apmYvBxT1kdH6yxfA3HLlQAAARM"]
[Thu Sep 03 10:56:44.795939 2026] [:error] [pid 2507:tid 139687880476416] [client 20.151.10.161:45268] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-manager.php"] [unique_id "apmYvNaXYoLHUaOYzhudrwAAAFY"]
[Thu Sep 03 10:56:45.021193 2026] [:error] [pid 3690:tid 139687997974272] [client 20.151.10.161:45258] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "apmYvRxT1kdH6yxfA3HLmwAAAQg"]
[Thu Sep 03 10:56:45.228428 2026] [:error] [pid 3690:tid 139687981188864] [client 20.151.10.161:62720] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/cgi-bin/admin.php"] [unique_id "apmYvRxT1kdH6yxfA3HLnwAAAQo"]
[Thu Sep 03 10:56:45.431486 2026] [:error] [pid 2506:tid 139687872083712] [client 20.151.10.161:53798] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-content/"] [unique_id "apmYvddJ45FnCxw6lKM6IwAAABc"]
[Thu Sep 03 10:56:45.664694 2026] [:error] [pid 3690:tid 139687964403456] [client 20.151.10.161:53847] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-admin/css/colors/blue/"] [unique_id "apmYvRxT1kdH6yxfA3HLoQAAAQw"]
[Thu Sep 03 10:56:45.867383 2026] [:error] [pid 3690:tid 139688031545088] [client 20.151.10.161:62886] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-includes/block-bindings/"] [unique_id "apmYvRxT1kdH6yxfA3HLogAAAQQ"]
[Thu Sep 03 10:56:46.068443 2026] [:error] [pid 2594:tid 139687989581568] [client 20.151.10.161:62727] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-includes/assets/"] [unique_id "apmYvrhmlkltaRvWjOrdzgAAAMk"]
[Thu Sep 03 10:56:46.276528 2026] [:error] [pid 2507:tid 139687956010752] [client 20.151.10.161:53809] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "apmYvtaXYoLHUaOYzhudsAAAAE0"]
[Thu Sep 03 10:56:46.487846 2026] [:error] [pid 11281:tid 139687863691008] [client 20.151.10.161:40311] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-admin/network/plugins.php"] [unique_id "apmYvg2AIRRSxRqwFeD54wAAAVg"]
[Thu Sep 03 10:56:46.690210 2026] [:error] [pid 11281:tid 139688115545856] [client 20.151.10.161:53858] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-admin/maint/index.php"] [unique_id "apmYvg2AIRRSxRqwFeD55AAAAUI"]
[Thu Sep 03 10:56:46.898236 2026] [:error] [pid 2594:tid 139687872083712] [client 20.151.10.161:62872] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/qazwsx.php"] [unique_id "apmYvrhmlkltaRvWjOrd0AAAANc"]
[Thu Sep 03 10:56:47.102783 2026] [:error] [pid 11281:tid 139687972796160] [client 20.151.10.161:40265] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/cae2.2.php"] [unique_id "apmYvw2AIRRSxRqwFeD55QAAAUs"]
[Thu Sep 03 10:56:47.318003 2026] [:error] [pid 11281:tid 139687964403456] [client 20.151.10.161:53790] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/b8.php"] [unique_id "apmYvw2AIRRSxRqwFeD55gAAAUw"]
[Thu Sep 03 10:56:47.563235 2026] [:error] [pid 2594:tid 139687922439936] [client 20.151.10.161:62724] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/xs.php"] [unique_id "apmYv7hmlkltaRvWjOrd0gAAANE"]
[Thu Sep 03 10:56:47.776156 2026] [:error] [pid 3690:tid 139687989581568] [client 20.151.10.161:62721] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp-content/uploads/"] [unique_id "apmYvxxT1kdH6yxfA3HLpQAAAQk"]
[Thu Sep 03 10:56:47.977047 2026] [:error] [pid 11281:tid 139687914047232] [client 20.151.10.161:53862] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp_blog_footer.php"] [unique_id "apmYvw2AIRRSxRqwFeD56AAAAVI"]
[Thu Sep 03 10:56:48.221486 2026] [:error] [pid 2508:tid 139687964403456] [client 20.151.10.161:62742] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/billzgs.php"] [unique_id "apmYwDUo_JB4TCSwEqErxQAAAIw"]
[Thu Sep 03 10:56:48.426058 2026] [:error] [pid 2508:tid 139688031545088] [client 20.151.10.161:45270] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/CAE-2.5.php"] [unique_id "apmYwDUo_JB4TCSwEqErxgAAAIQ"]
[Thu Sep 03 10:56:48.676604 2026] [:error] [pid 2508:tid 139687956010752] [client 20.151.10.161:45261] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/0.php"] [unique_id "apmYwDUo_JB4TCSwEqErxwAAAI0"]
[Thu Sep 03 10:56:48.878833 2026] [:error] [pid 3690:tid 139687997974272] [client 20.151.10.161:62848] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/v4on3fxtoo5z5cq0yCdefault.php"] [unique_id "apmYwBxT1kdH6yxfA3HLpgAAAQg"]
[Thu Sep 03 10:56:49.090871 2026] [:error] [pid 2594:tid 139688115545856] [client 20.151.10.161:45240] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/8xmlr9ommwdy3ro8dCdefault.php"] [unique_id "apmYwbhmlkltaRvWjOrd1AAAAMI"]
[Thu Sep 03 10:56:49.311697 2026] [:error] [pid 3690:tid 139687880476416] [client 20.151.10.161:45214] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/fms.php"] [unique_id "apmYwRxT1kdH6yxfA3HLpwAAARY"]
[Thu Sep 03 10:56:49.543262 2026] [:error] [pid 11281:tid 139687872083712] [client 20.151.10.161:39526] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/0day.php"] [unique_id "apmYwQ2AIRRSxRqwFeD57AAAAVc"]
[Thu Sep 03 10:56:49.756831 2026] [:error] [pid 11281:tid 139688014759680] [client 20.151.10.161:62878] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/das.php"] [unique_id "apmYwQ2AIRRSxRqwFeD57QAAAUY"]
[Thu Sep 03 10:56:49.964622 2026] [:error] [pid 11281:tid 139688115545856] [client 20.151.10.161:45256] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wss.php"] [unique_id "apmYwQ2AIRRSxRqwFeD58QAAAUI"]
[Thu Sep 03 10:56:50.169480 2026] [:error] [pid 11281:tid 139687989581568] [client 20.151.10.161:53828] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/shtml.php"] [unique_id "apmYwg2AIRRSxRqwFeD58gAAAUk"]
[Thu Sep 03 10:56:50.398786 2026] [:error] [pid 2507:tid 139688123938560] [client 20.151.10.161:53874] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/rise.php"] [unique_id "apmYwtaXYoLHUaOYzhudsgAAAEE"]
[Thu Sep 03 10:56:50.602552 2026] [:error] [pid 2594:tid 139687863691008] [client 20.151.10.161:53835] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/pep.php"] [unique_id "apmYwrhmlkltaRvWjOrd1QAAANg"]
[Thu Sep 03 10:56:50.824681 2026] [:error] [pid 3690:tid 139687981188864] [client 20.151.10.161:53867] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/file_ed27.php"] [unique_id "apmYwhxT1kdH6yxfA3HLqQAAAQo"]
[Thu Sep 03 10:56:51.028565 2026] [:error] [pid 11281:tid 139687964403456] [client 20.151.10.161:62733] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/cycfruf.php"] [unique_id "apmYww2AIRRSxRqwFeD58wAAAUw"]
[Thu Sep 03 10:56:51.245513 2026] [:error] [pid 3690:tid 139687972796160] [client 20.151.10.161:45220] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/fw.php"] [unique_id "apmYwxxT1kdH6yxfA3HLqgAAAQs"]
[Thu Sep 03 10:56:51.449775 2026] [:error] [pid 2508:tid 139687897261824] [client 20.151.10.161:53797] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/b8.php"] [unique_id "apmYwzUo_JB4TCSwEqErygAAAJQ"]
[Thu Sep 03 10:56:51.655118 2026] [:error] [pid 2594:tid 139687939225344] [client 20.151.10.161:45200] [client 20.151.10.161] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/b7.php"] [unique_id "apmYw7hmlkltaRvWjOrd2AAAAM8"]
[Thu Sep 03 12:36:39.503500 2026] [proxy_fcgi:error] [pid 2507:tid 139687947618048] [client 51.107.1.72:54421] AH01071: Got error 'Primary script unknown'
[Thu Sep 03 12:44:42.191446 2026] [authz_core:error] [pid 3997:tid 139688115545856] [client 74.208.86.253:50966] AH01630: client denied by server configuration: /home/menabern/public_html/xmlrpc.php
[Thu Sep 03 13:15:29.685347 2026] [:error] [pid 12236:tid 139687981188864] [client 34.106.131.59:37854] [client 34.106.131.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.git/config"] [unique_id "apm5QWjy9G-AbSAMkRqaygAAAco"]
[Thu Sep 03 13:15:29.712395 2026] [:error] [pid 12236:tid 139688023152384] [client 34.106.131.59:37864] [client 34.106.131.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/app/.git/config"] [unique_id "apm5QWjy9G-AbSAMkRqaywAAAcU"]
[Thu Sep 03 13:15:29.722239 2026] [:error] [pid 12236:tid 139687939225344] [client 34.106.131.59:37872] [client 34.106.131.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/src/.git/config"] [unique_id "apm5QWjy9G-AbSAMkRqazAAAAc8"]
[Thu Sep 03 13:15:29.722288 2026] [:error] [pid 3942:tid 139687930832640] [client 34.106.131.59:37868] [client 34.106.131.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/backend/.git/config"] [unique_id "apm5QVc-FajNlOSdCoJ6UgAAAVA"]
[Thu Sep 03 13:15:29.728069 2026] [:error] [pid 12236:tid 139688014759680] [client 34.106.131.59:37876] [client 34.106.131.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/api/.git/config"] [unique_id "apm5QWjy9G-AbSAMkRqazQAAAcY"]
[Thu Sep 03 13:15:29.733443 2026] [:error] [pid 12236:tid 139687888869120] [client 34.106.131.59:37892] [client 34.106.131.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/html/.git/config"] [unique_id "apm5QWjy9G-AbSAMkRqazgAAAdU"]
[Thu Sep 03 13:15:29.736158 2026] [:error] [pid 12162:tid 139688132331264] [client 34.106.131.59:37896] [client 34.106.131.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/www/.git/config"] [unique_id "apm5QT27L7S6Qv69fQz9xgAAAYA"]
[Thu Sep 03 13:15:29.817771 2026] [:error] [pid 3997:tid 139688115545856] [client 34.106.131.59:37920] [client 34.106.131.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/site/.git/config"] [unique_id "apm5QZ9yWFkg7dsQCKfA9gAAAEI"]
[Thu Sep 03 13:15:29.819032 2026] [:error] [pid 12236:tid 139688123938560] [client 34.106.131.59:37904] [client 34.106.131.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/public/.git/config"] [unique_id "apm5QWjy9G-AbSAMkRqazwAAAcE"]
[Thu Sep 03 13:15:29.819709 2026] [:error] [pid 12048:tid 139688014759680] [client 34.106.131.59:37930] [client 34.106.131.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/wordpress/.git/config"] [unique_id "apm5QQ4OlW6FJQTRUDJh2AAAAIY"]
[Thu Sep 03 13:15:29.821324 2026] [:error] [pid 12048:tid 139688023152384] [client 34.106.131.59:37940] [client 34.106.131.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/var/www/.git/config"] [unique_id "apm5QQ4OlW6FJQTRUDJh2QAAAIU"]
[Thu Sep 03 13:15:29.825674 2026] [:error] [pid 12162:tid 139687897261824] [client 34.106.131.59:37952] [client 34.106.131.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/htdocs/.git/config"] [unique_id "apm5QT27L7S6Qv69fQz9xwAAAZQ"]
[Thu Sep 03 13:15:29.962917 2026] [:error] [pid 12236:tid 139687863691008] [client 34.106.131.59:59450] [client 34.106.131.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.git/config"] [unique_id "apm5QWjy9G-AbSAMkRqa0AAAAdg"]
[Thu Sep 03 13:15:29.980366 2026] [:error] [pid 3942:tid 139688039937792] [client 34.106.131.59:59462] [client 34.106.131.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/app/.git/config"] [unique_id "apm5QVc-FajNlOSdCoJ6UwAAAUM"]
[Thu Sep 03 13:15:29.989693 2026] [:error] [pid 3997:tid 139688123938560] [client 34.106.131.59:59472] [client 34.106.131.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/src/.git/config"] [unique_id "apm5QZ9yWFkg7dsQCKfA9wAAAEE"]
[Thu Sep 03 13:15:29.990684 2026] [:error] [pid 3997:tid 139687914047232] [client 34.106.131.59:59468] [client 34.106.131.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/backend/.git/config"] [unique_id "apm5QZ9yWFkg7dsQCKfA-AAAAFI"]
[Thu Sep 03 13:15:29.997126 2026] [:error] [pid 12236:tid 139688115545856] [client 34.106.131.59:59488] [client 34.106.131.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/api/.git/config"] [unique_id "apm5QWjy9G-AbSAMkRqa0QAAAcI"]
[Thu Sep 03 13:15:30.000895 2026] [:error] [pid 3942:tid 139687956010752] [client 34.106.131.59:59502] [client 34.106.131.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/html/.git/config"] [unique_id "apm5Qlc-FajNlOSdCoJ6VAAAAU0"]
[Thu Sep 03 13:15:30.004054 2026] [:error] [pid 12236:tid 139687997974272] [client 34.106.131.59:59518] [client 34.106.131.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/www/.git/config"] [unique_id "apm5Qmjy9G-AbSAMkRqa0gAAAcg"]
[Thu Sep 03 13:15:30.085160 2026] [:error] [pid 12048:tid 139687947618048] [client 34.106.131.59:59520] [client 34.106.131.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/site/.git/config"] [unique_id "apm5Qg4OlW6FJQTRUDJh3AAAAI4"]
[Thu Sep 03 13:15:30.086810 2026] [:error] [pid 3941:tid 139687914047232] [client 34.106.131.59:59534] [client 34.106.131.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/wordpress/.git/config"] [unique_id "apm5QnxCjuXeoAxhvcTb4wAAARI"]
[Thu Sep 03 13:15:30.087046 2026] [:error] [pid 12236:tid 139688132331264] [client 34.106.131.59:59546] [client 34.106.131.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/public/.git/config"] [unique_id "apm5Qmjy9G-AbSAMkRqa0wAAAcA"]
[Thu Sep 03 13:15:30.088529 2026] [:error] [pid 12236:tid 139687947618048] [client 34.106.131.59:59562] [client 34.106.131.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/var/www/.git/config"] [unique_id "apm5Qmjy9G-AbSAMkRqa1AAAAc4"]
[Thu Sep 03 13:15:30.094699 2026] [:error] [pid 12048:tid 139687939225344] [client 34.106.131.59:59566] [client 34.106.131.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/htdocs/.git/config"] [unique_id "apm5Qg4OlW6FJQTRUDJh3QAAAI8"]
[Thu Sep 03 13:23:39.545382 2026] [:error] [pid 12114:tid 139687997974272] [client 35.228.147.80:57326] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/.git/config"] [unique_id "apm7K5zNLpyfcXWHKY2n5QAAAMg"]
[Thu Sep 03 13:23:39.974455 2026] [:error] [pid 3942:tid 139688132331264] [client 35.228.147.80:57340] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/.env"] [unique_id "apm7K1c-FajNlOSdCoJ7VAAAAUA"]
[Thu Sep 03 13:23:40.201591 2026] [:error] [pid 3997:tid 139687981188864] [client 35.228.147.80:57354] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/.env.local"] [unique_id "apm7LJ9yWFkg7dsQCKfCCgAAAEo"]
[Thu Sep 03 13:23:40.398666 2026] [:error] [pid 12048:tid 139688023152384] [client 35.228.147.80:57362] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/.env.production"] [unique_id "apm7LA4OlW6FJQTRUDJkvwAAAIU"]
[Thu Sep 03 13:23:40.597056 2026] [:error] [pid 12048:tid 139687872083712] [client 35.228.147.80:57364] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/.env.staging"] [unique_id "apm7LA4OlW6FJQTRUDJkwAAAAJc"]
[Thu Sep 03 13:23:40.817699 2026] [:error] [pid 12048:tid 139688039937792] [client 35.228.147.80:57370] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/.env.development"] [unique_id "apm7LA4OlW6FJQTRUDJkwQAAAIM"]
[Thu Sep 03 13:23:41.008658 2026] [:error] [pid 12162:tid 139687972796160] [client 35.228.147.80:57372] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/.env.test"] [unique_id "apm7LT27L7S6Qv69fQz_UgAAAYs"]
[Thu Sep 03 13:23:41.203039 2026] [:error] [pid 3941:tid 139688039937792] [client 35.228.147.80:57376] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/.env.remote"] [unique_id "apm7LXxCjuXeoAxhvcTc6AAAAQM"]
[Thu Sep 03 13:23:41.423945 2026] [:error] [pid 3912:tid 139687914047232] [client 35.228.147.80:57382] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/.env.bak"] [unique_id "apm7LV1PpWlCN_Ixi4Y1ewAAABI"]
[Thu Sep 03 13:23:41.646195 2026] [:error] [pid 12048:tid 139687947618048] [client 35.228.147.80:57398] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/.env.backup"] [unique_id "apm7LQ4OlW6FJQTRUDJkxAAAAI4"]
[Thu Sep 03 13:23:41.848724 2026] [:error] [pid 3942:tid 139687888869120] [client 35.228.147.80:57406] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/.env.save"] [unique_id "apm7LVc-FajNlOSdCoJ7VQAAAVU"]
[Thu Sep 03 13:23:42.053719 2026] [:error] [pid 12236:tid 139688115545856] [client 35.228.147.80:57416] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/.env.old"] [unique_id "apm7Lmjy9G-AbSAMkRqdEgAAAcI"]
[Thu Sep 03 13:23:42.252347 2026] [:error] [pid 12162:tid 139687914047232] [client 35.228.147.80:57432] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/.env.sample"] [unique_id "apm7Lj27L7S6Qv69fQz_VAAAAZI"]
[Thu Sep 03 13:23:42.444926 2026] [:error] [pid 3997:tid 139687956010752] [client 35.228.147.80:57448] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/.env.example"] [unique_id "apm7Lp9yWFkg7dsQCKfCDAAAAE0"]
[Thu Sep 03 13:23:42.654187 2026] [:error] [pid 3912:tid 139687897261824] [client 35.228.147.80:54358] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/.env.dev"] [unique_id "apm7Ll1PpWlCN_Ixi4Y1fgAAABQ"]
[Thu Sep 03 13:23:42.852715 2026] [:error] [pid 3942:tid 139687897261824] [client 35.228.147.80:54374] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/.env.prod"] [unique_id "apm7Llc-FajNlOSdCoJ7WAAAAVQ"]
[Thu Sep 03 13:23:43.048395 2026] [:error] [pid 12236:tid 139688123938560] [client 35.228.147.80:54390] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/.env.stage"] [unique_id "apm7L2jy9G-AbSAMkRqdEwAAAcE"]
[Thu Sep 03 13:23:43.232246 2026] [:error] [pid 12162:tid 139687947618048] [client 35.228.147.80:54400] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/.env.ci"] [unique_id "apm7Lz27L7S6Qv69fQz_VQAAAY4"]
[Thu Sep 03 13:23:43.426121 2026] [:error] [pid 3942:tid 139687863691008] [client 35.228.147.80:54416] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/.env.docker"] [unique_id "apm7L1c-FajNlOSdCoJ7WQAAAVg"]
[Thu Sep 03 13:23:43.619305 2026] [:error] [pid 3942:tid 139687930832640] [client 35.228.147.80:54420] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/.env.live"] [unique_id "apm7L1c-FajNlOSdCoJ7WgAAAVA"]
[Thu Sep 03 13:23:43.834455 2026] [:error] [pid 12048:tid 139687888869120] [client 35.228.147.80:54424] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/.env.preprod"] [unique_id "apm7Lw4OlW6FJQTRUDJkxgAAAJU"]
[Thu Sep 03 13:23:44.052150 2026] [:error] [pid 12114:tid 139688115545856] [client 35.228.147.80:54440] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/.env.uat"] [unique_id "apm7MJzNLpyfcXWHKY2n5wAAAMI"]
[Thu Sep 03 13:23:44.254518 2026] [:error] [pid 12236:tid 139688039937792] [client 35.228.147.80:54446] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/.env.dist"] [unique_id "apm7MGjy9G-AbSAMkRqdFQAAAcM"]
[Thu Sep 03 13:23:44.449771 2026] [:error] [pid 12236:tid 139687888869120] [client 35.228.147.80:54458] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/.env.swp"] [unique_id "apm7MGjy9G-AbSAMkRqdFgAAAdU"]
[Thu Sep 03 13:23:44.654376 2026] [:error] [pid 12048:tid 139688031545088] [client 35.228.147.80:54466] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/.env~"] [unique_id "apm7MA4OlW6FJQTRUDJkygAAAIQ"]
[Thu Sep 03 13:23:44.848695 2026] [:error] [pid 12236:tid 139687972796160] [client 35.228.147.80:54472] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/.env1"] [unique_id "apm7MGjy9G-AbSAMkRqdGQAAAcs"]
[Thu Sep 03 13:23:45.032311 2026] [:error] [pid 12048:tid 139687997974272] [client 35.228.147.80:54474] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/.env2"] [unique_id "apm7MQ4OlW6FJQTRUDJkywAAAIg"]
[Thu Sep 03 13:23:45.221406 2026] [:error] [pid 12048:tid 139687930832640] [client 35.228.147.80:54482] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/.env_copy"] [unique_id "apm7MQ4OlW6FJQTRUDJkzAAAAJA"]
[Thu Sep 03 13:23:45.411275 2026] [:error] [pid 3997:tid 139687922439936] [client 35.228.147.80:54498] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/.env.txt"] [unique_id "apm7MZ9yWFkg7dsQCKfCDwAAAFE"]
[Thu Sep 03 13:23:45.600780 2026] [:error] [pid 3912:tid 139687947618048] [client 35.228.147.80:54510] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/.env.json"] [unique_id "apm7MV1PpWlCN_Ixi4Y1gQAAAA4"]
[Thu Sep 03 13:23:45.790774 2026] [:error] [pid 12236:tid 139687872083712] [client 35.228.147.80:54524] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/.env.yaml"] [unique_id "apm7MWjy9G-AbSAMkRqdGgAAAdc"]
[Thu Sep 03 13:23:45.982098 2026] [:error] [pid 3997:tid 139687997974272] [client 35.228.147.80:54538] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/.env.yml"] [unique_id "apm7MZ9yWFkg7dsQCKfCEAAAAEg"]
[Thu Sep 03 13:23:46.182350 2026] [:error] [pid 12114:tid 139688039937792] [client 35.228.147.80:54544] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/app/.env"] [unique_id "apm7MpzNLpyfcXWHKY2n6QAAAMM"]
[Thu Sep 03 13:23:46.381019 2026] [:error] [pid 12048:tid 139688006366976] [client 35.228.147.80:54558] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/apps/.env"] [unique_id "apm7Mg4OlW6FJQTRUDJkzgAAAIc"]
[Thu Sep 03 13:23:46.568925 2026] [:error] [pid 12236:tid 139687997974272] [client 35.228.147.80:54560] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/api/.env"] [unique_id "apm7Mmjy9G-AbSAMkRqdHAAAAcg"]
[Thu Sep 03 13:23:46.793216 2026] [:error] [pid 12048:tid 139687914047232] [client 35.228.147.80:54564] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/web/.env"] [unique_id "apm7Mg4OlW6FJQTRUDJkzwAAAJI"]
[Thu Sep 03 13:23:46.990881 2026] [:error] [pid 12236:tid 139688023152384] [client 35.228.147.80:54568] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/site/.env"] [unique_id "apm7Mmjy9G-AbSAMkRqdHQAAAcU"]
[Thu Sep 03 13:23:47.186584 2026] [:error] [pid 3997:tid 139687905654528] [client 35.228.147.80:54578] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/public/.env"] [unique_id "apm7M59yWFkg7dsQCKfCEQAAAFM"]
[Thu Sep 03 13:23:47.378468 2026] [:error] [pid 12236:tid 139687964403456] [client 35.228.147.80:54590] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/admin/.env"] [unique_id "apm7M2jy9G-AbSAMkRqdHgAAAcw"]
[Thu Sep 03 13:23:47.576852 2026] [:error] [pid 12048:tid 139687888869120] [client 35.228.147.80:54602] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/backend/.env"] [unique_id "apm7Mw4OlW6FJQTRUDJk0QAAAJU"]
[Thu Sep 03 13:23:47.772432 2026] [:error] [pid 12048:tid 139687905654528] [client 35.228.147.80:54606] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/server/.env"] [unique_id "apm7Mw4OlW6FJQTRUDJk0gAAAJM"]
[Thu Sep 03 13:23:47.988220 2026] [:error] [pid 12236:tid 139687888869120] [client 35.228.147.80:54608] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/frontend/.env"] [unique_id "apm7M2jy9G-AbSAMkRqdIgAAAdU"]
[Thu Sep 03 13:23:48.184285 2026] [:error] [pid 12236:tid 139687972796160] [client 35.228.147.80:54614] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/src/.env"] [unique_id "apm7NGjy9G-AbSAMkRqdIwAAAcs"]
[Thu Sep 03 13:23:48.392061 2026] [:error] [pid 12048:tid 139687956010752] [client 35.228.147.80:54616] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/core/.env"] [unique_id "apm7NA4OlW6FJQTRUDJk1AAAAI0"]
[Thu Sep 03 13:23:48.587779 2026] [:error] [pid 12048:tid 139687930832640] [client 35.228.147.80:54618] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/core/app/.env"] [unique_id "apm7NA4OlW6FJQTRUDJk1gAAAJA"]
[Thu Sep 03 13:23:48.784106 2026] [:error] [pid 12236:tid 139688014759680] [client 35.228.147.80:54624] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/config/.env"] [unique_id "apm7NGjy9G-AbSAMkRqdJQAAAcY"]
[Thu Sep 03 13:23:48.974390 2026] [:error] [pid 12236:tid 139687989581568] [client 35.228.147.80:54640] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/private/.env"] [unique_id "apm7NGjy9G-AbSAMkRqdJwAAAck"]
[Thu Sep 03 13:23:49.177675 2026] [:error] [pid 3997:tid 139687880476416] [client 35.228.147.80:54646] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/application/.env"] [unique_id "apm7NZ9yWFkg7dsQCKfCEgAAAFY"]
[Thu Sep 03 13:23:49.385528 2026] [:error] [pid 3941:tid 139688006366976] [client 35.228.147.80:54654] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/bootstrap/.env"] [unique_id "apm7NXxCjuXeoAxhvcTc7AAAAQc"]
[Thu Sep 03 13:23:49.600183 2026] [:error] [pid 3997:tid 139688014759680] [client 35.228.147.80:54666] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/database/.env"] [unique_id "apm7NZ9yWFkg7dsQCKfCFAAAAEY"]
[Thu Sep 03 13:23:49.802199 2026] [:error] [pid 3912:tid 139688039937792] [client 35.228.147.80:54680] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/storage/.env"] [unique_id "apm7NV1PpWlCN_Ixi4Y1ggAAAAM"]
[Thu Sep 03 13:23:49.992483 2026] [:error] [pid 3942:tid 139687939225344] [client 35.228.147.80:54686] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/var/www/.env"] [unique_id "apm7NVc-FajNlOSdCoJ7XwAAAU8"]
[Thu Sep 03 13:23:50.217210 2026] [:error] [pid 3997:tid 139687897261824] [client 35.228.147.80:54698] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/var/www/html/.env"] [unique_id "apm7Np9yWFkg7dsQCKfCFQAAAFQ"]
[Thu Sep 03 13:23:50.415974 2026] [:error] [pid 3941:tid 139687905654528] [client 35.228.147.80:54712] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/current/.env"] [unique_id "apm7NnxCjuXeoAxhvcTc7QAAARM"]
[Thu Sep 03 13:23:50.617949 2026] [:error] [pid 12048:tid 139688006366976] [client 35.228.147.80:54720] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/release/.env"] [unique_id "apm7Ng4OlW6FJQTRUDJk2AAAAIc"]
[Thu Sep 03 13:23:50.815527 2026] [:error] [pid 12114:tid 139687981188864] [client 35.228.147.80:54728] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/releases/.env"] [unique_id "apm7NpzNLpyfcXWHKY2n7gAAAMo"]
[Thu Sep 03 13:23:51.020024 2026] [:error] [pid 3941:tid 139688031545088] [client 35.228.147.80:54736] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/shared/.env"] [unique_id "apm7N3xCjuXeoAxhvcTc7gAAAQQ"]
[Thu Sep 03 13:23:51.235934 2026] [:error] [pid 3941:tid 139687972796160] [client 35.228.147.80:54742] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/deploy/.env"] [unique_id "apm7N3xCjuXeoAxhvcTc7wAAAQs"]
[Thu Sep 03 13:23:51.456597 2026] [:error] [pid 3941:tid 139687981188864] [client 35.228.147.80:54754] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/build/.env"] [unique_id "apm7N3xCjuXeoAxhvcTc8AAAAQo"]
[Thu Sep 03 13:23:51.671294 2026] [:error] [pid 12048:tid 139687897261824] [client 35.228.147.80:54758] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/dist/.env"] [unique_id "apm7Nw4OlW6FJQTRUDJk2gAAAJQ"]
[Thu Sep 03 13:23:51.889524 2026] [:error] [pid 3942:tid 139687888869120] [client 35.228.147.80:54760] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/public_html/.env"] [unique_id "apm7N1c-FajNlOSdCoJ7YwAAAVU"]
[Thu Sep 03 13:23:52.105991 2026] [:error] [pid 3941:tid 139687989581568] [client 35.228.147.80:54774] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/htdocs/.env"] [unique_id "apm7OHxCjuXeoAxhvcTc8QAAAQk"]
[Thu Sep 03 13:23:52.310138 2026] [:error] [pid 12114:tid 139687888869120] [client 35.228.147.80:54778] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/www/.env"] [unique_id "apm7OJzNLpyfcXWHKY2n7wAAANU"]
[Thu Sep 03 13:23:52.516318 2026] [:error] [pid 3912:tid 139687981188864] [client 35.228.147.80:54794] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/html/.env"] [unique_id "apm7OF1PpWlCN_Ixi4Y1hAAAAAo"]
[Thu Sep 03 13:23:52.736201 2026] [:error] [pid 12048:tid 139687964403456] [client 35.228.147.80:53786] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/live/.env"] [unique_id "apm7OA4OlW6FJQTRUDJk2wAAAIw"]
[Thu Sep 03 13:23:52.935296 2026] [:error] [pid 12114:tid 139687863691008] [client 35.228.147.80:53800] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/prod/.env"] [unique_id "apm7OJzNLpyfcXWHKY2n8AAAANg"]
[Thu Sep 03 13:23:53.141991 2026] [:error] [pid 12114:tid 139688023152384] [client 35.228.147.80:53802] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/dev/.env"] [unique_id "apm7OZzNLpyfcXWHKY2n8QAAAMU"]
[Thu Sep 03 13:23:53.357160 2026] [:error] [pid 12162:tid 139687981188864] [client 35.228.147.80:53818] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/staging/.env"] [unique_id "apm7OT27L7S6Qv69fQz_XAAAAYo"]
[Thu Sep 03 13:23:53.562957 2026] [:error] [pid 12048:tid 139687905654528] [client 35.228.147.80:53824] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/opt/.env"] [unique_id "apm7OQ4OlW6FJQTRUDJk3QAAAJM"]
[Thu Sep 03 13:23:53.771541 2026] [:error] [pid 12162:tid 139688123938560] [client 35.228.147.80:53840] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/laravel/.env"] [unique_id "apm7OT27L7S6Qv69fQz_XQAAAYE"]
[Thu Sep 03 13:23:54.014760 2026] [:error] [pid 3912:tid 139688132331264] [client 35.228.147.80:53850] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/symfony/.env"] [unique_id "apm7Ol1PpWlCN_Ixi4Y1hgAAAAA"]
[Thu Sep 03 13:23:54.240807 2026] [:error] [pid 12048:tid 139687997974272] [client 35.228.147.80:53856] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/wordpress/.env"] [unique_id "apm7Og4OlW6FJQTRUDJk3wAAAIg"]
[Thu Sep 03 13:23:54.453340 2026] [:error] [pid 12162:tid 139687972796160] [client 35.228.147.80:53862] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/wp/.env"] [unique_id "apm7Oj27L7S6Qv69fQz_XgAAAYs"]
[Thu Sep 03 13:23:54.667909 2026] [:error] [pid 3997:tid 139687956010752] [client 35.228.147.80:53868] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/cms/.env"] [unique_id "apm7Op9yWFkg7dsQCKfCGAAAAE0"]
[Thu Sep 03 13:23:54.890114 2026] [:error] [pid 3912:tid 139687930832640] [client 35.228.147.80:53874] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/drupal/.env"] [unique_id "apm7Ol1PpWlCN_Ixi4Y1iAAAABA"]
[Thu Sep 03 13:23:55.101362 2026] [:error] [pid 12048:tid 139688014759680] [client 35.228.147.80:53876] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/joomla/.env"] [unique_id "apm7Ow4OlW6FJQTRUDJk4AAAAIY"]
[Thu Sep 03 13:23:55.302394 2026] [:error] [pid 12048:tid 139687981188864] [client 35.228.147.80:53880] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/magento/.env"] [unique_id "apm7Ow4OlW6FJQTRUDJk4gAAAIo"]
[Thu Sep 03 13:23:55.513796 2026] [:error] [pid 3912:tid 139687997974272] [client 35.228.147.80:53888] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/shopify/.env"] [unique_id "apm7O11PpWlCN_Ixi4Y1iQAAAAg"]
[Thu Sep 03 13:23:55.708358 2026] [:error] [pid 12048:tid 139687989581568] [client 35.228.147.80:53902] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/prestashop/.env"] [unique_id "apm7Ow4OlW6FJQTRUDJk5QAAAIk"]
[Thu Sep 03 13:23:55.914919 2026] [:error] [pid 12236:tid 139687914047232] [client 35.228.147.80:53918] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/codeigniter/.env"] [unique_id "apm7O2jy9G-AbSAMkRqdKgAAAdI"]
[Thu Sep 03 13:23:56.123248 2026] [:error] [pid 3912:tid 139688031545088] [client 35.228.147.80:53932] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/cakephp/.env"] [unique_id "apm7PF1PpWlCN_Ixi4Y1igAAAAQ"]
[Thu Sep 03 13:23:56.322811 2026] [:error] [pid 3941:tid 139688039937792] [client 35.228.147.80:53934] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/zend/.env"] [unique_id "apm7PHxCjuXeoAxhvcTc8wAAAQM"]
[Thu Sep 03 13:23:56.533409 2026] [:error] [pid 3997:tid 139688006366976] [client 35.228.147.80:53940] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/yii/.env"] [unique_id "apm7PJ9yWFkg7dsQCKfCGgAAAEc"]
[Thu Sep 03 13:23:56.739209 2026] [:error] [pid 3941:tid 139687897261824] [client 35.228.147.80:53946] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/laravel5/.env"] [unique_id "apm7PHxCjuXeoAxhvcTc9AAAARQ"]
[Thu Sep 03 13:23:56.934331 2026] [:error] [pid 3997:tid 139688132331264] [client 35.228.147.80:53956] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/v1/.env"] [unique_id "apm7PJ9yWFkg7dsQCKfCHQAAAEA"]
[Thu Sep 03 13:23:57.137066 2026] [:error] [pid 3997:tid 139688023152384] [client 35.228.147.80:53970] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/v2/.env"] [unique_id "apm7PZ9yWFkg7dsQCKfCHgAAAEU"]
[Thu Sep 03 13:23:57.328796 2026] [:error] [pid 12236:tid 139687888869120] [client 35.228.147.80:53978] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/v3/.env"] [unique_id "apm7PWjy9G-AbSAMkRqdKwAAAdU"]
[Thu Sep 03 13:23:57.536729 2026] [:error] [pid 12236:tid 139687972796160] [client 35.228.147.80:53980] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/api/v1/.env"] [unique_id "apm7PWjy9G-AbSAMkRqdLAAAAcs"]
[Thu Sep 03 13:23:57.767183 2026] [:error] [pid 12048:tid 139687888869120] [client 35.228.147.80:53984] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/api/v2/.env"] [unique_id "apm7PQ4OlW6FJQTRUDJk6AAAAJU"]
[Thu Sep 03 13:23:57.964970 2026] [:error] [pid 12162:tid 139687888869120] [client 35.228.147.80:54000] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/rest/.env"] [unique_id "apm7PT27L7S6Qv69fQz_YQAAAZU"]
[Thu Sep 03 13:23:58.179750 2026] [:error] [pid 3997:tid 139688014759680] [client 35.228.147.80:54012] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/graphql/.env"] [unique_id "apm7Pp9yWFkg7dsQCKfCIAAAAEY"]
[Thu Sep 03 13:23:58.390519 2026] [:error] [pid 12236:tid 139688006366976] [client 35.228.147.80:54022] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/gateway/.env"] [unique_id "apm7Pmjy9G-AbSAMkRqdLQAAAcc"]
[Thu Sep 03 13:23:58.604177 2026] [:error] [pid 12236:tid 139688014759680] [client 35.228.147.80:54028] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/microservice/.env"] [unique_id "apm7Pmjy9G-AbSAMkRqdLgAAAcY"]
[Thu Sep 03 13:23:58.803287 2026] [:error] [pid 3912:tid 139688023152384] [client 35.228.147.80:54034] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/service/.env"] [unique_id "apm7Pl1PpWlCN_Ixi4Y1iwAAAAU"]
[Thu Sep 03 13:23:59.002438 2026] [:error] [pid 12162:tid 139687997974272] [client 35.228.147.80:54050] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/api/v3/.env"] [unique_id "apm7Pz27L7S6Qv69fQz_YwAAAYg"]
[Thu Sep 03 13:23:59.200255 2026] [:error] [pid 12048:tid 139688123938560] [client 35.228.147.80:54056] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/api/dev/.env"] [unique_id "apm7Pw4OlW6FJQTRUDJk6gAAAIE"]
[Thu Sep 03 13:23:59.393503 2026] [:error] [pid 3912:tid 139687922439936] [client 35.228.147.80:54060] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/api/staging/.env"] [unique_id "apm7P11PpWlCN_Ixi4Y1jAAAABE"]
[Thu Sep 03 13:23:59.592392 2026] [:error] [pid 12236:tid 139687956010752] [client 35.228.147.80:54066] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/vendor/.env"] [unique_id "apm7P2jy9G-AbSAMkRqdLwAAAc0"]
[Thu Sep 03 13:23:59.800483 2026] [:error] [pid 12114:tid 139687922439936] [client 35.228.147.80:54082] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/lib/.env"] [unique_id "apm7P5zNLpyfcXWHKY2n9gAAANE"]
[Thu Sep 03 13:23:59.991666 2026] [:error] [pid 12048:tid 139687997974272] [client 35.228.147.80:54090] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/resources/.env"] [unique_id "apm7Pw4OlW6FJQTRUDJk7QAAAIg"]
[Thu Sep 03 13:24:00.194352 2026] [:error] [pid 12048:tid 139687872083712] [client 35.228.147.80:54094] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/assets/.env"] [unique_id "apm7QA4OlW6FJQTRUDJk7gAAAJc"]
[Thu Sep 03 13:24:00.386509 2026] [:error] [pid 12048:tid 139687930832640] [client 35.228.147.80:54108] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/uploads/.env"] [unique_id "apm7QA4OlW6FJQTRUDJk7wAAAJA"]
[Thu Sep 03 13:24:00.582959 2026] [:error] [pid 12048:tid 139688132331264] [client 35.228.147.80:54118] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/internal/.env"] [unique_id "apm7QA4OlW6FJQTRUDJk8AAAAIA"]
[Thu Sep 03 13:24:00.786167 2026] [:error] [pid 3942:tid 139687947618048] [client 35.228.147.80:54134] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/tools/.env"] [unique_id "apm7QFc-FajNlOSdCoJ7ZwAAAU4"]
[Thu Sep 03 13:24:01.015298 2026] [:error] [pid 3942:tid 139687956010752] [client 35.228.147.80:54144] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/scripts/.env"] [unique_id "apm7QVc-FajNlOSdCoJ7aAAAAU0"]
[Thu Sep 03 13:24:01.218931 2026] [:error] [pid 3942:tid 139688014759680] [client 35.228.147.80:54150] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/bin/.env"] [unique_id "apm7QVc-FajNlOSdCoJ7aQAAAUY"]
[Thu Sep 03 13:24:01.431178 2026] [:error] [pid 12236:tid 139687989581568] [client 35.228.147.80:54158] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/sbin/.env"] [unique_id "apm7QWjy9G-AbSAMkRqdMAAAAck"]
[Thu Sep 03 13:24:01.638989 2026] [:error] [pid 12114:tid 139687863691008] [client 35.228.147.80:54164] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/local/.env"] [unique_id "apm7QZzNLpyfcXWHKY2n_AAAANg"]
[Thu Sep 03 13:24:01.845008 2026] [:error] [pid 12048:tid 139687863691008] [client 35.228.147.80:54180] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/portal/.env"] [unique_id "apm7QQ4OlW6FJQTRUDJk8QAAAJg"]
[Thu Sep 03 13:24:02.063697 2026] [:error] [pid 12236:tid 139687981188864] [client 35.228.147.80:54192] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/dashboard/.env"] [unique_id "apm7Qmjy9G-AbSAMkRqdMgAAAco"]
[Thu Sep 03 13:24:02.272699 2026] [:error] [pid 12114:tid 139687939225344] [client 35.228.147.80:54200] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/panel/.env"] [unique_id "apm7QpzNLpyfcXWHKY2n_QAAAM8"]
[Thu Sep 03 13:24:02.471418 2026] [:error] [pid 12162:tid 139688132331264] [client 35.228.147.80:54204] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/crm/.env"] [unique_id "apm7Qj27L7S6Qv69fQz_ZgAAAYA"]
[Thu Sep 03 13:24:02.682364 2026] [:error] [pid 3997:tid 139687972796160] [client 35.228.147.80:38620] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/erp/.env"] [unique_id "apm7Qp9yWFkg7dsQCKfCIQAAAEs"]
[Thu Sep 03 13:24:02.900452 2026] [:error] [pid 12162:tid 139687930832640] [client 35.228.147.80:38626] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/shop/.env"] [unique_id "apm7Qj27L7S6Qv69fQz_ZwAAAZA"]
[Thu Sep 03 13:24:03.098287 2026] [:error] [pid 3942:tid 139688006366976] [client 35.228.147.80:38640] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/store/.env"] [unique_id "apm7Q1c-FajNlOSdCoJ7agAAAUc"]
[Thu Sep 03 13:24:03.313139 2026] [:error] [pid 12048:tid 139687947618048] [client 35.228.147.80:38650] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/saas/.env"] [unique_id "apm7Qw4OlW6FJQTRUDJk9AAAAI4"]
[Thu Sep 03 13:24:03.518081 2026] [:error] [pid 12114:tid 139688039937792] [client 35.228.147.80:38658] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/client/.env"] [unique_id "apm7Q5zNLpyfcXWHKY2n_wAAAMM"]
[Thu Sep 03 13:24:03.736889 2026] [:error] [pid 12048:tid 139688123938560] [client 35.228.147.80:38664] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/project/.env"] [unique_id "apm7Qw4OlW6FJQTRUDJk9QAAAIE"]
[Thu Sep 03 13:24:03.947301 2026] [:error] [pid 12048:tid 139687956010752] [client 35.228.147.80:38680] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/admin-panel/.env"] [unique_id "apm7Qw4OlW6FJQTRUDJk9wAAAI0"]
[Thu Sep 03 13:24:04.177919 2026] [:error] [pid 12048:tid 139687872083712] [client 35.228.147.80:38692] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/control-panel/.env"] [unique_id "apm7RA4OlW6FJQTRUDJk-QAAAJc"]
[Thu Sep 03 13:24:04.385259 2026] [:error] [pid 12236:tid 139688031545088] [client 35.228.147.80:38706] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/user-panel/.env"] [unique_id "apm7RGjy9G-AbSAMkRqdNwAAAcQ"]
[Thu Sep 03 13:24:04.626783 2026] [:error] [pid 3997:tid 139688115545856] [client 35.228.147.80:38714] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/node/.env"] [unique_id "apm7RJ9yWFkg7dsQCKfCIwAAAEI"]
[Thu Sep 03 13:24:04.864747 2026] [:error] [pid 3997:tid 139687956010752] [client 35.228.147.80:38724] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/express/.env"] [unique_id "apm7RJ9yWFkg7dsQCKfCJAAAAE0"]
[Thu Sep 03 13:24:05.080281 2026] [:error] [pid 12048:tid 139688039937792] [client 35.228.147.80:38734] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/next/.env"] [unique_id "apm7RQ4OlW6FJQTRUDJk-wAAAIM"]
[Thu Sep 03 13:24:05.291890 2026] [:error] [pid 12048:tid 139687922439936] [client 35.228.147.80:38746] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/nuxt/.env"] [unique_id "apm7RQ4OlW6FJQTRUDJk_QAAAJE"]
[Thu Sep 03 13:24:05.487391 2026] [:error] [pid 3997:tid 139687922439936] [client 35.228.147.80:38750] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/nest/.env"] [unique_id "apm7RZ9yWFkg7dsQCKfCJwAAAFE"]
[Thu Sep 03 13:24:05.679944 2026] [:error] [pid 12114:tid 139687964403456] [client 35.228.147.80:38758] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/react/.env"] [unique_id "apm7RZzNLpyfcXWHKY2oAAAAAMw"]
[Thu Sep 03 13:24:05.890441 2026] [:error] [pid 12236:tid 139688006366976] [client 35.228.147.80:38774] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/vue/.env"] [unique_id "apm7RWjy9G-AbSAMkRqdOgAAAcc"]
[Thu Sep 03 13:24:06.087796 2026] [:error] [pid 12162:tid 139687989581568] [client 35.228.147.80:38780] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/angular/.env"] [unique_id "apm7Rj27L7S6Qv69fQz_awAAAYk"]
[Thu Sep 03 13:24:06.304499 2026] [:error] [pid 3941:tid 139688115545856] [client 35.228.147.80:38786] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/svelte/.env"] [unique_id "apm7RnxCjuXeoAxhvcTc-QAAAQI"]
[Thu Sep 03 13:24:06.506005 2026] [:error] [pid 12236:tid 139687947618048] [client 35.228.147.80:38790] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/vite/.env"] [unique_id "apm7Rmjy9G-AbSAMkRqdPAAAAc4"]
[Thu Sep 03 13:24:06.714377 2026] [:error] [pid 3942:tid 139687939225344] [client 35.228.147.80:38800] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/backup/.env"] [unique_id "apm7Rlc-FajNlOSdCoJ7awAAAU8"]
[Thu Sep 03 13:24:06.913523 2026] [:error] [pid 12236:tid 139687997974272] [client 35.228.147.80:38806] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/backups/.env"] [unique_id "apm7Rmjy9G-AbSAMkRqdPQAAAcg"]
[Thu Sep 03 13:24:07.119273 2026] [:error] [pid 12162:tid 139688039937792] [client 35.228.147.80:38820] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/old/.env"] [unique_id "apm7Rz27L7S6Qv69fQz_bgAAAYM"]
[Thu Sep 03 13:24:07.313373 2026] [:error] [pid 12162:tid 139687956010752] [client 35.228.147.80:38834] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/tmp/.env"] [unique_id "apm7Rz27L7S6Qv69fQz_bwAAAY0"]
[Thu Sep 03 13:24:07.535815 2026] [:error] [pid 3912:tid 139687989581568] [client 35.228.147.80:38842] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/temp/.env"] [unique_id "apm7R11PpWlCN_Ixi4Y1jwAAAAk"]
[Thu Sep 03 13:24:07.743973 2026] [:error] [pid 12162:tid 139687922439936] [client 35.228.147.80:38846] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/lab/.env"] [unique_id "apm7Rz27L7S6Qv69fQz_cAAAAZE"]
[Thu Sep 03 13:24:07.933199 2026] [:error] [pid 12162:tid 139688031545088] [client 35.228.147.80:38848] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/cronlab/.env"] [unique_id "apm7Rz27L7S6Qv69fQz_cQAAAYQ"]
[Thu Sep 03 13:24:08.159795 2026] [:error] [pid 12048:tid 139687947618048] [client 35.228.147.80:38858] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/cron/.env"] [unique_id "apm7SA4OlW6FJQTRUDJlAAAAAI4"]
[Thu Sep 03 13:24:08.344849 2026] [:error] [pid 12048:tid 139687888869120] [client 35.228.147.80:38860] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/en/.env"] [unique_id "apm7SA4OlW6FJQTRUDJlAQAAAJU"]
[Thu Sep 03 13:24:08.563541 2026] [:error] [pid 3912:tid 139687972796160] [client 35.228.147.80:38868] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/administrator/.env"] [unique_id "apm7SF1PpWlCN_Ixi4Y1kAAAAAs"]
[Thu Sep 03 13:24:08.754119 2026] [:error] [pid 12048:tid 139687956010752] [client 35.228.147.80:38876] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/psnlink/.env"] [unique_id "apm7SA4OlW6FJQTRUDJlAgAAAI0"]
[Thu Sep 03 13:24:08.950702 2026] [:error] [pid 12048:tid 139687997974272] [client 35.228.147.80:38880] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/exapi/.env"] [unique_id "apm7SA4OlW6FJQTRUDJlAwAAAIg"]
[Thu Sep 03 13:24:09.139062 2026] [:error] [pid 12048:tid 139687981188864] [client 35.228.147.80:38886] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/sitemaps/.env"] [unique_id "apm7SQ4OlW6FJQTRUDJlBAAAAIo"]
[Thu Sep 03 13:24:09.331026 2026] [:error] [pid 12236:tid 139687905654528] [client 35.228.147.80:38902] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/.env.backup1"] [unique_id "apm7SWjy9G-AbSAMkRqdQAAAAdM"]
[Thu Sep 03 13:24:09.514118 2026] [:error] [pid 3912:tid 139687888869120] [client 35.228.147.80:38910] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/.env.backup2"] [unique_id "apm7SV1PpWlCN_Ixi4Y1kQAAABU"]
[Thu Sep 03 13:24:09.712844 2026] [:error] [pid 12236:tid 139687939225344] [client 35.228.147.80:38920] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/logs/.env"] [unique_id "apm7SWjy9G-AbSAMkRqdQQAAAc8"]
[Thu Sep 03 13:24:09.895834 2026] [:error] [pid 12162:tid 139688006366976] [client 35.228.147.80:38922] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/cache/.env"] [unique_id "apm7ST27L7S6Qv69fQz_cgAAAYc"]
[Thu Sep 03 13:24:10.086309 2026] [:error] [pid 12048:tid 139687930832640] [client 35.228.147.80:38930] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/mailer/.env"] [unique_id "apm7Sg4OlW6FJQTRUDJlBQAAAJA"]
[Thu Sep 03 13:24:10.295344 2026] [:error] [pid 3997:tid 139687880476416] [client 35.228.147.80:38938] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/mail/.env"] [unique_id "apm7Sp9yWFkg7dsQCKfCKwAAAFY"]
[Thu Sep 03 13:24:10.493834 2026] [:error] [pid 12114:tid 139688132331264] [client 35.228.147.80:38946] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/email/.env"] [unique_id "apm7SpzNLpyfcXWHKY2oAgAAAMA"]
[Thu Sep 03 13:24:10.692152 2026] [:error] [pid 12048:tid 139688039937792] [client 35.228.147.80:38958] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/smtp/.env"] [unique_id "apm7Sg4OlW6FJQTRUDJlBwAAAIM"]
[Thu Sep 03 13:24:10.909169 2026] [:error] [pid 3942:tid 139688132331264] [client 35.228.147.80:38970] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/mailing/.env"] [unique_id "apm7Slc-FajNlOSdCoJ7bAAAAUA"]
[Thu Sep 03 13:24:11.108011 2026] [:error] [pid 3942:tid 139687888869120] [client 35.228.147.80:38986] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/notifications/.env"] [unique_id "apm7S1c-FajNlOSdCoJ7bQAAAVU"]
[Thu Sep 03 13:24:11.325779 2026] [:error] [pid 12114:tid 139687880476416] [client 35.228.147.80:38988] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/notify/.env"] [unique_id "apm7S5zNLpyfcXWHKY2oAwAAANY"]
[Thu Sep 03 13:24:11.535944 2026] [:error] [pid 3942:tid 139687922439936] [client 35.228.147.80:39000] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/sender/.env"] [unique_id "apm7S1c-FajNlOSdCoJ7bgAAAVE"]
[Thu Sep 03 13:24:11.730664 2026] [:error] [pid 12048:tid 139687922439936] [client 35.228.147.80:39002] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/campaign/.env"] [unique_id "apm7Sw4OlW6FJQTRUDJlCQAAAJE"]
[Thu Sep 03 13:24:11.917473 2026] [:error] [pid 12048:tid 139688115545856] [client 35.228.147.80:39004] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/newsletter/.env"] [unique_id "apm7Sw4OlW6FJQTRUDJlCgAAAII"]
[Thu Sep 03 13:24:12.140330 2026] [:error] [pid 12048:tid 139688023152384] [client 35.228.147.80:39012] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/ses/.env"] [unique_id "apm7TA4OlW6FJQTRUDJlCwAAAIU"]
[Thu Sep 03 13:24:12.327143 2026] [:error] [pid 3997:tid 139687914047232] [client 35.228.147.80:39020] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/sendgrid/.env"] [unique_id "apm7TJ9yWFkg7dsQCKfCLAAAAFI"]
[Thu Sep 03 13:24:12.526463 2026] [:error] [pid 12236:tid 139687888869120] [client 35.228.147.80:39032] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/sparkpost/.env"] [unique_id "apm7TGjy9G-AbSAMkRqdQwAAAdU"]
[Thu Sep 03 13:24:12.736247 2026] [:error] [pid 12048:tid 139687964403456] [client 35.228.147.80:34100] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/postmark/.env"] [unique_id "apm7TA4OlW6FJQTRUDJlDQAAAIw"]
[Thu Sep 03 13:24:12.936707 2026] [:error] [pid 12048:tid 139687939225344] [client 35.228.147.80:34108] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/mailgun/.env"] [unique_id "apm7TA4OlW6FJQTRUDJlDgAAAI8"]
[Thu Sep 03 13:24:13.165618 2026] [:error] [pid 12236:tid 139688006366976] [client 35.228.147.80:34110] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/mandrill/.env"] [unique_id "apm7TWjy9G-AbSAMkRqdRAAAAcc"]
[Thu Sep 03 13:24:13.370027 2026] [:error] [pid 12162:tid 139687905654528] [client 35.228.147.80:34122] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/mailjet/.env"] [unique_id "apm7TT27L7S6Qv69fQz_cwAAAZM"]
[Thu Sep 03 13:24:13.586602 2026] [:error] [pid 12162:tid 139688014759680] [client 35.228.147.80:34134] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/brevo/.env"] [unique_id "apm7TT27L7S6Qv69fQz_dAAAAYY"]
[Thu Sep 03 13:24:13.806303 2026] [:error] [pid 12048:tid 139687981188864] [client 35.228.147.80:34142] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/transactional/.env"] [unique_id "apm7TQ4OlW6FJQTRUDJlEAAAAIo"]
[Thu Sep 03 13:24:14.010728 2026] [:error] [pid 12048:tid 139687930832640] [client 35.228.147.80:34154] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/bulk/.env"] [unique_id "apm7Tg4OlW6FJQTRUDJlEQAAAJA"]
[Thu Sep 03 13:24:14.227602 2026] [:error] [pid 12162:tid 139687964403456] [client 35.228.147.80:34168] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/aws/.env"] [unique_id "apm7Tj27L7S6Qv69fQz_dQAAAYw"]
[Thu Sep 03 13:24:14.456947 2026] [:error] [pid 12114:tid 139687930832640] [client 35.228.147.80:34182] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/azure/.env"] [unique_id "apm7TpzNLpyfcXWHKY2oBAAAANA"]
[Thu Sep 03 13:24:14.690941 2026] [:error] [pid 12048:tid 139688039937792] [client 35.228.147.80:34186] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/gcp/.env"] [unique_id "apm7Tg4OlW6FJQTRUDJlEgAAAIM"]
[Thu Sep 03 13:24:14.918235 2026] [:error] [pid 12048:tid 139687897261824] [client 35.228.147.80:34198] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/cloud/.env"] [unique_id "apm7Tg4OlW6FJQTRUDJlEwAAAJQ"]
[Thu Sep 03 13:24:15.124892 2026] [:error] [pid 3942:tid 139687897261824] [client 35.228.147.80:34204] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/infrastructure/.env"] [unique_id "apm7T1c-FajNlOSdCoJ7bwAAAVQ"]
[Thu Sep 03 13:24:15.360133 2026] [:error] [pid 12236:tid 139687947618048] [client 35.228.147.80:34214] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/docker/.env"] [unique_id "apm7T2jy9G-AbSAMkRqdRQAAAc4"]
[Thu Sep 03 13:24:15.574897 2026] [:error] [pid 12162:tid 139687863691008] [client 35.228.147.80:34220] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/k8s/.env"] [unique_id "apm7Tz27L7S6Qv69fQz_dwAAAZg"]
[Thu Sep 03 13:24:15.781037 2026] [:error] [pid 12236:tid 139688014759680] [client 35.228.147.80:34236] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/kubernetes/.env"] [unique_id "apm7T2jy9G-AbSAMkRqdRgAAAcY"]
[Thu Sep 03 13:24:16.006889 2026] [:error] [pid 12236:tid 139687997974272] [client 35.228.147.80:34244] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/terraform/.env"] [unique_id "apm7UGjy9G-AbSAMkRqdRwAAAcg"]
[Thu Sep 03 13:24:16.225009 2026] [:error] [pid 12048:tid 139688031545088] [client 35.228.147.80:34254] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/ansible/.env"] [unique_id "apm7UA4OlW6FJQTRUDJlFQAAAIQ"]
[Thu Sep 03 13:24:16.422736 2026] [:error] [pid 3997:tid 139688031545088] [client 35.228.147.80:34256] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/.git/.env"] [unique_id "apm7UJ9yWFkg7dsQCKfCLQAAAEQ"]
[Thu Sep 03 13:24:16.625314 2026] [:error] [pid 12162:tid 139687880476416] [client 35.228.147.80:34268] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/ci/.env"] [unique_id "apm7UD27L7S6Qv69fQz_eAAAAZY"]
[Thu Sep 03 13:24:16.835567 2026] [:error] [pid 12236:tid 139688023152384] [client 35.228.147.80:34280] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/cd/.env"] [unique_id "apm7UGjy9G-AbSAMkRqdSQAAAcU"]
[Thu Sep 03 13:24:17.025677 2026] [:error] [pid 12048:tid 139687914047232] [client 35.228.147.80:34292] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/jenkins/.env"] [unique_id "apm7UQ4OlW6FJQTRUDJlFgAAAJI"]
[Thu Sep 03 13:24:17.225286 2026] [:error] [pid 12162:tid 139687888869120] [client 35.228.147.80:34302] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/gitlab/.env"] [unique_id "apm7UT27L7S6Qv69fQz_eQAAAZU"]
[Thu Sep 03 13:24:17.424156 2026] [:error] [pid 12162:tid 139687997974272] [client 35.228.147.80:34304] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/github/.env"] [unique_id "apm7UT27L7S6Qv69fQz_egAAAYg"]
[Thu Sep 03 13:24:17.668061 2026] [:error] [pid 12048:tid 139687880476416] [client 35.228.147.80:34308] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/actions/.env"] [unique_id "apm7UQ4OlW6FJQTRUDJlGAAAAJY"]
[Thu Sep 03 13:24:17.896659 2026] [:error] [pid 3942:tid 139687872083712] [client 35.228.147.80:34324] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/circleci/.env"] [unique_id "apm7UVc-FajNlOSdCoJ7cAAAAVc"]
[Thu Sep 03 13:24:18.104958 2026] [:error] [pid 3942:tid 139687863691008] [client 35.228.147.80:34338] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/travis/.env"] [unique_id "apm7Ulc-FajNlOSdCoJ7cQAAAVg"]
[Thu Sep 03 13:24:18.322639 2026] [:error] [pid 12162:tid 139688023152384] [client 35.228.147.80:34346] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/buildkite/.env"] [unique_id "apm7Uj27L7S6Qv69fQz_ewAAAYU"]
[Thu Sep 03 13:24:18.529468 2026] [:error] [pid 12162:tid 139687939225344] [client 35.228.147.80:34360] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/mysql/.env"] [unique_id "apm7Uj27L7S6Qv69fQz_fAAAAY8"]
[Thu Sep 03 13:24:18.732791 2026] [:error] [pid 12162:tid 139688031545088] [client 35.228.147.80:34372] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/postgres/.env"] [unique_id "apm7Uj27L7S6Qv69fQz_fgAAAYQ"]
[Thu Sep 03 13:24:18.946511 2026] [:error] [pid 12162:tid 139688006366976] [client 35.228.147.80:34386] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/mongodb/.env"] [unique_id "apm7Uj27L7S6Qv69fQz_fwAAAYc"]
[Thu Sep 03 13:24:19.152914 2026] [:error] [pid 12236:tid 139687905654528] [client 35.228.147.80:34400] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/redis/.env"] [unique_id "apm7U2jy9G-AbSAMkRqdSgAAAdM"]
[Thu Sep 03 13:24:19.362861 2026] [:error] [pid 12048:tid 139687964403456] [client 35.228.147.80:34414] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/elasticsearch/.env"] [unique_id "apm7Uw4OlW6FJQTRUDJlGgAAAIw"]
[Thu Sep 03 13:24:19.603541 2026] [:error] [pid 12162:tid 139687905654528] [client 35.228.147.80:34428] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/rabbitmq/.env"] [unique_id "apm7Uz27L7S6Qv69fQz_gAAAAZM"]
[Thu Sep 03 13:24:19.811934 2026] [:error] [pid 12162:tid 139688014759680] [client 35.228.147.80:34430] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/kafka/.env"] [unique_id "apm7Uz27L7S6Qv69fQz_gQAAAYY"]
[Thu Sep 03 13:24:20.014680 2026] [:error] [pid 12048:tid 139687956010752] [client 35.228.147.80:34440] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/queue/.env"] [unique_id "apm7VA4OlW6FJQTRUDJlGwAAAI0"]
[Thu Sep 03 13:24:20.246818 2026] [:error] [pid 3997:tid 139687981188864] [client 35.228.147.80:34442] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/worker/.env"] [unique_id "apm7VJ9yWFkg7dsQCKfCLgAAAEo"]
[Thu Sep 03 13:24:20.466705 2026] [:error] [pid 12162:tid 139688123938560] [client 35.228.147.80:34446] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/job/.env"] [unique_id "apm7VD27L7S6Qv69fQz_ggAAAYE"]
[Thu Sep 03 13:24:20.680728 2026] [:error] [pid 3942:tid 139687905654528] [client 35.228.147.80:34458] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/test/.env"] [unique_id "apm7VFc-FajNlOSdCoJ7cwAAAVM"]
[Thu Sep 03 13:24:20.910463 2026] [:error] [pid 12114:tid 139687863691008] [client 35.228.147.80:34462] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/qa/.env"] [unique_id "apm7VJzNLpyfcXWHKY2oBQAAANg"]
[Thu Sep 03 13:24:21.109820 2026] [:error] [pid 3997:tid 139687989581568] [client 35.228.147.80:34468] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/preview/.env"] [unique_id "apm7VZ9yWFkg7dsQCKfCLwAAAEk"]
[Thu Sep 03 13:24:21.313585 2026] [:error] [pid 12236:tid 139687939225344] [client 35.228.147.80:34476] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/beta/.env"] [unique_id "apm7VWjy9G-AbSAMkRqdTAAAAc8"]
[Thu Sep 03 13:24:21.524147 2026] [:error] [pid 12236:tid 139688115545856] [client 35.228.147.80:34488] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/uat/.env"] [unique_id "apm7VWjy9G-AbSAMkRqdTQAAAcI"]
[Thu Sep 03 13:24:21.762745 2026] [:error] [pid 3942:tid 139687930832640] [client 35.228.147.80:34492] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/stage/.env"] [unique_id "apm7VVc-FajNlOSdCoJ7dQAAAVA"]
[Thu Sep 03 13:24:21.991594 2026] [:error] [pid 3942:tid 139688023152384] [client 35.228.147.80:34506] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/development/.env"] [unique_id "apm7VVc-FajNlOSdCoJ7dgAAAUU"]
[Thu Sep 03 13:24:22.231845 2026] [:error] [pid 3912:tid 139687905654528] [client 35.228.147.80:34516] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/production/.env"] [unique_id "apm7Vl1PpWlCN_Ixi4Y1lAAAABM"]
[Thu Sep 03 13:24:22.434272 2026] [:error] [pid 12048:tid 139687872083712] [client 35.228.147.80:34522] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.menabern.com"] [uri "/config/app/.env"] [unique_id "apm7Vg4OlW6FJQTRUDJlHAAAAJc"]
[Thu Sep 03 13:24:22.670397 2026] [proxy_fcgi:error] [pid 12236:tid 139687863691008] [client 35.228.147.80:44346] AH01071: Got error 'Primary script unknown'
[Thu Sep 03 13:24:22.890992 2026] [proxy_fcgi:error] [pid 3942:tid 139688006366976] [client 35.228.147.80:44354] AH01071: Got error 'Primary script unknown'
[Thu Sep 03 13:24:23.129787 2026] [proxy_fcgi:error] [pid 12114:tid 139687956010752] [client 35.228.147.80:44356] AH01071: Got error 'Primary script unknown'
[Thu Sep 03 13:24:23.362334 2026] [proxy_fcgi:error] [pid 3912:tid 139687997974272] [client 35.228.147.80:44366] AH01071: Got error 'Primary script unknown'
[Thu Sep 03 13:24:23.592118 2026] [proxy_fcgi:error] [pid 12162:tid 139687863691008] [client 35.228.147.80:44380] AH01071: Got error 'Primary script unknown'
[Thu Sep 03 13:24:23.834230 2026] [proxy_fcgi:error] [pid 3997:tid 139687964403456] [client 35.228.147.80:44392] AH01071: Got error 'Primary script unknown'
[Thu Sep 03 13:24:24.082889 2026] [proxy_fcgi:error] [pid 3912:tid 139688031545088] [client 35.228.147.80:44402] AH01071: Got error 'Primary script unknown'
[Thu Sep 03 13:24:24.544488 2026] [proxy_fcgi:error] [pid 3912:tid 139688123938560] [client 35.228.147.80:44414] AH01071: Got error 'Primary script unknown'
[Thu Sep 03 13:24:24.755281 2026] [proxy_fcgi:error] [pid 12236:tid 139687956010752] [client 35.228.147.80:44418] AH01071: Got error 'Primary script unknown'
[Thu Sep 03 13:24:26.601966 2026] [proxy_fcgi:error] [pid 3997:tid 139687930832640] [client 35.228.147.80:44500] AH01071: Got error 'Primary script unknown'
[Thu Sep 03 13:24:26.837837 2026] [proxy_fcgi:error] [pid 12048:tid 139687989581568] [client 35.228.147.80:44514] AH01071: Got error 'Primary script unknown'
[Thu Sep 03 13:24:27.051618 2026] [proxy_fcgi:error] [pid 12162:tid 139688006366976] [client 35.228.147.80:44518] AH01071: Got error 'Primary script unknown'
[Thu Sep 03 13:24:27.306062 2026] [proxy_fcgi:error] [pid 12114:tid 139687964403456] [client 35.228.147.80:44522] AH01071: Got error 'Primary script unknown'
[Thu Sep 03 13:24:27.561403 2026] [proxy_fcgi:error] [pid 12114:tid 139687972796160] [client 35.228.147.80:44528] AH01071: Got error 'Primary script unknown'
[Thu Sep 03 13:24:27.803025 2026] [proxy_fcgi:error] [pid 12114:tid 139688132331264] [client 35.228.147.80:44532] AH01071: Got error 'Primary script unknown'
[Thu Sep 03 13:24:28.501738 2026] [:error] [pid 12114:tid 139687930832640] [client 35.228.147.80:44564] [client 35.228.147.80] ModSecurity: Warning. Operator GT matched 25 at IP:scan_404_count. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "11"] [id "9000204"] [msg "Scanner detected - blocking IP 1h"] [tag "scanner-detect"] [hostname "www.menabern.com"] [uri "/webroot/index.php/_environment"] [unique_id "apm7XJzNLpyfcXWHKY2oDwAAANA"]
[Thu Sep 03 13:24:28.728605 2026] [:error] [pid 3941:tid 139687997974272] [client 35.228.147.80:44574] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/mail/phpinfo.php"] [unique_id "apm7XHxCjuXeoAxhvcTc_gAAAQg"]
[Thu Sep 03 13:24:28.955106 2026] [:error] [pid 12048:tid 139687880476416] [client 35.228.147.80:44582] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/cpanel/phpinfo.php"] [unique_id "apm7XA4OlW6FJQTRUDJlIwAAAJY"]
[Thu Sep 03 13:24:29.237171 2026] [:error] [pid 3997:tid 139687880476416] [client 35.228.147.80:44594] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/hosting/phpinfo.php"] [unique_id "apm7XZ9yWFkg7dsQCKfCNgAAAFY"]
[Thu Sep 03 13:24:29.457350 2026] [:error] [pid 12236:tid 139687922439936] [client 35.228.147.80:44600] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/webmail/phpinfo.php"] [unique_id "apm7XWjy9G-AbSAMkRqdVgAAAdE"]
[Thu Sep 03 13:24:29.703826 2026] [:error] [pid 3941:tid 139688123938560] [client 35.228.147.80:44606] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/smtp/phpinfo.php"] [unique_id "apm7XXxCjuXeoAxhvcTc_wAAAQE"]
[Thu Sep 03 13:24:29.935743 2026] [:error] [pid 3941:tid 139687956010752] [client 35.228.147.80:44612] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/phpinfo.php.bak"] [unique_id "apm7XXxCjuXeoAxhvcTdAAAAAQ0"]
[Thu Sep 03 13:24:30.191676 2026] [:error] [pid 12048:tid 139687972796160] [client 35.228.147.80:44618] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/phpinfo.php.old"] [unique_id "apm7Xg4OlW6FJQTRUDJlJgAAAIs"]
[Thu Sep 03 13:24:30.411436 2026] [:error] [pid 12162:tid 139688014759680] [client 35.228.147.80:44634] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/phpinfo.php~"] [unique_id "apm7Xj27L7S6Qv69fQz_jQAAAYY"]
[Thu Sep 03 13:24:30.676670 2026] [:error] [pid 3997:tid 139687947618048] [client 35.228.147.80:44644] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/info.php.bak"] [unique_id "apm7Xp9yWFkg7dsQCKfCNwAAAE4"]
[Thu Sep 03 13:24:30.927103 2026] [:error] [pid 3941:tid 139688132331264] [client 35.228.147.80:44646] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/phpinfo.php.save"] [unique_id "apm7XnxCjuXeoAxhvcTdAgAAAQA"]
[Thu Sep 03 13:24:31.163462 2026] [:error] [pid 12236:tid 139688123938560] [client 35.228.147.80:44658] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/staging/phpinfo.php"] [unique_id "apm7X2jy9G-AbSAMkRqdVwAAAcE"]
[Thu Sep 03 13:24:31.440909 2026] [:error] [pid 3941:tid 139687947618048] [client 35.228.147.80:44660] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/beta/phpinfo.php"] [unique_id "apm7X3xCjuXeoAxhvcTdAwAAAQ4"]
[Thu Sep 03 13:24:31.680251 2026] [:error] [pid 3941:tid 139687914047232] [client 35.228.147.80:44670] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/uat/phpinfo.php"] [unique_id "apm7X3xCjuXeoAxhvcTdBQAAARI"]
[Thu Sep 03 13:24:31.901735 2026] [:error] [pid 12236:tid 139688115545856] [client 35.228.147.80:44684] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/qa/phpinfo.php"] [unique_id "apm7X2jy9G-AbSAMkRqdWAAAAcI"]
[Thu Sep 03 13:24:32.161292 2026] [:error] [pid 12048:tid 139687872083712] [client 35.228.147.80:44690] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/preview/phpinfo.php"] [unique_id "apm7YA4OlW6FJQTRUDJlJwAAAJc"]
[Thu Sep 03 13:24:32.426349 2026] [:error] [pid 3941:tid 139688115545856] [client 35.228.147.80:44696] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/www/phpinfo.php"] [unique_id "apm7YHxCjuXeoAxhvcTdBgAAAQI"]
[Thu Sep 03 13:24:32.674915 2026] [:error] [pid 12114:tid 139688023152384] [client 35.228.147.80:42348] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/htdocs/phpinfo.php"] [unique_id "apm7YJzNLpyfcXWHKY2oEAAAAMU"]
[Thu Sep 03 13:24:32.900431 2026] [:error] [pid 3997:tid 139687888869120] [client 35.228.147.80:42354] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/public_html/phpinfo.php"] [unique_id "apm7YJ9yWFkg7dsQCKfCOAAAAFU"]
[Thu Sep 03 13:24:33.148601 2026] [:error] [pid 3997:tid 139687972796160] [client 35.228.147.80:42366] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/site/phpinfo.php"] [unique_id "apm7YZ9yWFkg7dsQCKfCOQAAAEs"]
[Thu Sep 03 13:24:33.412450 2026] [:error] [pid 3941:tid 139687922439936] [client 35.228.147.80:42376] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/docs/phpinfo.php"] [unique_id "apm7YXxCjuXeoAxhvcTdBwAAARE"]
[Thu Sep 03 13:24:33.646484 2026] [:error] [pid 3941:tid 139687981188864] [client 35.228.147.80:42378] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/wp-admin/phpinfo.php"] [unique_id "apm7YXxCjuXeoAxhvcTdCAAAAQo"]
[Thu Sep 03 13:24:33.933195 2026] [:error] [pid 3942:tid 139687897261824] [client 35.228.147.80:42382] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/administrator/phpinfo.php"] [unique_id "apm7YVc-FajNlOSdCoJ7fAAAAVQ"]
[Thu Sep 03 13:24:34.196409 2026] [:error] [pid 12162:tid 139687863691008] [client 35.228.147.80:42390] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/core/phpinfo.php"] [unique_id "apm7Yj27L7S6Qv69fQz_kAAAAZg"]
[Thu Sep 03 13:24:34.495948 2026] [:error] [pid 3941:tid 139687880476416] [client 35.228.147.80:42396] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/includes/phpinfo.php"] [unique_id "apm7YnxCjuXeoAxhvcTdCQAAARY"]
[Thu Sep 03 13:24:34.725488 2026] [:error] [pid 3941:tid 139687989581568] [client 35.228.147.80:42410] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/service-account.json"] [unique_id "apm7YnxCjuXeoAxhvcTdCgAAAQk"]
[Thu Sep 03 13:24:34.984396 2026] [:error] [pid 3997:tid 139688115545856] [client 35.228.147.80:42426] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/sa.json"] [unique_id "apm7Yp9yWFkg7dsQCKfCOgAAAEI"]
[Thu Sep 03 13:24:35.244414 2026] [:error] [pid 12236:tid 139688006366976] [client 35.228.147.80:42440] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/gcp-key.json"] [unique_id "apm7Y2jy9G-AbSAMkRqdWwAAAcc"]
[Thu Sep 03 13:24:35.476875 2026] [:error] [pid 3997:tid 139688123938560] [client 35.228.147.80:42456] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/gcp-credentials.json"] [unique_id "apm7Y59yWFkg7dsQCKfCOwAAAEE"]
[Thu Sep 03 13:24:35.741241 2026] [:error] [pid 3941:tid 139688039937792] [client 35.228.147.80:42472] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/gcp-sa.json"] [unique_id "apm7Y3xCjuXeoAxhvcTdDAAAAQM"]
[Thu Sep 03 13:24:35.954089 2026] [:error] [pid 12048:tid 139688006366976] [client 35.228.147.80:42482] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/credentials.json"] [unique_id "apm7Yw4OlW6FJQTRUDJlKgAAAIc"]
[Thu Sep 03 13:24:36.197122 2026] [:error] [pid 12236:tid 139687947618048] [client 35.228.147.80:42496] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/google-credentials.json"] [unique_id "apm7ZGjy9G-AbSAMkRqdXAAAAc4"]
[Thu Sep 03 13:24:36.462816 2026] [:error] [pid 12048:tid 139688115545856] [client 35.228.147.80:42512] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/google-key.json"] [unique_id "apm7ZA4OlW6FJQTRUDJlLAAAAII"]
[Thu Sep 03 13:24:36.717062 2026] [:error] [pid 3997:tid 139687956010752] [client 35.228.147.80:42518] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/.config/gcloud/application_default_credentials.json"] [unique_id "apm7ZJ9yWFkg7dsQCKfCPAAAAE0"]
[Thu Sep 03 13:24:36.990256 2026] [:error] [pid 12048:tid 139687956010752] [client 35.228.147.80:42530] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/application_default_credentials.json"] [unique_id "apm7ZA4OlW6FJQTRUDJlLgAAAI0"]
[Thu Sep 03 13:24:37.237084 2026] [:error] [pid 3941:tid 139687872083712] [client 35.228.147.80:42532] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/key.json"] [unique_id "apm7ZXxCjuXeoAxhvcTdDQAAARc"]
[Thu Sep 03 13:24:37.545277 2026] [:error] [pid 12048:tid 139688023152384] [client 35.228.147.80:42534] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/keyfile.json"] [unique_id "apm7ZQ4OlW6FJQTRUDJlMAAAAIU"]
[Thu Sep 03 13:24:37.801813 2026] [:error] [pid 3912:tid 139687989581568] [client 35.228.147.80:42538] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/firebase-adminsdk.json"] [unique_id "apm7ZV1PpWlCN_Ixi4Y1nAAAAAk"]
[Thu Sep 03 13:24:38.067375 2026] [:error] [pid 12236:tid 139688014759680] [client 35.228.147.80:42546] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/firebase-key.json"] [unique_id "apm7Zmjy9G-AbSAMkRqdXQAAAcY"]
[Thu Sep 03 13:24:38.314919 2026] [:error] [pid 3997:tid 139687922439936] [client 35.228.147.80:42554] [client 35.228.147.80] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "www.menabern.com"] [uri "/"] [unique_id "apm7Zp9yWFkg7dsQCKfCPgAAAFE"]
[Thu Sep 03 14:19:22.003711 2026] [:error] [pid 12236:tid 139687947618048] [client 43.140.247.223:34072] [client 43.140.247.223] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.menabern.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.menabern.com"] [uri "/"] [unique_id "apnIOWjy9G-AbSAMkRqxFAAAAc4"]
[Thu Sep 03 14:41:29.908317 2026] [:error] [pid 3997:tid 139687939225344] [client 43.157.170.13:57516] [client 43.157.170.13] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||menabern.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "menabern.com"] [uri "/"] [unique_id "apnNaZ9yWFkg7dsQCKfNzgAAAE8"]
[Thu Sep 03 16:18:01.878220 2026] [:error] [pid 7808:tid 139688115545856] [client 129.226.193.111:32780] [client 129.226.193.111] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.menabern.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.menabern.com"] [uri "/"] [unique_id "apnkCXrMkrRk6piprJqVBAAAAAI"]
[Thu Sep 03 19:35:03.761810 2026] [:error] [pid 4967:tid 139687947618048] [client 129.28.84.30:60470] [client 129.28.84.30] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||menabern.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "menabern.com"] [uri "/"] [unique_id "apoSN1-qnRXNtxh9kJgFpwAAAc4"]
[Thu Sep 03 20:01:30.894140 2026] [:error] [pid 4933:tid 139687880476416] [client 43.166.226.57:49558] [client 43.166.226.57] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||menabern.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "menabern.com"] [uri "/"] [unique_id "apoYap_YbFru5GFbGUqHzQAAAZY"]
[Thu Sep 03 20:14:40.500907 2026] [:error] [pid 7809:tid 139687872083712] [client 94.154.43.135:19008] [client 94.154.43.135] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env"] [unique_id "apobgBv-7EUWfIIbwpSuyQAAARc"]
[Thu Sep 03 21:02:37.298594 2026] [:error] [pid 7809:tid 139687930832640] [client 170.106.161.78:54394] [client 170.106.161.78] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.menabern.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.menabern.com"] [uri "/"] [unique_id "apomvRv-7EUWfIIbwpS39QAAARA"]
[Thu Sep 03 21:11:17.163043 2026] [authz_core:error] [pid 4967:tid 139687964403456] [client 196.96.82.194:1529] AH01630: client denied by server configuration: /home/menabern/public_html/xmlrpc.php
[Thu Sep 03 22:19:27.024695 2026] [proxy_fcgi:error] [pid 4967:tid 139687964403456] [client 104.207.41.173:37263] AH01071: Got error 'Primary script unknown'
[Thu Sep 03 22:41:53.927998 2026] [:error] [pid 7810:tid 139688014759680] [client 45.148.10.95:56882] [client 45.148.10.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.git/config"] [unique_id "apo-Aa3uUwtypbuudFmAzQAAAUY"]
[Thu Sep 03 23:02:07.747743 2026] [proxy_fcgi:error] [pid 4933:tid 139687897261824] [client 193.47.62.167:53530] AH01071: Got error 'Primary script unknown'
[Thu Sep 03 23:33:14.206107 2026] [proxy_fcgi:error] [pid 7808:tid 139688115545856] [client 45.148.10.9:38040] AH01071: Got error 'Primary script unknown'
[Thu Sep 03 23:33:15.331240 2026] [proxy_fcgi:error] [pid 4933:tid 139687897261824] [client 45.148.10.9:38026] AH01071: Got error 'Primary script unknown'
[Thu Sep 03 23:33:45.642471 2026] [:error] [pid 7808:tid 139687863691008] [client 45.148.10.9:40124] [client 45.148.10.9] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/index.php"] [unique_id "appKKXrMkrRk6piprJrKcAAAABg"], referer: https://menabern.com/wp-admin/
[Thu Sep 03 23:33:56.773894 2026] [proxy_fcgi:error] [pid 4933:tid 139687872083712] [client 45.148.10.9:35916] AH01071: Got error 'Primary script unknown'
[Thu Sep 03 23:38:29.197709 2026] [:error] [pid 4903:tid 139687989581568] [client 45.148.10.9:52246] [client 45.148.10.9] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp/index.php"] [unique_id "appLRZBBnIzc-NP9i1zOugAAAMk"], referer: https://menabern.com/wp/wp-admin/
[Thu Sep 03 23:38:35.939601 2026] [:error] [pid 4933:tid 139687956010752] [client 45.148.10.9:52250] [client 45.148.10.9] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp/index.php"] [unique_id "appLS5_YbFru5GFbGUrMxwAAAY0"], referer: https://menabern.com/wp/wp-admin/
[Thu Sep 03 23:38:39.872412 2026] [:error] [pid 4933:tid 139688132331264] [client 45.148.10.9:52258] [client 45.148.10.9] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp/"] [unique_id "appLT5_YbFru5GFbGUrMzwAAAYA"], referer: https://menabern.com/wp/wp-admin/
[Thu Sep 03 23:38:41.513326 2026] [:error] [pid 4933:tid 139687939225344] [client 45.148.10.9:9474] [client 45.148.10.9] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp/"] [unique_id "appLUZ_YbFru5GFbGUrM1AAAAY8"], referer: https://menabern.com/wp/wp-admin/
[Thu Sep 03 23:38:49.230177 2026] [:error] [pid 7810:tid 139687997974272] [client 45.148.10.9:13148] [client 45.148.10.9] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp/"] [unique_id "appLWa3uUwtypbuudFmErwAAAUg"], referer: https://menabern.com/wp/wp-admin/
[Thu Sep 03 23:38:54.310832 2026] [:error] [pid 4933:tid 139688123938560] [client 45.148.10.9:13162] [client 45.148.10.9] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp/wp-json/batch/v1"] [unique_id "appLXp_YbFru5GFbGUrM9QAAAYE"], referer: https://menabern.com/wp/wp-admin/
[Thu Sep 03 23:39:00.899754 2026] [:error] [pid 4933:tid 139687989581568] [client 45.148.10.9:50322] [client 45.148.10.9] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp/wp-json/Batch/v1"] [unique_id "appLZJ_YbFru5GFbGUrNBwAAAYk"], referer: https://menabern.com/wp/wp-admin/
[Thu Sep 03 23:39:05.389523 2026] [:error] [pid 7808:tid 139688023152384] [client 45.148.10.9:50342] [client 45.148.10.9] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp//wp-json/batch/v1"] [unique_id "appLaXrMkrRk6piprJrLIQAAAAU"], referer: https://menabern.com/wp/wp-admin/
[Thu Sep 03 23:39:07.343735 2026] [:error] [pid 4933:tid 139687947618048] [client 45.148.10.9:50354] [client 45.148.10.9] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp/wp-json/batch/v1/"] [unique_id "appLa5_YbFru5GFbGUrNFgAAAY4"], referer: https://menabern.com/wp/wp-admin/
[Thu Sep 03 23:39:12.673342 2026] [:error] [pid 4933:tid 139688115545856] [client 45.148.10.9:1950] [client 45.148.10.9] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp/blog/wp-json/batch/v1"] [unique_id "appLcJ_YbFru5GFbGUrNIgAAAYI"], referer: https://menabern.com/wp/wp-admin/
[Thu Sep 03 23:39:17.048840 2026] [:error] [pid 4933:tid 139688006366976] [client 45.148.10.9:1962] [client 45.148.10.9] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp/wordpress/wp-json/batch/v1"] [unique_id "appLdZ_YbFru5GFbGUrNLQAAAYc"], referer: https://menabern.com/wp/wp-admin/
[Fri Sep 04 00:15:47.287127 2026] [:error] [pid 4967:tid 139688132331264] [client 43.162.109.249:53898] [client 43.162.109.249] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||menabern.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "menabern.com"] [uri "/"] [unique_id "appUA1-qnRXNtxh9kJg3cAAAAcA"]
[Fri Sep 04 00:36:26.337185 2026] [:error] [pid 7808:tid 139688123938560] [client 45.148.10.95:53260] [client 45.148.10.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.git/config"] [unique_id "appY2nrMkrRk6piprJrQXgAAAAE"]
[Fri Sep 04 00:54:29.502978 2026] [:error] [pid 7808:tid 139687897261824] [client 129.28.84.30:51066] [client 129.28.84.30] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.menabern.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.menabern.com"] [uri "/"] [unique_id "appdFXrMkrRk6piprJrRjQAAABQ"]
[Fri Sep 04 01:01:22.991607 2026] [:error] [pid 8730:tid 139688123938560] [client 162.62.213.165:50786] [client 162.62.213.165] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.menabern.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.menabern.com"] [uri "/"] [unique_id "appeskI_1Hza4MNR51SO6QAAAIE"]
[Fri Sep 04 01:22:54.519213 2026] [:error] [pid 4933:tid 139687989581568] [client 130.12.180.117:12158] [client 130.12.180.117] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env"] [unique_id "appjvp_YbFru5GFbGUrrmQAAAYk"]
[Fri Sep 04 01:22:54.604912 2026] [:error] [pid 7899:tid 139687872083712] [client 130.12.180.117:12168] [client 130.12.180.117] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env.backup"] [unique_id "appjvu_1xzZCQNiU9VScEwAAAFc"]
[Fri Sep 04 01:22:54.766251 2026] [:error] [pid 4903:tid 139687880476416] [client 130.12.180.117:12170] [client 130.12.180.117] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env.save"] [unique_id "appjvpBBnIzc-NP9i1zWGAAAANY"]
[Fri Sep 04 01:22:54.893808 2026] [:error] [pid 4933:tid 139687914047232] [client 130.12.180.117:12186] [client 130.12.180.117] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env.prod"] [unique_id "appjvp_YbFru5GFbGUrrmgAAAZI"]
[Fri Sep 04 01:22:54.972145 2026] [:error] [pid 4933:tid 139688132331264] [client 130.12.180.117:12188] [client 130.12.180.117] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env.staging"] [unique_id "appjvp_YbFru5GFbGUrrmwAAAYA"]
[Fri Sep 04 01:22:55.117963 2026] [:error] [pid 8730:tid 139687956010752] [client 130.12.180.117:12200] [client 130.12.180.117] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env.live"] [unique_id "appjv0I_1Hza4MNR51SSWwAAAI0"]
[Fri Sep 04 01:22:55.198440 2026] [:error] [pid 7809:tid 139687897261824] [client 130.12.180.117:12206] [client 130.12.180.117] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env.stage"] [unique_id "appjvxv-7EUWfIIbwpTK6QAAARQ"]
[Fri Sep 04 01:22:55.428160 2026] [:error] [pid 7810:tid 139687888869120] [client 130.12.180.117:12222] [client 130.12.180.117] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/app/.env"] [unique_id "appjv63uUwtypbuudFmLsgAAAVU"]
[Fri Sep 04 01:22:55.621704 2026] [:error] [pid 7899:tid 139688006366976] [client 130.12.180.117:12224] [client 130.12.180.117] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/backend/.env"] [unique_id "appjv-_1xzZCQNiU9VScFAAAAEc"]
[Fri Sep 04 01:22:55.745250 2026] [:error] [pid 4933:tid 139687947618048] [client 130.12.180.117:12232] [client 130.12.180.117] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/application/.env"] [unique_id "appjv5_YbFru5GFbGUrrnQAAAY4"]
[Fri Sep 04 02:14:14.843658 2026] [proxy_fcgi:error] [pid 7809:tid 139687956010752] [client 45.148.10.60:56664] AH01071: Got error 'Primary script unknown'
[Fri Sep 04 02:14:16.418585 2026] [proxy_fcgi:error] [pid 7808:tid 139687981188864] [client 45.148.10.60:56670] AH01071: Got error 'Primary script unknown'
[Fri Sep 04 02:15:00.391984 2026] [:error] [pid 8730:tid 139688014759680] [client 45.148.10.60:4234] [client 45.148.10.60] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:\\\\b(?:c(?:d(?:\\\\b[^a-zA-Z0-9_]{0,}?[\\\\/]|[^a-zA-Z0-9_]{0,}?\\\\.\\\\.)|hmod.{0,40}?\\\\+.{0,3}x|md(?:\\\\b[^a-zA-Z0-9_]{0,}?\\\\/c|(?:\\\\.exe|32)\\\\b))|(?:echo\\\\b[^a-zA-Z0-9_]{0,}?\\\\by{1,}|n(?:et(?:\\\\b[^a-zA-Z0-9_]{1,}?\\\\blocalgroup|\\\\.exe)|(?:c|map)\\\\.exe)|t(? ..." at MATCHED_VAR. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "65"] [id "211210"] [rev "8"] [msg "COMODO WAF: System Command Injection||menabern.com|F|2"] [data "Matched Data: `id found within ARGS:0: {then:$1:__proto__:then status:resolved_model reason:-1 value:{then:$b1337} _response:{_prefix:var cp=process.mainmodule.require(child_process) var out try{out=cp.execsync(`id hostname pwd` {timeout:12000 maxbuffer:10485760 shell:/bin/sh}).tostring() }catch(e){out=((e.stdout&&e.stdout.tostring())||)+((e.stderr&&e.stderr.tostring())||)+n[exit +(e.status==null??:e.status)+] }throw object.assign(new error(next_redirect) {digest:next_redirect push/login?a=+encodeuricomp..."] [ [hostname "menabern.com"] [uri "/"] [unique_id "appv9EI_1Hza4MNR51SbMQAAAIY"]
[Fri Sep 04 02:15:07.298653 2026] [proxy_fcgi:error] [pid 4933:tid 139687930832640] [client 45.148.10.60:48150] AH01071: Got error 'Primary script unknown'
[Fri Sep 04 02:15:13.801365 2026] [:error] [pid 8730:tid 139688023152384] [client 45.148.10.60:10298] [client 45.148.10.60] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:\\\\b(?:c(?:d(?:\\\\b[^a-zA-Z0-9_]{0,}?[\\\\/]|[^a-zA-Z0-9_]{0,}?\\\\.\\\\.)|hmod.{0,40}?\\\\+.{0,3}x|md(?:\\\\b[^a-zA-Z0-9_]{0,}?\\\\/c|(?:\\\\.exe|32)\\\\b))|(?:echo\\\\b[^a-zA-Z0-9_]{0,}?\\\\by{1,}|n(?:et(?:\\\\b[^a-zA-Z0-9_]{1,}?\\\\blocalgroup|\\\\.exe)|(?:c|map)\\\\.exe)|t(? ..." at MATCHED_VAR. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "65"] [id "211210"] [rev "8"] [msg "COMODO WAF: System Command Injection||menabern.com|F|2"] [data "Matched Data: `id found within ARGS:0: {then:$1:__proto__:then status:resolved_model reason:-1 value:{then:$b1337} _response:{_prefix:var cp=process.mainmodule.require(child_process) var out try{out=cp.execsync(`id hostname pwd` {timeout:12000 maxbuffer:10485760 shell:/bin/sh}).tostring() }catch(e){out=((e.stdout&&e.stdout.tostring())||)+((e.stderr&&e.stderr.tostring())||)+n[exit +(e.status==null??:e.status)+] }throw object.assign(new error(next_redirect) {digest:next_redirect push/login?a=+encodeuricomp..."] [ [hostname "menabern.com"] [uri "/"] [unique_id "appwAUI_1Hza4MNR51SbPQAAAIU"]
[Fri Sep 04 02:16:33.876510 2026] [:error] [pid 7810:tid 139688039937792] [client 45.148.10.60:27908] [client 45.148.10.60] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:\\\\b(?:c(?:d(?:\\\\b[^a-zA-Z0-9_]{0,}?[\\\\/]|[^a-zA-Z0-9_]{0,}?\\\\.\\\\.)|hmod.{0,40}?\\\\+.{0,3}x|md(?:\\\\b[^a-zA-Z0-9_]{0,}?\\\\/c|(?:\\\\.exe|32)\\\\b))|(?:echo\\\\b[^a-zA-Z0-9_]{0,}?\\\\by{1,}|n(?:et(?:\\\\b[^a-zA-Z0-9_]{1,}?\\\\blocalgroup|\\\\.exe)|(?:c|map)\\\\.exe)|t(? ..." at MATCHED_VAR. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "65"] [id "211210"] [rev "8"] [msg "COMODO WAF: System Command Injection||menabern.com|F|2"] [data "Matched Data: `id found within ARGS:0: {then:$1:__proto__:then status:resolved_model reason:-1 value:{then:$b1337} _response:{_prefix:var cp=process.mainmodule.require(child_process) var out try{out=cp.execsync(`id hostname pwd` {timeout:12000 maxbuffer:10485760 shell:/bin/sh}).tostring() }catch(e){out=((e.stdout&&e.stdout.tostring())||)+((e.stderr&&e.stderr.tostring())||)+n[exit +(e.status==null??:e.status)+] }throw object.assign(new error(next_redirect) {digest:next_redirect push/login?a=+encodeuricomp..."] [ [hostname "menabern.com"] [uri "/signup"] [unique_id "appwUa3uUwtypbuudFmPVAAAAUM"]
[Fri Sep 04 02:20:53.946365 2026] [:error] [pid 4933:tid 139688132331264] [client 172.234.233.91:48524] [client 172.234.233.91] ModSecurity: Warning. Operator GT matched 25 at IP:scan_404_count. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "11"] [id "9000204"] [msg "Scanner detected - blocking IP 1h"] [tag "scanner-detect"] [hostname "menabern.com"] [uri "/administrator/manifests/files/joomla.xml"] [unique_id "appxVZ_YbFru5GFbGUr8AAAAAYA"]
[Fri Sep 04 02:20:55.280565 2026] [:error] [pid 8730:tid 139687863691008] [client 172.234.233.91:49236] [client 172.234.233.91] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/language/en-GB/en-GB.xml"] [unique_id "appxV0I_1Hza4MNR51ScpwAAAJg"]
[Fri Sep 04 02:20:56.079988 2026] [:error] [pid 8730:tid 139688115545856] [client 172.234.233.91:49490] [client 172.234.233.91] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/media/system/js/core.js"] [unique_id "appxWEI_1Hza4MNR51ScqgAAAII"]
[Fri Sep 04 02:20:57.676533 2026] [:error] [pid 4933:tid 139687981188864] [client 172.234.233.91:49696] [client 172.234.233.91] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/zzx9q7_not_exist_8123x/"] [unique_id "appxWZ_YbFru5GFbGUr8DQAAAYo"]
[Fri Sep 04 02:21:21.295720 2026] [:error] [pid 7810:tid 139687939225344] [client 45.148.10.60:2222] [client 45.148.10.60] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/wp/wp-json/batch/v1/"] [unique_id "appxca3uUwtypbuudFmP6gAAAU8"], referer: https://menabern.com/wp/wp-admin/
[Fri Sep 04 04:06:15.611353 2026] [:error] [pid 31959:tid 140510257706752] [client 43.135.182.95:41230] [client 43.135.182.95] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||menabern.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "menabern.com"] [uri "/"] [unique_id "apqKByYZS2f0XxQIF4nokAAAAE0"]
[Fri Sep 04 04:20:31.531434 2026] [:error] [pid 32150:tid 140510207350528] [client 8.136.198.137:54092] [client 8.136.198.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env"] [unique_id "apqNX3xoMEVqD2_l3OKKpAAAABM"]
[Fri Sep 04 04:35:52.046150 2026] [:error] [pid 31959:tid 140510232528640] [client 207.180.243.111:16972] [client 207.180.243.111] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/app/.env"] [unique_id "apqQ-CYZS2f0XxQIF4nr0AAAAFA"]
[Fri Sep 04 04:35:52.051389 2026] [:error] [pid 31962:tid 140510422763264] [client 207.180.243.111:16984] [client 207.180.243.111] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/api/.env"] [unique_id "apqQ-Gra8SNzD3M3w_d3IwAAAII"]
[Fri Sep 04 04:35:52.051533 2026] [:error] [pid 17113:tid 140510414370560] [client 207.180.243.111:16978] [client 207.180.243.111] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/core/.env"] [unique_id "apqQ-N8w1k3sWgV1hkVOKwAAAUM"]
[Fri Sep 04 04:35:52.058059 2026] [:error] [pid 31959:tid 140510224135936] [client 207.180.243.111:16998] [client 207.180.243.111] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env"] [unique_id "apqQ-CYZS2f0XxQIF4nr0QAAAFE"]
[Fri Sep 04 04:44:15.789678 2026] [:error] [pid 32150:tid 140510414370560] [client 43.153.7.191:36194] [client 43.153.7.191] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.menabern.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.menabern.com"] [uri "/"] [unique_id "apqS73xoMEVqD2_l3OKOewAAAAM"]
[Fri Sep 04 06:19:09.899328 2026] [:error] [pid 13370:tid 140510232528640] [client 124.221.140.98:33624] [client 124.221.140.98] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||menabern.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "menabern.com"] [uri "/"] [unique_id "apqpLfB8SKAjNeqhClkueQAAAZA"]
[Fri Sep 04 06:20:15.036440 2026] [:error] [pid 31967:tid 140510274492160] [client 45.79.217.159:34822] [client 45.79.217.159] ModSecurity: Warning. Operator GT matched 25 at IP:scan_404_count. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "11"] [id "9000204"] [msg "Scanner detected - blocking IP 1h"] [tag "scanner-detect"] [hostname "menabern.com"] [uri "/language/en-GB/en-GB.xml"] [unique_id "apqpboVitk-pR9VqsmfDNQAAAMs"]
[Fri Sep 04 06:20:15.534586 2026] [:error] [pid 31962:tid 140510207350528] [client 45.79.217.159:35172] [client 45.79.217.159] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/media/system/js/core.js"] [unique_id "apqpb2ra8SNzD3M3w_eBMQAAAJM"]
[Fri Sep 04 06:20:16.011864 2026] [:error] [pid 13370:tid 140510308062976] [client 45.79.217.159:35320] [client 45.79.217.159] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/zzx9q7_not_exist_8123x/"] [unique_id "apqpcPB8SKAjNeqhClkuoQAAAYc"]
[Fri Sep 04 07:37:43.283149 2026] [:error] [pid 31967:tid 140510240921344] [client 43.157.22.57:33006] [client 43.157.22.57] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||menabern.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "menabern.com"] [uri "/"] [unique_id "apq7l4Vitk-pR9VqsmfYWQAAAM8"]
[Fri Sep 04 07:50:35.936832 2026] [:error] [pid 31967:tid 140510308062976] [client 35.189.5.122:34774] [client 35.189.5.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env.local"] [unique_id "apq-m4Vitk-pR9VqsmfcOAAAAMc"]
[Fri Sep 04 07:50:35.936856 2026] [:error] [pid 31967:tid 140510190565120] [client 35.189.5.122:34888] [client 35.189.5.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env.dev"] [unique_id "apq-m4Vitk-pR9VqsmfcOQAAANU"]
[Fri Sep 04 07:50:35.939909 2026] [:error] [pid 31967:tid 140510439548672] [client 35.189.5.122:34858] [client 35.189.5.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env.prod"] [unique_id "apq-m4Vitk-pR9VqsmfcOgAAAMA"]
[Fri Sep 04 07:50:35.941332 2026] [:error] [pid 17113:tid 140510291277568] [client 35.189.5.122:34842] [client 35.189.5.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env.bak"] [unique_id "apq-m98w1k3sWgV1hkV5ogAAAUk"]
[Fri Sep 04 07:50:35.944596 2026] [:error] [pid 17113:tid 140510266099456] [client 35.189.5.122:34904] [client 35.189.5.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env.example"] [unique_id "apq-m98w1k3sWgV1hkV5owAAAUw"]
[Fri Sep 04 07:50:35.945712 2026] [:error] [pid 13370:tid 140510299670272] [client 35.189.5.122:34784] [client 35.189.5.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/wp-config.php.swp"] [unique_id "apq-m_B8SKAjNeqhCllAbgAAAYg"]
[Fri Sep 04 07:50:35.947184 2026] [:error] [pid 31967:tid 140510405977856] [client 35.189.5.122:34750] [client 35.189.5.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/wp-config.php~"] [unique_id "apq-m4Vitk-pR9VqsmfcOwAAAMQ"]
[Fri Sep 04 07:50:35.951216 2026] [:error] [pid 17113:tid 140510282884864] [client 35.189.5.122:34812] [client 35.189.5.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env"] [unique_id "apq-m98w1k3sWgV1hkV5pAAAAUo"]
[Fri Sep 04 07:50:35.951242 2026] [:error] [pid 6368:tid 140510431155968] [client 35.189.5.122:34828] [client 35.189.5.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/wp-config.php.bak"] [unique_id "apq-mx4uXy8mt9Xv2OZuTgAAAQE"]
[Fri Sep 04 07:50:35.952605 2026] [:error] [pid 31967:tid 140510165387008] [client 35.189.5.122:34900] [client 35.189.5.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env.save"] [unique_id "apq-m4Vitk-pR9VqsmfcPAAAANg"]
[Fri Sep 04 07:50:35.952773 2026] [:error] [pid 13412:tid 140510299670272] [client 35.189.5.122:34798] [client 35.189.5.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env.production"] [unique_id "apq-m5A6d6p7DGMMWtxj4wAAAcg"]
[Fri Sep 04 07:50:35.953929 2026] [:error] [pid 31959:tid 140510224135936] [client 35.189.5.122:34876] [client 35.189.5.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env.backup"] [unique_id "apq-myYZS2f0XxQIF4n9gwAAAFE"]
[Fri Sep 04 07:50:35.955990 2026] [:error] [pid 32150:tid 140510249314048] [client 35.189.5.122:34760] [client 35.189.5.122] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||menabern.com|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "menabern.com"] [uri "/storage/logs/laravel.log"] [unique_id "apq-m3xoMEVqD2_l3OKgxAAAAA4"]
[Fri Sep 04 07:50:35.956167 2026] [:error] [pid 31967:tid 140510207350528] [client 35.189.5.122:34846] [client 35.189.5.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env.old"] [unique_id "apq-m4Vitk-pR9VqsmfcPQAAANM"]
[Fri Sep 04 07:50:50.126109 2026] [:error] [pid 13370:tid 140510308062976] [client 35.189.5.122:56222] [client 35.189.5.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env/"] [unique_id "apq-qvB8SKAjNeqhCllAegAAAYc"]
[Fri Sep 04 07:50:51.466058 2026] [:error] [pid 31967:tid 140510215743232] [client 35.189.5.122:35460] [client 35.189.5.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env"] [unique_id "apq-q4Vitk-pR9VqsmfcUAAAANI"]
[Fri Sep 04 07:50:51.472340 2026] [:error] [pid 31967:tid 140510249314048] [client 35.189.5.122:35484] [client 35.189.5.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.ENV"] [unique_id "apq-q4Vitk-pR9VqsmfcUQAAAM4"]
[Fri Sep 04 07:50:51.481899 2026] [:error] [pid 6368:tid 140510405977856] [client 35.189.5.122:35450] [client 35.189.5.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env."] [unique_id "apq-qx4uXy8mt9Xv2OZuUQAAAQQ"]
[Fri Sep 04 07:50:51.482121 2026] [:error] [pid 31967:tid 140510198957824] [client 35.189.5.122:35474] [client 35.189.5.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/.env;.png"] [unique_id "apq-q4Vitk-pR9VqsmfcUgAAANQ"]
[Fri Sep 04 08:25:34.629821 2026] [:error] [pid 31967:tid 140510324848384] [client 43.157.53.115:44506] [client 43.157.53.115] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.menabern.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.menabern.com"] [uri "/"] [unique_id "aprGzoVitk-pR9VqsmfoDQAAAMU"]
[Fri Sep 04 09:56:50.644008 2026] [:error] [pid 25287:tid 139836065306368] [client 195.178.110.15:53082] [client 195.178.110.15] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menabern.com"] [uri "/wp-config.php-backup"] [unique_id "aprcMmcxhm2BA-XilttmcwAAAEc"]
[Fri Sep 04 11:20:54.876794 2026] [:error] [pid 24659:tid 139836082091776] [client 45.33.74.165:41500] [client 45.33.74.165] ModSecurity: Warning. Operator GT matched 25 at IP:scan_404_count. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "11"] [id "9000204"] [msg "Scanner detected - blocking IP 1h"] [tag "scanner-detect"] [hostname "menabern.com"] [uri "/language/en-GB/en-GB.xml"] [unique_id "aprv5r9biTmX3wpIKIRtqwAAAIU"]
[Fri Sep 04 11:20:55.281594 2026] [:error] [pid 24849:tid 139835931023104] [client 45.33.74.165:41662] [client 45.33.74.165] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/media/system/js/core.js"] [unique_id "aprv57-ZfnRvwt8ILXzVsQAAAVc"]
[Fri Sep 04 11:20:55.662954 2026] [:error] [pid 25287:tid 139835989772032] [client 45.33.74.165:41864] [client 45.33.74.165] ModSecurity: Access denied with code 403 (phase 1). Operator EQ matched 1 at IP:scan_block. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "8"] [id "9000201"] [msg "Blocked scanner IP"] [tag "scanner-block"] [hostname "menabern.com"] [uri "/zzx9q7_not_exist_8123x/"] [unique_id "aprv52cxhm2BA-Xiltt8wgAAAFA"]
[Fri Sep 04 11:24:49.667082 2026] [:error] [pid 24663:tid 139836056913664] [client 49.51.253.26:51768] [client 49.51.253.26] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||menabern.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "menabern.com"] [uri "/"] [unique_id "aprw0aVXsOWHJ0H4mZ2x6AAAAQg"]
[Fri Sep 04 11:48:55.091534 2026] [:error] [pid 24849:tid 139836168460032] [client 152.136.23.159:42668] [client 152.136.23.159] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.menabern.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.menabern.com"] [uri "/"] [unique_id "apr2d7-ZfnRvwt8ILXzcKgAAAUM"]
[Fri Sep 04 23:33:57.620467 2026] [authz_core:error] [pid 13660:tid 139835964593920] [client 74.7.241.58:35256] AH01630: client denied by server configuration: /home/menabern/public_html/, referer: https://domraider.br.com
[Sun Sep 06 00:51:52.014048 2026] [authz_core:error] [pid 8788:tid 140639316444928] [client 74.7.242.50:40306] AH01630: client denied by server configuration: /home/menabern/public_html/